{"type": "bundle", "id": "bundle--b4f466b2-5cee-446a-978f-b57326796b1e", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--f073b615-7356-41b8-8ebe-9c50dd732857", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--dbc1b77a-91a3-4403-b077-b9330bf6c187", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--e93bece5-b15b-4b79-b7f8-0d041ec94dcc", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--894a3f20-700a-46f5-9aac-95a0eb31584a", "relationship_type": "located-at", "source_ref": "infrastructure--e93bece5-b15b-4b79-b7f8-0d041ec94dcc", "target_ref": "location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--0f6dbe6d-eac5-4655-9697-2f895eb0ec89", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--da1603dd-c286-42f0-98ab-9327738d576a", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccc47762-d777-4633-975f-3fc2f65ab693", "relationship_type": "located-at", "source_ref": "infrastructure--da1603dd-c286-42f0-98ab-9327738d576a", "target_ref": "location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--cbcf7622-8d2f-4df4-9359-d8cee7438be8", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b92cf9ff-eec2-44b7-aa80-c45e41b3118f", "relationship_type": "located-at", "source_ref": "infrastructure--cbcf7622-8d2f-4df4-9359-d8cee7438be8", "target_ref": "location--f073b615-7356-41b8-8ebe-9c50dd732857", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ab34cc-d0ee-4e25-976b-be5e2ad284a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.10.144.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4bb7dc-6ae5-4959-90da-e4b156b30f4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.13.158.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77f3081-099b-4d1c-95d7-8dab7332edff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.14.206.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dcda68-8d6d-4716-b989-5186b96e431a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.169.225.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85448b73-9cd6-4ba8-a67f-f7d4559a9ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.177.63.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b12fd34-30fb-4c2a-aed2-5e6147a69362", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.196.104.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc7f371-69b9-4d65-9c24-a16bee368e32", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.222.42.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013204b3-8500-4505-8727-1ab3b6c14d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fb6a7b-9edd-4e70-8d32-65798ba15697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.27.251.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45a803a-8de4-4354-b7e3-60cc386813b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.28.104.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa5b12c-84b4-4c6d-ac39-2a5cec57db77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.30.160.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f84f39a-aeeb-46bf-8245-8bf3098ca021", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.14.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fe22ea-94b1-4a3e-8063-801f597d09ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.254.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5db0d1-f0df-44e8-8f92-4912c2f581d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.36.244.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe128bb-e1a1-4989-a0eb-d6806dbfb757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ab0974-0a3c-42c2-a8bb-4eadbfa44acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.94.148.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a56e9c-20bf-40c4-9287-0baa10307562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.95.123.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7660a4-5cd6-4aa5-ac61-0e7748f01279", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.26.66.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b666c7-8b5c-4b5f-9066-5e7fcb68985a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.26.98.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8991fc97-725d-46fe-9fe5-77da28de52b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10eb7ea5-1907-43e9-86a7-c8ec95cdcc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945903a3-61c7-4fc2-92ef-b5f9faed3288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9a1bbd-60da-4fd5-a833-1cdf26b05d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6badbfb5-148f-42a3-969b-37776d1c7ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78a7669-9b1f-4ec5-8736-1f51ce4e6013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1900771e-85b5-4895-8092-208538798024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e7cfe8-f797-4dfa-8907-45cef78ec3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477b5c98-fe29-4c14-a80c-f41a9faab4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24159a5b-80f4-4594-a355-f8b8d3c22898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bede8b-1290-42b0-9e08-58ad48ea322a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ff6a83-cf42-4010-8579-5c9c414cf382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a2ba2c-d5d4-4379-a44d-627b87eabf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d69b3f-dab5-4d91-868b-ab0ef77bc64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e5822e-41db-4098-a5d9-fbcb1c6bf4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb767c4-3b86-47ac-83f6-057e4411be2d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e04f26a-7ee1-4966-93c1-522b36d15323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c656163-2f0a-449b-99b6-f3c603fdad35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dd93a6-e59c-4d1f-8e5d-bb348f72847a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81f070d-e2ed-4577-b593-0bd92ce6ce5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba322ef-d7de-4e69-a9f3-d2e50c49952e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5669f7b-2549-4e9b-b6d2-d5857bd9475d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc4944a-28b5-4068-9512-8f58ebc8977e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2d9249-f074-4368-9eb6-c6d28a7431d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be33edfc-f005-4d72-a9a3-d12014fa2f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e733a60-d2c9-4718-a4e1-82cd79da96a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c9255d-16b1-4977-8cfa-bf2b1e454947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e813240-f5a9-42ef-ae92-46920ce4a0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deea210-44f7-4eec-bd1c-128114551d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06465c5b-772b-496e-bdd8-d0d7cbfb736c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e2e8b3-f31a-4677-bfd2-3b28274994d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f2c1ad-add9-4d28-8107-708c357a694d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce02ca4f-e3b2-4ede-950d-cdc69d5b8ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb4ff69-24eb-4f93-a5d1-3c09b8b0f1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ce60f4-df70-4c98-9272-c3347ae19bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be6cb5a-c3d1-4585-8463-6a954e19b249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bf58dd-991e-441e-9dfc-b4dcfc1e56fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ad1653-ff33-4764-a84c-138bbd1c7d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abf418b-6982-4589-9fc4-523378553d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ad290b-d68d-44a7-84aa-a52de47bf7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f2e4c5-2dca-4638-86ff-0323abc0d11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b691d8dc-b19a-4842-bc1b-9de8f1f34779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2f8c33-eae5-4d2b-bc47-8309984a26df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6840e7e7-e27c-4208-baa3-c4cbf8773713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.87.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a164324d-021c-4ff7-b8b6-3a2f20bffad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a844a4eb-19d7-4298-a1c6-be3f179936b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803b5ef3-2805-4447-ae2b-33ebbbb609bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.54.143.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b05c533-cf6d-4ac2-8db0-258c71204663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.58.116.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b65e89-b8fe-45e2-8b8b-e24721c9ac42", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.109.225.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d570b3-ca90-4114-a7b8-1edc1658b423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.143.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4041b24-6ae5-48a2-b0eb-75f9e2167663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.145.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad190f3-5417-4bff-a118-e21c625ee6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.71.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d687b576-187d-4143-b522-96f9b43b32de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.128.178.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fc4ae0-f5a9-4976-b86f-79b003a1ff13", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.242.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb72024-1a8e-49c8-a4f9-10c8bbe49257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.230.162.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293ae04e-68e4-425d-8466-a1e4fae241fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.255.158.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0ec91d-0bdb-4b5a-a525-b6ff855102d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.101.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd85936-a2af-45f1-a7f2-11d74b52482d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.102.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8024827f-5387-451f-93f2-82d75b472215", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.102.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70642626-4e52-468f-93d3-268cd0d396c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.109.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4aa41a0-d730-4629-b362-f63330f3d329", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.180.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8eb4c6-58b3-4341-ba22-ac2388af03cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.184.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f26fe89-2d79-4de3-882a-3f4dfc85fa42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.186.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3d1f01-1f53-43da-918e-fd735e3af227", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.190.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0bc086-dee0-451e-902e-69430c0a72c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.251.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c46c2a2-8b4e-4b2e-874a-65c64cf7d9f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.55.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6bb013-5f56-4d5b-b2ce-8a7d7a14a67e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.60.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1d40de-13de-4313-b069-1abcc4818fb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.7.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca69ce61-03aa-441e-bdc6-d39cef27d9ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.72.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64c08f6-a208-4dd6-afa5-9902d1ac5bec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.116.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b49e527-d257-4342-8b2f-788407cb1d41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.122.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813c424b-33f1-4b0c-9475-5ab000d94905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.204.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6372a46f-a8d9-4814-bc88-204d5ba02252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.35.105.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf260aee-8605-4d86-bc93-22f2f198ea6a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.104.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e50421-8af0-4c11-ba47-c5ee6e4f75f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c16173c-df8f-42cc-8d0d-170b11ba8f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49d6a26-956f-46a2-9c38-ce3727858863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9f5880-d8c9-428c-9d52-320424eb48cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3259c7c1-c5c0-40dd-a61c-c42558d2d06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab5dcfc-66cd-48ad-ace9-7b99a90757c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba8e618-88c1-4d4f-9801-4939dce0ed8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbf988c-d12d-448b-9a09-adf0cdff2cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d37e7d-6f62-4842-ab98-5b45dc9b3bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc7ea06-1f76-4c80-8544-99007e18a564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ec292b-09bb-4b8a-a346-b69acd2bf44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295f5872-8090-4b94-8902-76b701894738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc28da9-205c-4267-9ec5-aca6077a9fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685efdff-0488-4efa-a41c-38b3c4765e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a696d3-50ea-41ec-b8cd-136f86376840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8535db7-81dc-4814-8183-bb8558f98da3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.125.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4aa6d50-1fab-43c1-8279-df484b7fead0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82b1cb1-94c4-44ae-bf8d-a32dd4ce7516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6a8de1-6819-47c3-a414-48ef9cf60ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cb05f3-eb02-4f96-9263-9c6ea6b9c056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc251db1-6e90-4283-b6e1-b60a177d1a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.42.24.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da20cf3c-9fe0-41cd-910d-694aaec30389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.107.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73697ee7-6168-4050-8e76-b4e5ae3f2927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.39.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475b9400-725a-419b-ae88-0cbf1b8cb7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.6.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e333102-9beb-423a-99de-cc365861c445", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.16.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecaaa9b2-2988-4b23-9e47-07ae3c8ac352", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.17.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3d9a37-526d-497c-be5d-cd73e86ceade", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.17.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8626bab1-d205-46e3-88ef-4f18f2158391", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ee289d-90d7-49f4-a072-ad0564f81ae6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a5488b-d7f7-4e26-b1ad-09344392f9ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60ffee3-8d3c-42a2-9133-dfb2cda2325e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5217323e-9389-41e3-9e7a-7222d4623cde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202c937f-9127-4942-b1ca-05604bbeb3db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba60619-c4ab-42a7-821d-3bf6fb71559a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.19.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693a2efe-cf6b-4715-a073-9e8ca3f45b42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.19.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5a7f8b-b721-4187-811a-a28e31812d63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.19.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ec01ca-26ee-4d37-9187-72af1a6d2b99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.19.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1e7d18-cc77-4e9c-b7e0-ba04113cddab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7ab243-7476-4676-b97e-d41c352262a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c3127c-7e96-44d5-b251-db2f43499d18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfad025-6ec3-48a4-9ffc-362f6b864909", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de3e7d1-e70b-4692-ad8f-e3b076964f9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0127d90e-85bd-4b79-97ef-166c0d3b8abd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9752ce0-817e-4a26-bb15-16c09c3d9b0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d169fd-7ff4-4632-aaf9-1708811e6ba2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e94976-1010-4497-b3f9-ed538094996d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b8ed50-f84a-400d-be06-3bae1dcdcfae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d2da9c-a72d-455d-a97e-d3ba2d488d5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defd78a7-d206-4a7c-a005-62023cb26736", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a58215-236b-490e-8659-261081c78df1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf3f421-438c-499e-896a-4054f99d32b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f9fb6b-9bbf-4031-b14f-19798023ecea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235413f4-f166-4b8a-8da0-1770b7987146", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbaa63dc-2226-4f56-86db-e094a99de04f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169550c1-3417-4818-92af-b7d9c8185081", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee1bbde-9e6e-4ddd-bcc0-0eb74e8ce4bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f477b71-26af-4ff8-9826-ceaee06938ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a8e0b3-a94c-4f91-a411-fcaa9e08af01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c97c5e7-09c8-4b10-a333-fd6902dacc40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964e423d-2245-4653-b7aa-a174f9bdbf74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e035183b-5e46-4e11-a3ec-2074159f1c49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f202f1b-17fe-45d8-b806-0cef6dec9860", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99691b68-196a-48fa-9ea3-4cc2096de591", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2022baf1-7f0c-4322-b7cc-c7ba7754d7ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e907d79-a046-46eb-b33e-9a9a185d2e1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5348a1-c545-480d-8ba9-753918aad474", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d766f07f-b493-41fd-80e0-09218ac8c3e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e576c66-579b-4920-9f88-8db979c91c8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29989aa9-7619-4fe2-8eec-45f93dcdc865", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307a031b-c5a3-4fe4-8a06-30abe4658d0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c817bc-6ef4-4692-abf1-51ed7392c46b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7779fb-ebd4-4ed5-b692-4b29646b68ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da435027-3237-49b4-99f4-518faf6a075b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7587645f-b915-4a75-b39c-a56c0bcc546e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec894ea3-1247-4658-8661-b05486aa1a2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcb9ea5-d5e9-443a-b7c1-c20df12513f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99be9232-6eb8-4b11-8543-b927ae5f266d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79574328-a806-44cd-a361-8827fc0ea3f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee96547c-1bf4-41c8-8cd6-6b4fa849bad0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22b7b65-f2cd-467d-a938-e14897b0225e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122a3555-6580-4236-8fc2-95a06c146cb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d29fdc-8e92-4df0-8e84-2b886c7185a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c027c8-a79c-4d48-b628-cf08f6ba5193", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e3c24f-f27c-4a5a-930d-055912c4a0eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336cfc7d-20be-44bb-a9e6-68b99fb4a333", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f4291f-5156-4177-8583-f336aa209fa1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68447c5d-25d7-4d4d-9266-9f1721fc4fcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401491d8-79bf-41f6-aea2-fa6994649ff0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d8e789-d16d-4de8-9161-5877db1dca53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.27.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9109684b-b9a3-4135-8d89-1838de09ccd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.78.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9eec19-3d24-4578-ad80-1b4edd7a5b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.8.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c6a8c5-f514-4195-a650-601494b2a31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.51.106.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a7d8e7-715f-4e55-a63d-e3f403ecfac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.58.67.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8f32a6-2ed1-4bd1-a20c-9baf6b029d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.47.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487ade0f-d5df-470b-8a7d-8279c2bf9002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.71.37.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b145c311-60d9-4551-b66b-902b31915a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.202.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead583a0-3696-4cf1-89f9-8e6b68d0c408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.141.211.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e26d431-901e-40ad-9516-d8e417898199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.213.200.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e88c969-0833-4386-9a8b-1448a22fbc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68de64eb-8b11-4005-8829-77e7d50765d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab02a3c-5b03-40c4-971f-54c8733501bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.8.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e7f5aa-c716-488e-bdef-d30c4857fbec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.249.12.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825df335-42df-4c79-8abb-413719eade01", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.37.22.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81015cb6-5c6a-4566-aeb5-263f8ef4d8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.42.55.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5684e32-93aa-4469-a651-80b94971bb11", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.67.223.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b30ec6-56d6-42da-8b5b-20dfa882f68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f855f050-c960-4843-9037-964f57f9192c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724ad0df-db1b-4ac4-a08b-93f96c001746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.103.100.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d7817d-8a52-43f2-b6e5-3f33d8c1f6f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.106.241.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38b56af-874b-4ba3-a273-2889d7cc30ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.109.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2b74bf-79d3-44ee-aedc-0d598d844e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.212.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7820ea5-eb12-47ee-b00b-19a24ded3a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.244.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e6597a-f011-43a2-906d-cb2fa28628a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.110.236.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f78fb8c-679e-432c-846a-55a17aa105cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.110.81.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47738cdc-e1ae-4dc7-9a53-8dccd03ac7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.111.68.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef47c746-7538-4e1a-b335-133e14a38343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.31.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0848cf3-917d-444c-83eb-2ff3babec646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.116.110.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79d7acd-795a-427b-b40a-0a923b075d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.255.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6c6f69-d1f5-4710-8bff-89f82d6aa7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e8f7f3-4abb-4043-8d74-6936b9b3176b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc774e17-b506-4b7e-a6a6-f444d4a1bb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.126.6.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2cbaeb-ffaf-43f2-be32-6f215de04605", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2add1ba3-0202-4051-9bde-78f18a491817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.98.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d2a181-7776-4cf7-b36f-6c57d8ab5bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.108.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b9a701-79b8-495e-b63e-49c4c825a9cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.137.161.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a53796-7c84-4903-b31f-0ab12b5c38f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bdb75e-cd2a-4ea0-a053-4bd6e7622708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d739121-3be1-4eca-96f6-b1371fb65cb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.140.177.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2b8f9b-a841-4eb7-9b99-b9de641f85e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.142.69.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df75c95-6e57-4552-9009-a66b67f5e5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.164.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c98173-6c10-4267-b51c-3de2b23db820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.207.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c77dd7-2e44-415e-a127-1bf2ac859d81", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.238.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35038b0-e185-4684-a893-c3d53f4f8e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f65b790-0d76-4aca-9b9b-9379518e87aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.221.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153f233c-0b79-4c22-b07a-31a353085e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.9.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd56ea59-42ef-4c9e-bfe5-70e2b69fa3f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.148.53.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e72291-9a75-469b-9cec-40b15752d302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce41b99-2810-4caa-9b27-3a22a35bc3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ab71c7-82c8-464b-8ec6-5f42c30809a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8098c49-6f50-4487-9191-f457ccca6a81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.37.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c883f97e-e6ee-452c-b6b8-d339d049f42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91f07de-dbcb-4d75-833e-0deb13ea5652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.151.234.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d42b14-0521-489d-8a76-5b69132fc2c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.151.74.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9545e11-4e04-4bae-960e-0a4d55c2c5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.101.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7458b5-83f8-4291-9f12-07f8c8722d24", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.110.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423a6627-de9b-4da9-aeb8-80a316022cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096d1301-b00b-4472-9df4-ab52ef49c9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.159.50.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db34d9b6-9fed-4680-853d-0d1dcc991a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.16.116.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc7856e-376e-49e4-9b8b-ead0e232380e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.16.248.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f258b6-d263-4135-a763-a1744ec7cb3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.12.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfab066d-0cf2-49f3-a152-20373ed4d736", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.27.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804f3522-f1ce-417a-8f72-184d7b6fe63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.207.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999c5f68-6873-4221-9f92-2c1690fdbd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.162.199.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e7bc31-6933-4563-94ca-835a1224aef6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.164.57.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568afabc-f719-4531-8220-9eda6d0af123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.153.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1c7df6-4114-42aa-9f85-fade15250c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.88.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c572b0e-d5a2-4062-8735-b22e9f2aed2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1e75f4-f7b8-4bba-8af7-6406cfd8102a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.24.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd678ca6-46f1-4683-937c-ce64a6b4e5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.92.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa95ea57-95d2-41eb-ace7-2c2f64975ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b8e546-c46c-4f60-93b8-9f5a899947a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.107.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07332537-fc62-40b4-8e78-0e682ba8211d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.181.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0d8210-2299-42f0-b8b7-68a08280139e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6aab91-f672-43d6-b671-440239bc815c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.178.60.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96132513-bfab-477d-8d13-d2f96bbfaa66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.188.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cad6f1-b693-4455-9d9a-f288d659f577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.213.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce161f9-d4a8-4074-8fe7-8d61c1df0683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc787a0-85c2-40e3-8622-a2e357e20d36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.182.150.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734542cb-fcdf-4a12-8a43-6701c1d79831", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d73e5a-1cb3-4cb8-a7f8-4a3137925448", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904168a8-dc2b-44b2-9ec7-4a12e4319982", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd792b0-d5b8-4fb2-a460-a99664efa640", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b209d62b-bfaf-4634-952c-b8376c63fbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.186.77.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188d1e4f-2fdb-4f7d-be51-ddab97f5d99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.24.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852a5eed-f4e8-4d55-8d05-3e9fa1560991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.86.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e68724d-3918-45a6-a1f3-6907517584d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.235.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5393a05f-62be-474d-b935-1d8c4a69de68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.191.187.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879ee032-541b-47f6-92b0-68003ee54879", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.198.132.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18140aa0-92e0-488e-9b3d-25450c0b5e1f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.23.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f482dd43-9cfe-487a-a408-8c68151fa4aa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.25.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e387ea-6021-4f2e-af8e-233588c8df06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6a90f2-bb31-4281-bbd5-ec97001d1c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8351727-9fe2-4d2b-aeb4-9e4c26198442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7cb809-c006-4a65-8dcc-1f0044b89ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435f4b5f-095e-4135-81a5-c9bfc958f8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d5058f-9772-4b83-8ec5-c1cbb2927a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf6296c-49d5-4b82-ba1c-8e961f2a69d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aea644f-a604-475b-9ae0-c5036ce5a666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.208.226.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090ee22b-0e54-49a3-a32c-647325b349cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.209.145.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f17353a-b8ab-4409-beec-8125e02a1cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.21.84.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf871dd7-4e05-4ee0-9030-caeca6672873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602cef69-86a3-4905-9143-af35283bf89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.236.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6681cc-8b48-40f6-9a26-574e9c1edabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.95.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642240c0-a547-48a5-bd50-66297663b112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.123.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db691c9-b37e-45d3-a19c-0ec51a094410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e368d0e-4fb4-419b-a457-a94ce93c8d22", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.32.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184dd30a-8b41-4908-96cf-e691e60496db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.22.99.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e56c93-3c12-4dfc-b25a-2c48f6627f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.224.52.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d30ad2-91d2-44e5-94c2-0bbaad104477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.225.87.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f09d48-64f8-42ff-91a3-bdd0f0f85ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.228.117.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a52b005-d3dc-4424-beec-dfbb7da33106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.243.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17e06f5-458b-44bf-b044-1ca28a9eaa39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfe5e03-6527-4204-9277-4a69af523db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643a2cf9-cac6-4a6d-a97c-7e7567e31155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe8e934-77ba-4484-9551-1e34f922fe35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a45df9e-06a4-46f6-9781-a47424a5a6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766c2c7c-05c3-4b0d-85eb-403438c38b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20f8059-f3bc-4c2d-9753-0307c869cfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccc2aee-8793-4cb8-af16-82d0354fa448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31eca1b-49a5-4129-bf16-1be7badf1749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a227e4-cda0-40b8-a9b0-1dde44fbc8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8231cfa7-7de8-4c09-899d-816e8fb233ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98669d4c-2d25-4bcd-baaa-6801f4da7458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2cba6a-45ff-43a2-81d1-113414a83a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a949365a-e1f9-474e-b229-617ea83abd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfe63a1-8906-4e3b-b44f-f969407c6856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b2db6c-50bc-42cf-9d2c-0bbfa5a6d503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.52.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e6a7cc-0505-4ab7-8c67-e8ea1618723e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.68.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92ad632-6269-449d-8644-76ccbaeb3804", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.24.233.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf29530-ac4e-4306-9a69-e2af2c5bb169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.242.2.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ca0e69-71b8-4fb3-a61c-35fd2f42fc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.242.224.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da8d7f2-213b-4cd0-99a3-69368ce20e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.13.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d670786-fce8-4fe4-b15e-dcd5f3a23727", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94f0ce9-f4f4-42ce-b171-3277dee8464d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.90.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7a533d-213d-4331-b9f8-a1ccc69cea75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.209.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bde505-893e-4b59-9eb7-b2d3ac10ea8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.57.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee88950a-4483-4c20-ac6e-cfe78c7aa0aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.80.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc739d2-2a58-4546-a3a3-4a297d41e061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b67f2e-475c-4fec-ad84-05042d5c3d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefe20e3-4fc5-4331-a1ac-b4aeda125508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e57f15-79ca-4396-8c76-bbd49f08b6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.30.40.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3584f75-aae1-42dc-8ebd-94838197303f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.31.82.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2418af-f153-4c3c-80aa-e1ad7b6f1cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.39.241.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155d1d51-91a7-4640-ba00-e807dc621cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.45.66.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44448980-768d-4783-ac47-4b15627ffc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.48.192.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e41eb59-6731-46d6-8286-dc790a30fabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.49.188.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c2dffe-2f87-4d5b-ab96-bf4b529439f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e1fdea-3141-4876-8030-fe83ddc14c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.127.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b147a78-fd88-42fe-9cd7-e1393211eeb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.101.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c22a65-d79b-4bd1-b296-0317be253793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.233.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c027d3e-a04f-41fc-bc3b-fd6301fffcb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.24.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf10a9af-b677-4a79-a802-f4e5af5d9a82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.26.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209b980b-20a0-40b7-9c3d-02d33774ca80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.68.29.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f140b95-6cdb-47ec-8199-fa33acd709b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.3.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59b288d-d848-48e4-9992-b462fe1ff9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.74.122.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b269e4-bffd-45ef-9268-897f0220b311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.182.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc36777-bafa-4ab0-8dd7-e79c9ddbb5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4c0364-680c-4209-b61a-61d6589ec2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.187.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efba8d9-23ad-4aaf-b28b-e7df179b8010", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.103.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93826aff-66ca-4d0c-a974-afc8c5257501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.121.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6752f46a-b67e-4192-afd5-e570a2ed23dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.172.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2606912e-20ca-4863-b7b0-fee23660f725", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.44.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b79c191-d7a9-40a2-98c7-cd78e0f6a0cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.101.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92943d8-b154-4209-9118-ffc2ba0c88c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa56e49-986e-40c9-bcb4-cba52eb73e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0744e9-91d9-43af-b9b3-67329a81b00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.80.18.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3e243a-5870-42ce-a56f-30eacc3f7c0b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.121.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf4a378-19f3-4983-8669-e29fcced553a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a07ae0-0e47-4330-b8fd-5e3851109ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e64aaa-bac4-4e3e-a49f-837979e86ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.36.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a2755d-e7d2-4e34-98c3-aabc089949ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.83.128.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2611c0d4-074b-498b-838d-3c976d7fcb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.83.87.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326f3e01-fd06-4908-9b62-d921df9599ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.86.198.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6177ee39-58bc-4386-9fab-2b1dc7b5b700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411c9a3a-d8df-467e-8d42-5feb8fdee6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8faad233-a3a3-4fad-9d73-d232ebc13e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0226295-be5e-4df3-95bd-bc35daf400f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbeceea7-c286-45ba-bc72-0f831709c7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d9dd5c-14cb-4347-9564-daf098f77e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6597381d-ab46-4c16-a6dd-605eb2829362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9167cd93-cb85-46bb-80c8-cc7edfe3e1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d854002-c3a7-43ee-a2a7-532c2921446c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bd7aad-7de0-482d-83a3-b5d45870bc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.93.97.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb68fdd-7f02-4aa4-8f22-989caf8f8f05", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.101.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cb6f50-3f63-44c4-8c25-c57dbc3f327b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.129.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7eba10b-cdd1-444f-8896-61f1207e862f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65770326-1ade-4392-9a29-f8ef5c2aeb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.130.31.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b247b9a0-a537-402a-92af-dfafbab56e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.130.6.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf45b8f6-5885-4d3b-b19f-c9a188717d35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.172.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f420b1e-d911-4f2c-bc4d-569aaf06de58", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e17da4-9330-47a0-9e05-5b1debd100e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74509833-19e1-4830-ae93-c6754f023c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c9874c-46c6-4f39-b2b3-d26c878ed03d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53faf937-c212-4d2c-ac76-efb4d7cb5c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6b3a76-a1e4-4c21-aa66-0efca0249caf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a68368a-7649-45fb-8fac-b56c893f3b79", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62139661-d512-461a-a309-4bf8314da69b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d378092-de79-455c-80ec-36a3ad36aaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce4c824-ddd0-4295-8369-1288a307fc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43154942-8dc2-4bb4-b652-878c50b2ebb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707f7150-e9b3-4099-b795-6957c57dcfae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e51658-e8a9-4ce6-83c4-07c1dfbf0c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8372cab8-ed70-4267-a084-1e4804633cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b14cef-bb92-4c09-9db4-5919dfa1d797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd198c3-229b-414f-8235-e8eb6c3c61bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e02791-7b5c-4781-98d6-4baa567c33b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29603c1b-31f7-4605-bdd8-76b7618428cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9910560e-6a94-49e6-88ab-7887c9800e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cd7445-e8f9-4ccf-af08-825efee47940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7397b8e-30a0-4854-aff8-e7b5ba73a6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df308df-d985-4bf2-975c-6d2f3f5c64c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf07b9c-4cbc-4ef7-b7ba-ae5711c7eea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6757cd75-0507-4f64-ac60-1f8deae0e7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bc6164-f4c4-4cd8-86c6-f8315ac6b8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2872e994-2d70-4a7f-b4d5-d849b0f7a98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43253a6d-012b-4ad9-ba3a-3dfe29c437f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdb62fc-94f3-4c5b-b37b-59743d9ecd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984ebc88-704a-4e9e-8604-c2ad3505f6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6525090b-5674-4847-8156-b4cd4cee3501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951ad228-0dfa-4340-9913-22558a36d4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c90e957-81b3-4ca2-b62d-7715928e1ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269f52c9-3a5a-4316-8590-f06b9458df00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f60add-2772-40dd-a719-81c2c59c9f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9404d834-e962-4178-b68e-008b56680f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3305cd69-2723-4059-bcb2-3a05e3adc3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98afff46-b877-4961-8589-c16c617183e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b920f78d-bad4-40c1-a9f9-71a3e33d6e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9644c3-f7c9-4615-8ead-5f74ce10c605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177d594e-ee06-4745-b73d-ff70caaa8a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145348de-da9e-4eed-927d-59c272e0eb95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad5f399-564e-44f5-bda0-69e3d922a47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba25ab8-d4b9-4069-b33e-79f6476a0832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ac03f3-ef37-41ed-8be4-a128e67f0683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91d5acb-f456-4620-8f55-4a0bbaea17b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.0.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb51f30-b087-4882-b09b-6aee410cf711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.117.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5f3888-22aa-459a-8feb-15d9dbcd7979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.192.205.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5819c928-f06c-40ff-8182-24dcf69a65dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0820f33b-c89d-4d2a-ba6a-2d7a2b5f4e19", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.12.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b66319-eb9c-4733-ac9c-589b7f2d03b8", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.24.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f39e18-08f2-474d-b5ce-02d88fde8961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.204.222.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1389be8c-fc8c-47d0-9ae7-90d89d96ed59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.204.222.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e77e489-54ba-4d98-8e90-9193b7d708df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.208.73.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4125fce5-8361-4bb0-b49b-e33afc90ec39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.211.53.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22a0815-e9a2-48aa-9eb0-2f158d4f0a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.145.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29948f9-e7dc-47ca-8f62-0580e60d82b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7116c019-f16a-46b7-9533-bf392f566d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d76d137-801e-4f2b-820f-cc46501c5f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b546727-80bb-4ba2-bc7d-a9f0aecf5fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1c965e-18e5-4d0c-91d1-4a70d20d44d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.139.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c10a7f-d893-4f43-9510-2631fef983ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67878bf-80c6-4d20-9df3-827261df9ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1e7ccd-23fe-452c-a05a-62ff08ec1886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650c0212-eb93-4f0e-b981-7cd25817efb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea9de17-516d-4e16-888b-4ff7fab7b3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229b39ca-28c7-4d18-87d8-9f34d87a5ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.43.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f759461d-6123-4e96-9637-50f194a8635d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.79.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02a6dd6-1603-4bd9-ab34-11f1709dd318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.118.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bc0f79-5a2a-4d53-91d2-57e849def0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.141.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46765742-754e-44bb-ac90-d26894a9edd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33ce941-e951-42eb-a37d-a7d30c2dcef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.224.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e8bd45-f954-44fa-a704-d7706ca76652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.238.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4d7f40-2f7a-487f-99c7-4887591de60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.67.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925b1d96-a21d-4f1b-800c-1d5fdf63327a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701de086-01dd-441c-86e7-2684bd85e4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc82db52-e728-487f-b8db-63898c2ce979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.158.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24afd5c4-3f2c-4b03-9977-15035b4e6d6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.196.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba36c4de-6320-4f63-a174-984c1e0aa1fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.196.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa01c3ab-7bae-4b9d-a77f-2a7275615680", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.228.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b2ab5b-3805-44d6-9ba8-a71c51973175", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.228.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9882b67-1e51-4508-ad5d-f907efeeb732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.36.252.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfcd485-8022-4c58-a2ed-075c512afa0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.42.134.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5973b8-5389-4dff-89c5-9df4259aecdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.42.234.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a25245-ca5e-43fd-9118-61b751ad4d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.43.118.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b488e954-9d72-4449-9454-7afacfc73cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.43.60.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bdb87a-f42c-4ab0-9ec5-067d28eae5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.46.111.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c594c86-3e7b-4f52-ae48-46da6c11fc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.101.126.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36843a3b-0208-4017-b7c3-4629a934c4ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.127.8.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fef725-e75d-4dfa-baf8-27736f26eb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.235.250.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f89d416-bbe6-4e90-9bcb-645e2f0ec650", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.76.166.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5219db-9e82-4423-9549-8de5163337e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.114.108.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3b1bd2-cce1-4d07-8d49-28f1e2f38fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.107.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e95df74-6e6e-482b-9ca2-42d45770b514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.114.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba1d493-52c3-40aa-a6c6-317578f30c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.117.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0f6e9e-8a90-4f74-854c-330d89b6574b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.120.42.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac0d95e-6479-4e62-bc4e-f48e7c924025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.172.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4fb81d-d2fc-4bd3-8bde-ddba9673dcb9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.182.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca631f38-c6e7-4a93-bcfe-f0b9d46269c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.45.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cedb25b-210c-4902-b688-f0c1cbaa1019", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.192.174.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d99531b-daa1-4846-968e-8dfbc206771a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.202.2.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9207a63-16f3-4974-b52f-e2f28d3aa26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.53.148.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb32303-443d-4481-9e86-e8f63afc7930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.53.187.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288c29a3-c56e-4c9a-bd3a-b5fd94fdea42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.215.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f744835-12db-418b-aef0-1f9f065fd5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.31.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a384a12c-9e0a-4d2c-8552-de372ea269a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.62.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e19b79-8d2e-4a6e-9714-0250e038d717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.55.173.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf647ed7-bf66-4b90-8cd8-93675e9402c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.55.54.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c616dd0d-bb35-4fc4-93e6-1dafbf266f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673c8105-366a-4241-bdf6-1225da76a8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.145.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8139177-55a9-48a7-934c-bdd93f35272e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.146.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1685c7-d3de-446d-b2df-293e0c6637a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.146.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9e977e-516e-4758-a02f-c4df0b45cb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.146.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e351d29-d5ca-4bea-a1f1-3bdfdcdc3b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.153.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d29f08-1491-4eb6-ad8e-7697f66c9a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.165.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8942f91c-2a17-4917-b5c7-49e2b14c40f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfed646c-a98c-48de-87db-96091d987117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.173.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cde665c-e765-43c0-bf97-7f9e61f965fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0c4791-4bb8-4cfa-9bfa-1f06a82ac2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7764bc42-df07-48b3-8f38-32a9438ae0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef03804f-e371-4f51-bf14-8fa3cce3d2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5297ae-9fcf-4d19-87a2-b56f56724f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a6b244-ebe4-4adf-9d1a-fb2b15bbdbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.177.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d62c37f-f8e8-4bfa-ae99-07cf0607701f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.26.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ee808a-efa5-4433-9f1a-cbd1a798e86a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.77.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77745e56-23cd-4b8e-a8b1-c80f8d4c7bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.149.155.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc2fb33-6c34-4d77-8966-285135314eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97995017-cadd-4985-8b2d-c4f0b65e6421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d98d8e-27e4-4db8-9a34-dd35f638e05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f70094-ce36-45c1-8f23-3ee96e262d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcb7039-cad6-4ceb-9041-e28348350545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5abb31d-a795-428e-855f-8cc7b8889370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86af4c07-c70e-4c2d-9b74-446d00ec1810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3588b9-fd2d-494b-82f8-d3ce96317739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced8cd96-3e12-4d7a-8045-8303529d3617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3b2b72-d3b1-4e8e-947e-cb450be89f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a851e53-ed23-4566-8fc7-bc2df94fd426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f13a56-e610-436e-8d6d-8cfe0409efe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7ca909-407c-44d0-9481-5b8c0b20e1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6d6d5e-c388-451d-8ea7-0aa9c2cade4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630bc830-4aac-4bd2-ac67-b4fdef5ca2b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cd406a-62e5-44b0-a693-d45a5b3239d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b789ca-ca9a-4ffc-aa5e-37886d7312a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e5026b-31a8-4b4b-98ed-cd0daf785085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e12fe2a-cd43-4407-bf11-1359c8496e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33739fe9-c472-4d5d-ab32-86082df16f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c09d3c1-acdb-4154-9ba2-58e688a261b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2b5e37-4ad9-4c65-8406-0e24a4074d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6978c34-ce27-4365-a4d3-5e01dc8d284b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4242adf2-6f61-42a3-85ba-2415102fef7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e6def5-8545-4dde-a853-6d15a8825fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90eaff61-0fbf-47c9-8808-352f713ea4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5e6567-2283-4622-86c4-9e6226ead4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1f6964-99ca-442e-b90e-c116a9fa0f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a93c6da-1f92-4f5c-9c72-27daa73f6dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0231e9a7-de31-48e7-aa6b-25c67b5008b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9969d8-26cb-4ad2-9de5-ad744417997c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a189e1ba-9fdb-4eda-b6e1-8bc82a9b104d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d4da85-52d5-4e7f-ad07-7f2b329df25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250cc1e5-0e1d-445e-b699-93827bdc007d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb0ee27-1882-4bba-85eb-f8712cbf4977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebac589e-89d3-4fba-a3d7-e544ec150444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0608c283-1ad3-4c4e-8fb7-014732492445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ee6d5c-7c79-40ea-a11f-040d1c8c9ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d2f1b1-4880-40b7-b490-ddfb551272cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce9beda-eb7c-4dc8-86d1-4ef0a9b514b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462ecc57-eb9a-4be5-a45a-3e96943c72ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e4a38d-4078-44f1-aabb-20ad659d3e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df63bfe8-7bee-4e3c-b6c5-43c88f115bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a66417d-6f30-4d2b-ab1a-b0c133e4f72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39129987-8cbf-4139-9eeb-6ad4c7f0b96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac882c4-82fe-4ed5-82a4-bcbce94fd0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.37.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d01782-e42f-4a1a-b4f4-6083f0215366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.4.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435ba034-bb89-48ee-89d2-1dbb0e38ad83", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.211.37.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0162f48-d98d-4f1b-8487-3cca4fdadd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.23.137.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657a81c5-50cc-4cf9-af6d-7689bf64a065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301a479d-017b-4ba1-a472-ca30494e0ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.179.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b807355d-ce70-4236-b8d2-b3d6d02c2d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.47.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7a4ceb-c140-4c53-a4e2-c674e6cef62b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4ca050-7891-4df0-9631-4c1279e4f2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977c7a08-6c12-4571-9bae-4ff6136edffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d88b273-9ddb-4164-983c-1fb67d91676e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9191e9-e805-45a5-acb4-61b48988e807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b0a3db-c9ec-4ea9-999f-424d12b07dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca3bd03-78bd-4df8-9178-3a8498582161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca1aba2-dc94-4aa9-b6ea-90e182143e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34285537-0472-4db0-9c84-a51278e4acea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58bf9fa-8745-47ed-b146-ef187cddbe95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3a8dfd-16d9-4b44-9fcd-9197924cbd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0a8c0d-87e8-4ed6-9ef7-707f73c85a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293ff384-2354-49f3-b307-4da367b39d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbfa88d-428c-44ca-9b15-cffc0f468282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae89b619-7775-4b2e-bd59-dfd1041cf34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d17e36e-cc29-4f98-b41e-7d2238cabb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5c3ed8-1cad-4b46-b574-700317e65b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bacd6f-4ae0-4d36-bd9c-563dfa2d4027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8ab112-62bf-412d-8afd-a4371fd48921", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.187.86.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586a9ebb-6deb-42a9-a585-b9b49f1c4b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.195.209.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ff7f1a-0e78-4039-910e-09c0e982b4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72535d60-7e8c-4679-89d3-4ec2cebf4436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.113.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c50e6e-863d-4bd3-a5e7-2f10957c4b63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.201.55.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39500cf8-54fe-4530-b82f-ee30b7161b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.202.0.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e31336b-325e-4955-9f12-4771059505b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ce8a71-3b71-43e5-9397-afb3f1262d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e19938-d72c-468c-b2d6-3758d39fe258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb4b708-a3b5-4e8f-ba8e-3184d1f59bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.234.233.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867bdf4b-56c3-4762-b219-6523b9de56b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.57.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762ee79d-2f56-41f1-883a-2754bb2d8e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb9f186-aafa-4152-baa5-84048c4197df", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.245.174.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05093e99-ea25-4774-9c0b-ec0fa1934a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.58.169.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b6d796-77af-4af7-b3c1-78c251ec3b49", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.63.151.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978e6193-1ed2-42bb-8864-ee2fb82d49b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.69.166.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d66bf39-e9a9-4867-9b6a-b222e1926520", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.70.100.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26523eb3-51cb-4ddb-95b9-b426fb1296f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.86.213.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a8a130-4f55-497a-87e6-57ff097528b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.87.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b6e851-c834-4e34-ad5a-a66fe6b772ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.96.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18addf1e-4f97-4e33-949d-c014c8202c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.80.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d965721-dce5-4842-abad-b07bb14e3638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.80.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fb961a-a61b-4ba7-9945-7fa95f7f5aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.81.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da06818-46f2-4c7d-b526-6a2a66007fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.81.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d5dd00-e65d-4f11-b19e-47b8904229f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.227.218.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048a4b54-b0e9-45a6-bc98-5ca5ce5843a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.235.240.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab557a51-c97f-4426-836f-bd9b192bba25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.201.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e64957-0f07-44a4-96e7-ac1d256e9953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.37.59.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5d0f18-abb8-4040-bd31-950dbeeda1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.37.96.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83da1e6-d59d-44d6-8f7a-2669ee094b47", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d5a365-5f86-425a-a07b-99860b6f015b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.148.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8467e7cc-2d47-49fc-8cec-ddbdd83a4f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.175.88.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd081c2b-38fd-4a5a-8cce-887f1fa82f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.229.43.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a48f41-861b-4074-ab6a-9c9ce51572a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.229.99.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7605b2e1-072c-481c-8d0d-881641991da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.230.19.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9c5ac6-d548-4beb-a22c-9a2d0c1c9313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.230.29.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b952b4a-0291-42ee-85dd-04e5adf4315a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.231.165.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a95f2ab-e852-4bc1-9dfa-c034f460d89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.249.245.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d744ee-8b3f-487f-9801-4708153dedb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.30.98.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8915a236-779e-497d-b677-f44379809529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.46.20.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994e03fd-cfb2-40c4-bde5-1b58fe756fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.61.5.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7dc693-128c-4d17-9483-70b9b471d190", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.74.57.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c7bcf6-8a8c-4205-b707-a25e24c9e7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.90.139.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d56503b-0387-4ceb-a7b1-d825c00b64bc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.157.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220aa559-a34d-4b3c-9d4c-ad2656ea6f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.75.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58aa861-0f19-4aeb-bcf2-37f9365701cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.10.147.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3febf430-4b2d-4080-868a-a679c6dd080c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.135.171.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e04937-9a6a-4703-99d0-b823d02c566c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.140.184.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e965339-eead-4429-b941-c9bc7f2d8afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.140.187.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31a5341-97be-48fb-99ca-87caf2ba1e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.146.139.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca1f579-c4f1-4700-9d0a-0be9c2616457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.15.106.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff78254-a421-48e5-a2bc-293d65f7a8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.156.132.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca89ef3b-1d74-4e77-bf6f-250263ed8ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.160.88.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbc63b1-ebab-4ff6-88b2-8085dab52ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.162.10.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937383f8-49b5-4f27-b258-a0775b306e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.196.166.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ba441d-52d5-4665-a3bf-13816e04c0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.196.54.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff7e8b7-6372-4b04-a460-c3af5523a856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.197.2.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1389adc3-b7e1-4ced-9bbe-277a0e7ae3f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.202.54.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e1977e-20ef-496b-8d48-4f839d051e3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.206.143.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04a0249-436b-4890-a3fa-9fffd8d0cf96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.208.176.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e42ef2-63d3-4565-bf21-771897af975e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.209.66.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d43712a-d34f-4049-88d3-aa6482860844", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.216.108.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3f7be4-e865-4748-9987-73e5b4604a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.45.71.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e4716a-881d-4024-9770-cf7e414b3cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.210.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1ff9fb-d007-4a93-9a3c-66200681ccb7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.212.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dca98c-8456-4844-bab1-28b2f76e05ab", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.213.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c28ed14-7d12-46ac-912d-11b7074e6273", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d425b9b7-ba37-41d5-86f8-4f823a108597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.216.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e519d738-023b-4143-ae37-f2c33274dc4a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.242.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2626d5f4-8e88-4bed-85be-b75647d72dbf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e5d0c1-3215-4777-8cf6-c9c2b19a17d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bd6ca7-7420-4d94-af3e-6c425ed67582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0216bc5-e162-4c29-a8d1-998d18a81cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.253.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be41c207-aa07-4e4d-ad9c-6cc3667bd039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.253.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc39a2d-2aaa-480d-8ea0-01b364b880c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.253.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c680fcb-4564-4ae7-9c88-87f77a420a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.163.254.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77c48f9-8675-4c1f-ad33-a1891c57ba27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.164.225.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94381864-4e24-4f98-bcb5-cfdb32606342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.166.121.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37b91b1-5b3b-4c19-ad44-b4e2423fa3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.171.82.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490fab4b-c965-4f6d-87d5-306e103a59f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.173.15.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acce2a92-efc2-4617-b9a1-05d57bc59669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.176.92.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4467dddc-2608-4910-85ae-395d7630dbe9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.181.221.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a613014-a6fb-4457-b6e8-bb8f37d28f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.190.240.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c1c178-6ac6-4df9-8211-43a9da1fdd10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.211.214.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cfd31e-4dcb-4130-8b22-9cf2e65d2a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.37.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243faffa-e615-4c47-a551-df952a9646a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.225.229.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64c1df9-c7b9-40ef-a2b5-fdf6d55a27b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.53.112.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdc6fb7-4465-4c31-b33e-63e2d1f0c5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.57.184.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b63112-5055-474d-8cc1-2a7c46c854f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.87.82.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8517e4-2985-4ca9-a61f-b767b5647dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.115.207.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad984ab7-e119-4930-8082-2d1b7913b8cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425af3e7-1884-4e43-b644-364317040b65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8f29f8-3e9f-44fc-9bca-ad279dc370c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5805ee61-ef77-4842-a774-d4695abfc112", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da24849-30f6-4fbb-af9d-e6d767ff82b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0042a1-f377-44b5-84ac-4e40f38bd99d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ead6f7c-88c6-4ca4-9ebd-72e540f72c25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00af7f3d-9b3b-4839-a8d1-6d7d9ad56d5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170c2ebe-9a0b-48f9-b5d3-3e91b3809254", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1b5df7-8d16-40d3-82c2-32efb3c6e774", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce25a8a2-a3bf-4611-8ef1-adc1370bfb11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7b23bc-fa5e-4a40-a756-bcd773e09286", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647fda48-2f45-4b6c-9a57-201bb62e5d23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ae76fb-83a6-4d39-963e-96695f4aa266", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d543713a-dd87-4229-b06e-a8330ae1566b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa71863e-cf8c-4427-b335-76f2e0d5a392", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93e4c87-a6ea-461d-9046-39d1bde09f4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85487c6d-7b6d-40a7-acf6-c58141613250", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cf1a3e-b9e2-49f6-be61-b3db64beba84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.144.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59521478-948a-4147-8aa0-b6304e5b3e4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568eedc1-1d80-4e3a-a538-c6f6c508c492", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e995ac-6f59-41e5-ae68-9cc6322d7726", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.149.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7bc10c-c0d5-4d74-8f92-b1997afe797e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a010e4-debc-4918-b631-cc6e66575ad9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2467ed-21ff-477f-a9a6-1cf89901027d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917a5bec-717a-49dd-b95d-b16363af3f09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c22559-4a43-408f-8647-8af01ee45e3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f33b622-3328-4ec2-9cfa-7d6631a737cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd81c8e3-13d0-412a-b536-f4b2e4368e9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c27e04-10d3-4e42-a826-ba720d6290fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b006fb37-7311-42cd-9efd-b3987563252d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3461aecd-49d2-41cb-a701-52f8e490a457", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37108016-d9a8-451a-90d6-5c2630d9b0c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c7387c-6fe9-41db-9562-37e17006da9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870e4a5e-e647-4102-8984-16e344e5e886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.132.82.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f09878-b954-489a-b919-50043f36563c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.220.176.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578b9ccf-f078-4537-be80-49162f648a27", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.12.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9670b70b-221b-4c35-9ee8-1c465480b786", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.34.106.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038260c5-a465-4953-a5bd-7b272654314c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.23.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d92b209-60ef-49d3-b6d7-83e127afe93f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b8e8ff-b2c3-4c37-95ca-bb62ca259ac3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.40.7.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9a6028-650e-4b1c-87c3-e3029b616121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.66.37.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a2e330-578a-4e37-8d6b-27dde2743c69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.133.243.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fea5404-a1f8-4c63-9703-ebe946c78abc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.151.42.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c53af5-1d02-4878-a29a-4f89a4aa4113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.159.121.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6cd865-be9a-4346-beeb-4ef4c3e54c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.159.204.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c98dab-0bd8-4981-8e1e-c9bc68b130c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.128.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b19333f-c3aa-4176-a183-eda6f30b4eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.160.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d214e2-fd0d-43dc-bc15-651901884133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.222.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbadc37-ccb6-42c5-89d4-12f0ed0a49a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b13a7e-9dfd-4fa8-bd68-b4069b50b329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.97.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d021760-2cfa-42cf-bacb-d3703e21c7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.36.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcfc5a45-5141-4881-a55d-8cd38a1ecef3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.196.162.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85680908-cc24-434e-9eaa-0d75cde32097", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.204.25.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bcd5ea-e35c-4ce7-a280-6fc72244ffef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.210.121.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e447964a-b9a5-4c24-9e8e-e6769bb6b7f7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.210.130.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eade624e-ff70-4940-9845-06d2b09cdc8f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.128.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71055427-b56c-46b6-9b45-6145c7bf85ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.131.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ac4d89-f1c1-4822-9951-08720620f48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.65.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef0dab0-da67-499c-a901-cadab764bb06", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.212.15.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5514ce8f-2f9c-4787-8258-de9937fab537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.212.33.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e347438a-7ee3-4290-ba2d-5d8a77cdec1c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.216.116.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c15e0cd-d8e2-41b1-9e6f-8905c95982d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.220.172.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3613de-c2b0-4620-90d4-9ee4d4f79710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.221.238.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb44d3cc-02b2-4aaf-a5d0-2498690832b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa463b1-f1be-43a5-832c-e121a4146db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.236.186.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d9f2f8-5d79-43a7-8bf8-57c120b053e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.241.1.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865b235d-6df6-4681-944f-027bd3d10d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.244.77.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9b566b-4933-4468-8f4f-05c7abc68ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.29.211.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cf374a-8c4b-47dd-9156-fd94e7680659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.41.214.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f74834-38a3-40e6-928c-723630f70fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.73.220.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83223fee-7e34-4cd6-b62b-ef5d718d164f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.79.47.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfc1860-ba23-4a96-8355-0d80ace26768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.0.2.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76905a78-cc58-4df7-bb18-0d3f49f3c6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.123.150.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98e64e4-4404-4a7d-9773-876828278ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.128.227.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a292b79-7879-4183-9e0e-75f04e58e255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.172.201.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e673c1-cda4-475d-ad18-3a0ca927e815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.177.172.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84446743-ecd4-4b49-8043-0ba2aadcc320", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c229aa-1e3f-457e-a662-2cba4b7b83fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861ab8b8-1a58-468e-8498-e8609024ff6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2978f79-0c91-4d0c-912a-1e5ce2546ac0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.141.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d940c770-2312-403d-9f5c-adce01f0a6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.206.193.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe085bc-50be-4bbc-bc0b-1f46576331b6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.254.101.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f404a86f-7b86-4c2a-a866-09658d97e609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.26.33.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4944c156-9f3f-44f0-90ef-67623bd4c2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.32.205.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f770d774-a325-4f7c-898c-9c5519952df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.49.147.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8050e0a-2d71-4b76-a11f-f5d81de9d54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.58.170.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba527213-6d09-4965-a15a-5199b749b50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.6.60.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c382801d-7fe9-44b3-9a6b-e6d2c9101ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602c0943-9540-473b-8804-c851505640d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.97.108.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b63f6a-7b7b-457c-86ad-8778061aa42b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.172.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02288e77-fc48-4177-a2c0-cccc4c5b5be4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.173.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e8a5c2-0e84-4c2a-b8cf-ca754fe8621a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.102.86.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1224af-a7bb-4b42-9b4a-12bd0da3b7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.137.81.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6345a9-5e69-454b-9d42-4f3c4955e5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.15.92.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ae9155-a471-4b12-bf61-d45f2fb16094", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.176.219.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf660c4-fbaf-42c4-950d-49d13fd04f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.221.65.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0f2b6d-aa2b-4c92-9d79-1ae424e2e950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.239.228.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8bb519-093e-4c5e-944b-2d70a9964827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.241.78.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64a1baf-671a-4136-a9ed-6002b7658fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.247.89.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baedaab2-e77c-4584-a9bf-6e7b5694013a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.212.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0130b77-c5c0-4c51-8036-f048f42a719a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.163.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c74c81-f4e3-49f6-aeaa-3827655e2aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.190.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af7cf3f-309a-45a0-8fa9-e3df72a244ef", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.66.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df305df1-94c7-4e2e-ab97-856e85aa5e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.87.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1689e92e-6cfb-4e21-bc21-7c248bc2d737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.97.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54eea2b3-7d27-4c5f-bd37-a939e259aeb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.78.38.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e553326-24d9-4992-8223-b17dc451f76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.89.185.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3a8217-ccb5-4c5f-b31c-670cd500f4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.107.219.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e321af9e-bc6b-4b3d-a272-a374cc2c9215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.107.219.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77496079-2d41-412c-b9fd-50855dd55463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.107.223.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9854a85e-624c-4275-a62f-87fdaea16bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.107.9.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a363fb-ec0b-4c89-aa88-a78729b6b4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.123.1.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e3a5ad-15ac-4e0b-91fa-9eb3796fd2c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.175.138.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87b8952-c76f-41fa-af09-126529a797ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.179.170.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164d10b8-7ae0-4fa0-bfc9-8281264f9d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.185.130.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6422b58-bdec-4037-ab41-89f72f6ffd4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e5b52a-2615-40cc-af93-a638df948c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e3ae8d-4812-4c87-84dd-04eb7b2516a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f61100-76a1-4c65-a679-9ebe0a648dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a434ff-ecf5-4095-94ed-bf0ad7e717f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.37.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ee8f28-ccc8-46e5-8515-0157763c97fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1265c43-b251-4119-ba81-2e9c13231c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d1f463-7ec0-452a-9a06-a904f04fc809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b7fbe3-8bf6-4d78-a1d8-195e3e6da7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caeb13fd-4972-4be1-ac1e-dd6fada1be6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e7b108-fea9-4905-a7cb-fd21364998f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e98049-2602-49f2-8c67-a0389cfe159d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c709d9d-bb67-4349-9f4c-34a873f14a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a4745d-20f0-40ff-9c1b-991710ba5a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652af95e-4104-45aa-93e5-a9880aa60cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf84ee8-cea9-4098-834e-fca3b2edc8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d12939d-a239-4e35-a20e-817293435823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f139b9d6-b6df-4079-b6bd-664d5efa6910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8877ec-86b1-4634-b47c-fc6ec3663dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1800f39d-7025-4034-a6fe-d2a34ee6ab0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf29ecff-de9d-47f6-9714-3463586b1f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea9b389-603a-4f93-9188-369de17d7164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e599f04-ee96-4351-b2a3-80343fa66ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafb6021-4016-4a9c-b6cf-28da5dd3d128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baeab37e-a4ff-4dea-b79a-39f2ce300bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab395e07-e13c-4c16-ad1d-caee1483587a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2602eb6-fdc1-446d-a3cf-105cfc574cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcb8ab5-6ece-4ae0-bc49-9a0e10732463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e3ae20-3cd8-417a-9827-345bd98a2e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2306f8-5219-4165-9caa-9a78b7776ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eca4d1e-aa70-49d5-887c-b3c5a8492f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a32a600-e09b-4aee-9141-31fad0f83074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61642eb-d1b6-4a92-985a-6e847d3ef1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9919e758-d256-4a9a-b0c1-c039ba7cc179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf0d0b6-5bf9-4775-b340-1e7aa145fd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fe5ef2-3fd7-48e8-a138-4a794f92aad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c509f08-4876-4c9a-b179-aa87a5c4b612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b0c320-703a-4b08-be5b-9f293982a930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84722ad0-a870-4bca-97f0-630ca26545e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0c0ef3-b1af-418f-b4da-e30b3af1069a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d48582-3a07-4406-9f34-4a74b4c41cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed463d8-3c80-46f8-8bda-189091c4e925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4471ab-1334-43cb-bdcb-9ca3071238a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbc389a-9f89-4c70-aaf4-0c0766a56519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a046444-dfcc-42a5-addd-6c85363fdc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7968ee72-329f-47e5-9032-9be96028f4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a49308-c917-4774-85ac-349e2b51306b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12370704-7788-4b6d-98a3-fbf7c8c13967", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fd94f4-6c68-4f5e-98b7-6d507c173025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.23.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd448c27-6a76-4efc-b142-59c415d13e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.23.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f336d3-780c-42be-b1c0-40c3fbe706c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.87.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b929390e-b59b-4f1e-b868-a474be00f7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.201.247.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ccaf04-28d4-49c6-b55d-024e0a634ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a996ad91-6a59-40ef-867e-c8487ac61bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b37807-2547-4d4d-ae12-fa493e0c1cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb96be1-11fc-4364-8224-9ef228e9faa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5269c2-c692-4131-b2b7-313f0bb1ddc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d9430a-08fe-42f9-bed6-63d4debd8784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3e8b99-b5a7-4e64-afe9-6383dd5c56ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bfbc4f-fada-40ec-98f2-18f65509c9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.110.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe472a48-c960-4867-8f21-7c2686d618e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280be3be-9f3b-46d7-ae3d-20b65879d707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ef5c3f-7e75-45da-b39b-ae23aef8ee65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.37.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fab6fc-8e6e-4b73-8ca4-32dfbcb3ec41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113ffeaf-7c38-43e4-9c85-db19028d8acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.31.39.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c48cd6-5114-4473-88cc-f3844a07d26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.67.221.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52680336-ab5f-4730-81c8-bc46faaa2012", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.71.220.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c43d64-a717-4338-aaef-8e831692af82", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.13.106.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e786f136-0e37-426a-a4eb-0b0f1ccd479c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.148.49.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3fbc17-4cf5-456a-832a-de216266468f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.152.228.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe75a44-7cf4-4e60-be03-7e8fc218407f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.157.76.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75cabf2-687d-42a5-8592-f26bf66f77c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.18.52.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3945f18-1dcc-4e8a-857b-00f4d761de44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.196.140.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f18251e-1cc3-40ba-8d59-391502958e57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d767da8-892c-4526-adc4-2dbb87bfbd86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.252.170.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c026036-3edd-4dad-9da4-f4fb779d57c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.10.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387d7c4e-610e-4c17-aa69-6142033c6c3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.113.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3c73df-c5f8-4aa4-9da6-3af851f1ca2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.15.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e220456-7e8f-4347-97ba-943bf447098b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.15.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15850999-7458-4fb7-9ef4-e9153604887d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.191.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8de45e0-354b-4a1d-9b37-19ff92fc53a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.227.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ad509b-2d99-4ceb-80b0-8ff9791c51e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.53.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69862309-5d75-4981-a5b2-8866e0d4eed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.40.84.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78626842-0cda-423a-a45a-45dc924bc9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.20.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6ac9ca-9b1d-4b49-9f8a-ecfad1a0b101", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.73.19.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae05a97f-9743-474e-b58d-d5bd43a4e751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.92.122.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f32684-56b1-43a3-bcbc-63d63ea25130", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.93.249.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66861cf1-c6ef-41c4-91f4-59e0d669a438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.238.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f85fa25-2c27-4497-a2c6-6598f6b3a290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.125.34.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148b1990-c9df-4302-807e-b2078578639d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.131.67.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14037ebd-7b85-4115-befc-33de70bbeb7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.224.66.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db0fbb9-70f1-42cf-be49-ea5d33456367", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.233.33.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b882b5-48fe-4478-a2b7-6cbb954f5bf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.135.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e241a01-58be-44ae-8dff-3fbaa56ee251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.220.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cd0ba9-56e0-4702-beef-dcc4b71564d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.100.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3feb5ec4-b68d-451e-8afa-d0bab6474c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.132.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67eb424-7032-43b3-8a41-470a5c1875bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.171.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb41253-1992-4f0e-b52c-f491b2418d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.22.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51fb491-d5e6-439a-9640-1908cb09d79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.34.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff99d8ff-c85e-4668-b157-8d6927bb15a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.54.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8facd1-1c95-4180-afa7-8679f8807988", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.80.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44f68be-d97b-4474-9bb6-a3adb5ec9def", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.52.18.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624f7935-4315-4e6f-8ebc-2896243ddc23", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.52.92.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472319e0-bc6d-4eeb-9b20-41f732264e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.53.123.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cd15e5-a315-4d28-9a7f-61a26a6599fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.55.180.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917c4f99-2c28-4910-acdf-64383828a2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.244.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93350abe-65ee-4239-a85b-79c02e57aac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.77.173.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b07e61-6c75-46a7-8b71-263966b32191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.77.180.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da2f512-c7ff-4e5e-95f8-773e1170e69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.77.248.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cf7e2f-f9ae-47da-9267-f32bcaad5f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.199.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846bb97f-5d9c-4fef-8cd0-1b3e5a1c42fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.86.117.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43609f57-2a07-482c-9591-96e63284a659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.92.16.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9226ef0-465c-43b4-9bc5-e6ae79354cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.232.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db57634c-1496-4fcb-bbae-a31eb9fccb20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.137.29.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f7a6cd-7e95-4fc4-a684-293ced00ca52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.138.130.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db306e71-fc3e-423d-bb40-57cd5193fea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.157.54.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d815566e-db1d-4b37-b538-5f859609b860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.170.212.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2964f9c8-d141-4cc5-958d-4ae95c955e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.197.0.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1658a93e-a244-401b-9e93-afbbfb9aa1aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.156.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fec881-a3b1-4e92-8cb4-1b182e4d338f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8225783-e572-4aba-ac3b-f3f7ccb85eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7451aeca-51d8-43bd-a0ee-bc6c993a0645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.31.210.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b11bf3-9fc2-48d4-98e4-fb3170107eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.36.62.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4739ef5-2256-415c-a800-70ddb3a355b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.37.86.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bee4454-1155-4fce-a793-a56aadc3a668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.161.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cb3172-4395-4e42-8e9b-12bf4c57a584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.20.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7500fdca-0669-4028-a5cb-5cb0c7290ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0775aa4-ee3e-4808-8118-c744926a78db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.52.157.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0896699-5336-46e2-b640-f63734bcfba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.65.84.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5a08ec-ab5e-4208-acc0-d266b40e271d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.100.155.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c20b90-4c08-4e2a-b2a6-b58929b72d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.100.164.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a18b396-a414-4bd9-9c6e-64193122bda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.116.27.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53475710-84be-4f9f-896c-960a220c2ecd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.13.25.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e088566a-50bf-4514-ad87-cbb531773220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.152.221.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aad194f-eea8-493e-989b-6e4bbd0244ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.154.200.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19693d50-85b6-4cbf-aad5-937d737b22f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.180.68.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc97586-0d93-41dc-86e6-1567a8563079", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.202.41.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee4a72f-7ecb-4c95-8abb-5bd16a7155fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.226.145.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1065b721-e5fc-45bd-8f96-68433ab5d0a3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.103.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2419616b-aada-412d-8aba-b5a820f01440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.173.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca20d25c-8c0d-41ad-af67-a9fbceced7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.242.68.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a828924-64a7-422d-98d5-5b244f2e71d0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.244.56.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c1a1cf-e169-4c92-8611-952fe48907da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.32.98.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01851917-414a-4c75-af92-3efa1b627d29", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.3.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77b6429-e23f-4229-8e5f-abd4dc988bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.9.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1549e515-01a6-42da-a19d-179651a886f5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.54.143.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2017362b-b28e-4b88-956a-ebdc6ee98924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdfd1da-633f-4e0d-93e7-7339814e4759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97fd373-7e10-46b7-99e2-13c5ed8a09c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.108.95.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2560a121-7261-4322-836f-9eddf5a65176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920ff422-9b99-433e-8a65-546e33f371bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.144.30.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585089ed-0cc7-42bd-83f9-fb748fdce688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.153.106.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3732d3-1f76-4757-976f-9212f733951f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd709cf9-6083-4457-a5ac-ff202ca62a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.180.188.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5182aa-d1ab-4293-b953-219e85e3c900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.231.162.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c583e987-a19c-4f83-adb7-1c3f17726ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.232.128.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f560ba02-d147-4148-850f-cdeab891e2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.233.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4927396-2cf5-4176-9938-53e4386169a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.238.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722b3386-ed8a-4603-99ee-5c55b8b66640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.24.206.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dea0c4-967d-4020-8b2e-39c5cd0e49f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.252.249.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001917b9-61cc-4093-a9e0-8073c514d002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be0dbfa-e5a9-4a3e-b7f1-9618ead82aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ab54ce-e0c8-4e02-b061-b99fda481fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14a0921-cfa5-4c64-9405-159fd9e1156b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6482d10d-a52f-4f88-959c-bfd085efaa0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f2647d-0365-4612-bfde-3b40f6bdacb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e2bcec-0a1a-41cb-aac4-6772b4729be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743ee89d-fa4d-42d8-a51d-acd44bab07ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4387f1f4-7314-49e5-b97d-0b817f2f385b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7253e2d5-3683-4c85-b817-0f9ed4bedae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3ab145-39ed-458a-9bb9-f2973443c6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05ff4e3-5318-49f0-a532-8f5c9705e00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1120f756-ac67-4d34-9d1c-5cf945d00259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.249.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a06adc5-731e-4b87-bbf6-279341a7a3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.6.229.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a96c9b-84c4-4ec7-812e-08d22973f6c9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.96.123.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a487a6-03c4-4711-873e-20186b9da814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.97.138.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b5769c-ae36-44ee-ab32-4eb88613bcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.99.199.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2af1be-d1e0-4fd0-9935-edda154e06d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.112.108.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f59b731-74ae-4cce-b9f1-47207c722217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c79047-d59d-4450-8828-e58ba29a98d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.123.32.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464919e4-ce86-484d-b80f-f142787f357b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.109.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b79d80-80c9-493b-9ccd-065cf4790be0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.117.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a323b3a9-04d5-444f-bbea-8c9ef6d9c3b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.146.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca01f50-a857-4b2b-879c-4aa381707087", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.161.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbf0418-8821-49ea-b5ec-f6e35560fe3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.164.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c781ab-122a-4cee-be60-c3207cf57f61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.177.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a321b99-c925-46a1-be0d-c2d2e1c6aeef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.183.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3369cc90-554e-4a5d-af61-726775bcdb62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.184.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48d481b-bb64-4f1f-8de5-9cc0f9869a64", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.212.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6340815d-a788-451a-a645-a071e6acc3a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.218.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62cc0806-9785-4c1f-ad22-75968a4dc89c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.231.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91207c93-7181-4fe7-a1cd-3dc82f59d0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.41.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c9d2ae-33d9-48b2-833e-0746b3a9fb2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.140.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb22b82-5df3-4abe-8d63-d2d618fbbc15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.186.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e87ecd-f59e-4498-86ce-27d9ab66551e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.59.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4171d50d-95ca-4b64-a0de-bbc149ec9ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.163.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455cc23b-62e6-4eb7-884e-09d8d42af1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.224.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e252f7e-eea7-415d-8556-013725e7cad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.152.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67aed2c-1be2-4c73-9da3-0f5e1045ff37", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.84.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2879183f-7bd8-4b3b-9928-821aa05b6f3c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.226.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9abe8b-b0b5-49f5-b910-0bf7f9e5a017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.70.20.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc7a730-f9e9-4a4f-9d19-801b84b0e08b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.83.112.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e56165-e757-47de-813b-f8a89cfac4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a3afba-5872-4da3-ad73-9523c9f3041b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.90.54.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9443c11f-907b-4944-a5a1-68d10ed0360a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.104.16.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce18ab2-c4f1-4025-aaf2-9277331c7afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.112.192.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7f3d58-cfaf-44a4-9ba4-a887521c60f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.122.13.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9980410-2306-4d9a-b799-5acad236024e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.124.128.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f517d28-5ca5-415c-8cb6-4f826e7817ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.142.37.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514ae947-18c1-47e3-9a2e-83d7122cf676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.160.157.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86b2385-e585-4ce3-ae32-615d6bf34f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.191.135.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa1d04d-21b9-4c95-988c-ba393e6cc636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.209.101.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe820440-87aa-41a4-b86d-ec87aa9d46c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.209.88.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130ae10e-9e0c-4357-b6de-8f2f447a1599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.222.146.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee79c6a7-d440-41db-bd05-34536f5d1965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.227.89.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce4ef98-4523-445c-8e8f-55f98df036f3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.227.91.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebcc22e-36b9-4ca1-b6dd-2497ea111c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.224.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7c5acf-565c-4298-8caf-a1b2c2a48d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.226.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30943c2-97d2-4b85-b801-6e6d710f408f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.234.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37306310-a10c-4f5c-ae26-70e188992189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.26.226.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21388b2-4aeb-4dd2-8e88-28757415ec4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.99.254.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f5ab0f-8c8b-4f89-9def-7842d0562ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8037ec-0553-44f0-8db5-18a64c0ffdb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.171.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551038a9-191f-461d-8bbd-7d3f3e8337a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.211.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ff9b62-cecf-469c-9faa-7a118816ebb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb99ded-6170-4b54-912d-d0d19aefaef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.46.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d78c7ce-208b-4754-a798-4348b2701edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625396d1-9c94-4e47-bf9b-45e8b42deccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77075092-1f47-44f5-9879-8f481d28adb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c7ee52-1afe-4d87-bf75-da4fecf2f5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3498055-df29-4b9b-8747-462288bcd801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501e3681-86ca-4105-b0bd-db3a99a2035d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad67e5c-8f16-4b5c-96ec-d6fb58485948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dfe2ce-b1cd-4e8d-98d0-e182a7b4a955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab2091e-f1e4-47f2-bbee-57c651b243fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c24d88-9e94-4c9d-bd6e-58486f665d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddee56e-f5da-4554-9d6b-8857e55243f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780150c5-349a-4e8d-97a4-1923bb437d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.173.237.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1f60f6-6f6c-4ab8-973a-64ed5acfc0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.204.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f44fb29-d120-457b-abea-27214a0b36f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e08667-90c4-4e4b-a3f5-3d87ce8a1a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e0fe2b-695d-4fd3-b4f9-90dbcb874e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb64600d-7585-4f36-83e4-814aeb28107a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8079f4c-88fb-4d59-b083-e5f3032a493c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87300f12-a62a-4eb3-922a-efb3e15a26c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f488f31-fe23-4f8d-ac46-1877bd9dbb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b446400-5d93-49e9-9248-bebfd0f254ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.122.106.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1586a66d-aa1f-435a-a0ee-6b548f074704", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.150.62.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157ef8c6-633e-4fbb-a401-996d6e568f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.195.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c138ea-f957-409e-ae2f-417c4569fcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.236.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34812116-1622-4b3f-82cb-5236bb0077b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.211.210.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8488ee1-43e7-4d88-962a-85d1759a1cd0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.147.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0540e31f-29ce-4022-8af2-237a4dd763f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.173.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a98941-5259-4eb3-a8a2-a7615504ce00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.112.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42b3e8d-6e6e-4453-a92f-e541e9e5eb77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.113.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090d9c71-9ac2-4a4d-b8d4-226bade25067", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.114.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e05e1d3-0163-4523-8c11-eb3224aeafa0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.117.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31681f1d-a939-434d-bbbd-1ea9af36337c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.118.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f03371-c732-44c9-9540-d657acac2d4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.122.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16d909e-ee90-4daf-b5ff-1ae9feecc978", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.139.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ff5651-4416-4965-b854-08848a3d29cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.140.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939f7af3-10a7-4f62-8f13-ab16317d8d75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.149.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63243d7b-1e9a-46cc-81e3-bfc5b06f8ebc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.155.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba665e6-d289-4ac2-9aec-56d79f99531f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.169.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0de1af-dd04-42c8-bbbf-d79e1a43d5a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.169.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753e4166-5602-494d-bfb1-4027132f82cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.181.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a60ee0-160f-45a2-91ed-89aade276dfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.193.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcbdc33-0fbe-44bb-9ff3-e2f8cdaa731f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.204.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8338c301-eb86-4bbf-8128-fb15a7c1a48b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.219.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cb3302-4633-42b1-9511-97aa27333752", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.226.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587d45a1-bfe2-40da-9625-b8edd7a4051d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.61.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c39b83-1943-47ed-be4f-c91bef17645d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.65.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241bb535-af8a-41ea-97fa-7b4127073de8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.66.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f82509-6ee7-45dc-89b1-fa117f281544", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.90.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f3d33c-b1cc-49bf-a972-9ab0a9b6e099", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.95.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b87ea4-457a-4075-8cf6-d7b04783b06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.28.29.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4665b5-4330-4d9a-a865-e0e680490160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.28.69.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff4b3b1-00b9-45c4-9996-ec8a2ba8f4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.224.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb41ee00-794b-4506-a324-45f179fb64fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.56.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd6c032-ead7-4de2-992f-ffd6d7644140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.99.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7aa49e7-7775-446e-8c40-0dc98ea9e0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.159.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b82314-84ae-46d6-9823-a71f92d11728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.171.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40d1a0b-a671-498f-a6eb-0210e29414d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.2.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04bcb54-4928-4b46-ade2-ca2314038784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.2.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2cc3d5-9cb6-4092-9a65-d49369f18b83", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.223.141.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067a9930-02e5-4d5f-b342-1491c886edce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.71.119.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d4a6a3-d05e-4e51-9903-addb6de915e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.72.103.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec364d6-1456-4d24-b668-dc1087dfd32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.76.197.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685de849-104b-4b09-b72e-db1f7c63563c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9727fe-33f8-4e2d-971c-de78cb92691a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50117fb7-2a4f-44ff-8931-5a909d4a045a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6399c371-199d-45c4-9e04-c96d6ff2cc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e09391e-2171-45a4-a5be-bc8abc7dd3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.120.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4124ff1-569a-4433-a040-5035eca1c533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d012a722-5b0a-44c5-8157-3ff4eb66146e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4580d8-1b26-4a37-846b-642f32cee1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf044d4-ff32-49ef-93f3-a1034ede6278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec12af65-9a33-42f0-96aa-712b4ce0782e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114346a2-63cf-405b-a42a-fd5f4849f609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a2543d-ed4c-4841-908a-f7489f751ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b95f04-a10d-4b88-a728-9dff0b731f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d462ed51-aceb-4f58-a2cc-8613cd75fafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bc5681-0294-4906-9d31-770ca77d9b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45115e58-9e01-4e4a-8041-f2ec19c4d7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a7d604-dcc3-4392-9934-5dad67a862bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.90.206.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b733bb0-c326-46ad-b088-f7a1bd954b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.107.49.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2dec644-bfa8-4d29-8aa3-581404b993cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8113f581-15f5-43a3-b5c0-34f0c61a757e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cac950-2de6-4811-a446-feaa204fe759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da538c2-d551-4f9d-811b-99dc3519dd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4017a2-f6b5-4433-99fe-c0cbe7db419c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33db274-f923-4175-93d0-2c078b90e718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30af90df-0ab7-4f9f-a4e0-bb4876434d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea046d33-5519-44c9-9de3-8e9624bbe64e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.220.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c02bfd9-c811-421b-b5e5-ae762fe32bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.255.95.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3aece6-41df-4322-9d22-5ca074afdc1c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.120.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af825312-5064-4aea-a626-82678178bd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.193.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34714ac3-723b-4d9c-a524-c1c479545bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.221.231.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0324d9e3-8a27-494b-8c5b-e1b07fc4907a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.142.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f6b14b-3221-4ac4-8eeb-0f0acf1fdb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.232.245.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2c7153-654b-4799-a94e-e22f21de8111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.17.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6ffd15-81da-430a-b4cf-e6c30bc45240", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.109.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc81dec6-699c-454c-bb8b-52c6618c5fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.167.122.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22edb879-b3e1-42c2-ac6a-18b967d1219c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.167.39.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbbdcc6-87ce-4e49-9d33-56bfc67a444a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.121.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9f290e-f83e-42b0-b3b8-36069087dac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927a2da6-65be-45ab-8825-c5540130fd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.21.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df9dfd6-e77e-45b2-b2bb-d239c449202b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.23.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee41359-9b0b-43ef-9f27-a151fc209841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.31.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91356cbb-a0d6-4d9e-a736-27d4e39d5002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.96.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d896634c-268c-4f79-8a74-cf347cd8a6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.148.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40177893-dafa-4a0f-9d7b-cd9c8cd68ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.152.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eade8a2-a570-47d7-a1a6-11efcb27393a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.238.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c45118-8280-435d-a1a0-e9fdf273ceb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.191.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f6508d-0c44-4dc2-b942-fad6e849656c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.218.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbc9fb5-978e-4a9e-9b53-b3a3ff877c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.229.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0f56db-3e08-4f96-9455-bb4ea5e46f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.5.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c7e041-8288-4051-a19e-9d205c78ad76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.6.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7d0138-b20a-41be-900e-e2df14314cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.95.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fea568-8e11-4e56-8bbc-1f3d3f40e684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.97.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223dfe92-c791-415c-bbbd-610d2211717e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.249.9.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff288e2-916e-460b-8f8c-7d7ab60c6ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af66ad8-191c-4f2b-b92d-6d3543b9c90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db431fb4-2f1e-4e17-9f67-70641cb0ab5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848fad81-b3ed-4965-88eb-96eeee783363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5e3be7-a97e-4178-859c-5bd46ca5298c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f4eec9-e005-4678-aabb-9431f701e0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4003e3-2e57-400a-a08e-e7398f4eee33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.131.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c925b7-dddd-4eab-8e1b-c58570491bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.149.57.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e781b7-fb73-48ef-935a-428504bb6af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.149.8.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e108c7-1786-4fa2-9097-6275ff73b829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.171.96.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b496ade-823b-4f86-9f24-12db2da66a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a4b6bb-3345-4436-84a1-a8705c4b5196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.97.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2b0b27-5ab4-49f7-ab68-334d24f54581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f76a95-d136-487f-8f0a-407a814cd566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636d267b-38d4-49cb-893c-61aeb730eb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.97.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270cdbc7-da99-4f30-ab23-8ad3b51eb8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.137.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed6ceb9-db2b-4b43-8b3b-0666e22fd49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.138.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf261ffa-257d-4830-89f3-304229a0fd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.159.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036c646d-2dca-4bca-9fbc-209fcd95eeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.163.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0a6f5a-301b-497f-b09c-e4a794867afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.167.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c61b06-ebc5-4c1a-b9d7-430cc99e87dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.179.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1efc551-f2e8-47d2-8cff-93efaa84b681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92818e2d-02e3-4442-99b9-d85c7c5aa929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e88cbc-08b2-4ad5-913c-77cd01275bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e74150-e5e8-4293-a671-9dd0d5efec19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6cf659-a1bc-44cd-a494-05235940c7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5277925-df4a-4fb6-8214-fdd1e2fbac09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ebdde3-db64-4368-8ef4-21e85f884d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5344c799-7663-4f02-b919-1e604fd0ef76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28012148-3d4f-4053-a3ef-b47d4db93b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f7e5c9-e912-473b-aa4a-5839e52fdb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f9eaf3-d81b-4e4d-bddb-0f8c4f3ab3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693e4a5c-f54b-40db-8f2b-16135e59a966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54cacc8-4088-4d9f-9856-ddd3d78ad839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9c59a9-632e-4311-98f8-4e9afcdf97a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da155bd-5407-4867-86e9-b1bca244bbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c32c85-9c1e-4004-af8a-9d5cb426eb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e09a40-0c8c-4324-b385-bb6946ce45eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ae3ac8-6e3e-4c18-8015-f2a01cca6b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010b16ff-61fd-4c18-9c39-7b9ca7685440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2c52e7-6294-4c23-8385-2f6c2c56c22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9cd76f-58ab-4272-ac46-a491f4a57494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7176559-dec3-42ea-906c-54d5f257d83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8350fe6-212c-43cc-9b54-c4d7d7456f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9d0280-086f-4cf8-a64f-1725ee9f309b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcd5630-6751-4527-b37e-04c4936bc5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942b563a-7653-4391-a72a-06f60fbe07fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84ebb86-cbed-42e1-9f18-7171a0382e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a689d9d0-010b-4d25-915d-41bc664ca555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255aa4e7-30f0-4e01-98e6-a64d0418c829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05022666-1feb-437e-aaed-2af7b7abbca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b95d22-d94b-4c1c-96a1-cc222c574cc2", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4fc4fae-4b0e-41a7-86ac-f68bf6e2a648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ca11a9-31bd-45a4-8aad-d94d24594fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e13c48-3986-493d-b503-920ebabc0f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ee2c80-97f9-49af-be3c-a5162643a8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb2c275-85e1-4064-835e-20135e189685", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.111.54.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721a4892-cd91-4318-a921-d386a2905b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.151.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f895e2f-ff86-47b2-a7bb-df87467d17c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.66.238.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be61e06-6d1c-4f71-bee2-b7b7fd6c5d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.85.39.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1844cb-53d9-46a4-917e-7d606c23e3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.102.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187fdbdd-928c-4b18-9317-70d8c84ca49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.102.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3609bc6d-e0f9-4826-bd37-0d7b869d1e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.104.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c46f79d-f540-4d28-a3a2-590bac8a566e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81447352-13ba-4244-85dd-fb5cfbc83495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ea7b6f-a627-46da-90f7-f29e03978dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.13.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7395ba-2467-4c6f-bf9e-82d26a0425e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.137.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d060f2b-f75c-46c6-9f99-24c0e3cb5668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.139.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b527810-1be1-4069-b486-a12313cb82fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.159.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6152b62-9c05-4d91-9992-afd8e6970d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedabb3b-6174-4641-a609-dcfecd74a950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e800bef3-9aad-4ee7-a178-43491c4e2316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9494404c-77a7-41a9-9349-8d6ee92fb82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.197.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047939f9-1e50-403d-836e-77a8b6cbc810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.203.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321cddd7-5f95-41d6-91a1-0c4bea470438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.216.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d0d6b1-aa07-4ff5-b9b6-45c959b9133a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cad4d5-0b0e-408c-9b41-0d162245587a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3647d9b8-3fde-49a1-a847-76d6b792c364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.63.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a237d4-80dd-4f24-8efe-a22793775e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.64.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69848d3a-49a6-4595-a565-9c97a9c5aa98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.75.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9740c4a7-9446-474e-a732-990cae314e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.95.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7df18c-91b9-4fcc-9949-b4dfa7cd6d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.220.224.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a0f54e-d95d-4825-a9e6-4ceb4207edc1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.255.13.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46955d94-f592-4fa0-a7b6-760d6bb68eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.0.33.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4918e79-3723-45a0-a581-7fd28a85b0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.121.104.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054b5c4b-f6d9-48d7-9939-4217a117530b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4721888c-139a-4f30-b27c-cf28ddf68c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9951e255-7459-48d4-87fa-fa0e68a632eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.216.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3e6e8f-d74c-4854-acef-dee1ac4ca9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.216.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3751801-f4c8-4781-b790-ed2bae32b3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7283119-dfc4-4104-951b-f65303c70752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708ef1eb-7a33-4e81-aa99-49ab8ff02371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0086f13f-951b-428e-b46b-9718251663fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.252.181.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa91f22-e048-4ab5-a565-13a4ef7ba0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.252.215.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9c64a2-675b-4298-b662-5dcaea453eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.255.191.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ffc8b3-e2d8-4f73-b6c1-8697c61affaa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.152.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba9067a-03c2-4895-b96d-8f1445f54303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729d7e7b-0d38-4092-8d4b-781081dc8c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.107.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62949ce-ab7a-4ccb-a330-26061f2f687a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1e8a1e-efa1-4b97-b9b8-bfc68e856b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77c0163-d1d3-4b87-ae16-cdb4db9e5e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffacafbc-4020-4541-ad79-35ce1489d558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.141.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9a7cda-364c-497c-9c0c-46a8506e98a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.195.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f069d6-ad82-4ff4-873c-ded54330c124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.88.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ff3eb1-c2bf-47d2-a1ce-1d781c8e239f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6266174-52fa-4464-a9e4-ecb36f3c4db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.196.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6785ffe6-a3a5-4104-9841-8ea1e91352fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.205.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828f42d5-50b0-4894-8a51-ada3116756db", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab44a94-3abb-40ff-aa9c-f8faf67d5d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.199.229.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ff14b9-3589-4f7d-95d1-2547e71e8197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.213.243.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31d36e7-b767-484d-86eb-54bdf13de5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.227.100.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7392ac-29ca-4e99-80a0-af63f9cd3429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.170.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28430d64-01a9-4ab2-a4b3-5202e7562753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cf786e-352a-40df-9966-c72bb34a518c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.208.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cea1501-47f2-4c5f-80a6-44d4349c4569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.225.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f47b48f-cbc3-485a-9b4c-aa361fbc5c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.37.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17af8b6-f310-40b0-af69-ead2e11a312e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694547d1-8765-4231-8835-8b25fa71aa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.102.77.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9339f29-367d-43a5-95f7-d582332b10b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.103.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8d84ed-2f24-414d-bb7e-ef34912115f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.111.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc16411-e318-46c9-851d-ec505eaddc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebde2855-695d-428b-9e98-94141937c963", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.113.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abab2009-823d-48d0-8abe-b7c546b99f10", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da40406-0213-4750-a118-e8bba9c856f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dd1c5c-1dce-49cc-867d-becde4ee3cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.116.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d4e453-83a4-4249-9317-b630151e9e47", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6884c0f9-74fb-4af8-b02a-95b3864f96df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf26973-6cf1-4a69-a9a9-9c0343773b1b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f7068b-2a2d-4776-aad1-c4e60cb1e4e9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820265ab-4b56-40ec-89de-e744c4e212b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.140.205.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f317bb6-626a-4395-8829-b9db409d0242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.155.217.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6da6004-ad13-40b8-92e6-3ea69fffb7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.162.144.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61930d1-7062-42ef-a691-bdba9b2e3204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.18.120.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4975f81-4ba2-452e-82e5-6022323b9d6a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.192.212.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72885488-9047-49fc-9ca8-7940da9b4eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.204.41.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2541c3bb-027d-4a9a-b14f-fcf37046e787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.216.166.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5171a84b-8ec4-41d9-80a8-3b3a8f107649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.202.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdfda84-7240-460b-a751-c0dbda7e06d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3d1178-b7f0-4fbc-bce1-43b24a08fa3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.245.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8473953d-307a-436f-8dec-890bf245f44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.211.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e1d1a6-293b-4416-b5b9-68bca4dcf5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.37.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d84376a-4697-4754-aa36-0ef125e5da0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.46.87.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf017feb-52e8-4a72-b2bb-66b96e700159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.159.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828e921e-fb2e-4e35-9ac7-c5451b148e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.206.195.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ac2247-9cdd-42a9-a624-11e99712e0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.206.195.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a745d32-7af6-4355-b66f-905ccfa9c625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.160.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995f915e-9963-4f41-bf1d-f69bbc8a4335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.21.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ea1bc7-0d23-4cfb-99dc-b2cf83418112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.164.236.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64022e9-9050-4dc8-858e-82bfccaed6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.94.19.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec99224-d0cb-4e3b-a9fd-fff3ff5eed19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.94.99.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaa706d-7d21-4eab-a18c-5670ceeef764", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.54.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a323244-c4df-4539-af72-8375e80d9471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da792908-79b6-4013-a56a-05016c93671f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75783e23-3bb8-4330-b913-e1f41b83bd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f0ba18-b43d-4a1d-bcd4-3c082bb17547", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06f7e9d-5cc1-44fa-b17c-87393a8a5ddb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.189.17.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce5b4ac-62b1-49d6-8ed7-c9ab1c87660b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.247.166.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06717ce1-e3e5-4673-bc66-5f309e44e6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9967f502-f03e-49b4-86f2-329b6bcf2376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feaebbda-c079-42ff-bc11-2fc65078b9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.10.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc175fc-df63-4503-87a0-dbbabc73a3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.192.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce3e54a-ee32-493f-a4ea-b985860e77c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.194.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a837d12-20ad-413e-90ce-f95c949aa28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.20.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a205887-7bad-416a-a456-2c4ccc7790b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e94a105-56c7-47f2-adca-21a2611e20e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.250.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b2fee6-5a94-4e7b-9298-66a566914687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.91.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017d5054-e29b-4e9a-8450-1ca5a9b0b27d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.178.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bad9638-622e-4fc9-ad3a-ec7ab11e5784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.219.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c682e250-f480-4af7-a91a-6090dd517061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.239.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d3577d-151b-4399-8982-a01f0d1763ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.246.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70629a21-f2a4-41fc-b2c1-8e55211388fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.112.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f870eff6-3e90-4e21-89c3-0b0626792d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.117.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36717eb5-0619-40f7-8864-98d662e0d22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.150.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bce917-c0f2-4df2-a171-a6daa9568cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.166.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f60e85e-d257-49b2-a26a-2692e7a43b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.205.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd49b6e9-1f9f-4d6b-af7b-928fc572f584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.225.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273cf137-b0da-4cfb-be47-03e32dd29dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.238.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09ec64e-19df-4a0e-b792-3ed4bc5ae11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.45.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3df89f8-4eed-4515-a1b0-24ccab3c1a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.68.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191e1610-dd08-4a22-8d12-bc794ab60a6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.208.150.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea932f7-7ee4-4618-9f98-c1ba1fada920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.155.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a279c927-b614-435b-8c9f-b91d7ae64b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.163.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d92956-5aef-4e93-8443-50d7ba78bf18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.57.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ec5e4a-675c-4066-9f59-1d1fb63a6bc1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.255.87.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc44a093-eaa2-4304-b40b-0a6b06bc3114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874e2635-3281-4474-a022-83e58b1ba691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311121b5-45fb-4f3f-890f-68224098eaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1b4ff5-092c-42d8-b363-828a8d828f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88a1b81-15f2-4c50-9a34-e1e4d3edb5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21aef5e3-edea-45a6-9014-5e926da3fabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ce64d9-2820-4129-b677-b70eba90c15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e7cb32-1ad9-483e-8949-3fb53613b551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5edef7-9b88-439e-b30e-14279f716029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27089c51-5ffd-4360-a2e7-43208d05e4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259371e5-0ffb-4ce9-ac73-a47d82dc9d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b044f2-b193-4da3-b7ad-193a76a43325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4380dad-6b3e-4e3e-b2be-64b9184547ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0cd660-badf-4f8b-b5d7-8d6a578494fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a081e6-35bd-4463-b7a2-c1c01c69fe6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd9f5c0-16ca-4302-aa7c-652433c836c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06b5b0a-37ac-4550-8833-09786f4da00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f09bae-9226-40df-97e2-cf22d3d51451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae61aee-3f20-4e92-b273-20ca20c9923a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de5e9ec-2de6-4bf3-9f2a-3baa87adfc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7886e0ee-0662-441e-815a-eb934de7b481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20589619-973b-4d41-814e-8f624ba59ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.227.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c041f6ab-32e0-40a7-81a2-89119323cc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.118.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85fd728-d2ca-49cd-bc81-595fec21cb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6a8c19-41fd-491c-82be-b83be8ad72bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05fe264-9add-4e58-b093-68082d363ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.192.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2e1f53-1266-4833-bdcd-cf546c05aecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.139.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51476a8b-b2ec-441c-b2e2-2ba08a7721c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.147.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c493c8-c77a-46a5-869e-d6b1423f425e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.202.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f89a44-22fd-4617-ac8a-19eaa171d30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.104.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d489e3f-cec4-4fa9-ad16-2ebbfaa1ac8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.117.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92785c45-a4cf-4540-a69d-e58d5270a66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.98.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaf1992-74b0-41d5-a211-23978591a656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.242.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f080c1b-8f90-4d55-b419-f713e60c3f29", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.130.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ac417c-24db-40b0-8ae3-e1f76878bcfd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.135.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c234bbb-1809-40b6-86cf-09047df7b9b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.151.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d5738-ecc7-4550-9b7e-2b1c4852235f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.8.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c9b70e-5535-4fe5-8029-cf2971665fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdc30a2-1170-43e2-8cd6-6ded40fda6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.79.182.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5109fe5d-bffe-422e-8f18-e62d204f5f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f8d813-12cd-4998-a20c-2a41843d4cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb900cae-753b-43ad-9eb7-625940776285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c03a960-cbe1-41dd-8b6c-3af2fe85f4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4b6a17-6ea1-474e-9b11-684d7bde85f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586ec922-e795-4e32-b111-4d85e020ce9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c19c81-0c36-4967-9cb8-8cad651ca558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02de80a5-7df1-4e26-b02c-d0135451d1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1b4ee4-7586-41d5-a969-4c3acd29877e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e0ba30-b8f5-4601-9853-98b52f502b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c4b1c8-18c9-4286-8149-e2f1e1346a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07205e75-0400-4899-b94c-514528172b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdc14bf-1d8b-4096-9131-54daaa875b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a73128-30c2-4c30-bcde-0d14cbc9d48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cba2237-6250-4690-8899-a4bc00370275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d9a466-77fe-432f-9d47-36bfb277e1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517abe62-3b39-4a32-9722-53c18489d678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c62369-a490-4a3c-95a6-a0edc6a4ccba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024481ab-7097-43d7-9263-4b57730559f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a42e20-f273-42cb-bb3d-61e8a8ddda1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1685cfb9-c377-4de0-845f-9c0b695e0054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85063fd4-60f2-49cf-85b4-47599bd0a651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472b89bb-e7b0-4b28-b964-9d350ad1c231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b286044e-244f-4ffa-b82d-738d37add39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffcf78c-0012-48e3-a53f-174f4c762b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dedceb-a9f1-4bee-b84f-03e5fd087ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19e3d1c-c459-4614-8e8d-9f970bc43104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf148e0-e524-4e2f-94c6-471fe414557a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff450b4-0c4c-4f39-b446-d6586fe1ec38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74618f7-3025-4ae1-b7c1-a0072eb3ebd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdf7b81-3d49-4c10-8431-399b2dfedb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58526c51-dd2d-4aa3-badf-43d7ff72ccd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ed049a-bfac-4429-9ddf-dcb7b9fffccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d51774e-b684-4c77-8852-20b066b2c5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9e30fe-5787-470a-95d9-43e0d75a331c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78114004-46c4-4e56-b4fd-fbd886eac100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c2c8ac-2bf4-42d2-8e17-a2b9f046af1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3090c933-b212-4817-a1bd-ec7ac6448a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4eae85e-6c6a-4db0-9070-ce7d5ad50e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c0053e-37fe-4d35-830c-7fb6356bc7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6743821-9e94-4c17-9d71-135129663b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc124a06-0ae4-4751-a2a9-092be6a49fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a4948d-570f-4b10-b081-72f5b7c4be99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84f4dcd-b49e-4c47-af85-4a70cb7567f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355ab068-3480-428a-b9b6-385effa85b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd10331-b360-44fd-830c-72eda6a10319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c239ff05-033c-46d5-b20d-9f165cce23ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77880ea0-8f1e-4db3-9eb1-31bb5fe61298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c385dc2-94fd-448c-a1cd-d52c309059ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c2c202-a505-4bc5-9a68-534f4d4d73dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686475f8-11a6-44dc-9fc4-fdd5e9931064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768318ad-ffc3-45e6-be8a-7c32bacb1ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fd6d33-8d2a-49f4-a0bf-dfae52c33a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0e382d-e002-4f2a-8d87-7c11dd0f1b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd63f65-d4c8-460d-9da4-7c57d3f10577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff535e4-faf7-439a-843b-ee599b500649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d206d3-2af1-4e8f-801f-0adbe95e8754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730effd8-e580-4175-9aa1-0571e8b582f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f4a52f-f158-48aa-ba73-d2ad9af605e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecf477d-aba7-44ee-8d3d-7e73a4b05f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787f9b98-2b9f-4d9f-8590-2425b6a483f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fefb247-1459-4c12-b0d5-0df302488ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89dc7a0-f751-48e8-aa74-29e8612484d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff810b3-4c94-4065-9edf-cd4e017f2990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f107570a-a524-4864-9d35-a09eb969663e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f89c7d6-3848-4602-8ee8-61e4733229b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c183e6-4e6e-4d71-b9fd-e51d81701e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9ec9c7-5c85-4d1f-a5ae-abe13db24140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54f5e54-b62f-4a5d-84c0-655b40633239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bd3e12-3e9b-4456-9202-11e12d5ec513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3420052b-b30b-40ad-b0a7-617ffdd3499d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a9182c-be3b-496d-9364-0cff5d91c699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21306d97-c17e-4e1c-9a4c-7a1feae20337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5becd897-878e-4e45-890b-75cdd0702b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68d52bf-6ba0-48f1-bbc1-853d93e630eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bdb317-d5a2-4d59-81e0-1a80aec0e317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2ea0d7-b7c0-4b1b-b718-eb8fda03b6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a27a82-0ea1-4029-a384-ccfa63b2e4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932b1acc-403c-420d-96f1-6b94c5a94985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dab50f7-c40f-456f-9993-e4751f6a058b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc3cc0f-44c9-41ab-9dec-ae7463a56938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa5c036-bfa3-4954-acdf-d3805420af22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d2dc76-e254-4487-8443-351d2659fe81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ed7af4-a943-4912-b395-ca4abf71075e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d97f2b-7e5d-4a6a-b43a-213610578b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58ed09e-fa3c-4d85-a955-d0820316cc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f1b1b0-60d3-479c-910c-58d5000e5726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06bac7b-cef2-4d50-8836-f4b7e09f1f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0daeb4-9a34-4220-8d29-a0f7bc12960b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a05b726-6a5f-422e-9a10-72978e65e9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84dec612-69a8-472a-8ff1-85b0bf3bda96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf5a65d-669a-4c1a-b197-1419f9f6cc79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49781210-72a0-4f51-b174-79cee5420b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae02f1e1-30f2-40b0-bb72-c97f2ce34122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0116e970-22a2-4ff1-ad0b-2df2caccfcd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c804902-df84-44bb-8bcd-a5ebc9d3fa6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c829708-52b5-49ab-a241-14054f1d496b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c180f1b-8305-4949-b601-433b1c0437ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557eca82-5a88-4f7f-ab77-e4b8e94a3ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea045d56-68b3-4a2e-9e40-78fcc882f40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cb7fc7-de17-421d-9d24-a0ee77e55ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f482e51-fe21-4bf5-818e-cd9a5642d7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5642c762-ce60-45c5-84ef-ed8296800b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f65e86-27ca-4006-8a77-68b1fb4cf1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9161b4f1-f69c-412b-ba9a-3e1c81a0b78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf92e2cc-c17c-4f60-80dd-08f90fb162b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0671cbf-c3c1-48e8-b98f-6adfd78b8446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339f624e-65cf-49e7-b54c-b540f3c16395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63196d4-8244-41b9-82e8-909de22e9e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0872f7ba-db95-4822-94d7-8a9f6d2cdee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a45f5c9-8003-4a70-8978-cd15d543ed2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcc2c73-0edf-4a6e-b807-a63b32160b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1c5f26-e4ae-493a-b7fb-51f279ca3c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ee2b85-7d26-45e3-9809-ec1acb8cabbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5737252c-d1c6-456a-85cd-b05e5ee67932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea2fb8e-8f02-498a-a24f-a5265d8e5e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd7160b-ab36-4d17-8e3d-b6ebc5e84c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b70d39-3c57-48bf-a83f-9ff624af7e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7391836-da7d-4718-964f-8bfbf66e58ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1660e17c-b5b6-40cf-9644-649975adaa81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b88cb7-d375-43c1-8ce8-a002d21ae846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd44f32-f7a0-45ab-a781-d1e3700533ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ea983e-93c6-49dd-9121-a7601351a309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9689ce5-23aa-44fa-a5b5-9be0677c0ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c13749-8b5b-4db9-b741-fbf75fa4642f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a53560c-b898-4810-9a0c-4e258d5b2a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed2da30-f68d-4634-9480-f9c3e8d04e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3bd450-0a67-4ae1-ad89-4067818ef4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbe9add-6244-438c-a948-8cab4a532e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167e137d-3cd1-47d1-90fb-8fb723a4fbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1a2a5c-bd78-41de-928c-e45709832fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235d3825-e3d9-4d60-80dd-2d6000d39cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0478d67-6fe3-47f7-9225-086b8285641c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c476d5-7caa-4f80-b289-316bbc7db115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e91a5ee-f374-48e3-8964-45488ed57c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8895471-94d5-4295-8611-54c187b83e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfa0a45-4567-4eef-9e1d-1060800999d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f175e7f-ce7f-4354-a9b8-e1a0e093e58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcc1be3-e17a-42e4-8de7-6f9de52f5db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3b9ca9-c2e4-4067-8e40-ed7b089e79a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ef5ebc-a60b-490d-9978-32a619b59347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9104885-1650-4ffa-ab9a-221c0b4a76ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1564e2f9-343e-4bbd-bd57-21b9d26d4bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a96972-efa3-4b83-8c82-33bdff892e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bdf43e-4fed-47af-b767-86fab94a57e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a436d170-69e4-49e5-9bfa-b5de6660aa38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec137613-2243-4539-a11b-71c14ad80cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edeb0607-caa8-4e05-ada9-231f6c7bfb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e516292-6905-4cba-9078-ff80f075bade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342a2d61-1437-44ba-af06-4ae17404ddbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca6415f-5f72-4ed0-9c8e-faea5bbde9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e748afc-d0c2-4b05-bdd9-dfd12b2772c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1affc8fa-8396-48d6-aeec-5d4dc2b265d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcd2110-0f1e-45ae-a83d-f49d570d653e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e766d8-e337-4fe9-8bc0-86fc5abe275e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b1b7c6-fa8c-49d5-9ac4-6f8e314d8c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94781bc9-00ee-42c6-966c-a36ead9f08de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b85702-0e2d-4ed8-b6d2-881d064d50dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687ee075-2d6d-4d69-a1ac-6050a29f8818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94e3a30-b21c-4619-9d6c-725ebf5af10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73679748-f881-42a0-9439-be1315904228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfe1984-7d68-4f3a-86c4-5a8f5c90ead5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1103d1-dcc1-4dbd-82a3-b4a8ffa58632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dd1ed1-283c-460b-8ac3-845f46506dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7a9349-82e8-42e5-9b8b-da9c9fd326ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3997de-5f3f-44cb-a19c-5f23a02f98ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb47fd84-9fb9-4f32-97be-c44632824051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b16aa9-5233-4ba1-91e1-b6ca46d53988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fc3f4e-7f03-420d-a853-050e229ba0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b636a236-ed43-45c0-9d30-44677acdd8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5717e6d8-c0e3-4846-9077-55aa3acca01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3762219b-855d-4c6e-97d9-bce0b146938f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a86de7b-f80f-468e-97bd-3bca09905ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9607b9-bb87-4f6e-91f0-4478d2c0beb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7507e61-f2d7-4ce5-b49b-2a8fe6603014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddeb2d5-f8ef-47c7-89b5-5b59c02fd365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb56e53-a760-4835-80e2-c49320cdf70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67546a8c-ecd8-4c50-be9d-8ed90adece3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c266b1-b162-4636-ad67-75dc297c9ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbd715b-eb2a-419d-b769-a82da18dd3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a850c55-bfe8-4dab-b2f1-0c9d9dbccd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664db4c9-238f-4607-ab3d-f3f8689c6c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d8ffad-c849-458a-be49-f75410fbb499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f6beb5-45d9-4f75-b8e6-0cb02f5d703b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1260f0-ae53-422a-8780-dd1eba81adbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f1d274-d3fa-47cf-968e-5fd6645de492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55acdd5a-547a-42aa-a625-2fc08a8bff01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44464356-efb2-4e51-bec4-6019cf0b7a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29d54d4-351d-4135-968e-9477455239a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3b2d51-2563-4e18-908b-a80a9fc9030e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0c8e26-8203-4ace-8606-475fce366520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f9c5ef-1a19-466e-9e11-7487773dfab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0711d45f-c3cd-40ec-b733-977c5c316db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53b1241-9b16-4be4-bf17-e5a656cf66c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78a7848-4ea9-4520-b0df-50cebbd62927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9d4980-559f-40ea-b4c9-af77330b791f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05e6329-1fe5-4de0-88e6-2f2df1acbb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac27ffe-0573-4ce8-8f6b-e0ca14bb0b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0776eb53-3711-4d99-8404-64dc03fd6a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fedc3ae-360a-42a3-b7ee-bf6322007232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3259b204-095d-48dd-8782-a7107f92f509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7faf89-396f-4928-a8fb-6590462ec14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104e7021-b150-46e1-bbf2-cf0b7a75c086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63da40f1-24b0-4267-bae1-44820745731c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5800a618-1a8e-4811-815a-a25ea92c9198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8659b6-e305-4ec5-8994-d8fca9997064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e609c370-4d02-431b-83ec-84eca2f1742f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaeee1b-6563-48f2-a9a3-b889cde36310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c34902-4935-4349-b6fb-8c5e850eedad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9768d6d8-e683-4dad-b8d3-eda759324e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f74795-b824-4b26-a0f5-6b02ba116a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6a8875-2d05-401e-bc5a-6c94a10643ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dac4231-0203-4b80-94b2-da75cb5b022f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ece29d0-da77-4746-820a-0cd96dec33b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5541ef00-5508-43ad-bc38-b6d62aab3a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e1a6fb-eef8-4e2c-a1cd-8a8058e0affe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad656e2-b888-4727-9c48-eebaba026aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c81df57-3a78-47b1-b502-47b10e911e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777d14b1-518c-4a6b-a2e7-441a739d7ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9029957-fea8-4841-b135-05baedb4c861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49eb3b24-a8cd-4ac5-a980-19b844847d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871ab1d3-ade7-4cda-869e-1a93b98bfd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f908c1-bde7-43a7-81c7-c6ac72743465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dffa20-3edd-4707-bec8-4da24c5e2ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d149a5-4c14-486a-8403-34ba4cb66c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0aa2a7-bcff-4827-8da6-e35dc6717345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7217ad77-0a7b-4538-a000-043e96b85136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693fe8dc-0120-43f8-9585-eb585fc36117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd58bd54-c855-4834-9348-bf0a967ef8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bef5ed-73ca-4a24-b9a6-ef6c7a2faaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f2397e-f5ab-405d-a237-1308aa8f046e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe89aed-6342-47b3-a006-cf0eb5b34ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11023fb6-7669-4302-af51-a83d4ee5f7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb740e0-1ab1-437d-99ab-3c885b5f3017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc835d7-a9d8-447d-b078-8c375499350b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46b0b6b-c5c2-4fac-8c54-c2a1100d774b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822e99c9-e250-4cc5-8890-b7a6148fe37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8700d0-b245-4dc1-8e14-62914055ab7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70fe2f1-b3fb-47ab-9fcd-2f90ad9d7cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197c1ed8-48c7-4709-8635-90915e4cf835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a35c8a-93c8-4a30-9681-0558cb1b2ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fd70a3-7024-4b22-8a0e-7cd715146b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7baaf9c-e967-452a-b9ef-424f34ee256f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3efc31b-f81e-4eb6-ad94-ed6252ffc19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261a806c-0944-4e8e-854c-ba06aba8a38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3527b0d5-969e-4cfa-b6f3-3de31fe74c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe0a15c-8735-4e14-a3dc-149b2fd35ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13946dbb-a2d5-435e-a299-2ed0bfcac9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ad889e-f34e-46dc-9125-4a24f3e83534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc542196-63cb-4eda-b7e4-2c1ecd46b8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32cc1d4-c769-4ea9-95a8-a9406ded885a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c384bdbe-bb30-4dd5-ab65-0ddb83c88b6d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.246.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e18f3ce-118c-4034-82bd-2d03a2d21089", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.251.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647e1500-b93b-42a8-8118-93c578090e1b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.158.110.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd829219-2678-4e26-a848-49a94462cdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a045674f-7811-4318-a77a-38cd677f3b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce18c4bb-9c77-4034-95ac-c49b44ffeb48", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.149.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5ec2bc-aed2-4ed6-88a1-6187d0faae86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.153.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3687d1-a18b-4940-8e08-414064d6dedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.209.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c09f531-627f-476e-bb6c-361f6b1739ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.21.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae123dc5-cb0d-4265-8524-c3413e50da04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.213.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf33471a-9740-41ac-9ada-02e61b41b16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.216.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ad5551-1b0f-4a74-ae64-e90836274720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.222.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101bc869-86d8-49f1-b154-5ae881475157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.57.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355d6112-231f-47c9-80ca-5ebd7d492a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.196.36.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14954541-b805-4176-823b-7776e47749fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.214.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e32398-41ce-4253-a969-51ced5f89ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.123.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77073b5-3fe2-4ce6-92f7-6c9486e6c1fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.194.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749eedc2-1ba1-408b-b618-abc928589c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b09dc63-9a3d-4885-801d-4bff3b162f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b4d9f9-ba26-49e2-9ad2-ed7342beb42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bdd820-483c-4cbd-8c8b-a1fd92afedad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba2d69b-563e-40ba-9fde-100317484fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.12.193.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca897c73-078d-4734-b41c-dec02660569f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.161.35.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1db57c7-e3cd-4cf9-a812-7d90d0639d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.134.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6ea859-7d82-4d6c-930a-399f246d225f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.138.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953f5a69-fe7e-4585-b7f1-809921e66963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.143.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ebda9b-bf7a-46de-95bd-8bc581f3e4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.147.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac6b784-90d3-4214-bc14-e46595f0722c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11085c73-c600-4bd7-b15d-f490ec3a5441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.189.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2c36c7-54e2-4a99-a7be-9dd57d52694c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8e3f57-8864-48a2-95b7-00144ada4dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.214.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31551b8-2b06-4cf5-8a23-34b7287e1978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.225.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43c5fb2-927f-4f21-bf9d-d2bb2bd402f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.241.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff83890-3bce-48cf-be37-1814ea7e0015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.247.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0088ba3e-9eb9-4c9d-a467-db31454467ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a67ca2-2abb-495c-a9fd-ac1f1fd3d119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a33981f-7dae-4d27-a2b3-f0b59a8e1f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0d913d-b4b6-429b-999e-8a8bf785a6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad967cd-9116-47c4-8ca8-c4753d778f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e54d4e0-70cd-4b3a-a4f5-ea4c94f12dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43eac7d2-db55-410c-bb46-f25b175895e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c391a47-82c4-4280-8a3d-4b159adf41c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c65c6af-4469-4813-8dd8-7d4d9b8b5a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca91afa-5fe6-4d66-92e0-80200dec373c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6e4e45-070e-4767-897c-d4dd7a96d7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9eb32d-ce21-4840-8222-22e8b3e72216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341374fe-bab7-4740-8d84-62d364b69167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25606edd-ccca-4e3e-912c-5d785ac3f435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b13ce51-dc6e-4c4c-8e7a-8aa46dc21f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235ebf9d-9752-4fe0-917a-6be7fad03f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2379b880-eb35-4c00-bc7c-9d0f7001289b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9a7912-e2d1-4769-b7e0-cc51059cf6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecd3dd8-59aa-400d-9d36-2a8674f117e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ea0f71-590f-4849-afbc-5e8530f514d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed39265-fe7f-4906-b8ff-e15e271ebded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbda03a8-99df-47cd-84fa-c87a1f0572d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133c754a-49e7-4ff2-8350-51cd831db716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcf04ef-3bfc-4506-a44c-a012f9426bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1030fdea-1603-4334-8517-48eeb608eafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e6751f-a794-4ddf-8b76-5e02a35f9fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ae4352-b257-44c9-b436-754f8a28ee06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efbb5d2-6304-4516-9452-8994da641861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfae050-bc0d-4b39-a547-3432cd91293f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454e9300-09de-47c8-81c3-b4b7b408a83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac22405-7651-4b4f-a9ad-9c6cf2aec7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2fecd0-6b3f-4baf-9e24-01c815f21faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b373c5ea-df6a-4ac1-b142-e8add5ee8f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35cbd00-4aed-4ba4-a7d3-5f654f515312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171f48bf-7b56-489d-898c-7947d2d37d7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15723af-0cf8-41e3-bbc4-6a517a60264a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025ba600-cd8f-4934-a09e-b60a00a34fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ba9891-6a9b-4bfc-8a66-6c913361c754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4c930f-9c2d-4bca-ae8a-35b84dff90cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a48ad4-2fdf-4ea4-b48a-89559cefaa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad4e56a-e19a-46b7-bff4-e69bd6e8ee59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286d3504-73df-44a4-b84d-1a5bda18588e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670b8b03-678b-4e9f-a16b-25ea5fc578f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b274f93a-1910-47e2-8108-ab7ac9045bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44477274-7b7e-43a2-ad09-bf553719b57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e46cc6-dcb4-4107-928c-1b739f369694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd74af8-2560-471c-b0bf-64df8dc8fff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef8ddfe-56b4-4211-b2ba-dc738030fc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d2ca22-19d4-403a-9efc-85261e62d450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09bf3e0-7743-444a-853d-a7402b239456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b58bfb-e587-4afe-852c-08d4ca47abff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a9d404-cc8c-4e00-bbe1-ab06cc8fa37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d90dfa-99f9-4195-80ba-7b7838f87120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bddc33f-add1-41e8-831d-93ff52e1574f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618023f4-3a2f-44cc-a8c3-96e0b8816985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202e5546-024b-49bd-8a82-c0f2f417d83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d90fb25-e1b5-4863-94ab-534915368124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934de7e8-6e0c-4519-9e27-0c8c70beed15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d29dbe-6a28-4423-9b63-da3e06a4fb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8440a0f7-0694-4d28-9650-ca2e847f5f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b356579c-8e79-4b9b-bddc-cb3a265234c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2db3a53-78a2-49eb-a505-cad6a7c6bee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea6e835-fd65-4ab4-a3a7-624f22740c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e56b98-603f-4cf5-93ce-7421d5cac75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57be7ac0-8985-413a-aed9-ad6fb807167b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f01f06c-f722-4c32-aa5b-a72b64cb00a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9da9d40-0881-4ceb-b692-fb1e38fab613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd8140f-c129-48ab-86a1-95f2830ab318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de74431-1822-48ea-889d-51ce174e61fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980a1305-edbc-47dc-8903-e09215d9c142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e668019-6775-4abf-8fec-bca0c8fd5095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986818f1-25fe-40be-9bbc-fc323d365517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d2f5a0-72cd-4197-bccb-5e04fc496fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3881b383-d131-4fcd-9d23-e5ebc02ff9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bea1c6-e921-4a43-8cb7-33bf36698ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcc492a-6f8f-44a7-9ee1-6559d1065791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae84199-af95-4efb-a747-f6207efc1f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9a368c-9b1e-4319-8663-ffcb71d183ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e70d3e-b420-449f-9c6e-8b94c5e9878f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544c1419-5f8b-4f0a-81a9-a4387408a745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae93edac-3150-4b74-96c2-1fb0c103731d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1672f799-2f1e-4912-938a-c8bc746e695c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9537a577-a6fd-4485-8e9a-f92f32c3c868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c296785c-b8ab-4122-88b8-7d4d9c7d55e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183b3a0e-ae07-47dc-b8eb-b512589e1518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1018b34-9618-4a43-b0e5-d9e973fc2b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49ab6c4-756a-4f58-a82a-72fda3f8c891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb10531-00da-48ac-9edd-2511f1c98d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17dffce-1ca3-413d-9c0c-ece0f47e71db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388b36c0-da2d-4d55-99a9-0ab17cd41c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ea575c-8a7a-4791-9772-16e1c50a0357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862ee70a-80c2-462e-a12f-6c179a22698c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815c2f04-5b32-4854-afb5-6ea00f5dc987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2359343f-92d7-4ca7-836d-1bfd947336fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276f6dfb-312d-4cf8-8f43-eb091005a9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24369b20-df67-4abb-a97e-5a4bb4f79140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20617ed-32df-4025-803c-1fa0726fde8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e899968-7313-4c8b-9199-8e9f7b3d6776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761d602c-1e52-4dfa-b0fd-606fc140e84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af6a01a-94c4-4406-90cf-b77220e45dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f1d9c6-93ec-4ca6-9456-4a3c14e71a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c10050-b071-4613-9589-a6d4c620ba7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff54138-786b-451a-a8ce-8949653ae4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d2454e-c0b3-4b01-9ce9-23b1b381bad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23b8902-5434-4dd3-83a7-4098e2709ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e43a6ab-b57e-465c-b429-190a2f9ba4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63efd1d2-46ae-4a17-9928-1d5c01ef1d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830497f6-123e-4c83-a7c5-1f674f97ef0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e07b6e5-376c-4f2c-a1d2-b4380e1276e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624ccb8a-658a-4bdc-9e8f-41bd0a466734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c78555-5538-4bae-9ce1-de2486e60d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a1ec3f-12c7-4f82-95dd-fcbc5a90d9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65ea018-e145-41a1-a8b5-8b853f4b09c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bce013-b178-43bd-889f-54d7f58679b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd3ae2b-b2e7-4437-81f0-fcc6f67e0238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7793de15-aa61-481b-a2e3-bf3e924e80f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3bafd1-90db-4757-8724-95d79fe15e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fe0e19-bbf7-453e-afde-b9bb75c77e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b880fe1d-c008-41b1-b93e-26526a30d04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cb3b72-9b6d-4e72-a096-c703a809e392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26d5965-6bd4-4faf-8906-af7681b2c03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de82a7e-0329-415d-916d-1cd9f92aed97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cfe817-0f3b-4d24-a09c-78de8705b0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5effe0a-9d78-4937-ac5b-24a1403aac88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e93c12-ebd4-48f5-a1c9-e6a7f1466906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc63b6b-3a4b-439b-a66a-051c3a99227c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8366bb06-32c7-472c-bf85-9f04c4b28a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efe7e4b-0091-41bc-8cbf-a211ffca3703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2396f527-f8e9-400c-9718-5e335b4449c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a84ad4-33bc-43d6-adb8-bc24aa1e7881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c817cc0-7b53-4c7d-acc8-b878bee4fc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e540146a-e6b4-497b-87bd-83c6b740b546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae403ae-1d75-4cb1-a27a-fe31c9db4814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74dbab8-66ba-4a39-aed8-d3a47bcd78eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63454b1-6259-4dff-8fe8-616f7f4b8bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4cd910-9832-4bea-90b2-3bef05891869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac88dfc-3e56-4420-936a-8d909e38cbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c7de00-d4b1-470a-956d-c709eacfaeca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a113bb0a-f978-4d1a-b343-ac34a664fc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59a13fb-fceb-4dbb-ada9-7148ec60cb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650d3255-9a8e-41b3-beb6-fb1437b354a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc42662f-f09a-40be-ad3d-4a057bd5a987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb526a72-28d7-4851-a2a4-50d9f1284337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2de30d5-b576-4f5b-8436-0ad8d8c5c22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5819134-754e-4702-8379-2d7f84458e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25619930-2bbc-4235-a7e3-1d4ca5805d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfa4c78-fd8c-4ba8-8656-86a05e37d470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e14a3f-e55c-4ffb-a03b-f1342361f7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0dce3f-34e6-4fe1-94f0-faf311a4f659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30675dd9-7c93-411b-a348-4fd27997a082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89e2cec-63cb-436d-b36b-6095e8014ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53433dc-37ad-4381-a121-dc612540009a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f268f9-8740-4ac3-a6c0-ca1a7d69f1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c5eb4f-0fdb-4fbd-9713-e1aebd651eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcbb7f9-fb02-4516-9629-b49a0e6215b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4944427-c62c-4ea5-a59c-dfb9c970a1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511f9f97-2bff-49de-8215-1b6cd03a518c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986a5212-d95a-484f-967c-0bb3c48bd4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bc64e2-bd79-4634-848e-4021be52836f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a8c2b5-a9ea-47d7-946c-b2d683353e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb814dd-564c-43a1-9c16-e518c9c799e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de052210-2f68-484e-a60a-4666c899d1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0397b9-9260-493b-a44e-80c94f107ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3273cb05-c785-42f7-9291-214a110f9dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4367560d-d54b-4dc7-a5bb-facad7d4717b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e23415-2870-4be2-af5e-01ffb1938073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179f9c7c-f0be-47e1-a6fa-80a7a48b9588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca23be2-c156-4637-8d59-0dc5ffe77183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55de9ccc-dc17-44dc-ac10-2a0b1844b5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2827cd61-617e-41ab-8102-f07c92ca7401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5c12c5-15d8-424b-8206-eccd57e90ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d5f522-8a46-4bbc-b2e7-dc3bea54361e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911ff698-6c83-4842-be88-69135257e08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278afa64-99e4-4085-87a0-62da5e4ce9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0e43dc-b2e2-4a48-8fd7-c295caad72cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaf84e3-93c0-40af-84b3-9dc64031dbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09985d2-ca48-477b-9a3a-4f4924ac2fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3051c1-b2ec-4b43-aaca-1b0a6559be40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd5cec0-edf0-4396-ba7b-3ad645ddb67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ff95b0-4957-43bb-8907-256664930313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ad5333-2ddc-455f-8aed-ae703a7827a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f43b227-81c6-4fd6-8673-c74806a9f269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e08bce-9ba6-498e-9086-e1288e44ca5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71031bfd-cc92-4e80-8cfe-a58c0b0f15e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248ec23c-c7eb-494a-8847-4037246adf12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb311e0d-b91c-453f-a8a8-e3914e4a90ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a00603a-b93d-4413-8d68-496b8277daf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b183b4-7674-46f5-852e-7c626525c786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f129173-7507-422f-9a3b-303e76dc68d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbee9072-0c3e-4d65-9a3a-3180ea856c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81e3d78-8151-486a-8dd3-dc08fc57d9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a913b5-c4e0-456f-a5cc-7798f46879c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9204bb6-d067-4a75-afe2-6ac4410e0f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edc4ebf-2b41-42ec-bd5f-b62cc7897f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f85a5a-5236-4b70-9d60-0f72078c2544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2321904a-7cba-4c4f-97c6-30b475c405bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af29eab4-9154-4d3b-8279-9ed9c23b319d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a495c3-8d2b-4cca-a889-85d3af3a89b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c40605-d8f5-429e-a052-c4eec279e456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfeb623f-8c6f-49ac-a08f-8dc1878d7fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98e78e9-e1b4-4b87-a772-a2348ffbf76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c54a91d-0abb-40cb-aafb-880b3d61fd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4baea62c-4709-4e17-a0ff-dcf55f4d6651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3ec7a8-23d3-49a8-990e-b093e07ce6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b37a568-acf4-41ea-b2ec-7dd0a34a1c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11955f1-7b68-4a19-a90f-96f38e9ac439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb13f583-d1c8-46a9-b283-99a2548d831d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4325bc03-4390-4123-a1fc-2b648d36a402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df86ceee-dc43-474c-806a-a11ac81f5a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1090cbd6-010b-4a56-9f8f-63ced95afee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c6548e-156e-4a32-827c-1fe3ddf2e622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a8a5be-04b0-47b6-bffc-20fc1ad0f740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7208062-7f40-4ab9-a2a9-93a66d7271be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dced884-a737-4dea-9670-8a93c96065ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7f49fc-f069-456c-ab0c-50fbe3542784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289a1f9e-5d0d-4052-aea3-6e0fb71405cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8876e3-6366-4740-a2b1-27f263d0027a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0f3551-b16e-4ba4-9529-9258e2ef65da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2a294d-92d5-4d71-a9ef-3759ec7d72ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434201a0-730a-40fe-bc7d-75e6a10ac579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456a7d7c-4663-41db-b11b-eb16b0566f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25eb1d3-8fa8-4884-9dde-44183fa99218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7292c38-4755-4d92-90b8-450d26a1187f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab930221-f401-4363-aa10-7cbf26820c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0144e594-9c86-401b-ac48-122bbc9a3137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71900b2-c40a-4fd3-a402-5696b8164e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75fcc32-3ec4-41c7-ba9b-e1f4f954ffd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054ec9d9-5fd1-4ba3-9885-8457aa296b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19a684b-31d1-453e-9ca9-8a35a8eed64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6929ca6d-1181-4aaa-a909-5362720f4ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797d6855-97f6-41f9-aa43-d08ad92a088f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e4ff60-786c-4d82-8317-7766db1c4cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f7d648-e035-440a-aa41-2ee495a02bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ed70b1-d885-4294-ab8c-88950f621c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687cb254-1451-4431-aa8d-06dd6f8d0275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff13ed5b-0dc6-4193-9d3c-bc3ac8b8b67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024c769f-fb36-4fb5-a70f-32ebd08d5ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d16e20-43f2-4e3b-bea1-24219ee96ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491c7190-ce59-4024-9fed-427c60a8a254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17106c57-6427-4c56-957b-0e9ea7bcb022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32fc2ee-f00a-43e7-a904-53124a2399c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca02f6d-1be3-4f19-a975-3c3d27493abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb5a750-6033-45d5-9b8e-5b2dee1a05b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e628612-3033-4fb3-99ea-807d1e34d2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd181ad-f3d1-4316-b59b-81fec04eb714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da66cf2-aac1-4df3-8ae0-0ac21e17075b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb899409-9234-488b-b0b2-ad922e1bf3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e38c3ef-3c81-4754-91ab-512dfb486f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bbf0d6-fd72-45b7-9bfd-63bea795ea19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e847b5-07ba-4b0c-b406-4ad33404d800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2749a81e-7db0-40a0-aa19-6f7dd72856a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317d0e4a-99d8-4300-8f23-32abeecef525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47ec4c2-e5c5-4ee0-87e9-2095148b57a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9686acc-92a4-4fbf-ad91-c85c5ed80580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7676883b-886e-4178-aa0d-7779bd788ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c5023b-52e9-417e-81a6-11a916b6cb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d6f3b8-7108-48b1-aeb2-714f79f3faff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52cc4ba-e3fc-4ffa-9852-2c7c07fc644c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785724ed-bd2a-4269-b636-61773afa2094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182844d6-2192-4264-a6e7-8d1aa674ce5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b654063-47c7-4215-9d6c-f3907980c779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf688d3-8586-4076-a9af-34ad08247954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f924ac-71ad-40e2-b5d7-59b2a31e0a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15eae697-5933-4a64-bff5-4f1d8fcd5743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b532fe-07ae-4cd4-ad70-be53e50fa921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11b1caf-b910-4304-8c02-76d527811586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee8046a-803e-4ed7-8288-ce25df61ff7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfabae1-77d1-4bba-9249-3b6748741c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9ae0e7-30e5-4f31-a397-60b15f34c4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9768c1-2a46-4953-9292-6d6a043f1e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fade9df-e42b-4af9-8500-6921995624d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f0068e-94e8-4940-84f4-557b7c02faba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dffefbd-84ab-49d7-903f-2c2a5395b39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817f2d27-3b80-410e-8bb4-c4ee0fdcf65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a12fc6-a38a-4469-9e43-edd431e82754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37bd046-7ec3-4f94-9c77-3db9cb9bc6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf9a60c-10f0-4ae5-8bd4-e15da6c58eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196262ce-04fb-4221-9eaf-fcd5c36a5ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ba517b-f05b-4f8d-a86d-76918ce9fac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154b3f22-a688-4bb4-9802-29cb9d1bde32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6356c38e-2019-4cce-84e5-b9e681828a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d399bfe-2a86-4143-ab5c-197d5ec61a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbff70f3-6bd0-433c-9e02-a39ba35aa4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d152943e-8a7b-48c3-8ccf-71c52fd7a47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9704cf-add2-4493-9041-2e4037378fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6ac5c6-2cb4-43e4-829d-ae6743329ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9bfba5-4725-47df-bd4b-3592b7dcedbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79891e7e-34df-4ff0-b231-31878ba13d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ed8800-a830-4a80-a1b5-0f52a3ed8462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0106e6-de3c-4f5f-97a2-8a5595a7d022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f44aaf1-6360-4985-a865-4580a14e6790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe66a49-06b9-43a3-adeb-5a8b35219ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6a74dd-7a62-4036-9e5d-ede48578d62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34917c79-380c-4566-b486-f6750b35c4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73abda43-4067-4089-b4da-92cd61f5f37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5721497a-629e-49a8-86f7-1323b0eb38ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb38859-2261-4334-be89-46524b49a9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b239934b-c2bc-4bf0-b513-9344d5f125ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165218e3-0a3b-4423-b73b-fdcc4b729525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b24442-7dc3-4698-86e4-d678aa3e49d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f692c455-4406-47c4-a7f3-f4a3d78cb4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2b59b8-abcd-4c67-8f5d-e8e911dbb5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fcd8b0-c616-4aa5-8b49-757bbd29a735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5b4b75-6eb9-4cf0-88f7-ccd1961c266e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429ed622-d84a-42d9-9c15-d1d36f3db6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c55aa2-eaff-47d1-8c46-b3979e86f526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dd1544-9286-4de7-80ff-c1434307a66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2440e292-7e72-4ceb-95de-6514610bdc6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ff5201-e2cc-43a4-bcdc-f7e1a7dd8d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf175e0-2216-41bf-a3b0-bc8c5c5c9026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdca5e4-18cd-4a4d-bc87-f286df914d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee15f15b-6af6-4e68-a2da-1c3f741d29a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39a9303-bc4d-4776-b28e-b2cb1cdd274c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67bbc4b-adb5-460b-bf44-77f75eff5290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e3ee95-4e4d-4923-a5a2-372d3617d2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1234de8f-c08c-49cf-895f-3ad71d4addd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cb59a6-b279-43c2-8f22-c70a8828cf75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc760cd9-ed94-41b6-9b8f-80e742c12936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6452a8-e602-451c-8d30-fda501758373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2614b17-3556-4f42-92cd-9ae33ccb349e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f381dd8-4f36-41dc-9d44-1895e1083636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4292152d-a6b0-44e5-84d7-28ca74434480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f73a0a-95f1-40ed-b2ef-18b4ab6e2115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75b15a5-7e89-448f-ba10-86db97eab802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f626b2fb-864e-41f0-a0e3-2712edb09565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60c9d8b-4814-4674-8ddd-a622b2095d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b581c414-86d2-4d2d-bb13-6c67e10de85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfca90f-6f58-4699-b04e-7b048be4b72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749828ed-12dd-4ed5-b6bc-fc046c98131b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fec80ea-c244-4ba2-9e34-1c8a4fbfa5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f70f6f8-35da-43f6-9c4b-82cc97e6be8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08c7e8e-1c04-4900-a074-a28afa2275d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ed06a0-c49c-4d5d-ac14-b40e162cb2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303f0216-f686-4a72-95f7-2c760683ab17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a6bfa1-6b25-4970-8eee-9527e4bd357b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8367e64f-b3db-4e97-bd18-b946fe04151b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1701d9e-5174-4942-839f-bad5e1959e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fdea05-cb7a-4c39-b7d6-825f2a2f74a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89493247-771d-4fae-9005-4bf947e3d639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a851d3-236e-4b01-a1b3-968c5c67041f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e360368b-99f3-4ed1-98b0-2457eb170a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7e480f-bbf5-4c6b-a65a-44364c0c39ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a37f423-613c-474a-8190-19a2a0c49622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cd4714-a8c3-4e0e-b9df-15fab11da3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a47d84-2c78-4ec2-b525-95ce45c4a05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b25e18-1b9f-4967-9e49-ca0c032da448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfbcb62-b096-443b-9c08-4de938c6f7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4aa4172-c74f-433f-ae43-5aa12b077b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dc0724-b32a-4dd3-8620-58a60eb286c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bb7c88-8d0a-44dd-bf60-eca5f89a2b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0f9f28-bccb-476d-a35f-920ba6c331d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ead3773-d145-4a9a-97ea-5a912ba3aa83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d154e9-32cd-4e33-bfbf-cef9933f26ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f852686-b3bc-42c2-9d9f-c929911d1174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51947dd-7101-4be7-a1eb-6e071a9225e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09c60fe-ab17-414a-bb16-e7d6291a87d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d117029f-25b6-42ee-8e23-0756d4c760fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1176e0af-2778-4ea9-ae46-16bd258d43c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ff6f53-df6a-419c-a29d-1fee4001cbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad704851-fb73-486d-9994-94c6ae0a7969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26b3135-eef3-4c49-8fea-ecd0d41c478d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7ef295-c505-4ed0-a04e-339d166fa7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1460e1a-964a-4834-bd5f-4120f651aa49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d976e500-2037-4d5b-9a5d-188ad2232e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039fd5f8-e9aa-43b6-995e-0bfda6f79dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b36fde-6e48-45d6-a799-3b09eb7e42fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7abf1a6-4f90-4152-97e2-ea2c8d51d376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb1ebe1-43eb-4864-b55a-2fd903ef4193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab877140-c0c2-42ca-8c76-acc5efa0686d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56af0fd4-656c-4f7c-a9ad-6359e4acb448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.253.35.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78a6cd2-1b9f-49fd-9134-40fff1847b9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.102.92.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ed5698-a15b-4f3e-9ec9-33958b3dbd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.71.36.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839ff9f0-e6ac-419e-a51b-90314330ed47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.76.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11956877-0cf3-4c5b-b15e-178bcb9df69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.119.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072a4354-bb44-4a18-b50a-2fd5ab27f42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f180c57-0eac-4785-8dea-ff5fafc6324e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.36.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09372d3f-c05a-455c-8279-c9fe53f8a398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.204.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876ec443-1ed6-43f3-ae25-65d40fe55bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0232450d-43d1-4548-b3cf-f3c9dc1da07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad104cd-631e-4aab-a564-4e0f96223106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e77f3f-85e0-4b79-a12b-4369e70f2505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab49750-0a66-4b33-a68f-1ba744497789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5133a460-90a9-4e27-b10d-89da5ff3bf09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c43edf-aa45-4ed3-99ed-0f74c762c110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d35b90-18bd-49fe-921b-1ebbee509cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57a7ed2-0828-479b-a0aa-b176bca1fc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13481e4b-8b8b-4661-a985-18e8cc4c0f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89380249-103d-4ccb-b538-685b0cc4cdd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9891def1-3347-4dc7-bbe8-0e82151447f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2bc560-9633-4ce6-812c-6bafe685b60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51663432-5805-4e5f-b58f-eb5fba75a0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3374c30-e08b-4b93-99f1-3a3eb2ffae78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce13f20-49d9-49ef-a551-6643164a11e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7090a5c0-439b-4fdd-a2fd-d339d51bbef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7afa6d-c534-4b06-9f92-13a15167f697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9020c370-303b-49eb-9505-e55c20de05ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6157d8-e3cf-4dc1-b727-a4f345c8023e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2108df1-6ac8-490b-acb8-e0f53c590385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1cac01-f0cb-4c36-9f70-554335dc454d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7694eef1-2ff0-4531-a35e-68e9f3d399a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccef7315-6490-4b38-b9fb-a3d4320b6769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccd8bc1-3fa2-4117-9f88-6f9c00b3eafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeaf102b-a069-4336-8f32-71fb8607878a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e527267-4eb6-4f7d-b9a9-bc1ed4297e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b62849-fc7c-4fa9-b573-522d0c051e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04829c60-402c-437f-995a-bf61ba3d870b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137769c8-6149-44fe-b629-7c9c87a2e1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66391851-537a-4ee4-92a2-42c36760bdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa10a7e2-631a-43c3-8316-4b37a57b32ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cffa5f2-5535-4c3a-86e8-fb58c0e30e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0b7a1d-bfd8-4ad4-8bfe-9c62d6fac04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc4f562-3c7d-43b3-9d0e-65930e7ad70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9a9d6c-b7a0-4dee-a2d2-994584c0cc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdf7856-68d5-4172-9e04-57b779676c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6075cf5a-c3c2-4e5a-a34c-c6a4e0da046f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8cbf9e-3810-4346-ae34-58f8794dc61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062bd5cb-e51a-43ac-8dcc-449b65d6bae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599fb556-bc3c-48bd-b548-7cd3033598ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3cae70-9ac1-4e3d-b65c-447b9372c549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e416257-3be8-4fcd-bbde-dc002684f846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94132856-6e8e-4394-8601-d629c43a9e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b77ffc-fd08-4a2a-9099-849db5e91109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e37c6c-4883-4418-b7cf-70d11b60d3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64560860-d0c9-4557-ae4d-13527024a6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eac3312-33f3-42c7-b8d9-f9eff09f30a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a527c439-6ae7-490d-bd1a-c9a17b450bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ebadc0-8abb-4fa7-8b0a-28dae82cc025", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.120.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ff83bb-58f6-4df0-9a93-4d79fb936a59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.121.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d744e629-5e2d-472d-9263-5a7d268b690d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.16.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ef31d4-e6c3-428c-83b0-a7e6223a70ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.194.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14cdb9c7-7df8-4b87-a4c2-d5f63e6fd6f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.204.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e6cb18-6af4-48ed-8006-7d274783c6bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.21.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58226aaf-eeb2-435c-9859-af2e54525d62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.24.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0db03c5-0e47-491a-8fa2-e76b44df5c64", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.41.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9bca3f-375c-462d-b496-2c445f8b486e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.52.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c135402-a28f-460c-9625-d0d8c5dc98d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.67.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3829f6-1d32-4c2e-b394-a26f31b31b34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.105.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afa2869-ca99-4638-a09b-1e8234557d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.245.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9884e1-139f-4d38-ba2a-1ca9dbc9d68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.246.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7e9213-f2d0-4b80-b724-21075840667a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.65.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9defac3a-8afb-44b7-becb-aacb0c6c3db2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55094d5-386c-496b-8218-1fe32fe86732", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ec01a8-bd38-41fb-bb29-931d91dab9b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3f5786-4d0f-4529-b95e-bf4c437250cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19398959-8707-4e72-b185-d1ad92048135", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedd0507-a93a-4094-afd4-df3bcdc8a7d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9449f9-e3bd-4f7f-96f9-07de87c6c1fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb2cb84-141f-456f-aa52-56ed0a1d96c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff0279d-6f40-4a3f-b727-48c9899e84a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2cedc5-85df-4f8e-afac-fecf61e2c86f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1eaf3df-4fc6-4d59-afe4-cffd8419949b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848c3f4e-7d70-4346-a579-963ed0cec097", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca9e233-45f5-47ff-aa1a-5d095970ff30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dba4502-54ad-4977-b1b9-bc1f862311e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f16888e-1e79-4d43-b35d-0dfd3f814689", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ff07e0-38e2-4cb1-b5d1-d4289c4ec71e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57822cbb-7985-4342-88d4-8d76153ad73c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46fde37-7224-4def-8b79-0ed98a6e41b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d152dae2-1a0d-441f-9d4f-664bd9778630", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b61190-2946-40d5-9915-595689f46457", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f9e9f9-ba8b-44bf-8209-3df9fb706fa1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d084910f-8c7b-45d5-a7fa-21460d28f041", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb56e05-4c79-42d6-9865-2121f5151a45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaedacb9-437d-48db-8ee8-4f9f4f75e1c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ebef81-b106-4520-993d-ae33c742397a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e405f5-f319-4cbc-8249-f1ddfbd06af2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb6393e-a2e7-4ee0-a1df-cd93c0da358d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb16961-19f3-4b00-9ec8-5374d5a019fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa4534d-2ec7-401d-ad61-0cc2f1f28cb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b33c91-83cf-4a58-b1e9-4de9e0d14494", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dd3c39-9b0f-4c98-be68-b66396edbd12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08466eb4-4b30-4ad7-ac37-97cf8bd25bc9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b45e1a5-4774-4a49-a4b9-3d32deaf95d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa946219-1065-4232-b429-4668b1543405", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8219b0f8-f98d-4071-a6d9-3a40c6029f21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39de0d5-35fd-4dcd-8a21-79c32992c0ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d42cc7c-61ae-4fb3-9dd0-d925ad9c8066", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4446ba-2e4c-4d94-81af-bbcb26a69a74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c442219a-c03e-4954-b53d-33962932d870", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d674a697-d3ac-4955-8072-4fecd53a1f16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfbbb04-8d66-4289-9578-0353fb456133", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2845084-aed8-4c93-a2b0-1cb2ebc336b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabd86cc-90eb-4cef-8dbe-23fc7e9c6ed0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2319c83-bcb2-419a-81b3-e8526bd998f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee876d3d-a2ea-4482-9f0a-ab9c70042f33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a8cd40-1fc0-4ec9-9b71-bcc32be3d590", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5667839b-3245-4386-a5c7-a5df8a190122", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b087af8a-f925-46fd-bbe6-e575b37b305f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c05d317-3f8e-4ae6-bc6f-8f9e3bf5955c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c76ed5-c90d-4b64-8932-2f07f325314a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c44d0b-c37b-48fa-b3df-dcc59a8e3f66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9174663d-38e9-4485-ade6-b50122a33edd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b92aea6-1de8-4a1a-918f-d93be195476e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cb69e6-6588-4f02-a587-bcebe6ad615e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be0dda6-12a7-4419-a76f-df14c9b7c6d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc53b533-58e0-4122-bcab-85f3edb6d560", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93896823-0afb-4470-8d15-4badf5687d07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f5f91c-d68a-424e-8aa7-5880e2085699", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b012fcad-33c6-44b4-9b55-3ad3d6403ad2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5418df-e4c4-4b6a-8ce4-63223f73645c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d6a8b5-0a18-412e-88a1-1bed8a7edc22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8e4fd2-4cc5-4ec5-9772-1cb7e49741a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd778894-105e-44d9-aba7-b16d0518c86f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e774a31-dd18-49dc-9400-9beb2146bf8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae3740a-bf72-4df2-bd05-d659bbc93811", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a7fae6-558a-4942-8ffe-c9c05e7a9e19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca8134c-5bf2-4e33-9b00-8c9c94ad46bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.56.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2c1974-3b2a-40eb-bbae-893d5930b90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8147b9cc-f215-48c5-86b0-b0d68d61415c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc03d7d5-8c31-488d-b49d-52271d19820f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b011659-7de8-49c2-8037-667dd8d7e486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e405773-0a66-4233-821d-b2160bbf76e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbd69af-2041-46b7-a7c6-b97d3fdb13ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a45be23-8222-43c6-9801-6fa670a3bd1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ce2db6-bfb6-4ae0-8222-973127388179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2680ddc3-c36d-499d-bf08-6d83915bf8df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.252.84.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322d967f-24e7-421c-894c-806581129011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1630e947-a5a8-4b62-8340-f7ee716d380c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.170.236.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dbb41a-e6ba-4579-afcd-5dc9fd6a6ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.172.155.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c3373c-51c9-407f-bf3b-e9f19d3de52b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.203.48.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e80ca2-7639-4fcd-b6bc-463ea554d7c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.231.161.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09bc67c-887f-437f-80ab-37b87c065bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f82f8f-b158-4d64-ad91-344dfb962fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61650fbd-a32e-4d29-9bea-b90c440d00cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3756401c-4055-4274-8bbc-1ca2fe3b7e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed210fb-aeb5-4b1c-99ac-a70870176c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc898ae5-d521-4499-86fe-a75f49859ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.131.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31af671-49b4-4e77-ad40-9e9960aaab04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf1dab3-5353-48a4-89ad-9676668456de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f95f18-e8be-4849-8a06-a3189b80053d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f969e639-7079-4e70-b334-a3c1b27015e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cae83b-be2f-4a4a-9552-620f30c10704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf66b2d0-2d5d-4f5c-8bcb-09d10a22a798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9696b3f0-9480-4fc3-bfbd-bdf1c1e1213c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91eb8cc-0f3b-4279-b1f1-c6902cdfe51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43da7a21-19fa-416d-9033-0f4cc89364d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5ae954-346a-4a30-943e-ae42a1a8f244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15fdf8a-42a4-444e-ac0f-1b2f2ef59d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7b3646-6255-4579-838c-2678f250964e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcc99c0-0d36-4d13-b39a-79c77a8af264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd193b0-cda9-4a2c-8796-112c9ea79d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7596a606-8a37-4f48-bd74-84e0a18b6909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ec7a3d-757f-460f-8211-12d8ff0aab4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025e34ad-15ab-4f8a-938f-3dfe18876e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e178a4-7bfb-4f0d-8c6d-b07b782fe469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef471c5-40b4-44a5-a44f-7053262034f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7269a2ce-5f88-4467-9bec-77086a834193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbc0db1-86e1-4068-a4a1-eed5e1127a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecce832c-7c69-4738-bb41-151029368e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d983450-f361-4f01-9cac-2df247ba465d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05cd9d1-f0b6-45a7-82be-9c94e4e1ace8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f4ae14-15b0-44da-842f-be79040c558f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b2e69a-754b-4c42-bf91-538879721129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274e8906-78f4-4238-986f-6158e454b40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2352601f-d24c-4c05-88b1-92121eabedf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105f089f-dbe1-47fc-92b2-5a75007a65fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b1735e-b614-462d-9330-0bb63fe254ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff6b5d5-f38f-4d6a-ba7d-abd73d2f121c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e31b49-f984-4c16-b99d-1f7c59179c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd9a674-70d0-4fc2-bbe0-a6ddb334ca0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c8663e-f221-4cc8-bc7d-66b7f9aee6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fffda8-5740-4847-a9c8-7a30a0298990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa44ca7-379e-4abd-b2ae-e2bd476f97ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd13fbf-d042-43ae-9ba3-f5f679fd2137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b33ead-bf22-4dd6-897d-2350cfb88c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15956928-1ea7-4dcd-b441-3bbfa3932529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.162.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ce7d79-5fa0-4e30-97b4-1118707fe46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875c91bd-dbf3-4730-93c5-5f884409b28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4812a3e-7417-4074-a16f-ceee1884912b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f755d2bc-502f-4fe8-99f4-38c440f98252", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1360e013-0356-4828-880b-cd5d2b36f820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.178.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d44a9e-ef2c-425c-8ef1-db0c6186747e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a166f72-52ea-4184-9090-2982e407a5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6715153c-d6eb-44cd-a0ed-42b5e8817ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46f5c1f-0bc7-4e08-9b5d-3ceed737e4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18922b1b-3e3b-4c2b-a2a7-d30eb0553316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04dea62-d105-4aba-8198-57dea92c0b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b0ca8a-5a35-415d-b59f-af456a0b61dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2c774f-38aa-46fa-9b49-df6328bea06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58567e6-734e-4963-b56c-dd06d9549801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903bec85-fe63-4712-9d5c-35b85a9ac8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90090083-c590-4c95-80d0-2a7079bbcc21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd99dbc-0708-44a1-ab12-d6807f85db92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12aefe4f-f238-4db9-96e7-a69669ba658e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c1871c-e680-42a7-818a-e448b9327e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49518b5b-d3fb-451f-bfa0-5cce69a3f49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cfd032-7a6d-47a7-86c8-ad8130731439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3c38b2-60e6-4c22-b13c-b1bb681feaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e56adc-f3ec-4a5f-8f0e-667932705790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e54138d-e372-463f-9dc8-5b20acabd32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a930f22-b7ad-4e27-98ab-777f9d9aa280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55c01cc-c3b1-47ac-a4fa-cd3ca2dbfdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edec58fc-5d9e-4d8f-af36-6169bf83cb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3859e10d-970e-4290-9962-c2426066cfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7e03a9-9d39-4083-ab7a-2f9c0d87a96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3f6636-a697-4b24-85b2-7561f42b8a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98aa2ecb-d888-4fa6-9cf8-ac9e324e0eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2b1a9e-5120-42d7-b7a7-9aa34a8d8d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e377bf6e-6fff-46d2-afba-30160e82ebce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9747203f-ead0-4ad8-9fac-dcea162a75e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0334227a-0a3a-4567-9167-c2c01637a824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69408965-5b30-46d5-b400-ab3682fa8587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5062ee1c-4fd7-4050-99ca-b89d7529da8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eda0bb7-f717-486f-97a9-da0bf2dc91a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d555ee9-6438-4645-bcdd-12e5cca6bc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85a3fa5-f694-43e8-afdf-67211f8869b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d676a1-deeb-4678-97ce-58efa4113d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fe80b5-a69a-4cbc-a46d-25742ba88512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae38f207-8ef8-4509-b9fa-e07b437b3721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28d6869-5c2e-42ca-8788-bd5ca94c33d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f7bb73-840e-4e89-82a3-aab36c7bae3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2526da-a623-45e6-81b9-177f6cfe0eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01465d72-4243-407f-a9c5-e05397df5790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580e851a-9750-45b6-ac0b-e56797194e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cbd481-bfbb-42c5-97b0-bd826c0bded1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece3c3bd-4425-4ea6-adb5-9a1ebf75239d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17575c2-248e-480f-8d0a-22ea56a9446d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17074f5-122e-4a48-b860-5cb085a14e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a467f0cd-514a-4835-8ae7-a8d1dbe7950e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb3d851-3f3c-45ea-a723-52a4a3d1fca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6767c6a4-f988-4cf7-a0eb-c0f0f76251da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16bc138-180b-4853-b8d7-293898ec46bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469f9fa9-b91a-4c3f-ae92-a26539d4a58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0392f56-6337-4eb3-9703-8521f19135f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5682915a-d6eb-4c23-ac24-7a1194f2598d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9987fb18-6df3-4ff9-8184-6dc231237a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160ac2d3-0867-412f-926a-8b02654ad199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57164f51-9abf-49e6-9f93-04d55f6f3181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61083a81-21d5-46f4-bf8e-9837759caece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d306f91e-74f3-49e5-9eb1-4db08fa8456f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46d3f09-e54d-4b4a-bee3-4c2c7ea94db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b4d39a-3422-4541-9cd8-1fe1ef801612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb6c12d-ab69-4cbc-b689-69ab3c2401d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fc9507-f570-43c7-bb61-12b875b2be7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d794db0f-49d2-4d7e-8704-f7228de0da45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244fc7e5-0c0b-4ce3-9719-db3340976fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25dbe7e-8de1-4916-8f72-991d4492af53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436d3c78-b9b6-4568-a2e2-b43e4b729e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae00e6e-82ec-4bb8-bbd0-9bdcd4cac5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c4ea80-cf4f-46f9-b035-b11f532690e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb4ceae-99b4-4a38-a220-865c07d96397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac46065-4bce-4277-a738-5802f90cab73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78284e95-7f7b-4be8-b764-daaca7314064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1063e6e1-fe20-4c94-895f-b197dab24868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780b96ee-1f15-4861-b9e9-aabb0399da19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb70cb4-7556-46f3-bded-e85b8039c9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.216.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ac2f24-ac63-440d-a7ed-6dac30c47466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.231.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d371da-4011-481e-bb46-e2641fccce6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.148.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55fed91-b814-4b59-b262-4dbf6e0c3227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ca3fb7-728c-45ba-8d80-2e3f6ef2a176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d7e958-4b84-466e-9ced-ca7ba91862a2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.56.8.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd6cf0e-4319-4392-82e5-16043deaad30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.127.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2180647e-06d9-485a-903f-42973db2fc80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.200.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be3a75d-3449-47e1-9273-c291d9e7603e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec54972d-f262-4de3-877a-09b6262b23ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.15.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21a022b-9531-4ee0-9a36-a343ccab0c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.15.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7279dcd-e1fa-4d15-ab84-8e6d43b4b919", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.34.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c123416-b4b7-4a7e-8511-b2780fb2ecb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.50.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241a66e7-58c3-4785-be12-c402260352e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.37.173.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7a3eaa-8dc5-4015-ba5a-6457a3a01a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8e77ab-357a-454b-8826-22c68e5b4b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.26.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098e63de-0884-46af-94e5-0b0dc1d15522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.29.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b459f3-3a18-4819-929f-0a1e3dcbb2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.124.236.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005c763a-41da-4305-be16-ed99076a7b09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.125.86.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb92f8b-10df-4f5c-879f-a470490bd1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f77432-ea4d-4f2b-97c9-11451df1df51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec6159c-052e-403a-951d-d63bad03d603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb20f76-301a-4b93-a9f8-c882f213cadd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ad05f2-c069-40d9-86bc-050781995463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be140fb-7ecd-40ce-992b-c3610377f153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6324c857-04b9-4e75-bda5-ce632e295d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a149615-3e67-4828-a984-c378fc7e16c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93080de2-17c9-400a-98b4-e846b81c2709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36be2a14-48d8-40f6-b657-3b2e6fdd7f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38413a7e-0ab6-4b7b-8169-b2b0cc52a3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.95.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611a413a-4e41-4cf6-acdf-3a0c80ffc17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.177.29.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f515fca7-a6d8-4cb7-8680-bd8baab7a167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca0ac3d-c83b-4e3c-88ce-cf8ba3ff17a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a7dd50-7869-430b-8591-773794c3d6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2218b8-dbed-4c8c-a9d4-e0899ad79aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41782e1-4bf7-4ee1-a6fc-013272573b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c659275-4f65-4a71-b7ed-3962c0288643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eec3162-6482-46ae-bd88-f9a213e9912b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e999954-ff55-4c89-9b63-4abf4d0a0533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b60b2d-dd58-4af8-9203-62093f2720d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b226b99c-670e-499d-bc43-ff153a06dc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c278f474-99ee-4d5c-bbdf-f5a3aa9973ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605823a2-c06f-413c-a0e2-9c3596c870b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20103472-35e8-4170-9443-06729ed015bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36013d56-2f8c-4442-9249-911dab4949fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306fdb99-84e9-441e-b2b9-42b1db906a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.201.70.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c3473f-24df-42e8-8d33-3378a3e67fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.211.22.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f4051f-9291-4125-b83f-ade59dacc553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.217.246.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7a12b9-4425-408b-a62f-4c5a00474277", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.24.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdcdfba-cc1b-4344-8f11-512723432ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.241.68.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16a1c55-94d3-4eec-8fec-0c3216c8d292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641a683f-21aa-480a-a986-05491f6a5a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.57.212.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48da895-a22b-4816-a5fd-4bd5ab51a4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.57.213.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8dfc753-6a12-4892-8b40-ee28d194824b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.70.95.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320ea59b-2118-4c73-a498-2576d8f07b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28e3f5e-041f-4ece-b86e-a1f60d015ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f2b79e-a395-4547-b719-b066db6d2371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fc8fc5-a289-4c6b-9910-73ed62e52b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f24523-5fc9-4ce0-9a8f-4569b613195a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672d9291-6c5f-4d64-b92b-38263f03da2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7c54f9-5c00-454b-a4f2-d814560c3288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9a6538-641b-4c74-a4cc-c4ebe62ae791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e26c56-5f93-4bc0-85bb-f87bb584af43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9f33eb-e67f-4ca6-891e-93fa11d3130c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af64b6b-d5d4-4f7b-8b16-d31169e26bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0f6439-76d7-43c6-8b75-dcf80479d6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c408a355-52e2-432b-93bb-35f8c0986d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3e5f25-256f-4c1b-8fcb-c2a871c71797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73d0c4b-83b8-4973-bb7e-c6ab8a41aeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dfaf9b-f7b0-4dfa-ba9d-e7498b29c52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999fe52f-fc51-4fc5-9e66-ea346f55f443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d74af6-0cff-4265-9843-155b63bada89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8848b6-0838-4083-8803-1a5dbd2f8b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507ecb3d-250c-449a-85c5-74f5bc3d4e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea9c264-4f93-4216-95f2-53869473466c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b336a01-29c9-415e-8e2d-b5b9567c2638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01735cac-a9f1-401f-8d5e-2cf9d63f6372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770703c4-2cac-4d04-ac24-5449a175d4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1444cca-0a31-4824-884d-c679ff7f41cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0d1867-0b6e-46df-8a6c-4bf08136bc0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ef42be-c7e1-4d08-87a7-ef7f024d5412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b850ee-0c25-4b4b-b223-961e8bc92264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d9cd5a-b7b6-458f-ad0c-4bfc5405e22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f819c06-4684-4117-9bb3-debec9eceedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6057eae-1948-4b97-962b-5fd5561dc2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7403609-3647-42cf-a8a9-e00aabf98bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8eb49a3-ed11-42f5-b8d6-e8cc339a7cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd40d29-1780-42e5-b94f-52392757ca38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d5e28b-72f0-4118-ba62-74fb9d2dd794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c01e85-0f94-46d1-8d10-bc93e671537b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13205e63-0f40-4b1d-bad4-7d7e1e1df608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75025d0b-6af9-4632-a7e9-bf097b5951b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4ef16f-2d8d-448a-8414-c4e80da09f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.85.43.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2d7daf-5553-45b6-850d-a8b35b593afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.90.37.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db8299c-9811-4d0a-9876-fbb3b6e5cc2f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.23.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c85e9c5-ee12-473f-bf05-d37a1c129bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.120.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2efbb6-22de-4d8f-958b-c8eee49b71bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.208.205.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2c91c8-5e00-4f67-a6d8-1732418ae915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.224.19.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b65be0-4a06-40b9-a310-303c4bd8c452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5492efc4-d833-453a-a8bd-21c359015bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f243567-89ca-4e95-aadd-3312ea57b20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308409c7-0256-4223-9227-78f8f4ec2c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d649f68f-2f5a-4757-97d3-dd40723be0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf99fbf-f0f4-4ed7-b93c-0a63c8691ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9819067-4e44-4b24-836e-f60fd09b3eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.21.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be82e68-ca24-4a61-b6b0-c3fe7cdb44f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.236.110.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30395930-de45-44e7-9eab-9ef499efc8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.236.110.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a9caf8-f202-4c79-bcd6-eda9309f72b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.122.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e65f24-0787-4f2b-b70a-f0148f8fe179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.59.197.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e65369-7f66-43fc-b8bf-cd7646a75d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfcd493f-772e-47c2-9567-b3ecc77fa560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db075fdf-cdc7-4d91-ae93-0947cac150f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.53.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbd3939-0b43-45af-bf05-51699f4496d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.100.136.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa650fc-cfec-4c7e-a296-c9ce1369acce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.100.87.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ac4323-bbfa-4ca0-9d65-f91c25addbb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.119.43.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38447e5d-4c68-4869-b260-1bfcc33b1d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.119.43.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6a51f2-9490-440e-9d87-1c01187f2b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.122.181.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86236b1-64d7-4fed-8f12-7b6349c496aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.148.122.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c369fb-bb17-4a9f-88b6-9d9026fc520d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.58.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f2d125-f171-4f1a-a060-ba52bfce30e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.144.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632ba66d-f27b-48f7-8810-213a60fdd259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.100.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9205480a-ea48-49de-9c8c-2d61c939e1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.12.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1941ec-5dae-4aef-97cf-d0ab35218542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.141.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0302ab0-eec6-422d-b668-afd1501ce68b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.165.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698389bd-273f-415e-8baa-32ab9a71450b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.170.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5c8952-a98e-4f49-8a37-93c68b2ccfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.177.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7565d109-38fa-4423-a651-a2e17d782e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.210.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59c956e-5c33-4414-b924-4ac6ee96fabb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.220.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb5219d-d245-408e-93cd-582fa9e3c735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.229.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26103089-da29-4bbc-a73e-bcf7e1bacc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.8.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3ed1fc-73ec-4d03-8bd0-254cb1a5570a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.91.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2767f5d2-e70a-498b-8f71-89107a4a847b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.176.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d068b674-49c9-4c68-a99c-4d03a8f423c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.190.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a94168-4ad2-4943-a52c-26f0d6c707b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.220.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b76eb59-9e3c-4034-b81f-2f38d4a483e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.222.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5923c653-789f-47cd-b718-77dd90df4176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.239.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c888e4d-f832-403b-9bd3-b08395701b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.254.194.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e908f7-2380-4a73-bbc0-faf422156197", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b5cd63-dcb9-443b-9129-7ba79611806e", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.158.36.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e551a6e-ebdf-4560-b781-602f8b9c4da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.158.53.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc410244-5c80-421c-bd1b-912fd5ae0424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.138.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6e8e17-7038-4202-950b-41c55a11a2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4bd30f-2d24-4a10-b70d-6441c22e8e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7923a176-18f0-4788-b9bf-1a075794862a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522b8b9d-dcd1-4c6c-8ae3-fc3c32f33181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae5d10b-fa79-4822-b484-c91b6382a0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73605d13-a9ce-426b-92bb-e8954359e030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73eed0df-c639-480c-b07d-944016c660e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.0.227.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae6a950-01f8-4928-b17a-894cfd10590f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.118.209.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99ebeaf-67e9-4082-8b97-dfe2b1f12ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.184.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b7e6c8-ec9a-4d8c-b04f-38647532578d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.187.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e119eea5-c49f-4e58-b80c-81eb9fb65275", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.80.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26faf71-374b-4494-b615-120817a9fb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.117.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd45eeb-1d03-446d-986a-d9450d7379e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.153.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2fd3d2-1f66-4919-8a0f-926b6afea332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.155.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bc6167-56b4-450b-bb32-c66dd582512d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.156.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f7d4c2-0199-4f95-953a-cd28cad1a4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.157.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a7c16b-2740-4273-8728-eae0c8f8d448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.169.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fff978c-919b-4137-aa2b-29503f31fa14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.176.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3acab5-3b5f-4b19-8eb7-9a4fba74873a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.80.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea21b41b-0f1d-4f91-b06c-d0b03bfd9789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.253.60.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46099f4-6039-465d-8c94-a9ae70405d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.120.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2368f0f6-b46a-4f1e-8ec2-c72e8d85df3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.148.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646ff4b1-15a8-43dc-9a35-58c75ff54601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.17.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1a8969-ec14-4669-926c-da3a7bdeba26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.220.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6f5e29-d8f5-4893-b34e-73eec825cb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.233.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53fe2f7-c40d-44e9-aa40-7c57aed36a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.65.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8791949e-8431-4301-8db6-4a9fc86841de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.68.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffbe7bc-c808-4d3e-b014-2d1efcbc949f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.75.211.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505b1fd4-fef7-490a-8fec-20de2617362f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.124.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f805e4f-06f0-4ef9-b954-e727642f9c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.54.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fba5276-c9eb-4681-9ec8-ca28d000d41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.86.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d559e22-46bf-4368-b2e3-4a96a8110ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.94.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82eb1a28-f794-424d-be83-e0458c97d7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec783cb-46a5-4a7e-b196-9f2bdf66725c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a462e0-3a3c-49fd-8a25-a985d0c07c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.58.56.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39f5f59-9b7b-4ace-b06c-d53516496362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fd5744-25f8-446f-b16b-0a189fd92bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ea55ab-618e-4c99-8518-8d2590d8e82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a776ae54-a8a3-46e2-b93a-266af672e31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.153.245.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a36aea1-3251-4a82-938c-ccd2df79a3ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.179.109.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822aaf82-2e4f-4e2a-a83e-25d19d1f5fda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.179.202.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129f60ee-a36b-4851-97a2-35314926927b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.243.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2485f8ca-5505-4db6-8b8b-1e7f0d195acc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.124.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3630219-a66b-428d-b735-82b5a742377d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.133.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17e2010-fe7a-4903-8e3a-402c2fcc4abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.5.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deeb1948-b0d0-4cc4-9ee4-f4f78056e8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811a5d28-d31a-4c4f-b3d4-b6af3adc762a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.115.234.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856fae07-4f35-469d-8d85-c250bd34bc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405d4cde-2118-4e39-85ee-66d7673ab02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.53.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2e91d1-02b5-42fd-8cd4-9a1a58ae3c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.230.70.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b94b71c-98a3-45fe-bea8-b23001b37246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.115.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e9e156-682f-4bab-8db0-4b0fab9fdfab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.125.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2e1886-21ea-495a-b9aa-3f1b5bcd06f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.114.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e341b387-267a-42eb-9eaf-b595e162852a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297733be-afa9-4e81-8bcd-de011bd43584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7d00e5-46c2-4c99-9b88-7c4b90c214fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f97d72c-c183-4c74-8c23-6bb4303dd7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219a1eea-c568-4ac1-8d77-70caa2b1c959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcae339f-0dc2-4959-9deb-3b501e089833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eacbb1b-0150-4272-a26f-c30a8cf5e412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da130dc7-331c-4e56-b268-df8333347702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2e2282-1b22-4482-ac65-1d30353c5569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f176aab-fcdf-404d-8329-12a40b16729a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b7b633-ae5c-4568-a7f8-588810735244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59138dea-cd5c-48bc-a7a2-a5bb554446e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4f1269-53f9-41a7-aec9-534707b64edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5462b787-bc97-4f87-8862-c87ba4118161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49674529-31d9-471a-9631-0056e91d78e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa10a769-c328-4437-b122-5d42ef1c809f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31068d82-b2bd-4db5-b53b-b65d44110771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ad9193-b08d-4770-b2a4-3b9307902adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90380335-2469-4fb8-b841-eb8e44cabd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66cc8dc-efe6-4642-b36c-1c94b79bdba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfcab54-a22f-40e4-adf1-dfa37f1fecf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b618eac5-2f96-4f5a-86fa-49ae31e8a003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c1ab24-aafe-4402-938b-9157807d2879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79233a32-fe21-4aa2-a3fd-7facb8783312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dc8f32-9401-4a4f-a237-961685bb9185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02295ae7-ede8-4aa9-953b-0bd95ae06d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9661f6e-7f39-4afc-8c1f-46b21522ac43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e83e76-6e86-4b7f-aaae-45c0712a6577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7546db0e-2cde-48d7-85fa-b0b4ec432e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f0dc99-b51a-468d-bb58-cad7358a2179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc26e43-a4b1-4083-bea5-481ea5fe4fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5af1ac0-feb0-4bbc-9e4c-51b15ba17746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a33127-4d0b-4609-903e-3be45fac21df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0243fd2f-b4bb-4b47-bfde-be890134ba2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fd45aa-4916-426a-9930-9c90a6f4a1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c772fd19-eb1a-49c9-a9ea-b5c8b51efa40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f5f1ea-b4e7-44e1-8648-ab461f01e2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea6e2b4-0b80-4c61-ba9a-3a01e1240780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6ba8b7-9cdb-4154-b330-bccd32cb7824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ae335e-2703-4b1b-8772-b70f4a1b2252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acc53d3-d968-4b8c-a96b-e2f783aa5c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17237cb4-2150-46fa-b986-a53e8ea7ea7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e98600-04a1-4c12-ad8f-41cf7e5676b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396c3aec-b0e7-47b0-8b76-54ebfbb8bd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a2ee5a-8e56-4368-84d6-423fbe9802de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350174e8-65b0-469b-8941-e7cfdcb1d894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44db5ce5-ce57-4503-be96-0713e23d276f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba05513-4eb6-4768-8bd0-383d9c6c0d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf22331-cf4a-4e90-bd40-2bf27c2b656c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c41596-7390-42df-9fd6-4ee67cfdb930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9122b74-55ee-4e47-9da8-018bd732c260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6991efee-ec82-48ba-ae01-00cebbbca254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306e9b57-f8eb-4212-9213-88222876d75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366867c8-d7bb-4482-bb6a-5e233b209597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14f5248-2c27-47a8-8937-9258adfa2acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59ff6e5-6a64-47a8-8a3f-cfe47187b201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5da25e-999e-4687-a517-42e93ca4d0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af02ad7-c174-451c-a240-ce674868a1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f064efd-c84e-4ccb-bac5-321a1f44743e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c689df-8443-4055-a321-2e23ced12465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0584627d-8cdc-4984-b471-2de70a6a91d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae053210-753d-4498-93de-efd4b7bdf4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fab1a20-2fd6-46cb-9a37-4959209c2a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da929bf1-8ebb-402a-a8bf-056827a07c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b316d348-6e18-4302-b388-8844b5f078b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b068d7-2cd5-44b0-8bf0-a1248787334f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae52981-9910-49a1-a75d-03466d94cc0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcedb3b-0437-4651-9b0e-a7537aeb29fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646d3733-89ef-4af2-afcd-aee975c48f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ac8533-1de6-47d2-b58f-791ca9b85631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8242cba-2868-46ad-9500-8a8005319e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c681947-8ea1-4885-8714-82d0e472fb87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a18e71c-0a3b-4437-950d-a4c9702c8feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeff64e9-8a3c-4812-940d-750c56cd8517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9585dd8-6d87-4799-8c00-a91d5c81b75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c7503e-5ad8-412c-baf0-4efbd3c1882d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45556c8c-78c1-4c4a-91e3-782bc029b522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54a70c2-9478-40bb-9b54-5e83ae2d66b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc8da47-d016-49a9-81cc-a92ea9c47b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420fdf9a-77b5-45dc-86a5-126bddfdfc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f5cb04-a8dd-4079-9923-808942a7e323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0990b840-247e-4f86-842b-8ba7d4f9d753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ca0aeb-c82c-41e0-a429-489719acb8f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112eda8e-ec0d-4cf0-879c-863fe0b5a1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782a2773-cc5e-44c9-ab13-fed2c3d1bfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986ba0ac-482d-424f-8240-237451e5c85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52470ff-236c-49b1-bcd7-5c383fa6e6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bceadf9-be7d-4561-86fb-29b4fbb35a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602a72f4-bc14-4564-a7e8-02c0277d2f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12ee0f0-ed43-4f5e-8436-72848f3c46cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47d1b9f-6fda-4038-b280-268bd738d210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184bf4bf-45ca-4eae-ae31-83b96e08e43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9854ab-b379-4bb1-9b51-2641bbb7b091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a84171-beb8-4aad-8d8e-35bebb365dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2547c2-294a-4d6e-83b9-72b767f9fdd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545315d0-dd62-4090-9efa-80b138da2e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5fe00b-b9fd-4c4a-bb70-8c13f7ee1035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7adef828-76a5-4957-a717-6410c0d36d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4d661b-3e7b-42c2-905a-0947847c739c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99494f49-cf09-4e24-9f40-b7ad98a19fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2627e4-4448-4bab-9221-eaea147599a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579494f9-3a40-4612-b146-f3c1a37860ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420faeda-1ebf-459b-84b5-6e8625d68f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff8f255-25dc-4e87-b966-d617b9e428e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d315e4e-f63d-4777-ad62-284232137575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53eea611-f2c4-4ee6-aca3-76abc3748b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7829f0-ed13-4cbb-b95a-bda4c30b01f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91996e90-2948-421f-8544-a04ed08875b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f848926f-9b5f-43f2-a605-9b09752fc59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f1866a-1b5f-4f6d-b547-72c10bd34260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9266c7c9-ee15-4da9-92cd-00a32605fef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7673ee4-7725-413a-964c-1e1054b89b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc5679f-e3ae-453c-83cb-9f08e955e10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46e10b3-e524-4b42-93b0-d3096c2568b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c9d10e-02f3-45cb-8150-d3bde19b49b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6253ec-5e5a-4e1e-acf8-fce3dd757a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c82d49b-6b14-47ed-a9ac-d641c2a70e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec8c6bf-32a7-49ef-a409-31d8b376b95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f2745a-257b-4c78-b82e-123d18a9dbf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b718fbb4-c295-4375-a6d4-8e9137b34989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef4244f-1700-41fc-83ed-72587a54c6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d10117-f07e-412c-ab7a-502c6accb91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55d06dc-544e-4138-953c-00c229c085e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4377dbe7-d464-4e35-8ec8-442ddec9b2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fdda33-85a6-4fec-a606-139e9d22ef9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875db571-c71f-472c-9273-f6cd93234a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f96d04-7fb9-4dac-bdce-2b92ed5e8f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ce0b50-6303-45f1-8d04-f24259a09a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292bd4f8-dcda-4b7c-b29c-0be77e0a2bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db54d5c-4e23-491c-8e50-02ed0e7b97bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec087a3-d3f4-470e-b999-98f31c97d29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60091ea7-684f-4d73-9e7e-64f79e939f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced7cca9-b9bf-46d8-b718-d8f11b63fd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f431d44b-7a7e-4a76-b7a2-3e1f39ac39bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc548b5-f39e-47d9-992f-c50ea8be9e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7504f7c6-5b05-4669-9295-711fc6b7b7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d8647f-dce3-46e1-bcf5-a6419b327140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17893ae-c9d2-4695-8b9f-ffc001e0ddb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913a5b02-cf30-4367-9b41-5b13a4988bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af22eba-ff69-4413-bcca-e745da2fc22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ef967b-1c02-4073-b9f4-c54b7d4b5738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83307a98-1016-4726-8fa2-3ffdaf9c9a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc31d93-e8c4-48c3-8609-41afa2d794b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7402a931-ca82-40ea-9c10-f00963574615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680ac2fb-54ef-4121-af0e-8109473973fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6c8e93-428d-4c09-96d3-3b689e415ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c378f3b-9f18-4305-ae4a-71929f743d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b8e3e6-d463-40ed-a521-b0fa7e2ea007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa7b8cf-1699-427a-8fe7-f26612d2cf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b47ac1-5b27-4fa2-92c8-ee756f6933af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14ca7f1-519d-4840-81f2-5daba75ceb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec76ac73-e6e2-4128-8bf0-16bd0dec684a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f824d8b-8641-4ffa-9656-364d9baaf054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f6f636-512c-4fdc-bb4f-db61c31ce482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b11f5c-53b1-45c3-8a49-2255cc1c75b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9784c9-b55c-4aab-9a69-4b50de8be614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e40a44-49e7-43d6-b059-f79e813877db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8def819d-9d90-4d9f-8a6b-a8315a6bf11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6856817-a4d4-450f-a204-4ef01c0f6e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6550ff-dc7a-4d2b-9715-a7be45dc96eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8fc5b6-6770-4516-bc5c-9aee28418596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8eb3fbe-760d-445e-836f-7a20165b7794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c4ff45-091c-4cb5-a60c-a7f883cb6850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bef089-d01f-449f-b17d-f151d3d2f253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495b5499-24d5-473b-bb53-744296794dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d8c9c0-cca8-43e4-b1d9-3a6d22f8d020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470e3df6-a4c3-443e-bbeb-c5d07afff4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3271220d-b953-4306-87c9-43d0929f7edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda779f0-e9e5-4e58-9d04-105541575c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce939b49-eb5a-4d0e-bfe2-900efbeda5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ede604-dc8e-4311-8acb-21773826d13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37dd63e-0608-4341-b46d-b95112203b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd533aab-d1b0-478e-bf80-aec4cd3992a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdbf8ce-4aa8-4b20-9b01-de9bebff85ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd8aa18-c01c-453b-86b5-117dac9ef6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a3c6e6-71c1-490f-a4fd-e02a3fdd28de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e0970d-9392-45e2-bc3e-08fe776c0f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc9421a-1f67-4544-9f65-9674b028df5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361fe04a-57f3-47e3-b58a-d73e7a8659ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dc3004-9b3e-4a01-b6f9-f3f59d644777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77c424f-1184-4023-8ff0-aa6362d9cf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c7ed6d-0224-4737-b4b6-1e56e0ea3196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33424cb5-9b19-4ef6-8397-a3518102e7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc92de7-3265-4940-a1cf-c9102914e9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbfb4b0-9a7d-4982-95f0-3701a588bb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cbde9b-5ea7-4260-8739-29b1dc533bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f23d66-74c0-4923-ac6f-016ab0e64fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53af908d-0b33-4069-b1d1-00423387303b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77a9890-c93e-4543-8959-9444ba205051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d495d8-a14b-448d-b381-559c9dbbec57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f89d81f-a46b-4f19-9218-e00f2e745c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54925618-cbe8-471a-a09b-d23dc3183636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314e376a-3f6f-4440-b776-45cfda2683be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d118db3-0bdd-4acf-b62a-7e04ebf3fd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ab6661-f59a-4d52-ad72-590d29a04b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe14afb-c2f9-4160-bdcf-15829c293f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3abebdd-96bc-4ac3-ba1d-891d239d40cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d332fe1-5fef-48b9-913b-c79b045a8c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138ceced-c39a-4cb7-a103-516cf2eda48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b44b9ba-1e3f-49b0-8d50-faabfc6ff943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c7c8cf-e1d2-4cfe-b713-51fb303a2515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c61175e-c0d0-44e8-91ea-fa732e7dd8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386d5ffc-09b5-4ce7-99a4-f440b702118e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8261d9d-ecab-49df-818a-a1cc02f0be94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b88533-0c41-4f43-8421-87ed13b443b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb17805-909c-4774-8c85-776e6ccc5f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6781fe6-4949-403c-afa7-bf5a591b1191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89db787b-0925-40e1-b58b-7362e5da8d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e867e504-5e0e-4848-9a74-08b982393291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c4751b-85e5-4a47-940d-914da693f185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552aef6c-a6d1-4668-bc6f-4b4fbf382ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395433c7-96fb-479b-aa4b-aa594051a85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83d892a-11df-4caa-b67a-4084b35c892b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68859c90-b332-44cc-8856-6e6b8b655634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e39e4f-c147-4711-9cd4-c6bc4c677c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2870da32-f95d-450a-84d7-1ac4515d2a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8138bf98-4f40-4121-a1ed-de2675690f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54cc12a-14d7-443b-af29-ed0e90eb0179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d81bd3-738d-48db-8255-d914e87a81e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd066f8-6aa9-4932-b8a4-838a2779c84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b578905-fbe0-4dc3-8766-4dcf3ceac6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9f697c-8313-4734-a22e-e9de5adb50e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c15541-519c-4b8e-93fc-32ed5c2293c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d54bea-e7b8-435b-ba6f-0d350ea0b9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7750017-cb2e-4ef3-a496-74566cecc6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258cdcd6-fb47-4fcf-bc78-2e67525b7f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b111ac-8707-4e35-b650-38eb5e3c8f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6833aa80-c5cb-4fca-8385-210c4a79ff7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bea952e-7389-4add-8f11-104fa01b3eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f22eb1-a331-446b-9efd-73a0aecd9a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf3ed24-c903-486e-a8b6-bf643e7821d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f54b16-bcfc-4d50-ba82-a8ff304e6c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d49897-c5b0-40a7-a04f-ad6e5063c82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1608dbc-38b5-462e-a775-067286877d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e053401b-1abc-41a7-9c2b-408412bd31ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f54f3c-a491-4307-a063-ecfd2b46a283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b597572-f608-4576-a490-828a1977bff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7569e00b-3d02-4423-a302-9e448287d6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70d1185-67d1-47e5-a718-41f28a0c5b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91da503f-af33-403f-96cb-408231b70d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc1cf2e-e087-4ee9-83a6-c9e27595850e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d648f2-29f0-4ddd-8f01-eda1c052a8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648b4e69-11ff-479e-9edc-5d105e7b6cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1201267-9820-482a-b9f5-0690f6c91f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b82aee-2e16-4ca4-8dfd-408ce925dbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba267b09-67df-4bc4-bb47-bd916d97a304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee7204b-7493-490d-bcd9-e1cc463ace32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c26ae3-c130-4278-b37d-7ed50de7cbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d06530-9cbc-4fbf-be66-fb9eeb8b0b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcf31c9-4f53-4913-a811-5faf8b1645ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0044dd-036b-4903-ae67-104a0e775968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2c9d75-feb9-434f-8127-67117f68dbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922326ab-ccb0-4c4e-bb79-e251426efd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0543bf2-33aa-49d1-8134-ed5a14558c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2d99a1-ee2e-40b3-8893-7e6b3197c76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411965b9-2c62-4389-ad33-9438c80afade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766574bb-35e6-43d9-ac96-9c7567a8483d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653ec220-402b-4186-86f1-8ccee1a65618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f7088d-c313-4b2e-95fd-ebcb69d42779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f984134e-a021-4dee-be7f-b0e5fbfcf338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59f2675-deff-4cfe-badf-2e1a1c1bbb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d49e3af-48fa-4708-97a1-ddeef748f81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e2b8ea-d6fd-4ae9-b6ed-4589b42eb7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856b7412-cf9c-4314-8cce-9e5916ca4aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb616ff-63c5-494b-8556-5faf6cb01e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ba1be6-3c70-4010-9f10-c41df052d288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5876133-64b5-40a6-abef-a7d20ef41f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e0034f-ac06-42fe-9fb4-6ba3d3c75743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1730ebf-76aa-4105-983e-4038dcd9c4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18a9fde-d692-4136-810f-df65a398d4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29deae7e-b1d6-4fea-b65e-02b77b3d0448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80256984-7dce-4db7-800c-3440c4039b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bb9984-4cc6-4a55-b433-5d6821b16a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1984f5-9029-4a8d-bb4e-510979ceef54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c80c04-edac-4635-8227-1f47c4c7dcb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a1dad1-ff95-4679-a8a3-68ba36dd4d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc678ea-39af-4183-b978-32d4ed1eaa6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9ac975-41c9-4aa6-8af0-abd257af8480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d96790-f97b-42cf-b40a-c478e103c402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bc5001-4aa3-4474-a9b2-32a62507f80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24843729-50d8-4f46-a830-ac2f9f9ee0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6caaa60-bb2d-4fff-acd5-e4f3000c7a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77d544b-62e1-4e85-9515-33390c3cef55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5082f7-db2d-469f-afea-a1c7837fdb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c9e713-485d-4dcc-be83-e60d0cb917f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad20b739-ff3f-41f9-b69c-2d28db2656a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2736e6f-1e19-4472-b6dd-7745ab54ab73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0556e25d-0641-496d-ac67-a37ad444c11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74902fed-a046-484c-bf16-406728ed8465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03066f9-057d-4d2f-a77e-f8d806eae841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c80a63-8367-46d4-9978-0e7cc58ffb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44d1b44-7d24-4b82-8601-b98bbfcf170c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e482084-3c96-4149-ad13-f55aaf870b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91d6fd9-f57f-4663-b1a2-7cda7957402b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e3fa25-c1c7-4e92-ada1-58279290a8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04518310-db09-44ea-bdd3-884b2ea0d7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0789996c-9a0c-42dd-90fa-37930ce947a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a902707e-f259-4a59-97a7-16efb929e7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b551c93-61fd-454f-b472-94eed7e5f121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c26743-f6a7-453d-81f4-4d2a6db36e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1a7216-b156-41be-9c88-5499589a69ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8fe8b1-a8af-45d0-87eb-a6cbd76a25e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8580490b-1ceb-4b19-8c12-03aa2cf5160b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8854e4-f0e1-408e-b5a6-9c1fccb0ebee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9736bb6-f141-4fc2-a85a-f3db8e99fa5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec614b1d-a134-4ada-bd7e-cd0b39e49e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d5b41e-edfa-4475-bdeb-81c74c08fcb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b710810-fb70-4808-860a-9943159a437b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da34ff0-0a75-4d45-b2e1-6a5a68192531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5d9a95-e4db-4661-8f33-57cf8c8966b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf49edbe-b913-44ec-8c8b-cb57f556fbf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab42a02-8cb5-4d68-9e71-2f4eb1c0aac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0029ff39-ab41-4d48-856b-379ddbbf8649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f704c7-47de-426f-9fc4-6a857112ad33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4fcce7-6a6f-448c-aee9-56ca5f89dfdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b663ce18-d713-471a-bb48-4d148fb1a87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed8392c-cea6-4217-9e7c-f34d07442f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786b67d1-0056-446a-85b9-ec00ef4cad05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0de760a-b896-44f3-8f23-f44853744674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bad38c-16d9-47d0-baf4-738fb0e1e878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af8b002-39f1-4d29-bdb5-235c6731002d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34aad7b-cead-4fc1-97e2-165757bf4e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2bd42f-dc20-47cb-9a4b-47f5800d9425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8aaa95-7c72-4aae-a969-77e715d70db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6217fe9b-5e9b-4cec-b319-bb3296dbb34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1928c422-b47f-436d-950c-5457dde3eb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3f7c0a-3097-4ecd-bf55-d144c1e82bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73c85e2-5bfe-4eba-99ac-70895b51a827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9515dd4-46f0-4d38-8e13-472242bd6227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691807d2-f9fd-427e-8592-10e24929d492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3667584b-9571-40d8-9905-6a14ce6b2027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0feb64b7-3d6a-44a1-a196-98a6fe8e848f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268e8795-7780-465e-ab1a-0bfe7ff07a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb30c9e-76d7-40db-b3ab-2d69cb816876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88a952d-acf7-4725-adfb-39a88b89e58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2666a26b-c566-4a1c-b8e7-041ccf0ecde1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27eceae5-63b7-4d1c-977d-d4f92f64ab6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558ac129-a3d7-4023-a921-3ed2ef224d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec210e0-36ca-4fa3-bd4d-cd40f5fc70e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2cd8de-14eb-40dc-a1cc-91ee8ccdde12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dd7b81-89c5-4f0a-b566-66b7962b2431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65b83c6-8952-43cf-80bd-d4131cd51d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973da2d7-8d3e-49d9-afd6-e3bdc70575a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a768adbc-7ff7-4783-ae4e-24c52197a491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5fe529-fc6a-497c-a7a3-e377fb82cf4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e158f6-9396-4a22-a724-8048baac000d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd4c055-f2c1-4618-852c-770633150179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ab0e87-52c5-4245-b886-9fedd1050bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1fa2d5-a005-4c1d-a415-47b5f203fa78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc0fe6f-a05f-4e87-b46c-e913dd8564b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7a6cc6-5a80-4e3e-8728-7380514b5143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad1945d-8fb5-4363-bf4d-f68d8b8fb9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852342a5-17b2-481c-b04a-763443e79492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a15eacb-2711-43db-9db8-f5f0302feb7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9001f41-be5b-4218-b9f3-991119cd2372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90edf27-a314-4b6c-a8e7-1e9d82c83a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c850e76e-89be-48e5-a58d-cb2c49ae43bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a32724-016c-44a7-a0fb-e1d493fdf88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454d5bbc-8588-43d1-9075-8d6357376033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e206de-a3d3-4210-863e-d5982c770099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8f6c90-2b48-4ea8-bf3f-c8b266cff19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00f5af4-b716-4f1a-bf71-b163eeb04a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba8d9ec-83a8-4380-851d-f9529b156718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbe99ad-bcf6-415f-bd51-673ea5fd5089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36af273f-7aad-438c-a1f9-8f7e6cd739f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1bebdd-e51a-4a0f-8b66-d3cb56102fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63202938-3748-428b-8974-ecef2af678db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462007d6-236e-4a9c-88bb-879101952a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8cbaf5-0c47-47d4-b6cc-8e066111e22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3da216f-6a04-4a6a-9bab-c44cbdcdf69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bc5ce5-01c4-4d48-bf2a-3f68612b6868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fc7160-73e6-4f5f-a8e1-ddd7302b497e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efcfa17-4005-42e4-b92f-8b0fe4599e74", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29962db6-3c80-431f-9441-55ecdfd0c4c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.119.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689023ce-a9ca-4bd7-9c14-054a609c97c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.121.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6195ca8-eb3c-465b-92b8-7b193627f4bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.133.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8c363a-4d18-4c41-a1c3-057f0a9b9d10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af0a730-3b2a-4074-8803-1c9676982473", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.218.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d5ef24-75d4-4124-8a86-c5bfec371b74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.218.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9888c476-2b4d-45fc-b214-694bed039d24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.219.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6112ea60-8863-4174-a352-861ee9bf0652", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.226.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0410a3-47c9-493c-8030-989ab5032bea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.226.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe1a04d-6ae4-40d2-b78d-58137c6538cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.226.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d490727-0ad9-4bdc-9b56-b9abcfa249fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.232.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e879f5-783b-4ce7-831f-753a2568de9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.53.72.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abb0b27-91e3-4bf6-bbf6-ac058ae7f5a0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.12.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ff5556-e780-4d42-af5d-9ff7f8525e97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.12.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4242837d-fc99-4b36-b7ed-8f81e48f2a87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.12.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048c56d1-150d-4a2f-8379-0abb471974aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d09c83-b511-4990-8157-a00373e4e650", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fe2003-5024-4978-82b6-5c2c0c23e0e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb4baf6-9ffb-4985-8415-26cbfac76f70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9988b6b5-d2a0-494a-a6d3-500a7f3ec1ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3846a0-d9e5-473c-b712-a20fcec12e24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0ad8f3-08b5-46d3-819e-65d3c44f30ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866817d1-41bd-45ab-b6ce-65af3b3a2af7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2841b628-1ba8-4ab4-9a42-339b51bcb4cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967b21df-ee70-468b-be07-e37d9d24d61d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a9b190-a90e-4e90-bd5e-1b2da00cf776", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfad2f01-72c4-44b1-b281-ed16c716af6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e29d090-7fd2-4d20-a528-02215af19f80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f798a2f-8463-4c6c-958d-909c9d1dcfc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd04d5a5-a84d-44cc-9cc8-322f29aac576", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25e44cb-7803-4c0f-a302-37ad62800853", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e66e40-e76a-4bb8-8763-6139c10185ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188363f0-054b-421c-a50d-e0d2618d6f2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f73096-396d-4b60-bbfd-eaf9bc581e7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19428d73-29b9-4d5b-8600-891ff124c25e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c5caea-cf51-4685-911e-8d9c7413cb84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7106a259-6694-4d32-930d-140136729059", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d56488-5a05-4eba-9667-ee05174e5604", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0110d901-f8b8-4942-ba1c-47f4d012fa93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e93e39-3c7b-4ba2-9520-c20f3f474a21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0674036-7209-41bb-8466-67480d8f185b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dd49ca-d441-4fc2-9ab7-347a58d04a26", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ce1c05-6dcb-4db4-8485-85a5e2eed94f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5872c8-3ef8-4997-bc9e-d66c2574a458", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526ca8c9-13db-4c4e-bbc1-12e93b058e69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61ec0b7-41d7-4e60-9c7f-95b24958cee0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fafaf12-52a2-435d-a610-c1e6d39a715f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e264ac-b584-4a34-b1d2-7cbbc05b712f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a422c23-3bbe-4e90-b705-ef13d90a167b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be8fd9e-aedc-4d29-acbd-7590aab423c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bbf277-d92b-42c8-b1ab-31c110208fd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50e41bc-c651-418f-a213-2dbd0e449c96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4e54e0-eca0-4aad-a7c3-4348b743832b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e8ea73-e6a2-44e4-bca4-4ff94c111a69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca412f6-6a91-4a0b-b495-09ddb70f2d40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834ca156-7b94-4653-ab83-e79d67febd29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d853d5ac-0dfd-4d85-bc87-7b8c2d9eb692", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a4158b-88fc-48a0-bb75-d7cd790092ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f701ecb-0e0f-405b-8965-67efd27242c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1a13d3-034c-446d-83c2-391802a85c10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24901954-0fc8-4725-acc6-a63113474b53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c590a758-143a-4842-aaca-d2446c34e12e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b360cd3-9bae-462a-85ca-6da53711731a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f086e7fe-c8f5-4254-9c28-d962dfa3e46d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630d971c-86c0-4195-b67e-c740d0f6d38d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acc1375-afdb-4ee5-be3c-7fb5337eda86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2299cac-1cec-46b2-9868-2b99e6b7747d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb0b2fe-32b0-4023-b94d-c2d1b479c9d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8a911e-1ba9-4d53-a3b2-051bec776532", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345a3214-5b17-4ad8-812b-31444c4bc866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.3.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2e3e65-e7ad-43c7-a0da-8a03ea31e5d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.6.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee30743-3e3d-4ec9-b233-5f85d0d602cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.6.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a74e74-ec91-42ce-aaf3-3774d221e41e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.7.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91024ffe-d402-4e0f-affa-f6dadafaaeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.9.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a83a89-8ba7-4f89-b9a6-4794bdd782f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.0.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12905081-9f24-4a32-bd2b-ca2b08225d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.70.84.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a31c78-1e9c-4342-9a0e-a4e55fe69da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.234.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bcf87a-999a-4571-afae-cc23274522df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.106.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf38f1e-ff7d-47e6-b650-9cce149353cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.114.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab44daa9-c2b9-4075-960b-b291d6b95c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26da2f4-e5f6-4880-9b50-851d6f256c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.159.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410744fe-64bb-40f4-8601-af49ac2753ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cea8733-00c0-48ac-b237-c9de37df7359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.82.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2f806d-ec25-4998-a4d7-35478129b86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b20fc1-ec63-4aac-88a4-d70f4616ec25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4756aa51-1c82-4653-9b3c-f0148b7c21ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1514043-8f59-4895-9673-efd2ba6215cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dce547c-f58e-4cea-9508-4bedf3ab91ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff79c44-9cc7-426c-a70a-57e637c8e3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d07501d-e60a-4f44-ba9f-89012fbad540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f2792c-45d5-4891-be4b-c815646bf0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453930a6-2baa-4db9-a939-2c59b9947430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ed0321-96b7-400c-a228-2048bfc3e00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3d05c0-16dc-477d-bb50-39dcccb3dffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca48e94d-9641-4175-87c0-758d16bc2107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b64e2b0-d6f8-49ff-9466-0e23a3a1f301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2646c87-e89f-408d-9d45-0ef0280c7f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db57e5e-15eb-410d-b453-7de32cfadc1c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2a26b8-5f40-45ce-a8d3-acfb9489c1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f14c326-c7c1-40ce-8f80-ebd28695df1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4e035e-61c9-428c-9d30-50d1ad6b0f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecd3113-6f2d-443c-afcf-6ebcd81ae915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed03a8f9-8494-4302-b328-eac9a7fc0e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0463dbb9-9954-4a0c-a20f-4a6514238609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34af8a4-c421-4b05-a093-13b0be24faa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae13fde-8478-407d-a01e-55516fec79ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4c5c13-ec9f-4fea-9d3b-dda3168874d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b46d61c-3e4c-462e-b0aa-b869226ebd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a6c73b-95ad-4872-afdf-211a23d85967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7667b1-304f-4187-a54e-aafe2397cdf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ec7528-4dc5-48ff-9be8-b47c27de065c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6c9b61-423a-4c13-ad7f-bb2b9f634f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e0b785-84ac-40ce-b3bd-4e532d5e3615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ecd0ad-b823-4776-bd43-f90c782e595b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e0301f-f506-4ba2-bd5e-0aedbcef39bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0898a8a-78c1-437b-9dfb-60a6cdaceead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32a3a65-52a1-418e-ab69-c721890efc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec5629d-d3ca-4f66-881a-6ada17e1cc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436a9758-0a37-473d-a277-f03aa0e8fe44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e14aa2-0d3b-4c7b-86ef-90fb00f3f770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318207e2-a6f6-4f87-98f0-2b91076bb7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38e8b05-a18c-4587-ba7a-83b40c9d15fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603401c5-8e7b-4e0f-848f-ae773da27675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d669c2ba-a056-4964-aed2-5f1676e7d1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23072715-e8b4-462e-b3f7-a193f9b7996c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89fc5d1-0ccc-4d96-87ad-ef6fc79763be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cef61fe-f250-4464-81c7-53b94a516c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fc8dcd-ad46-4886-8dcb-d1a0f79c02b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36ae155-447a-44bf-ae83-f08c9ff2c1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1be9b7-8211-4fa8-9214-0ea6d68a6f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5efc7ed-e4cf-46e5-aa7d-7d71bc4c227f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea67889-5086-4efd-9d57-ded4e6687b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c3f269-d4c4-45b3-acb8-f54750beae4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7c6682-2d9c-47fe-b08f-7c91726e97e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ede6223-dec8-46e3-bdb8-d248a479573e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1774947a-fe34-4e91-b902-4a62c7763827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b18800-b90f-4cba-a012-09b240ddf60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230ff03f-8f95-4e58-82af-b6fdab051a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2689e17b-7525-41ef-8ef1-98879ed8a246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6980cd5c-9cda-4c47-9499-a173db4bc132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0adcaa-a596-4ecd-9bd4-d25e98a1e04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760e2cb3-de8d-4f51-9a49-dde0a51bdc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecd50cb-e549-4913-aab8-3b1ef4b7a8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29096b77-bdd1-448e-902d-72a518e69bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fca7509-d447-4035-952c-a1105cb24a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db53b6d6-1ec3-4672-9ed7-282f71356a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00bf5a3-039e-4105-9be4-7766739dbec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9365bbe2-529a-4284-8409-aec0c0f4cd25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe899d44-bdd9-4718-b297-46caa80b1736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1207f0-4a70-4f78-9611-a56c543341e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1bfce9-a300-46b3-9e77-7b9da6a84d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcaa7adc-9782-4af8-b3c8-0f0742a79349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f4b956-5593-4ac6-9baf-7b9813dea310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f986c9bd-41cd-4beb-8470-1029c4344934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6e9ef6-a079-4abf-ab1f-8923fd2d2dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9910e66-db69-42d8-be3a-991119f1d1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3430565d-8790-45af-ac27-6cdf3056be32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b8bd32-3ddd-4198-947a-74bf23706bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d266e0a4-8876-44e3-a8de-65aed5e16bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e368a132-716f-4511-b9d3-af9cb27461c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9af5ff-f86a-48c9-9b9d-4e95c040e903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23a6f20-0339-4518-94f3-2de93366c4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2fcb76-c4c0-46be-8887-c099c7894eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9210fe88-3e10-4585-8673-653e7c8945bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cc2b32-bd2a-478a-8bda-d975fe52edbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc753f3-421f-4c5d-ba0c-7e946ff03449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0725bbaf-a8ba-4d4f-8100-507416f025d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2d58c2-e535-43bb-b5f1-1f35f441dfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b71485-1eaa-4c26-ac91-04e6a2359ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fd1a39-d923-470f-ae87-4a1754e88586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a5ba3b-a7c6-4bb4-889b-4dbb3cb65fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da971dea-c64a-4ce4-9d32-dea3c97ca3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a317e5c-028d-47b6-bec0-4ef725e6bae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1388d9-35b5-45a2-95cc-d31d01b5f2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba6ece6-1785-4427-927e-57460d52914f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26956deb-09c3-41af-815a-2cf623b289e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc976e21-07b9-4b91-a0e3-171890928577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cba6ad1-e8bc-4362-b687-3e601546e10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe7a003-1393-411a-84cc-ccde71e809f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7319ad1-eccb-400e-9e72-7b97c86d5548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176ad622-c526-4f9a-98da-0c48b030ab69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cb6a7f-924c-4a73-8d07-f499aaa2fcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3950f43e-dad5-4100-85e4-e51510dd3198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c299d3c-c361-4278-bf0b-da618f57cd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca121c10-d53b-4fde-a7f5-e1d5d059555b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b4c739-6be7-4572-8a85-e1c6a4ba72da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4689aeb6-29b9-4312-ab76-ecab2fbc9edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4b7761-1b40-4d58-b8aa-908b93878b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad59367-d702-4da4-bbe8-c1f332517ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57538976-dc2b-4fc5-9fec-5a4abdde07ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d41d570-1cff-449a-8582-3ea4f618dd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054d2e91-7b17-49e6-bb95-30cca4775a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4750a66-7a98-4d01-a66a-9704775571c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb63a24c-93a5-4d3f-9cdb-5cd11f972199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6bbc85-a9d5-4f3b-acdb-ed1a98571eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a17f73-83ef-4c67-bec9-f62a6d8477c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc2eaea-37e1-465a-ad67-428e0d8595dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5270669a-060b-4ade-a8c9-536558a1a385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add0906a-2fd0-4a80-ad12-d45a5caad8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732ec6e4-ea3f-43a7-9172-7cf4e873d1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c7ab20-4baf-47c8-880e-770419f5c559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439a88ef-209c-407c-aa84-7b97ca8563e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453f8d00-7ff8-4e6b-b5dd-f6a726337148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949cdf06-8a3d-496e-9cda-5e5986248489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6732624d-8952-4403-9b3f-ace0f78fc605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c45e77d-d0d0-46e5-aae3-506e439dab74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6ecfc7-23bc-492a-8768-7da9d3b7b2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc4b9f6-12ee-4717-8b3d-90986169fa7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe19d723-6661-4913-ba8d-53394f9e9c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed82a06-eb1c-4f21-9429-f490bdd5690d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b817c6-de53-4b15-b490-7f52a17bc6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8926173d-ab29-4d2b-b5d9-7744bd1cfe1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e419c33b-b0f7-431c-836e-1184067d31c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5aa12ad-74a5-4f55-980f-137b01e08546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46799beb-6a90-4d11-8775-837f7eba0c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb9c188-31f4-4bc6-bb8b-c865e1bd3531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fde254-abf3-4b7a-86f7-d92c3fb8345a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e3696a-0416-4acb-b619-749fe4a847a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a720396-e072-4a5e-9756-9d146ee1ae82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de08b46-5cf0-442f-b0d9-0237fdbd6bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33edad0-2b92-44b4-bf8e-c9a9a7405238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54763d7e-1bdb-4f9c-8246-efcaba14ccf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad9d3d9-1763-4500-83f2-6428b0255da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70546a1f-d9b5-488b-b612-8490a3dc09f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0acba23-7a1d-4d5a-8da0-02cea77bf1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e325d3-4603-44f5-a174-116cdc82c23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c1faa3-5d8f-4f24-9f65-173109295bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b09d01-cc53-44e4-8351-74f5f5dbebfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a45a267-734f-4b6a-a88c-e0ed4d1a99e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2c30a7-09b7-4205-a058-244e561eeefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7edc98-e073-493b-9caa-4ebb0a142f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3213199-3562-4cba-8902-d0a8131b8f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6a2187-b70c-457a-a217-836ec595cc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd42b020-d020-423f-ae3e-42eb0332058b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285151a4-5871-491e-9f5e-55b8144380c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b6fb2f-21ee-49f9-9bda-76dd13f56288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa4f95f-95a9-4a5f-be16-759486c1c997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ed0a1c-dfc8-4d6f-96e5-14301e2ee0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08424a2-6764-4009-8c6e-3ceb6e0a096d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff88ea95-04f9-453c-a98f-e018ad8381c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd0714a-02be-4b8a-bb1f-e6b1d9dcf8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec32a1af-7158-489e-99f1-6b34d4ee84e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efa675c-3bcd-4069-8ce5-c0accf8f3682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3483cd-0324-4919-a3de-a2ce5d8fcea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451cc433-248f-4966-a97f-9285dd9226c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2455624c-cb17-48b0-a402-d0f52918184d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f926554-5c04-47d7-a86c-415a671c6b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa6e60b-e2cc-4cdf-893e-a9d8a3ac7405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9162cf3b-30a4-434f-b31f-e67fb8dc89ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29c738d-186a-47d2-b030-da38a176d4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa824aab-19dd-446f-a90f-f26713a5384f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cb6dfe-ffd7-42fb-99b9-169aea709ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b453e0b-29f7-46e9-ad9b-45a8dafec9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35de30e-4a9a-4d91-a92b-36f55e031d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d543074f-55b5-496d-86c9-10be405a887e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d910d7-e49d-4b13-979c-b15b6217b9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d745ebb-0209-4e30-8269-5ccbb53e4ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d0374f-9646-40b0-adff-4a243df7b4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d437fc1-1243-489b-8a35-4045e50a6b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6131d024-5fcf-483f-b648-18364c219fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30192ef-95f6-486a-8f9d-4de0998e4ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2824d9-7329-4898-8df1-25c5ba31d9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35d61cd-2042-4b23-b909-70839dad22ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15eae7e-35ff-41c5-bd03-2a1d63f71181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b728eb0-fe2e-4d28-949a-d3c28f6c4cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95615e6b-abbe-4f34-be3c-92cda31e1e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f46067-d8f4-4c3d-b6cd-e070c0a8dfc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b92799-81e7-45e0-88cd-db255275bb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e671d128-dcb9-4374-a604-3f3abcd0c83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4280e0-580b-4352-ac1d-22c95574aa4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce8d08e-5f78-4b15-8194-e8d3646a240f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d490a0-51d4-4a66-b16b-82e595b5b77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97018862-2685-42e6-bba8-71984500e41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5f1e31-4ba8-4a4d-9f0c-4512f5725807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eadb4e5-908a-4253-974d-a101ed9f183c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07a7b97-f010-421d-b027-6aa3afe048c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4740accd-41c8-4381-953c-15667552a35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cbdd0f-2b3d-4b19-b38a-fc4b6a0c4606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e4b714-bfb4-4102-84ab-eabcf9bc9d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c1d976-5c18-47bc-b3f2-88626c2247aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c7ec7c-3a81-4071-9134-0637bc87ee5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79f3e33-6aef-4481-82b0-5fe84e62b109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ab9a55-e38e-4a8d-9e68-39deb691ca1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.136.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b934481e-bc08-475d-adfe-a302872fe63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.15.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2839683d-9931-4079-9f1a-2417740c1bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.158.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004c43f8-366d-4f2c-a588-494bb181d229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.168.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57c9529-9a38-4115-8f8c-31113bcd6ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.176.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77841757-d09d-45f0-b808-2581c7f8ac12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.183.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1501c8d-26cc-4dcb-a992-68cd53c973ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.70.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9ff2b3-16d9-4f3c-b57b-b5aa6f93d217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.110.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb49e109-1251-4cd5-9f33-4dd6483ae2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.172.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dac2f0c-bab8-4bbd-ab4a-b8ddf631a563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.188.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084cd015-01aa-4992-9736-1a1e1d585000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.201.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26582c14-7325-4b41-82d4-03b3e9690ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.234.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7a2bf8-fb9c-4155-8b75-119ad6b21df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.38.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52490fe5-45ff-4b63-b873-caed8b11dcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.63.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d363676-fd75-45d3-af4c-b1e13ac7314f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.65.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad1c688-3cbb-4282-9cc2-9dbc3023a4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.81.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821f0ca2-4c40-426b-b801-bdc383d662ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.118.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6ee0de-38e2-4fd8-8be7-3405078892bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.143.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd867b3-fb3c-444f-b4e3-2c1d7dfc3349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.42.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3871c0b3-3535-441b-8482-7ccbbac6e418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.52.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc955cd-483d-4ac6-98a7-87d5b3f7a4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.73.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb6d8b2-6986-40e1-8e97-a62331708f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.138.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2a207d-64aa-4e5b-9187-ec604a209a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96f677c-a558-49bb-bc0c-c9e0863ca3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.161.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8530b529-4069-4c95-a75e-c4f9d2292ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.137.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95f471b-5ea1-4518-96dd-cb57a57ff888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.149.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad1c21e-5168-49db-be15-a37b54fbd5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.159.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7b441b-1ef9-4363-99b5-5a6412ea6621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c388127f-0c7e-42e7-beb4-11ec99da8b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09233e02-6f89-479c-96c5-933e237fb7ec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.59.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc8075c-41be-4755-b4cb-2ac311f27c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.89.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ec41df-a13f-4c77-8e63-75c40f9397b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.249.227.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece26b2f-a62b-45f9-88d3-10f4b6fa9189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.20.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96eca21-ac5d-46c2-bd0c-026fab0f0580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.229.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ed72f1-b5a9-4082-85da-e8f1d62f1c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.114.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8786bc10-31f4-432b-b681-37a34c2024fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.114.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09227865-a37c-424c-b358-2956683f005f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.139.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e37649a-b79b-413b-8225-f055c1b704bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1c9ab5-173a-4530-ad1c-0b127391bbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fba918b-64e8-47e3-81cb-a77649c512d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d11705-03b4-4303-8870-e5d380af5698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bc8836-4bfd-44d6-901e-ab7b35de10ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a59f204-c4ae-4d69-9a5b-014e16466114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ed9a02-ead9-40d6-aa25-ca144f12e3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda0aa53-5fe2-4ad4-819e-ef5eef662495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcf029d-8d44-4322-a7c3-c241380b8393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6424abc-880a-4ff6-b774-710cc447e8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4d8ee3-5809-4776-a50c-69ab39ce477b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534fc73a-7fcc-47c2-b5c4-3ef20c61ab90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7ebe6b-edb6-4394-b871-43b0050c1a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a154b393-c45f-43c4-b113-572f22587f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360bfd62-0b72-48df-940b-8d9c84dfc491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ea35c3-cba3-4973-a5f9-eedc2a95615e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34362a69-2946-403a-bec4-c6820de6f550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9812d9ad-af12-4b33-b80d-5958e67a9a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a22469-f3ae-464b-a5d5-47670754ddc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec357679-88b0-411e-a274-834387ca2589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a160ab-8a28-4b03-a59a-ca0577a97bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728ae162-0b3c-406c-a545-d5fe5005ff2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9fcd2e-5399-4cda-9ccd-53d36c148f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae7cb50-a3ff-4868-920e-204a0db6d80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d87130-9cf7-4c6c-9cbc-0e50019e1937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c939bde-bb67-43c5-8365-f8ce7f3259a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ef2cdb-011f-4d28-a06c-ecd110ff5a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd8e906-7367-43c2-b9fa-7a29f74fac59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9274ca-18f2-4a0e-a1e2-34861a52d567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfb0928-ac81-4385-b026-b50be5949ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce85f377-c898-4115-b558-3846e7e125bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11b6e79-adac-48d8-aaba-be3d3d5f2485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57188692-3689-4386-8d9b-6b33e71012a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a9a2b8-0363-4f38-b1d5-5b3dae19104f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbcb99b-4564-4ba1-abe4-8c0ea82b9665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fb7b21-b9c4-4ec3-98fe-c864f580b444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11af603a-89f9-472e-9071-5dc2c59e452b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088be65b-446b-4986-b873-70fd553a65ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763b4676-8863-43fd-9903-0c90cb653b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd4f685-ec7f-4f19-9a54-a6a6b71b89da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a710ff-63a7-49d8-a7c8-3bc65753c663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae962b8-a413-468f-8e64-fbdc59e2586a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00bde0d-b4e1-4404-9800-d5ea08d982ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc23e35-5f2a-47b0-b888-fc196e5447d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c879ad90-d852-480b-a9d1-f01013e57e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74be215-0d65-42ea-b304-6e8a6fd71c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d678f2-9d59-4b02-ac9d-d611130529f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057e48d5-ee1b-4340-8b60-68540c7bbe51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6095e9b-befe-401b-99d3-c742af3d26d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e3021c-7ddf-4679-90b0-0a8125d1e65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790273a3-8122-46fc-a620-8b9a748b6d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccaacc1-1d12-4394-b087-dc933bc46f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd4b9ec-6040-47cf-b342-2fd998f39012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f35a7b-b9ac-4ca7-b3b1-c447fd67d25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522e427c-7fe3-4c61-ac32-6890e7f275e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c55d8d4-479c-4ab3-bded-ae2ec7069b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8312f4-ed55-40f2-83c0-a931ada64ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64649ed-c948-4da4-b1f3-905b557aaacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede32d3a-e03e-42d4-b899-feb81b3fd3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4172a94-d411-4b3c-b0bf-0ca6eff9b382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de15f787-056d-43a5-9665-5444e883a83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8638fa3f-535f-493b-bcb1-c86de91acfac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201dd062-c1fa-4de4-9619-493c4ee6a10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.101.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5c2902-9a8d-42f7-b51c-b6a2addd66b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.13.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9be7a28-dd0d-41b0-a7ca-83e8befe7237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.154.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e933d6-2ae4-4fe4-9c48-018c6aef1eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.211.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08421418-7534-44be-bc22-f892ac4c5f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.226.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878de015-77f0-48c7-b0f9-16ffdc1aa819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.226.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efce860-0078-42e4-9143-ffa34d955ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.228.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b4a322-8558-438d-ae10-672ae0f99598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.87.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70164b34-04b6-43f0-86d7-92fe8eced68c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.59.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83249902-a97b-4cb9-87bb-8130ecf73678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327b12f2-7636-42a2-a399-1022d47b5f04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.181.161.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7aebfc-94ac-4aa7-ab00-4766b9ab34dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.194.102.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf875feb-8def-4768-9c3c-712cab843620", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.194.16.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377d20b0-00d4-4711-b01e-6e2b4a3f8e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a3d906-5668-4bad-b7b7-b265e622a606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.222.55.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5288ee4-e0e7-4ae5-bbda-dd9b0b213d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.62.199.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb944c89-4a71-4cb9-9c1a-0948d5d0f9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d96224d-6522-4629-8478-74690a61b43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.83.81.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5718b67f-fc82-4288-81eb-c10163c9aae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.228.63.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dce4eba-7883-497f-a442-294d32097c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.4.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e4e261-69db-40d0-92d7-fb7950975f09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.241.75.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75af7f9a-390a-4a90-bdd4-02c6e631c261", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.246.15.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4383d82-2c3f-4517-9ef2-a485a16fff68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.246.19.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87253396-3e46-4abb-8d68-a1fc5ecc5785", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.107.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bccb425-c2ff-4637-9ba7-b450fd7fff50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.11.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6388a938-4cac-4090-a6e1-08f5586831f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.114.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a8b3d6-41e7-400a-a3fa-5a0a61e2b30e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.136.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e835b0-ecdb-4995-ba03-a21255915daa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.146.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413b7ac5-acfd-41ab-9ce8-b611bc978915", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.188.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff15787-1587-4032-bb44-c3337ac94a2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.190.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2d75c2-ea85-4b13-898c-a0a6cef33486", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.195.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac58970-f883-4bbd-abca-fd0ac5befd05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.199.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff21023e-3c7f-419d-baae-4348f18e9592", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.202.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df335226-8277-4e26-a6a1-b792d1fffe93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.203.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532e39a7-b0fd-404c-818c-e5f3fa0169fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.37.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed78805-8d7d-4ea5-aac1-5a62919902fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.37.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bb82d9-26a8-4402-b258-eaa00e05a514", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.38.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62fdae1-363a-4371-8d92-2e1f03a6206a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.39.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db68f27-2136-439b-9922-15419addc8d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.39.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd22a1f-6106-4dce-a70c-32cd5b25cd16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.40.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf69961-5789-4581-baea-276e3be98861", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.52.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4d9299-c8ce-4fd4-aae8-9a95aaf22bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.73.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb82f280-5246-4e1f-b4ce-bd5eab771c27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.8.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef86c2e9-81e4-435a-8d09-60d40700a176", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.9.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842de0a6-fe58-4c82-b83c-a25b39115c65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.9.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d1c811-fa78-445b-8618-0333a36798bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.150.172.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562123fd-a0c8-44b8-acc4-e1a6ddad989d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c624e5-9cef-4534-8709-e19372296c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f71dea5-c811-42a4-a9e4-1c9cee9d9746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b96522-417f-43a3-9ed7-e21b61eb69a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d8db85-0f49-4ac2-b4c9-3a8fef490ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb558c9-b77e-491c-9d06-f44c8226a676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8321aff-8709-415e-ad21-a483635f6639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76093bf2-5a39-4ee3-a6bd-37c38726efe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28692eed-e2da-42a4-ad92-af736c7764f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.238.186.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71fd704-ad7e-4802-8755-4a61c5f357c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.244.91.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4895eb2-b72a-4687-83fb-9c1802322cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.184.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6594e46-db59-40f8-8792-be449d8dd85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.128.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b32ac2-d692-4f87-85ac-7cb87faf3953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.130.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169f7a8a-0551-4022-9a42-9851c42d2d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03fc59b-7be2-4255-92c7-6fae8cad292e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c687e3-2da2-4db9-a42a-9c28ce529ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c482c644-a97a-4d34-87a2-6d094c1735e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.159.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5807ab4a-a6a5-46a6-836f-2a0a65ff0747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.166.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dfd354-e3e7-460e-bee1-0e1da0ad4997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.80.39.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d900a3f-7afd-40fb-83eb-212b731b3abc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.82.106.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9256f91f-c387-4009-8cee-70a7f1fd4f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.81.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d66cd61-1811-4e7c-81ab-da0b347836fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.108.182.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f9759f-cad6-41c6-ab47-6a54e3eb75c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.108.183.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d15e4f-2513-431d-92d2-0305ed9f91c4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.237.176.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be1391f-f303-4fa6-b400-b5186101f590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.237.177.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e7d570-d37e-46d8-b356-57a59f922f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.37.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d8e846-a6e8-44f3-953f-90236427d696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.56.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9687c5-ddbc-4886-b70b-f3313956ba20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.4.223.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cb8173-16bb-4e46-8cfb-d0a6287e9c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.41.203.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978f23ae-668f-42c0-9aa7-09fc438f07f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.61.26.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cd35e6-aa03-4bbc-bda4-564fddb0e951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.80.15.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed417ac-f7e4-401b-8f35-98dd1fac2b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ef5e61-56df-4d32-b168-f3ffd187e90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea4c6ce-8375-4429-8b92-c8b4bad03dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c41789-12d7-412b-b79c-956198177a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c37706-8aab-4046-9d21-3c212372f933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d298a9-bff4-4b30-9d88-5a0c253ab4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28b1d59-7741-47ec-9df1-e1035909e3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26326dfb-8745-40ff-9715-65dca3766c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95327dec-c01c-490f-b16f-644daf83a5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e570b78-9ab3-4830-a7d0-f729e9e9b15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393cfa21-0d2b-4275-8354-e69bfec056f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f00be0-69ce-49d6-bbce-1ed40b25afb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61055440-2210-4c14-bd8b-5c40cdfbc8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ad05c1-10af-417c-a39a-d9eb12490a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ba6afb-bfa9-4776-abe8-200431d82fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772b9c87-2143-40da-9fc8-59447a9cb671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c48eb3d-32f2-4bf1-9c5b-3ddadf474217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6145726-3c7f-45bc-9950-3c6bdf63b718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.155.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7433901f-5ae1-4c18-bd2a-2cdb2f2d5236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.196.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44f4382-7911-426d-b9a6-326e16ff7be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.208.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac913b4-4042-44ef-9ff8-4e10190428af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.224.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b8a81e-2ad6-4789-9dc2-f288d1bb69d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.23.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e74cd01-c162-4078-bb3c-ccda9fefaed5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1accc24-faa5-49a9-97bf-c59ed7f3fc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86306dd0-006c-4ce6-ba45-43bd3d292bb9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dd63b2-ec69-4b6f-a927-73f51e989b0d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85dadb4-54b5-4234-84c2-d28d17e63fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.160.227.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2d4d83-b284-41b3-8a72-517f639684fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.240.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e062bc-c28d-4aab-93a3-38c704630fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.244.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7800c115-e1fa-4188-8d27-7f0f6945f3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.123.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ee8a5a-c89d-4c44-90bc-e007009f8434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.125.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f3e5ba-91bc-459f-8b86-b6eef7456dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.125.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ce5ff0-1a95-45da-bbbf-b1a0600d36eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.137.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4beda5d-9b13-4076-8485-bcab748d7e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894e3853-157d-4879-97f9-209735e2292b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.200.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e111ea-0e67-489f-920d-133a768ac5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.21.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd4ab2e-4304-48cd-9cc1-f46b22ea20b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d653fdc3-17cf-4bdd-b4ba-335f421e0c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8503d6-2c08-4871-ab9a-bdb30049adf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7921f883-19a9-43c1-ae14-1b0f0761f6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c43f95f-03d2-4e28-b6a2-1bb7395f1e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.248.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d0971b-53a7-47db-afb6-3eb1a4e97251", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.5.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af2278b-acda-4a4d-a14a-ee1721621989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.177.114.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a2af90-b38a-4583-86c0-e3aeb0911de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beff2446-5a06-456f-ab64-d37e81fd5fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.13.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae06cb70-04fd-45c7-90f9-b7523149059b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.81.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b8ab6e-043d-4108-9d72-04ddc86021e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.183.89.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44864cc8-78d4-4d7e-9f03-bd837a397c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.184.134.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1344c2d5-a60f-459d-ba30-ee7231f9fc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.184.156.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56af4783-d397-4302-a8c2-9f2c535d283a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.184.209.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f13f21c-ca8c-4d41-9f00-f64dcbacfba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.187.248.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6012993-fc02-4179-987f-8fd4155c3975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.100.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eef699f-a14a-44bd-94df-41e2df512344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.100.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411368bb-aafb-4fd3-97fb-ae34aa22aa95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.29.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa681de9-869b-4256-814a-caddaff421e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.98.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3054f5b0-951f-4fd5-8d0b-87cb3ea72e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.191.171.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4278934a-dd49-4798-92a8-b3530b69e09b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.197.176.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2a2d4f-fe6d-447f-a4f6-154d04ccf48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.198.65.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae69ebb-0568-4fba-9fa1-9edd72c38c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.200.171.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b474009-ad6e-4290-91a9-ac798624c8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.200.194.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07d7ab9-99f2-485e-845b-6322cbc83c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05e358c-8af0-48b5-8f58-18aaa0b54dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a11309-2b53-459b-aeb6-2f76a270c6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4a588e-c64c-4bce-b32d-59eec4b96cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a218a44a-9d56-4be3-8adc-99af5e54e563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4529cbf-441c-443c-a920-2cb2d307d221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef759871-9a41-4943-ac73-1e674d61a2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610ffa41-d0c6-4437-8622-aadcb3870c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c399fe5-2643-40f3-90ed-034969ff0b38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.26.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def354c7-e1c2-41a8-a9f7-80488cf5c68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.242.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b365a7b-ac46-404b-abef-6141146e1209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4ee9c7-5d71-43e8-a46f-f008649b15d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a537bea5-6f66-4ea6-a9b9-a3ab6a9ee577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.251.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28e7f99-06fb-4ba8-804f-0ae0f563bf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.85.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3e480f-ced5-429c-85c0-816ba949b2f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.204.17.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205a6aa3-7a75-4b9b-b626-8c4219db3e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26584951-8a47-4c0f-9777-139c5e5d3c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.226.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92835cbe-5495-4c74-a984-718c2f061417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.207.19.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d457b9-d9dd-4dff-9676-cb185063da29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.25.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39f1ea8-ceae-407b-a6ab-cb920ece7907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.49.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97135ba7-6c59-499a-82c3-6e5111a51078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.66.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040a4540-fc80-44a4-8041-ab7cbc0a220b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.68.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0113f1c2-7712-4a10-98f1-6d8f3c5adae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.81.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff675089-ea09-4c81-8e58-98c70579589e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.211.249.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d88c0f-7867-4f31-930f-5ddfcdc8bf2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd9de57-c76b-4da3-a85d-1b7bf6a82ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f386c33e-c1d7-438c-bff4-fd58bb4be81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.80.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21c324f-df11-47f8-81ff-bc125f898988", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.213.155.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ada70d6-3a57-42a1-82bd-3bdadb31b091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76bdcaa-9a2d-47d2-8af8-0b91faa5c687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdbd2ab-f03a-43af-89d3-619002ca838b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c9c0ef-dca8-4c9a-bf9a-e7523bb28348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffa84e3-40d7-43d4-a5f7-461b5c692283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff5a58a-5002-4574-8c24-b5a54d22cde8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db205f1-fef4-40b1-9aac-99d3542a7225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b15a858-5237-4e65-9394-e140c5e6ec63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.49.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ea2671-d8d0-4d75-ab99-70e7244c1931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.113.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24618c6-6efb-44be-ba04-fb0bfce21074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.113.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68526087-873f-45a7-a23b-a012b47d5a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d613d58a-ea3c-47e3-a5eb-536979229abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb100013-5a90-44ed-824e-a34dd630bc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490e4965-418e-4f5c-a712-61b11d29c4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4417e72-e056-4d6b-8943-fe38354c5f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dae628-5e7f-4830-8d04-4119a65471f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ea40df-ac0e-4fc6-9ca5-736225674de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347a1121-0c36-446c-af70-4c5af65d11dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca4d71e-7627-489a-8624-90726812f86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38afe9ba-138f-4ca2-b07c-4d94e8472465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678c16d0-0e60-48b1-9342-5886585ea5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a372cae4-4b83-4943-879a-848dc06e5054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7290ac-1aef-4ded-862a-a1c71ff6e0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fa1162-6c33-46ab-b87b-2f90546316c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2096907-a8c8-4527-83e0-779aad562b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060d11c4-f7a2-4181-ae41-df4225b6dbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc623dc1-5dcb-4b00-9b0c-63dbbfe135be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56905341-d79c-4cbd-8669-f77a52b2a3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939be790-816b-49a9-ada3-34af474b6239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ced857-2689-4ac1-b23a-aaf0d5e66a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74744496-6954-44ed-a7ef-f229a2d289cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2076fb8-42fa-42f7-a670-e01c3d164e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c32fb36-9d51-40d4-9108-8941c7f114d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9665766e-fdc3-4d70-b530-389ffc1f7260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2beda3e0-2299-4367-9baf-e5ce38b29428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbe4e0b-7355-4db6-b171-0f6c0c2c7370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2af560e-b2eb-41bd-890e-79fbda966129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e48fd7-5fbe-4b7b-9eda-7e02e2a8f2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28d1e53-b51a-4768-a98c-53b4629bd060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fc61ae-d32b-4689-a73e-2b385c4d665c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b263f3-15b9-487b-9943-20f755a8d10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f361b2bd-475c-4bee-b6ce-f6be8548a93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae50a055-ad1d-407e-a3f9-bb3363cdc737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1215a870-00f3-4bf6-adf9-2b9bd750ea0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b64dbe-a903-4ccf-a079-2270c0746c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458dddf9-7482-4940-bfa6-d9628903b258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ba652e-e77b-470b-b7da-e7ccf1c45fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bd4406-ca7d-4a89-a07d-03bbcd69f445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e130362-261e-4cb0-9da2-471170b6ba41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e241b3f-f2e9-4276-897c-a2a61d1356b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1f5e51-9125-4d01-832f-bf9286a0f2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0650053d-ad57-4798-a389-ac27f01d17e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672e271e-5cd3-4946-96a5-235060968800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a690579-536f-47fd-86e5-677264f89f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5938238-004f-46fe-a6a7-e8aa6b73cb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cb81d0-96cb-4f42-86a8-dd99c9efe974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd947c92-d95f-4bfa-8e8e-c97457869372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deffe5b4-5a80-4cfd-b25c-356f0f8d26b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c37c0d4-b1c5-4fbb-b008-7d1de9aa47b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.33.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ab47a7-4534-4af0-b974-e8b52eaa58cd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.59.85.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc85c463-b493-474a-a5d0-60821654f076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.126.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fdef0e-9966-4bc9-99a0-aa86c798f08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.91.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39604409-bd7e-40fb-a64b-1736425efca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d0ef29-9e4e-40cd-a92a-1a0c8cd572de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4fad2bd-d8bf-4214-9602-66532ed9d431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c5cf20-a970-4008-888e-6143e602179a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737ea77c-4a6b-4fd2-b173-c6d1e361339b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a182e5-1f37-4249-a795-5eb727365ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026cac85-fde9-4713-8d52-06beac1a08a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31db1592-45f0-4a0c-96dc-4e3e70aa6a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e511b6c-f87c-4ebe-ba04-e9e778f742dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.99.191.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace0f82f-a74c-425b-84c6-2b069f609871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.197.14.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fade4773-96ca-4fb4-be10-96be3787d74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e634af8c-cd16-454c-b736-a5be4066586b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.201.46.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdaf724-3747-4a34-9527-5b5fae5b1c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07773b01-44f9-415b-a707-7c6cd844b6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.225.102.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cb5031-caad-4b34-a8be-c8ab5519da2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b43ab74-c4c1-4e89-bf89-6b81a64556a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.238.5.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668c8888-f312-47e1-9e89-f1eeacbd433d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.247.226.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a54d1e-c12e-4ca4-a9db-ebbccad31ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.53.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc4dede-af81-41c0-afd0-cee7e30554f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a521de7-b311-41af-b877-d1817c24c0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.214.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db82226-8666-4bfe-bdc6-9ef36b85502d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.215.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6068de-8a8d-4397-9c81-96726b3e9f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd838106-8a95-4896-a089-a852e0edf100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bc4a58-41f1-4afe-b46f-519c6f12b938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79227e24-66e6-4a66-91e1-3ca0e307c6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ff9ffe-3626-441c-a410-071b5f180604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884e19d7-bcf6-4482-b75a-65067e478ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08778de0-74c2-4645-94c5-d4f20819c438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a695ff-b2b9-46bd-8c8d-f0a44e3111e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516a243c-fca4-4438-a2b7-eace36008749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd45576-d036-4086-9d9e-cb32af78820f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee00d9b-5269-43b2-aba7-9d94927ad115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2f4236-4d19-44ca-af72-c955701f0757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.228.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ce1f22-ba8b-472d-a670-e93a84e5c6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.228.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5e4114-fdbf-4a77-96a8-e1499854c43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883878ee-03a7-46e4-92d7-8eef9104af80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f514b3ff-294c-45fc-babe-099384b3c7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17d7092-5625-4c9f-97f5-e06c05c3c63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1c1912-7403-4a35-9ff4-049f46ef408d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376bebb4-6520-428a-9ff4-dd5e85a170ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3225d5ec-a5da-4071-9b31-46013a58b40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed64badc-b1fb-4076-8cda-09c8dbf792e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa869f3-7ecc-4ad5-8337-810aa7224c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58eca9d-e342-4e5b-9415-7c7825c14dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81da1b2b-0f74-4405-b3cc-35ce3fcfa1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b85f4db-d2c3-4ab4-a933-3183c77b5d3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.46.91.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef971daa-3350-4487-94ce-de209804ce61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.71.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0039acda-2d4b-4c7e-8bc8-5976a824d295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.49.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ce3ccf-d60b-4ce9-940c-c4c299d5b212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654bda63-2c12-490d-98eb-3d5ad6d7d5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.181.95.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a6f4f8-efab-40d5-93e5-ebe2c61ceb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.101.46.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cc4cee-bc29-4a74-8acc-7683c6bfc9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.208.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d6de02-f37d-457c-ba97-5001f80d8f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.224.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6dc1fd-5703-4f68-9f67-2d2fa56bd60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.228.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542c49c3-116e-421a-bee0-f7c4c5957e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.178.126.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002c1a38-cd4b-493b-961f-f8a272b55377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.192.22.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe5f553-2553-4857-86d3-ef436602ed36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.203.61.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4ae509-fe26-433d-99a4-a21bce3990f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.206.228.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d79c54-8536-417b-8d19-c23d28e79fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb50efc-78c9-4f56-8577-d06977eb19b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.4.130.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670c5bcf-84b3-46b0-b0d0-c675e979cea7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.105.212.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3ed84a-cdcb-4dbc-8394-40685c1a47eb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.105.217.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fca7296-b591-4ccf-8831-497898fe7d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.115.147.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0419441-d0e2-498c-a6c3-c4062842b85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.110.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed742512-b8a8-40a6-a5a2-ad044b72f3f1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.111.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17bba4f-722a-4564-bfb3-3928070ebe80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589ea2e7-b0e8-458c-bcd1-295f48acde33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5391b0cc-00e1-4845-bded-544d0477f208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d019b3-9186-4018-82bc-0112fe5533bc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38f4eab-79ff-47b7-a849-e9a414b7b53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3be0e8-1c97-445e-b207-9cef328a3de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a0c917-04d9-445e-b589-50ecf3236f90", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.62.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31ffa66-1933-47d7-b9e0-799031a269bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.122.119.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8408868a-f901-480c-8800-a4ce42dbda6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.122.98.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f548ee74-d048-4902-adea-985c76d5312a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.6.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c9ae59-d953-4ac6-958e-0481b65b6d8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.241.84.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2f522c-8cda-4989-a30f-28dfd42bb71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.254.90.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a61656-60c8-4bfe-b2a1-99f8b96fee5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e18d9e3-d61b-4c75-a245-a80fb73fd9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1303294e-596d-4a29-8482-1b78e16bd389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.159.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d3a6cf-694e-4e0c-890b-cc8a8c1932f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c950448-2779-4a5f-b7ad-59de941c197f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a81e82-1c21-4184-ba51-12643dfd233e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7ddd43-87f6-4369-9c78-0db55f5d3c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560d266f-6eb3-4d42-ac1b-36cb4b16768e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee45ab7-b86d-4a82-80b3-f2ae97bf6f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e545e8e-0b6a-4cc0-b50d-e9c30b8348f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61905946-2b31-47b7-92c0-f77a495c3579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b9d2ad-4249-4ee5-9825-17b68a3ba472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae19b19-5d09-42ab-a2c0-285a380b3374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434bfef2-3a8c-4a2f-b4a4-93f42c5ba608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cd935b-3b83-4786-83e6-a3683bfc7aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a136b07c-a754-4c28-b79f-0491b64448ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca8a99e-4fca-4e0e-9ce7-605b56701ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faad8a3-241b-4cd3-b2c8-99e606f741e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9982d8f1-4ecb-4853-a14a-483c9e4ce88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64c3228-46d4-45ad-9e0d-415fe5afd1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f909b0-8e8a-4bb9-8cdc-851ce62827cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bca79c-8df0-44a9-bb2e-c0ef9aee604a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcceb7d-8d3a-419a-ad30-597e4f9a833c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90b7d12-baec-4eb2-b0fc-3d03a78a5a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2c1990-1d90-420e-aebc-f9f39a9b00f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaa2a6c-efe3-4ed2-aa3f-a69925ae2d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c792af44-5915-4dfe-b002-c0a980673dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00dab99-b963-431d-918c-2bda5eb29a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed3cc6d-0b6a-42bb-8b39-c188db116041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6e834e-3d86-4b38-9414-621cd8030598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.9.231.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb63e894-87a4-4e66-9b67-fbf56d1f1510", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.1.104.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60c0770-00c2-4f38-813e-59d97feefc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.1.88.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb610bd-c234-4a67-b1fa-eae34faf8658", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.10.225.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8feb79-02b2-42e4-af23-233c93760ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.104.174.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6784530a-c3be-42e3-a042-8a22a248d79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.105.244.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db9a561-1178-412c-9ffe-c8d569caa327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.105.246.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f4bb90-0cf1-41aa-86b8-e811254f16c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.12.134.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46f23f7-8acb-445a-b010-a27383382a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.172.61.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b57e3bd-c72b-4c04-a003-e074bb137fb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.184.148.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf3e286-026b-4a2b-bb49-169831becc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.206.42.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24818d05-c381-4250-96f0-8a00bbc9963c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.212.73.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd7da71-ae76-4440-94b3-df24d1a96af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.126.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810b953a-c7da-4d5f-aff1-ca58ddfe73d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.44.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820d30f0-87fd-4762-b91a-be773d36cbae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.232.83.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0a5a7c-3d52-4c7a-abc5-4f730528ef48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.239.82.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4a74b2-57af-4af2-928c-f2408b4a1aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.32.121.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41eaecab-5538-473e-b58f-57e25a194b9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.67.38.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933ac7c4-727a-4db2-bc65-c3b99e08b7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.91.58.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8eaa20-b877-4ae7-95b3-4b56fd818775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.91.75.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5d82e6-e322-40c5-ba98-a25ea0688149", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.104.75.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62fbc71-95a8-4834-808e-2201e109d211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.123.196.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720cee22-15e3-4312-b2bf-a38580307558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.126.239.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35f566f-1ca8-4555-a77f-d0520aad62fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.145.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b36176-03d9-4824-a9e3-f2ae9908c868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.212.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d476ef0e-446a-460d-8700-f65c2b6f92c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.24.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb7f5cb-06b6-4215-be87-2710a1de3675", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e603fa4e-e448-41a0-a0cb-fbcda2a6d69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd436cb-501e-4c66-a61e-85cc26f6b172", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.158.192.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0653f7da-286f-478a-8322-121f59c16043", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.159.221.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ed128d-4271-406e-a221-b9aff0edf713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.176.80.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09dc2ab8-355c-49f0-934c-4fa9d17c4532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e32fbe-abff-43be-a2cc-84f8ca2f70a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d178a8c0-faf2-45a7-af87-9caa0c2c33f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.207.195.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22fe6be-20b7-4b83-a9c7-a9f3ed641f52", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.216.13.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38863e17-13b6-4bb2-aa66-8b5e3fab6344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.236.22.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b5ead6-771e-448f-9c8a-d74692da460d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.253.39.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04909a8-7938-4e88-a142-9506c90820d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.49.206.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88963617-1170-45df-9a20-e89583637563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.61.161.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8f1fe8-e993-4924-99d8-06d64e12556f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.92.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b635356-9785-4706-9fd1-20cffb53de28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.74.85.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688e61e8-dbf7-4c5e-aae5-5aae75d01766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.83.17.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8513efa6-1154-40c4-9b7e-5d0fc98b4c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.91.48.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d09477d-09c5-40a2-ac15-ccfa18f37499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.1.224.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28dc2ea-a8ec-4a91-aa10-46c5899933a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.1.228.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da930a24-4535-4f90-ad1c-987b5241cdb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.104.37.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce4f869-ea14-445a-b158-add089505017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.108.85.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7bb616-21c2-4872-8ca7-b695192cf378", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.125.135.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca3265b-f55b-4604-9e26-77ba908263d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.197.155.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748ef65d-b397-4588-8f9f-b7c777e69153", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.33.186.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad94ebc6-43d3-4e21-8e3a-ab9a6c7cacd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.42.146.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0171fb3d-ae47-4638-83e9-816d9d37f520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12a8dc5-999d-4db0-b083-732a97326c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.186.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4280cf-55be-431c-9342-d0763a263bdf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.51.61.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75223883-901e-49e7-b547-9430d0bf1e6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.53.165.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d325e5e-52de-4ddf-87fd-de3c1316d743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b0ca6f-5e3e-4207-a257-1afef5ba8f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.104.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686332e5-65f4-4c21-b75b-1a69a57402a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.99.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4125c440-e365-4389-95c2-e9216d23a7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.95.30.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d11f7f-bca7-4cde-b411-173963971d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.96.191.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de84d3d-51fd-4480-872f-42fec204af65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9509a6d5-eb02-49fd-825e-96b3e6c8d8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b266ee-0530-45e5-88b8-ba8619ee66fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.212.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725dd837-8525-42b7-b855-83b98f3d4030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.139.21.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c44c96-9b8a-4fa2-bce2-8809556be535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.143.235.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959e7f34-0fc6-44b9-b83e-57491918f843", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.144.3.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d3b8b3-9b2e-46be-affb-1b7bbb4aefad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f837a551-24db-49f8-8eb0-4707553d3d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708c3fa8-d3d8-41f9-a38c-a120bdadaaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.211.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db8a89b-d2ef-4e68-9ea1-bc99205e2542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.20.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a43f1c7-d611-46fd-9525-ff96bb9436b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.153.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8837e15f-95ec-40c7-bbad-42dd342bb121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7369f9ff-7825-4422-b1f4-fa7abaa33f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302faadf-ecde-4e32-971a-17eb7cb3e90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d0ae7b-eb1e-4507-a675-244cb3afdb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df358655-ca21-4234-8266-069477b75dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.140.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233b3249-6f33-458a-a16e-0344dad9cb4b", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.19.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d06f5d-98f0-45e7-83eb-a364509dd23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.26.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d1f3b6-eab0-40b5-8389-2ee90e2018b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.5.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db6c90c-768d-4aaa-94e6-83c0cb8d8442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.1.156.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f3eed3-ff3f-40ae-90dc-8ee06b3b67c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.138.194.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4423baf3-9153-4598-95a3-30d46d4a65b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.150.243.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c1bd53-a20d-4c00-bd8b-babf03dd36b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.151.22.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cef608e-3dec-40e2-9d1d-b9a908f461fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.163.29.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be066b25-dd7b-4a0e-9bc7-f2b89916b4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.165.1.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb08aaa6-0909-4aed-87b7-f9addf393139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d86a43-f540-4106-b9bc-a41178fc70fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21c1135-c7df-4d69-9d43-679892c034c0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.51.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2b2e44-9ecb-46b5-be79-f74d46e6eacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.183.249.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdac3ab-44ae-4bc6-8f8c-25942d52aa4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.134.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f6c373-acae-4ee0-8731-5b38bf9461a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.141.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638545c5-a9e1-4aea-8a92-268ef5ce0106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.160.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6b39de-359b-4f13-b2b3-f5945b2f31ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.29.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878ef36c-2b44-41b8-b166-afa16c01155a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.30.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ce49d9-9d0d-4588-9ff2-d8fe565e1ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.189.168.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cccc680-3a2b-4109-a358-162a1b55cca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.190.240.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf19933-b148-4f3e-9704-5bd22ccee68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.193.205.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d2f428-0ef9-4c65-97de-fedb5c217fd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.195.206.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0863b6-fee3-4cbf-8644-4492297a9d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.210.128.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826b0cc9-54bb-4974-b0dd-49032626dc05", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.247.61.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3154bc5c-7800-4c49-85f7-b1d59e95f9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.146.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1fde37-d04a-46ba-be03-d82872100a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b992f1-f70b-4e82-9f4f-b9a0bd2c65f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.177.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ded050-6231-42e3-b8b2-f279e71d0c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.194.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c5dd2c-bdfd-4536-a414-4a8bfb64bdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.233.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1676d8-2c4e-4069-a6b6-6e281e81d34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.243.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147aa6e4-5e77-4419-8482-17b824893265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.138.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c001fe-249c-46b5-ba6f-7e84885220cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.245.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df6b5e7-7147-4226-8a6a-bd5caa0d5536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.231.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0f9937-475c-4123-81a9-caa84cb3829a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.123.136.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec68ec8-38d0-43b5-a808-367020153cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.15.102.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40bae26-9a0e-48be-9a81-7a282ad24e60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.161.70.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdf9e78-4a36-4ee6-95eb-19980aa3b484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.164.139.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d31f50-edc6-4589-9478-acc659dd0550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.174.229.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816b4adc-7938-48be-8d32-3610837e7a82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.196.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ce7d4a-bc9e-4ddd-bc62-19789020d12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.199.4.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcc3733-7f54-4c9e-9783-a958b922b517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.199.58.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80cc2f7-264b-4a97-89c5-67c0f9e8ef1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.140.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a409062-5721-4820-83f1-e99d42c9c23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.225.157.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba35891-b550-4ccb-9273-26fa61e791a2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.23.130.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c490f4f5-3614-4197-b24c-c04741d7b682", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.23.134.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e370a739-166d-4c41-b1fd-c790742dbffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.41.206.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38eff85-0155-48bf-94e1-b715e094a052", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.43.202.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f1eea8-23e8-4cc3-b917-d352c354be7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.4.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5297f87a-26b4-4df8-96e7-16b986b03ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.79.85.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0693ad45-7c27-4f7b-812f-c5f425335b85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.87.26.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883d18df-2a76-4146-acfe-7a83c8c742e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.91.135.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2557890-c523-48c6-8a33-d800a7542b25", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.101.64.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7430dc31-81e0-4dec-9f42-e9152a0a0345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.105.125.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89fbff4-73e6-4175-82f2-a0a6b4280839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.111.106.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e0f41d-7b24-45e9-b9ae-1d5124a23535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.225.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c06899-cfaa-4303-bdcb-819a865cbeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.225.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcff69c5-710b-442b-9c00-7e802a759c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.229.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0be7de-81b6-4e54-93bd-9c614b7e0ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.140.218.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76102325-f13d-477f-bf9c-c9e477a50a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.184.82.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1fca61-9c14-463f-9b42-4bf31ae9d45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.188.45.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebb56e5-eb9a-4f2b-ab23-c614bdaaec25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.254.159.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8c63f6-a2ee-40c5-93f7-332a231c9519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.48.206.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3559d2ad-f4b9-4cfe-8bd3-f2c5e6e9aeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.182.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10f63f6-d2ba-4d25-ab05-d96f867a2b83", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.184.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9e79fb-2b5e-4d71-aee7-d8d7eb958ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.186.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44dcf3f9-a375-4cd9-8f9b-cc4c55c416a8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.61.35.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5de44c-d900-4c4e-9b41-db412bbe4a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.61.44.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2fce5d-e7a5-41f6-95e8-cd77d308e9df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.63.46.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31e0f3f-ec58-4a44-934c-0f200ef846c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.8.226.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4e77c3-7d6f-4ff4-adc9-1d5f46bf3ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.8.65.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7467daa-dace-4335-b2fd-d2b654941ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.139.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c9a30d-5f96-4ff2-87a7-f9aa8d771e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.167.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e8d7ec-5773-4a29-bba7-5d9f2b951d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.6.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43c9ee8-2715-4fbd-822a-76ed54fe009d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.181.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed825f13-bb1a-479a-8dd5-405c82c1cc51", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.7.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852582c7-a4bd-425d-afe8-b410805a156a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.134.132.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44daf571-fc38-4e1b-878a-aa7a5334c3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.135.39.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676b191d-6881-4b83-a63a-c8b70a62ff35", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.147.124.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc844c6-5795-4c6b-bf6f-c65bcf4a515a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.147.67.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1eda0f6-4390-46c3-bff2-57c77e952570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.152.176.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71213cb6-4be7-4447-a770-a7f9a9fbe69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.156.37.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677798df-4116-45fa-9aeb-5c90c0f3dd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.157.59.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f8f6c7-5f47-4b0e-a589-32451d80521e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.158.108.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dcad56-bbd9-4057-98bd-a9174559c082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.184.52.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cc70c2-c16b-42a5-8661-8c71a7578671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.184.53.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a245664-a250-4dce-8881-0072a3ca73bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.207.45.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7605873-0136-44ed-8884-7a19a271d0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.215.123.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9b9c57-6e50-4474-b77c-63e06d487b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.220.38.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760087fd-363c-4116-8fdd-0d076ea06134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.223.249.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8981279-86c9-4bfb-8d60-0c9aef0cc552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.230.204.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce13d12-daaf-47bb-a347-40d7430f3a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.55.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c73982-87b1-488f-9a30-a0b94c3b0065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.245.232.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb1bd62-bc45-4861-95aa-37208cbebc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.252.22.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9533935e-df87-4fba-b881-31baf7ddfa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.34.6.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdb1b62-8a6a-4474-8cdf-67127ad47e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.6.142.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c68a0d-cfc1-412b-8d85-38900f6222b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.107.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4e8785-94a3-4fdd-b6ca-ffd96d6a9754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.89.246.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc80a78-1ca2-4926-ad39-d320e5393b74", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.91.186.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32000c0-6e18-44bd-94c6-feff3c4cb850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.115.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df58e764-b21a-4601-988a-767a2d7ba7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f40c20-2054-4ed3-8cf5-51a3815a1e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0834fe-e547-4496-9071-f2f992a92644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52058bd0-1208-46d3-bd47-41ac3b8fed6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c55a87-d11e-4498-ad10-9c83dddbef70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bd06ed-6ab7-4014-be3b-433a9a287ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28feb7db-6db2-40e9-bef1-a3b8d058f193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326b4b57-491d-4bf2-9661-2808863b26e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debef8a1-2300-4f84-a1fb-54ebac59a8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e752afa-10f9-470c-ba79-8d90081ee1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf017d56-7ba6-40bf-a783-b99fbc76b1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS, TELNET activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d88bf7-a6ab-42e8-8894-9cf2523e1408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871991fb-f87a-4851-906a-1469f45431d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b228fda1-c28c-43e2-94d8-61ba205cbe81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f81329-b24d-4d90-abf1-28971493ed64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531d9c22-76e8-4bf3-8003-ddfe33cccfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8e250d-ca8d-4de9-967a-da28332cfe38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abc3a0a-76d8-42e9-90bb-20c371c45038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849fabe8-7cec-402d-9ec4-b6605724c470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33229b2-14fa-4ac6-b994-6d362ee86ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4ad80f-d543-4237-bbfc-981b18091007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2021de-a242-4141-a1fc-f4816a119365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7251374b-95a5-4415-a578-9a638f15e4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c90682-9c47-4b77-9d35-cb5bc774d32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457470d7-882e-48fc-a9e4-db70cb9c626c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377604bd-63a1-4234-b280-f0aa7f90e937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e7ae98-7885-4088-8975-1dc79e7ddc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b049f40-d384-4433-81e3-d43dc52f9dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6280757a-1a6e-410a-99ed-883e58fa8fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5c87f7-6903-46cd-ae3b-426aebb4f4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7e117e-1b2f-4b26-8045-91795a7f5a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3b4cb6-9cba-4bab-bb0e-381eace47336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbdf428-05de-4450-b28f-a95a132c99ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f571661-d5a2-4d70-81dd-373329f821e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0f48ea-7cd8-439e-91e0-0277ced121bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df199a33-a4b1-4c7e-b635-8316f8db03ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651a1af1-7323-440b-a3b8-e394f4a0de2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1ee19c-da41-4de0-92fd-74c7235943f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6955617-61d3-4c1a-8fc1-7a32fef6fd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b746a230-b7b3-498b-9c41-a233085c1fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb73da6d-d9cd-45ad-8de9-6ecd25b348db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f0762b-a43d-4f69-92e9-d41d060726c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035ca247-b454-462f-9da3-6634563284cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b81ade2-db9a-44a5-8ea1-c11ac42a76a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860d0312-8ca3-4cf9-8ede-85ae2853eaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab604ba-c9c6-4e0f-9060-cae528795cef", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.168.31.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdac624-3838-4521-baf6-86071deaa773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.203.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea339b5-0a92-4391-9cd0-3b0d19c238b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.64.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83daa79f-f948-41de-9eea-df6f7611091e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc859046-7080-473f-a60f-984ab723b900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5226456-be02-4628-974b-ebd5f6b3e971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.112.200.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70662335-0759-4603-a304-3e8a37a7a379", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.117.151.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f646544-2f97-40ca-a263-f9a41e2fc4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401b690d-7f54-4e6a-a7f2-b702a65cbe03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e918f45-756d-4fcc-8e0c-7a028889cca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00958fc0-bb1a-4a96-8ca7-7c2972cf7b10", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.151.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebee985-2f28-42e2-8f9d-712a6c5f7b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.14.4.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e9f44a-cdbf-4704-937d-0670f88f43e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1787d91-a923-4690-b63c-6855a5ddeab1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.159.101.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842b47a8-7587-4fc7-b026-1f62618c6913", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.173.207.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33fea95-67ee-49ac-be96-787102213098", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.175.93.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ad8a1e-1390-4972-a32c-e9c4db1bf2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4493f2-88e9-4d98-83df-7e100e6a2fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d880702-efa6-4422-9a77-c2bc72ea7d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b77236-7a15-45e7-a0ea-9e1bd7e99171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50697c52-2055-4855-8502-eb7dd16d800c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db43da2-7cad-416e-9189-07a920b78f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202f2fdf-176f-4087-85df-8710e025e365", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.78.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f5fae2-d0e1-49b6-bf1b-cebfb93c97e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.239.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a79bc40-e517-4a50-905e-e3496e8f4192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909d4e0d-ff32-4096-8b68-0bbc2e76652c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.190.25.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9861fc8a-efc2-4ca0-be6b-0d37dcd64c24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33218147-787a-472b-a8a0-852617a4b1a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c82d64-e18e-4d68-b747-8e85fbf85a1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8bc761-1f13-4748-8c16-060b310df375", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ef1402-a417-47b9-994b-3ca0c5d98ee2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349cd6b9-d52e-47d1-ade9-f59b391e76d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5800f6-1250-46d1-a5ff-9dfe80705969", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3513258c-d74d-417f-98a9-f397d727468c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c728c924-c0d7-4212-9398-9f482676b4ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51e8ced-af84-4031-a3e0-a8708eba2c31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cf0180-3eb3-4c8a-9ca9-7273f8bc038f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563942da-2a0d-4b42-8450-562dd2ba6f3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7090a950-8581-496e-8a1a-d97b2d3a420b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7b187e-9005-44cf-8230-c1764a73f6eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc3e773-1551-482f-b007-6b1ec1d4febb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d63f6e-eaec-43cf-8087-d56ed9e30b69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f947dc87-584c-40b1-b8fe-7bf20a6468b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3043ee01-76eb-478d-9bc0-a1c8ba9b7a80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccbfaba-385b-418a-99e4-e018e552bc40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23bfb55-a971-4e0e-82b0-a1983ecaa195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca22e12-159c-4b91-a996-ad16fa2a42dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5c68e9-d897-438c-b8b4-61c40807fd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8458eca3-62b8-4d55-af9a-ab3bd16350bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0627329-52d9-4828-a34a-2d2cab05a127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ba5fa6-0427-424c-9b51-60561b4d7eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae7de64-8a8b-46a0-b33e-41d4d48f0e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3bd330-c9e9-40a1-93dd-970f2cb5ba02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29523223-a2c5-4523-b2e6-abfec3fb1f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.211.6.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbf9c23-5617-4fb0-9dd3-8236777ff1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.117.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5575454-8ca8-453d-851e-17de8bf6dc40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58106b3f-8986-4dcb-b2c9-b9dd998fc77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22480e39-5ae5-4f37-9061-eb30e72fb049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e456795f-dda6-49d4-9149-e4348dbcd81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00c230b-fb90-4de0-a708-c49d7934e5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0358773a-c75a-4190-8281-19ae3595526c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce71a8c-3f41-43da-8279-1c1df437cdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a89ee95-2f39-4ea3-bfc4-8632901efe1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0506a798-c947-4b42-953c-09fa40856ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2709ac-49a3-4ca5-9f7f-536971c80870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b992199-f104-4112-9026-38ac3fc39612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56995785-7cb7-49d5-a2af-343e24469f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8fb3f2-06b3-44f1-a044-f726602b5f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c1fde8-fd7a-482b-a8d9-dd6176544d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3dd2d9-8adb-4e97-92be-6370a3fe7a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b18cc6-2857-414a-8fd0-7643ddefe47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bcd05b-b347-4c37-ac7f-83183891f90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3165cee-02ba-4557-a442-43bdbfb64439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7675f96-311e-4a33-88d6-a157fb3cc104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdf6bd2-49f8-4be0-a1ec-0b6e1c7bc6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b4cb70-d01f-45a8-b2a5-1b762e2b0338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61317267-1a9c-4f45-996b-2c03a8bd8d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0d18eb-12f4-4524-8b7c-3390d8274f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25958e14-0ab3-4393-b3d1-79caf5de8615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16807f09-61cb-49b1-87f9-55a4e664051c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bfbffb-d6be-4e5b-9f3d-776c02221c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bbe695-4493-4ad0-8949-4b84b2b7b93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79a7b65-43a3-407c-8b72-d865ceabbb01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0d0ec0-3b6e-4e93-af9c-52a8e0572bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c752e222-8f43-410e-aeab-15ed2545dfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c8da15-1f3b-4eab-9e74-f18c7e085a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1373d740-c27f-43f1-8d32-7c2ae4aadacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cce637c-6a2f-471a-815e-0bf46587f4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be32a90b-e0a2-41c5-8b66-04666f8873a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590b173c-c478-4ff5-a8d6-9f70ad3f5d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b966aca-eb7d-4e90-b45f-ad1be22831e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6fca48-6e62-4100-9d01-bf8e20b7ae06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae03616-fdb1-4f69-a3c7-ad5eb26cfb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039e2fe6-92e4-4181-ad4d-d1534ca14294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba76be8f-d8a7-4881-a0cf-a6b7217704a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93f2395-ec3a-4efd-a457-9bf87fedf98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b5d29e-5e5f-4a8f-944c-10a5149c521e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e368a2e6-f746-424f-9131-85f6fd739a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9155f753-1a0e-43e5-9577-b2f23150cf54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f44b242-794f-4bd8-b320-1671bd0cf75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc09de0-68dc-4d42-8c27-316a0b157ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f983913f-94e1-4ed4-9684-cdd862d6edad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0079b704-2012-4b3b-a07b-96b8ac05b9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f2eac9-68cf-4a31-b81e-791887b6b9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f91b12-8d8c-41b6-a52c-0e147ace02a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b92e15-d819-4adc-9748-02f93887535d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5b3c5c-3a54-4316-84d8-b7005a777f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e77800-5be1-4888-8a7d-f9451407c41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8aab27-ca3e-4184-8847-d9acf556cfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcea4a7-4ec9-4e52-802d-546afb9e7ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdd2161-24f7-4802-a68f-167f5255c099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39618978-0b00-4be8-bace-16786c044326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec634fb-9aca-4195-8a11-3518dc518abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dce8f9d-c58d-4210-93cf-db377f078579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f38b892-b9fe-4b47-814c-657649a65135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2576aa-1e3d-439d-9181-9caf63f6637b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db06f681-5d0b-4d55-8ed6-13525faf4e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90d32f3-cd9b-46e0-a8b9-b5dcd60cce31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19917efa-05b1-4e14-a414-43f8df1ea8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40d3397-7f13-4df4-98cf-46df27427a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c126f84a-488f-4952-a614-6e81730b2b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbc7143-5589-4563-9218-72c0c327005e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449fecf8-a2b0-4750-94f6-d8642692c88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59fe90a-69ab-4d6f-9e27-8802645ee96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b8a7a9-4b20-423e-8dd9-84bf5cc386e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522d48b2-b664-411c-870b-63df6e8fe56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44abcccd-259c-485d-bd7f-910384a7b153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4321cc0c-920b-493a-b4bb-b8f9e02c338f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d64cd2-6916-4777-8285-f4bc5b9ea8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc96c103-a1a8-4046-9f5c-035b12498fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905f75e5-99f0-4ed7-9d16-bf677f81ff16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb043a9-28d7-47ef-9dc6-31a8c2f6a86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06bcfbe-b982-49dd-89db-afac5c2b1924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd06d6d3-ab45-41be-970b-46348d98b02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9b0fba-d2be-4506-b3e8-7ff5762df535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54adb448-8468-4924-aa57-4b8418252be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d1f9be-46c9-4f8f-86dc-4bf2fa6fd5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e592aeb-e18d-45e5-ba8c-d42c89dcd21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fab678b-6919-4227-8e24-6e9af11bda71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e973bbd6-f80b-4e63-98fe-b3c7e15910b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a8f4fa-829f-4209-93c8-0b691df01ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac9ec9f-813e-4f86-8e57-646082989809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee39823a-11dc-4e9e-8c59-60867c410eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa786b6e-01ae-4124-b671-0b4f351f0dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b14d07-8670-47ac-bbfb-809eaf8c785c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80548d0b-d941-44c6-a35d-e05a5fd5e323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f66c8e1-3f65-414d-b07e-7cf1de4bb136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70cec16-2b67-4a01-8a54-19635f975447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7509e2da-6080-4b73-9aca-3c1892139a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae7fc5c-7366-4573-a3e5-0659314da178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42613ef5-0d05-4f95-8539-a604228dd4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50057465-909f-4ed5-ba57-33687bd15634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd635fd1-b4e0-4758-884b-3ea8a9e257d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603ec65b-de1f-420b-a7c2-94da84ba8420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d4cb8e-3aae-4a67-b2e5-a09101b46135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d402a3d9-e351-45a5-95be-2f2cd0546b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150d98ae-f6aa-4e21-81cf-00475dfec180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8c3b2e-89b5-4989-ad6b-d5c1b0480e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef1219b-7d0a-4f48-8b80-8653e850011e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208bc650-1214-495e-8158-3b0ba8a7c40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0532f378-9808-4d57-a3ae-e34724a90e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f9108b-4769-42e1-9065-55d5b7acc7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205b40be-c954-4822-82c6-7b784f843683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63a7ae5-fa06-4c5b-baac-888c68e81c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8801847a-d12d-46e9-adb2-31d1e709d7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8415e47-aa98-4c41-85c8-1843d9e1f39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b9f459-8757-4cd6-9f25-6f0c699bba13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43456d6-8401-4195-8553-a7106fe54a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbfe4b7-6ff3-4992-948c-5f1ebf1be24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cef91d-4658-4b98-9ed6-10138845d3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f189b0f3-2902-48f7-b0a5-742033a8fb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c92e6a3-51cf-4549-a1e5-e3a38bac48c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2459f93a-bc58-4b36-acaf-f9007bdecbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c0ee2f-369a-4c62-be42-50db9cc33036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fce2318-f461-4317-a406-88a3e2075992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d2f578-5c1e-41c3-afe6-3d73d8a1df63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c88b839-d226-481b-92db-454b6dedb2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a46164-987d-4e3f-b76b-55b936e32260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff4662f-aeb0-4d8a-8771-419b8669b373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e491273-9c61-4e7d-9e3a-80b3bcc3124b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581c025e-2a25-4d53-9aca-6ddc8ad00d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1518a44e-02f2-4651-a633-c71a9a1d410e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a866b79-413a-43f9-a6ed-65c6979ff743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e796569-a9d6-4599-aaf9-90261a637adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5552c217-f34c-4c76-8371-14df638c7a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3f836d-2643-4006-88db-6b8623c71843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bbe578-518c-4844-97fa-a5fa309335c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa1dfcc-8d15-499e-a914-a29a19e099f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9806818-c16f-48f1-ae43-2efb1f09e1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ae580f-2ee5-4865-b34f-43834c58392e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0668d71d-1974-44f5-b0f9-0acdaf0473bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1368fe29-18c2-4ed3-8898-8d17d151c8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd78f32-ebbf-4b4b-82fa-d2646850d670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e998c1a-c013-4178-a060-843af17b0bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f7f88b-fd64-4cfe-ad53-66ff67dcb9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb35294b-bf07-4fa7-9ead-2eb634309a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb58b0e4-31ee-47cb-b356-7889f4c0872a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693a2041-0e93-4cae-832c-f791707217e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0563f579-6b8f-4cbd-b9c0-5710cc90526a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f51f5df-ea43-4e44-90bf-b42df9f4d457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661ad937-5fae-45fe-b53f-2d6acaa654c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea0fe9f-05b7-4f38-8d1d-8fca8be534b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0542f56-f9b4-4967-ad6c-a05925ed82bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58fa7d6-d405-41a9-b9d9-8458a39a52e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bde1ddd-c069-45eb-b1da-afb3b458fa47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd0ec40-3f1e-4ea4-8bec-ffb07163439c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e35d5f0-ff0d-4095-8501-2a2ee7b3e959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea22256b-5bff-4fb4-8971-4f97016ddd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5e3b6a-2eb7-4275-9d58-cf5bc2e6e8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b913a13-85ae-412d-b7d9-89ac23fd94f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df88831f-696e-4630-a7d7-9d22ecdb0a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe0ce49-c08b-4b28-80a7-d4c899fafea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65173762-cc47-4490-99a4-92d219e9b966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead4c31c-a090-4673-a6c4-934bd25979e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae8013d-efa0-461d-b6c6-ccaa36524008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a00fc4-8193-48fa-b4c9-d7d42a3635a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801591d6-27e1-40ad-bccb-b58b27d33e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97ff287-f653-4749-8e2d-dd9ee6fccf5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c18b8dc-b259-47d4-84ea-a7c35693d3a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a326fc-203f-4c9d-8eba-e910f22a3475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10ddfab-9a26-46a7-a128-558d78256f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfcbc91-b5b2-4b3e-b15b-7be3a1d312d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f798939-a070-4dcc-af89-2b8137c080e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673df132-0e05-42ac-94d3-90be4312d204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cc9109-c88d-4af4-a4e4-8e66843676a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b2e703-f915-4aa5-b012-a3f7b07d6254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889822e4-a6e5-4cd6-aba8-4aafd312333d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be28362-1909-4bdd-89b5-774f6b6f5008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6904a93a-d49a-4320-9fcc-0d2eed5aae38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba96adb1-8836-4a31-9cbc-862d375e8164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f356ac-9e2d-41cd-9ce5-cbdc326405e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a852543c-f383-44a9-922b-36ac9a9b296b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f99ded-e86a-4734-ad24-22f9e9c967ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb92739-ca22-4eae-a9ed-96f411df4669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d1fc83-f32c-43d6-a394-c360e0a8be8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdbd6a2-427c-45be-8561-fbf98be855e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2292ea06-5347-447f-9092-6606d04421e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ee16be-c005-4b4d-92a2-f34601d228f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c466bce3-1a7d-4a6e-8279-9d94734f55da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a6bbbb-6b8c-44a5-a52f-68583ed1a652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d930458a-6cef-4380-80dc-db7e8ae58157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0d6cc4-84e9-4ecc-a2ad-827ed7e5061b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8764bc1-be83-4a9a-902f-49fa5e15dff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39ebcbe-3a17-4609-b707-baa452737fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c799b6c-c179-49a4-abc8-37bed29d298e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421e3eb2-10cb-4bb1-b956-8d5d9164cff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20ace04-deaa-40f9-b4fa-0f5b073a3a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c50100a-24bd-43ca-a10f-3e3494fd38b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6658c1d7-62e4-44ff-9ccc-6588b9e7c7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7baa0b4c-4ca0-4c29-9900-2c93cd01737d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0877bf1-b686-4145-9482-0a88ad1ccec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee076e6-0d9c-49ce-8546-d46436ed5805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fc6163-d9d7-4202-9fbf-313bac4ce891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2801490d-62b2-4854-97cd-a89003409338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f397525a-d07b-4051-ad32-e733a848450d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4ee7eb-e891-4e3b-86d6-4dfc64ec67e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c4b8f0-29be-4942-9610-c99eb52ac388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5face8f-87e1-4693-865d-7405b980ede0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b48f8c-6ffc-46c8-a223-605b055523dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c17aee9-906b-4287-abd5-3ec796d79cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f8eb31-3bd3-4b91-bfe0-069f5a21a47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c4f44f-d3de-43cb-a191-2070205f4c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649ae3ef-e504-45b5-afdd-4dde9de36133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885b4124-5269-412f-9031-14d4f0c0f611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00354ad5-be30-4744-b6a8-c26cb0c44fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1e74bb-39a3-4abe-be96-0b189a5b8ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0415ca-7903-45f1-9cfd-8bca467286ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc424b37-34fa-41b5-8dda-c1c19047caab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c81703f-985f-46b2-9570-e71e566132a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09faed54-3409-429c-92ed-c7e2209e7c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f2200c-100c-488d-8be3-4d64196cda76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d22344-87c8-4080-be5a-a71891581231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3906d9-6475-4e10-b796-6ccbddb5deb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502ea086-0b40-4ed5-8f43-f884926eae20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd2f25b-816c-49e5-a86a-fb96f9faeeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c933dde5-fea9-4a69-b41e-3382d784578d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb720210-1d79-4f0c-97f1-f85960707b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fea121-4ca0-4a07-9842-17463eef3859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3aac285-0a1f-469a-a261-fbd6bc1a22ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad582b8c-ca1e-40f4-91fc-e05d6de182d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d7c0a1-ece9-4464-b999-f6a16d737d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb604a94-ed12-42f4-be19-9f73735a3b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cb0db6-91f9-421e-a860-17c7d680e850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6497b4b-dc92-4603-bf95-2c89efea60ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0dd15f-3760-493a-8e05-7044c6d7a37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88aca465-7e97-422a-a627-ce805238ad36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4361cf39-9b39-46a8-8407-edb2e0bb4d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dc4672-0edc-4a6c-95ef-368f01782802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771187b5-865f-4c72-acc8-6c8b1a927a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcbf351-fc90-4db3-bbc3-9fe6d76c0ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7641f4-4db3-46ee-b9a0-2acc7ef01dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200b1d66-3c6f-47ec-9f7e-4b3d80048216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128dfcfb-d8df-4ee3-81b9-949a9c441312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ad3693-48ad-47b8-ae86-dfb1dc2a95a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5be27d-3857-4348-84e7-f7c23fd5b6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e46d6bd-af4d-4364-9b12-df401bf5a8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e4dadf-1b3b-4791-995b-22ff87886bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53658ea-143d-4fda-a54b-72ebe1077071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ea8e16-8049-429a-9771-152264680022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920e7d7f-d4f8-4e3a-bd2e-26bcb8d579db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08357ffb-8b50-4369-beeb-3ce8c831ad6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8f1022-f31d-4f7e-9949-1ce548409a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86851720-977d-4a0f-8116-b6cd36eeb89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6051051-8eb9-4d12-9d6c-88fc8bffa697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151c67e5-7ca2-4770-afb8-fd4b1de75057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f840cb76-4da0-4923-8aef-0dee9870b1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830312ee-8244-46b8-8ea7-96ebf0e22a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f550582d-876c-4bbd-890c-fa7b74e6c775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeb5755-0417-4564-a4ec-b66fc02a2a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67318c85-efe6-4339-b862-c3f91fd727c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3f2e13-e98e-40df-9088-1d2bdd77131c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d2f0eb-291d-4113-9796-a86eba51f211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a53261-1dd8-4caf-8e9a-8d8ee8c9ba8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a870464a-080d-4e65-b079-901a32eb671a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5b52b1-5ab9-460c-a7fe-27b260574f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2d79ed-deaf-4c58-8185-9488f8fb1b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a33d39-5210-4237-b28f-78b025fc706d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1749c752-53a6-4ca7-a1a2-11b45694f18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dae41e6-5471-40a3-82c5-335d76e28d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2e8556-83f6-46a8-9cc5-3a894c5e34eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe1d167-f653-4220-aaf4-5c0971e14e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7367b8a7-e556-4da2-9ac5-2c9f89222200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c11a271-eb23-4d78-8a4c-f6f3c6af3645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bb5495-f8b0-410c-89dd-1674a6f95878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afea39f1-b492-48b6-9a3f-427c0034ba80", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad9985e-1d9e-4c04-be7c-679694b5aab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7975e5-6619-4680-aa7f-2d0bc3dfbf86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5550ec6f-8477-45fe-bd42-74898ee26faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e690957-f8a1-4ae4-a63c-e4c65f928259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a122bbfe-77ac-4fc0-a8a2-c4f2486c9f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e037193-6b16-4e3d-b9f5-6312ae85cbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029c6aeb-9233-47bc-b513-2828d9dfb5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62fee9c-512d-48a7-abf4-3d5f73e96577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9fa8b5-5b53-43a3-b4f6-5f66e9d7255b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf70ec0-b2e9-4664-86ea-5f8ba2bad16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d39cbb4-0c3f-4346-bfb1-81db127b84b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9037cae-7f62-4fd1-b0e7-f288fcc6b32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d06c3a2-0c17-40ac-944d-8093af525f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.198.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e90eaf5-e532-4ad1-ae75-e0a49de4a708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b24fe2-fc1a-4db7-85a9-15f314b40628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.82.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13efe62d-002d-4e69-ad99-394efb772ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.230.63.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f47872-b54c-4f28-8e74-d2df82757c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.230.63.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a80f5ed-0ae6-4587-849b-0c8014e9212e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.236.46.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5999b1b-69f7-4199-963d-01812f3eb26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992a89ca-988b-4ebd-935c-1dfd1ab02175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd089cac-9953-48d8-986b-5a2742c8c162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c6763a-010c-4369-87b4-e8f0a92c292b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a96d89-d634-4d49-882b-37c6151120d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec7e430-dd67-4d82-bd48-c72151460a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05db8972-3c59-4467-92df-73e90aab95f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1085f982-7ca4-4e55-abd6-174ae6c46843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8313b2cb-5e69-479a-9211-6fdb1e390a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240bf20c-0693-4f97-b9f8-ad0fe32c17e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df10ef84-a9d3-435e-8b17-eb005eed7ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f441a6ee-c498-4413-ba66-ec9e584d8d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9fa4b3-dbd2-41a1-8e0a-68a1ec30afc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdde3de-3a70-481b-a811-9583c6363e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c716c18-11b4-48b3-93f1-83732415d757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1654c06-589f-4924-856c-179be777c0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3fbc64-82bd-4d57-b856-14b6694a95ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.233.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f9776d-232f-4402-982d-5a2d7dd3d097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd9e462-db99-4db4-bfde-c7507510e96f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b5e134-3db4-4175-8b52-61582c2a101d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa867eef-8370-48d7-b382-3b499ccfa015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d47314-5bf8-41a4-a242-25601e321144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68dc7fd-9496-4cc5-a312-5007d16443a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee6d1b9-0bb8-4458-b73e-10a8b7a5101e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80edb53e-a436-4936-8eee-c19790887b5c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.244.149.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3dd28e-0c19-4049-a010-1e58fe1e3da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1e1a4a-70d0-4ed9-bcbb-2799ca81dd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c88c6b1-821b-41fc-9356-6b0c8cbf374b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bc1f52-753d-4b7a-b946-078df54a3a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8123fc-2d04-4a2c-ab18-5b80e8c7d0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782eb7d3-a585-4c2a-8589-5e7f2314e196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949ff482-9d94-4160-973b-3b3c42f283ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16aee340-dda5-4de1-b319-b8483737d3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6694be82-e658-4c39-8192-e6b6727a8602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317d789f-401c-447c-9241-bd9d36f3e265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cd953a-f2e0-4497-a843-f3eb1952005f", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f504387e-9203-470c-a9c5-45a8da49a8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.46.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744a1081-6fb5-41e2-bee7-b1c2bbf0a56c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.251.19.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff05c5fd-d5c3-4863-a8da-1fc88930db00", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.254.204.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398e0914-7fef-4983-ae98-9e13f41c6a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.42.42.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f833e873-54a6-4bec-9bba-148a2b6a48a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dd0722-c677-46df-9607-dfdec29f2ab9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.76.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041e375b-ada7-41e9-81c9-53c4771e4588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.214.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49985fe4-194d-4210-8a00-932ba7a9f7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.77.3.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d9fad1-caad-4926-86cb-6cff5a579abe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.84.88.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24987cf-89a7-491c-8ec2-048672666f16", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.86.2.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d513e1f9-03a5-4edf-8031-9805b4504be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cca3131-c369-48cd-b031-bfa565203846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27782920-3a59-4a7b-92b9-3c89817f9a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c973f6-2981-4e75-824d-22361268ba59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06935eee-d7a5-4540-b346-26c14223ea29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.91.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2159a6-a436-4ce0-9544-d2ed24c6835b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4036db3-5acf-4503-9363-4153cbb52d40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.106.41.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a15ef0f-ed5b-4afa-af7c-a1b06998334c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.116.1.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9417a73e-b133-4541-9b2e-7b4cda66b591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.119.221.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac2e2e5-d551-4c8b-b3db-8c53ffc64279", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.131.201.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e268988-61ef-428d-b623-4dd58c594f1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.132.121.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90c176a-ed01-41ed-ad8f-4054fa81d2df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.134.23.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8dc123-c829-47e5-8250-d2606225e3ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.137.187.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e94a8a-c987-4715-a066-b9cba90d0112", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.158.146.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e700f6-0e72-49de-8ee9-21852382465d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.72.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9a2a6c-f61d-43db-8824-b14929bae618", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.190.226.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba8b839-d77e-4934-8063-3e90e2ddb28e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.205.17.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba19e0cb-1c03-4a49-afce-39d750ee0521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.224.57.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f903c8e4-1b83-4ce4-8aa4-e7a2237ed540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.227.49.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a7f63b-348f-4074-8f69-cf21c8002870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.156.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d2ab5f-5d62-4c2e-b331-51475d2bbbc4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.47.8.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c847486-21e9-4cc6-9196-b73965f5d3a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e776cb-ed0b-4803-abcf-8a6e70442390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.19.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a62f4e0-c61f-48ec-9cc4-721ccb340e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.19.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2b3f83-e318-4868-95c9-7c9ed404c9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.122.151.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b7acf4-2f73-4661-9ce8-b04eabd00b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.134.100.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bcff3d-1ce2-4aac-9e77-3b812e35d39e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.136.4.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf265d8-79f3-419b-9b10-c73177db647d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.145.238.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544559af-79eb-4212-95d0-4bd5cd9a0cf4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.180.161.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb16d4f3-c515-40d2-896b-944017388f03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.188.224.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a75876a-7824-4088-b296-b659aedc7911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.15.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399396da-f25c-42b6-b924-c6b03baf0f4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.29.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6baaaa95-4dc1-4477-ada5-16efb83c7f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.217.36.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ec8a12-8163-4988-9421-92b45dc2f80b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.252.3.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc77a4df-705e-426b-a064-fc72a5ce6c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.32.48.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684f6793-4bec-49bf-97fb-442a610f5814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.49.17.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583402cf-256f-4ae4-831a-927725aee717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.61.113.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066bc984-75db-4b9c-8f80-d828a42e1c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.242.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39365c04-f90d-4b82-9188-18626dd566c8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.126.67.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e264668a-70af-40d1-bf6a-8d19b1e47c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.198.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8d6fae-2334-4610-891f-b0dbe13e7de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.161.179.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a93bfc9-0cda-48cd-a83d-301c92d24330", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.163.102.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8d33f2-318e-4429-96ad-24b9ecb75fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.176.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4e4b11-a262-4acc-a4c6-777bd923e58e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.225.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c04b68-c68e-4b7c-a814-e47183572c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.231.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4602c91f-a5be-497f-81ef-54815c2c3345", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.170.84.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d61ba0b-5b16-4371-8347-80e2662dfa6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.187.190.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24777b01-9340-446d-a607-32d23fe651c4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.19.19.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79b4d46-ac35-4e64-8332-7e8f6945b499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.212.158.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a649345-8c81-4a25-85d9-75536c75e43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.250.102.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50679401-22ba-456e-a047-13aa3b30b37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.48.117.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68561b4e-3282-4ca9-9a54-84b96c932870", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.113.57.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eccd5dd-f6ee-4339-a907-15e1c51bed85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.124.19.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7b49da-510b-4e55-b2d9-5d363f438c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.129.33.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91adc92e-acae-4a50-bcc3-55dab0788d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.139.237.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec19c9c-0d1d-4c28-873f-87ad42ca8aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.201.193.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2312f298-02ad-4b2b-9555-86a15cd0fcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.203.206.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79037b22-6395-417d-90e8-9524fa45180f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.217.198.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe634393-7b55-4a77-b677-d2f3a5f262d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.218.1.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f205ea4-ba86-4dec-9696-0b09ba6d7054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.226.13.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c0939d-a7f5-4000-8a03-503724f1a8f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.33.65.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c6a00c-477d-432b-8bae-67f82fed5d23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.6.15.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36fb0a0-474e-4554-b53a-108d79fe8a95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.80.190.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034f3037-2aa4-4baf-8f0b-2b16de389823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.85.105.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df752b3-d99a-4047-9a1c-53c8bb5d7790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.90.38.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa41fb97-8428-495e-bab8-868768b9aea1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.10.164.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5a71f4-581e-4498-8fcc-0a59caa7e621", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.104.106.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e20e1f-2ee8-4a48-9983-8331785676d3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.114.40.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba21888-009c-4683-8982-b77760617fd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.140.114.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f074c4db-4230-4b96-988c-d7eeb43e626a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.151.162.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d43314-1116-4439-8da5-63c52b4bfa95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.183.168.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f20fd9a-41c2-408e-82ec-dccf2dd80925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.196.250.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf84b88c-709e-4ff8-ad4c-f75d306d66ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.196.253.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca30edc-d331-4f77-a06d-fdd20d7b2dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.196.253.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfa03f3-9499-4202-95c2-c0b3ff622efa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.20.232.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d09a826-b590-4fb9-aab9-eaa8fd535a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.200.138.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cc9ad2-a67b-418b-bba5-78889e08e860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.202.38.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77966d58-5bae-4a17-844f-d854f83b784a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.231.150.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05da2242-116d-49b9-93de-f6e94de05025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.52.108.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7659f410-477b-4722-99fc-e25006ee5770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.34.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce188f5-f607-447e-9394-5c991764452e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.80.65.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c524ea5-a5d2-486f-a76d-e8da20c43285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.83.11.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6375bd-0282-432f-a28d-817d1148fedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.89.159.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e708705e-6cfc-46cc-bedd-cc0474d84f3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.94.213.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21559589-8880-4b46-93f2-000e6ba5ed3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.187.135.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96e6b2d-2757-4e0a-956a-74f7d7a6e4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.240.226.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a23a3a-e751-4da7-ac60-de8e322b11b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.240.227.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af6df85-063f-468e-83ba-dbfa0c0946fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.243.143.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d29e3e9-2b11-4b6c-ac31-28267a7854f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.252.157.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54f8356-13ac-4945-8495-8864e4a065a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.34.117.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff243b5-a6a9-4e89-99af-b1df0f928777", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.37.189.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8f94d3-ab13-49b4-a523-c55c3a736764", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.37.3.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51c1a30-d11b-4fa6-b0c3-773c6337521e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.95.134.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad637c5-bc5c-4048-993f-73d3301e5266", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.95.135.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05913797-ba41-425c-8f2f-eb1045ad2d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.208.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726b7c92-603c-4df4-8264-5b24a5b8e26e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.104.34.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3f8b31-6e09-4483-8ebb-d4fb78f4e86b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.129.135.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81157e7-c73f-4e98-96a9-e1d6fa61aa5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.129.155.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fdbec1-1e2f-4179-bdcb-339807c08e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04722ba9-4825-45e8-8e5a-fac823cd91a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c04ef3-877c-4059-ba11-65daf4bc2977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e693f1-3455-4e8b-a9c9-7f2175db6b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23296cc6-cb12-4491-a2f1-f222384f7180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b0ab45-43a7-4b9d-8caa-d537dd247e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2336b1cf-0fc4-41cb-aeec-e0b81ca840b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29bb77f-bfc3-4f17-a102-efb39fa94180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72384b29-13ef-4654-9907-2cfb2016c30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.18.128.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3584384-25a6-4856-b141-0048a3ff0da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.193.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46b3a08-1739-46ec-821d-d2f2b0b13bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.137.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260e32c5-7cf1-4030-9f6a-2f116c9c207d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.143.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467133c4-265b-4f40-907f-2e4746680517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.179.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58eedfa-b28e-4cd6-b57f-5782571290d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ad8b55-fb48-4d33-996d-22521a354c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.252.180.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8b6879-ec02-4e25-a905-22feb3795c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab84294b-15e4-41c3-8b4c-b8b7c9b4828c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3b121b-30c4-474f-a3ca-f2697c751fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9488486-8ed6-4437-8a84-cfc0b2a23d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea600308-9b1d-4a45-bf8e-7be3ef3d80e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.16.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da3dd47-f2f8-4bcf-8563-81c251f8ac4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda27ad0-27b9-43a8-83bb-1c054edc24b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320420e2-11bd-43c9-83a8-fb4d37fbb98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.215.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04dc679c-1b46-44a4-8d2b-7badf45755ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.99.43.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0444b2-f076-4c41-b5a1-5bc242046084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.106.64.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75470fd-424b-4858-8b97-35a28a3d0a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7034913b-fa8a-4fe2-b633-3f8699e824b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda43ad5-f025-4913-9c42-f96d8bbadfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88dfa87-cd18-4f74-9385-ab72d9a93bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff4aaad-8260-4890-b6f9-3406f55e63cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfa079a-f996-413a-853c-95c54022010d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc52861-1b74-49e0-9300-225227793542", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80d4f98-f6fa-42fe-9696-db037a6ebf01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f94f2cf-c774-4553-99b2-a363027234d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fa65fd-4090-4701-91d4-ca029d7ba13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7435f61-2173-4902-88a2-9096d102f6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5acf8d-8992-4c68-b6d5-5a2fa08b4b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7905d294-bc50-44f7-b574-98191f638cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c911f4-2b33-4dd2-88a0-d9b305eb64c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3721ede0-504c-4d90-a2aa-58e20c2afe90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cc1158-5825-4547-b98e-d0ce756e9df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477953df-0c70-4217-8283-94d75b293ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e5414e-c71f-432c-9db3-3b4f873ef7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b249fc80-eb19-41e2-91c3-72423d5574a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c55410-ed87-4d8f-b50a-cd63f29ad04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd04ad7c-6961-4c64-974b-1b66c3c41b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5cda13-d5d0-4b6d-8e28-b52a84ee7387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b6eda9-e608-4c04-bb31-c39469d872c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3942b9f3-9001-469b-b130-40a5082755a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3b805b-6d9f-4f2e-83be-10efff1c4612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b3c134-55c0-4bab-b55a-c3e7fddc8e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679b68b2-3daf-464f-8bac-9c6a77dc87a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9aa6cd-0c39-4e3f-8246-4e70b4b69125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54870799-5a7c-4f5f-984b-418b53e71117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19e8f9e-5262-4b14-b82a-eec1ced216a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5653a7e-9ddb-46a5-a5bd-adfb871b760a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c054593-aa7c-429a-b141-f25783d310ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f53b91-53f7-40ed-8a9d-19ae4aac0d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8e22bc-efe3-46ce-bec1-f922c8c86fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b43baed-cec6-4321-b581-f44aac027304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92714df0-c09d-4a20-b36c-62dfb171003b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a254507-72cc-4f3c-9efa-1d5e374e43d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e81fa0-3b23-4895-9491-1d8d28f1e453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec564d38-3c7b-41d3-aaf3-ee56d201dcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeeb4bcd-ef4f-44f5-9ea3-93d658f8d22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abef1af9-764b-4614-9ae1-b349271e5c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f2a0f1-3708-4045-8677-901377746ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0a104f-6eb2-4060-ab06-ad87fc4785ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05c44b2-1b00-4338-af56-232ef9a070cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d988a98-0bf1-4104-a4d9-3c89de7d7815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40777d9c-ed8c-4b43-bcd4-0f0a7db12cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9881890f-f714-4409-8f77-f81e1d05ad5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d149e22-5f83-4b4a-8faa-faf00f477a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ff2dd8-9367-482f-bcfb-78719f567b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86c2e24-ae1e-41e3-ab50-ffaa997e390c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673f06ee-f577-4863-bc4d-5ca622af1472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad7b246-9342-4cee-b1de-af8b55ed157c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f44dae0-6f69-41b0-a662-52d19b4fcb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d357912f-72c0-4d11-a9ee-576f79fec0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7633097b-9598-47cc-9572-9338566fd2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396ae2f3-a079-4eae-861a-7c08239f2d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cad94a-7899-4b26-848f-f8911b3c3019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791622f5-d200-454d-ac26-eb96a2ec8fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82ba164-8540-4fc8-89f9-eb5674812e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b59e2f2-9b85-40d7-a39a-1797e59a12ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba2ee3f-55b1-471c-8a3d-c82604684363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9f9848-c2e7-44fd-aa7d-9d3a6eeb7a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a2fd1d-1be6-410c-b977-f64219a4b09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1597afa8-5a3c-4b77-8fbc-25817155fb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad1d552-308e-4379-a730-073a5ebac952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1babd7-792d-413d-a4bf-1a1715cd3766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02902d3c-c8d1-4282-81e3-4ce901936b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b1daab-30ae-4fc5-8408-423213b8a325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536435a5-a2ce-4501-a84d-9c41914e534f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd003ee-3a02-4a8e-ba3e-3e892f93b550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14ed3e4-34ad-4dff-8182-0d822f2cdc0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41f459b-5cdc-473e-afd1-74fcebb449b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781f4857-66b5-4fac-b73a-fa7d64f4b6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e28806-3808-43cf-89ec-f06e6cf39281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78642b5-61e7-43be-92fb-2282844e8a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a7bf44-4be6-4056-b42d-bd907fec53b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad32eb53-6e2f-4015-bb72-538745b3c7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c41e7b1-aa65-4b00-adc7-ed9aa874c662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98714d5-5c14-49c3-91d8-5a1763de27cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea5a62a-9ec8-4b38-af74-e0f7eaa09ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76838263-bac5-485e-9cf3-1569fd98e4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95a3a46-5277-48e9-a630-31fb3e5c6808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c5261a-ce45-431d-ae17-86ee0c96870d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9ad6e6-3f45-482b-a938-06c33d042f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e54a85d-6326-4543-bee0-d482442a9786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d30d7f-853a-4cc3-9e72-dd07fd78dcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e854401a-7bed-4395-8410-ba261109c144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf91d992-039b-4e3c-8106-db2a2e59c547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c0fff0-40ea-4785-9dc6-8d9773251010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbb2595-69d5-4341-8df1-bb5b467b2d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7039fbb-c5ed-4b7a-88dc-8af3aefbe26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a9f644-2e82-4c58-b774-9895ff2966c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713657a4-e845-45d2-840d-4d540730b024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f13d80-b114-42da-a88c-5842c350c862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ddb0bc-ad45-4d76-a703-e8b8b6e7b730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdf713e-9414-4546-9ad0-53723a2057d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daddac90-2664-46a5-8655-6d81c87a6e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28a5ed7-628e-4f6c-a16e-2243b5e2c6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53118d3d-fc80-4e10-85e1-700ec2a2bae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c8b72f-ac13-432c-9aa2-3fac210d8b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61cda75-73c6-4b09-b630-b1ebb1a75fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c4a920-d93f-4854-bbef-0556fc5fd9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.231.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980b7578-5a5a-4e08-a087-992a37aa25b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.221.192.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8638adc-bb44-4d46-a12a-afa4dcc7d607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.226.10.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f174a5be-8719-49ac-a761-343f55e1d086", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.235.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c761b6e8-374d-4512-ac3a-73e84c33ea91", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.239.143.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0d7aa7-9ecc-4b0f-9152-60d197c236d7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.126.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc433480-2beb-4227-bcb8-cbb68e9efc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4493ed14-1007-4d6c-a081-93f48127d2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b1fb79-7d4a-4221-9f83-79ce9c1d19c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b9a53e-fc3d-4ba2-91da-bcd49898272d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38bad22-c392-4ac7-a354-fc17d99da088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d659a97e-e272-4f4f-aad4-cb5edc7b47b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b92e34f-cda3-4402-86f5-16628fdf3414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1554545b-0321-4922-9d8a-e244417bf57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db74a77a-f862-44c9-8930-ef8751d070e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3e0c1c-875d-473b-830c-e2f553f7f0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a3423a-b566-49d3-9f9b-fab9a1c03243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69307064-a7b7-4b4f-9454-446684cf576d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0c20fe-0750-4c79-b1e4-ab1d78962a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7290ef9-fac3-4a94-bcea-e32197a38206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6de21d8-269c-46d4-8aa1-b196b5b28a77", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3310e674-32be-48ef-b84f-3a7e69572126", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0402f084-3ad5-4d47-8bde-0bd2df3b1f64", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b68d33-e0d5-43c4-9541-16ab222cf6a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb04934a-acb0-482c-a050-e88bf18a6d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9f41c1-c3bf-4a29-93f7-b0ffe3294b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ccece1-4e25-4a84-8d79-e83a4167284b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d83d6f-56cf-4ac3-87d7-189bc5ae15fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8f7c07-a0e0-48c4-99b8-7083a8451504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117823a0-c3ad-4206-9c8e-9c4caf98dd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e3ee77-ce45-467e-bfbd-24ccd3328063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6686c8ea-0298-4faf-8fdf-91b624c4872d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef3fe11-ffd5-4e93-95f4-aa4e13e8ffa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b4027f-3536-4b1a-979b-2fed0165aaf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5b3fe3-28c3-46d8-acc1-7889efef17e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270f3ae6-e35d-495b-9e55-7b94f9537fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8b7db9-1a44-48da-b9ea-3f70af0bee7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6e5486-2181-4b78-a6de-d0f5520c26fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954d2ccf-6e86-4dd4-b32a-7038c4c28bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304f25af-9e81-45c4-b27f-1ec92aafcb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1326064d-4306-43e0-a0fe-85ecccff8d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b887f8-14c1-4b3a-99ef-b88ed3dbfb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00dc229e-4c55-40e1-ab03-6197b9ced71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102dea82-01ca-4159-9ba0-c8ed4af177d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a497113-a45d-4cf1-82f1-e0d18ed8c95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368aa922-9fd2-4e21-a516-59e8da7bc335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f538544b-ebb8-4d8a-90bb-79fff13d34c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc67445e-27b0-4785-9481-d259a2ec98b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852d974c-8b2d-45ab-a483-38d64744e5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4af51cc-54f0-4480-8804-cc5e5d0b3d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a09cb92-4832-40c6-a63c-a611e7e8a703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153acbd9-b352-4c87-b224-6b84f5d8d619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b811faa-4e06-43c7-bd8e-087bc2e1663e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382cbc9c-a606-4c72-8b61-3acde6b865b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445252be-a052-4258-92e2-e58493033400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64d5a65-5b46-4af3-a755-bbe01221bd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316d1f38-390c-4ed9-8267-afb807d72689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd05a8e5-43a7-43cf-a3a2-899dc0f2bb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338662c9-227a-4336-aef7-7bbe1f79de2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e82d98-e7e9-4e8c-84ff-f1b9c9cb8bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12d2a49-a9ac-4e79-aa69-049a132b89a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfaa66da-3c0e-4f47-a8ff-a55bb3fc7a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbe4a30-f554-4fc4-934a-db2c357f1c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c4eab4-609d-41e8-a694-7bbe8a25106e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd97854-d845-48ac-b40e-4572d0b0e1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40f878e-7f42-4cd9-b9bb-bb1c5b00a647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767a62fa-ecff-4bac-bd60-8348247a670a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99f1dcd-ee38-41d0-bc27-83c61e0a3bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2110dc-2521-4e13-9e1e-028b7e153b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32804078-707b-46a4-b1b9-e46e3a2d13f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdfe81e-2e8d-4f05-8215-ec7f3ddce17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38db051-c3f0-4033-a779-d7128523d2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1e522c-ebb0-4693-a2e2-cc590efe4a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12fab05-8668-431a-a27e-d19c8877833c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3aed5c2-6369-4837-ae80-5220202ad187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b63ae5f-4944-4e0d-92d5-29b0f777b4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e891ae77-5408-4b4a-b37d-7768d7b21c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d320c40-b9a0-468d-9608-dce3cd50cd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352296c7-b485-46af-ba44-9be630b4b48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0f11ea-fc27-481e-b419-c444ff830afa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a5e152-ee94-4bcf-b78a-5bb349baf70d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.92.235.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810f5e6d-5f96-42bf-9e9c-9023831e4622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18d5cdb-48a3-4187-be1c-cbebfcc93549", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.191.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2425fc-ea86-4ed2-8823-9425ce901237", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.191.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3d2b80-0c5c-47db-ab8d-f064bdc4d3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.149.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1353cb2d-c02e-4f30-bbcc-91d4e0a65b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33159b4a-2bf6-482d-84ba-296dd16ccbd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0101fde1-abd4-41a7-afea-4c6f4fc38fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b722005e-0039-4421-82a0-9998bf81fd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72f2cb8-106f-4034-adfc-cea569d26f14", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.155.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0472e0c-afb4-4679-92d6-b21cf2729957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3864175c-d18b-44d4-824a-5b775be05ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ceab1ed-4810-4459-ae0a-afa8926e72e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7e2ae9-83b8-468c-b617-fdfa0b54f920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5daa94-fbfc-4c1f-931f-7c36ab1fbc18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c789ee6-fa9d-4dd3-ba0f-6f238cf59742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14baf222-328d-4deb-acab-e2d991c6b628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea13e13-7091-4361-a387-c9dd6f61f9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba88a3c-258b-4c95-8b16-db28f583f3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f97a3d0-d3ac-43c8-b32e-84c7bb7ad453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cf3475-4a66-44c4-a5e2-c69d5eb5ce68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972db347-4db1-48c5-8a59-c5e2898e9928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e8308c-d491-4a52-8ade-b242f6bcd892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868ca74f-a4b9-4d30-8292-a95d772088b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd617df-2f0a-4439-842f-eec2e8f62a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc793ba-5a91-4622-a574-13f6bb7f98d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d30fb79-e226-402d-a3f1-064a62c711fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496d39b2-3c8c-457a-9999-3a92a71e9d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fa929a-544e-4e95-8a46-0234c0e4376b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553c5299-b824-4c33-8b61-20834d497744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5542710d-11f3-460f-ad8f-fdd421ec4f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d988f0b-af48-49af-9850-a96c0a00f2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973092d7-7511-4f12-a6bb-8a47052f9171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fa378f-6151-4ca9-996e-6b69dc5233b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b95587-5b46-4eb4-95f8-4cd9d3f28842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a7e87f-5147-4e2b-b858-363d1b80ca33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e540f2-acd7-48c9-997b-80bc6c7dee5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4baa4888-47c2-4843-813d-70ac8dfc6229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab27e23-ca0a-443f-b60f-b0b3b6987cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7977cd53-fdca-4dc3-b5c9-780c169b912b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d62f657-ae5a-4847-a251-f1d70da42f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0966898c-9f2c-4f4f-9efa-c5e67a97d01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e81f62-b206-4b06-92f1-7e30ad8ac94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60940e08-4cbb-437d-a657-466d14c9bc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac29117d-eb88-490e-be1d-64954b872d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abb0ab5-423e-4f03-990d-4efac5d9dda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84fb9db-ccc2-436e-b2be-554540485afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfa444e-44bc-4d5b-8bb5-174574403b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3f1d99-d065-4be3-8770-ce8a06826c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.211.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dd8748-8efc-43c4-9b3b-547509057031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.211.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053a0cab-f585-4763-9532-2bd91c8c99c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.238.56.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d199b-49ba-49f1-8bad-9923bae99d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.238.57.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa03441-fc28-492e-ab2c-79b8a6b4c171", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.4.69.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4754cce-f9f7-425c-abee-1e419bcc5279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.4.70.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c8556e-a672-4654-a1f3-3110b894754e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.4.70.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928ae098-9802-48a2-a532-ebaed934405b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.146.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f21ccf-1dbc-453e-a463-65c002501abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.27.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81037bd2-f068-4a9f-a8d6-b509eebf32bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.96.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7c2489-37a7-4f41-ad50-99860a4874fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.248.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a7412c-607a-49cb-80e5-65321e0dfacb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.251.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b44312c-380c-4c00-ba76-e282304da50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.97.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b472db-4130-4bd6-b60b-08df578807d8", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f886ffea-3426-40e5-b15f-00d633be49d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.60.201.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40517a04-82b6-496f-8ae8-d457d58145f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.85.210.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21afd76-b635-4d9c-94c3-182fbd726e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da17d896-0689-4ca8-9743-8c0f185e2070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4248ab99-c861-4204-a00b-c6ba12bdda0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0f0085-0fec-4f3e-abad-029dd3ee3869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cab61c8-fdad-42f4-b90b-707c4474fe77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db05d54b-a3ae-4c42-84d3-ec64ebc70d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f05eae-5171-4ca7-a041-b2fd8b5a9940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f760bf54-08d2-4dce-8678-852dfd9b630a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06ce0e4-0c65-4a86-8e7c-5c1742f0cb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da00cf6-368f-4e27-a30d-28ab61b4d90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf0c905-6974-43f5-ae08-60490d18069e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fea9ae2-704a-4620-b689-2e84ebffc624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921173fe-fba5-4b9b-acf2-4650d3de8cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13af6467-3c92-4b86-8db2-478cf3acc8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0f3ac1-12a8-48b4-af19-0e6bc2a0e719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4dde13-f3cd-4be5-a649-d5e536e5c094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6832fcd-8419-4bc1-bb48-089e18e77ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955d1965-2f94-4df3-b543-8b5a93c922f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae731436-3467-4ac3-af32-c7399349fc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dcfdb6-de07-46ca-a411-2770f47d1ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98369830-e31a-4b45-8f85-70d508b91c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c315b8-9685-4c2e-8041-9cfbae05c255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc568abe-57fa-4a31-a535-6c04ceb14bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7c594d-c4a5-4833-8493-064c9b53ba44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36a6017-6b76-4770-980d-c19624a9dad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff81c474-d70c-4d3f-91d7-9d2995032416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b75fb0d-e0e8-4e41-84a8-6e77213fd65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c53716-9b68-4edc-afd8-24f781895dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffa1034-3547-4719-811e-42c168227c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389d0952-8dc4-44a1-b000-d329c138f209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bf3699-3325-4bdb-a110-9e44405ca14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a478ea-faac-4320-9791-ac2a019fbb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.19.217.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3171ac4-c147-4f33-9501-70ff1aebb44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.169.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1196832a-0b81-4003-bb5e-7e237103596f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.225.147.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c1b5a0-c574-412f-b5b2-c8da90d739a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.229.126.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14617476-bf14-4aea-b5d4-561c6fa3d524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0eb4e60-5507-4183-82c3-ef65f559df80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b48218-24e2-456a-aed6-b7cc9a52686d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e336e0fd-9d60-4dad-b70f-4a02934616d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a88a62-7cb4-467b-8e4e-d4a414d30fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509ea57f-3a66-42e8-93a3-6ce4b5f368cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccf2e36-dea7-4d59-8b64-5b43016cc399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e833ce-6c75-43bc-bbd3-0046a0f4ebcc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.64.239.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd284464-e767-4b0d-901d-84e7f5774ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975863a1-9d72-41cc-86c7-a9a4c1e8abe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d69b75-4955-4dad-a874-e2f427098d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a4c3cd-1f10-4b9c-8d29-e2f66b3e6ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826e6ff1-4e0a-421d-a0be-d5da3f893c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08904d5a-6264-4808-b735-c00908188c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a144ca9-cff2-48f1-bc74-2024844993e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d711d3-39c0-4d4b-9297-41f25e79337b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2a806b-fc3a-47fa-a80e-9a8bccbe88b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68982719-5dcf-4f19-a413-bd0ba6a1a153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f610d356-8a1f-4fb7-a12a-cf8bd4032973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7c64e3-2e5b-43fa-b3d9-ea0da1a16efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8ea291-853e-40f6-b231-78e70aa18771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.170.63.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa30826f-2702-4d55-88c1-59f248ac3fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.184.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5d0bf3-b5bc-4403-b321-5d01522a0827", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.226.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb96972-9eaf-4b6c-84f6-92b3e201abae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.253.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8200364-556f-4607-bfcf-f1f82404ccc9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.154.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427b905a-89a1-455d-90f7-e4106ad40a13", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.150.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7339882a-9342-4991-bc87-77708b7f2dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.202.53.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c246196-f226-4b92-96d1-778c0f0bdba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.218.23.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d441f04c-ca19-44f6-b7d1-287a72246bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.221.165.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938cbf91-1237-4fd7-860b-42b28b1ccbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.240.181.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf653ec-f903-4144-82d3-1fe36a55b00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.65.52.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f806de82-d525-4bdc-8cfc-4bb3488a3c1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.75.24.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23287963-7ceb-49f7-b6d9-4fcae78552a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.145.148.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e00a9b-52f4-4098-86de-0e513bb06887", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.159.214.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa02171-4689-474a-b7d8-f35ab1eacd41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.184.95.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc73c14-66de-43d7-9ced-6f02bad7ab3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.186.2.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac191a30-d876-46ee-ab37-f4d72b7a5924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.232.145.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c6a59f-50de-4092-9205-0183714501ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.232.159.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8528f6cf-abda-4ac3-a79e-f71d4f74208f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.243.109.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23767f89-56a5-4bc9-bb50-012a0dee86f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.243.109.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb6e3c8-177e-4e54-80a4-cbf5838505da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.243.18.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0315641-48b3-4223-8e5c-dfcca632d56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.243.23.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb601ef-07e8-4ae0-9ef4-11fa17c8c1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.155.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382c62f1-0879-49f4-bc8a-99f9334db08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.160.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f7a06e-38bf-4040-8db8-4df0c99eca21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.233.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e1220a-4cf8-4aef-a05d-961785b998f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.50.6.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72783db1-b09d-41af-9b50-dcb752407700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.50.7.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a627d882-f7e9-4b04-828f-91c6a6e0d5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.59.37.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537cd212-2f87-49d8-a771-ab028eea4ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11af3b2c-41b2-4279-927d-d6d5270085b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.70.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c364d13-025f-4147-ab3c-0ad67d3908bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.108.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f16325f-66e4-4253-bd57-93665b2a91f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3994849-c8e9-4e9d-9239-95c7bf24d156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7700d4-8811-4836-bcf5-59fa87d6b3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a7a206-5cfe-45b3-99bb-29a6eaba4980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2259fdf2-02e0-41c1-ac90-02b243295db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be592cd-d5bb-4ea1-94b2-daa8538b6256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5210eb06-f3d0-415a-85ee-690822e240cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2b41a3-4533-4a24-88ed-048e0fe0b189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84791db-379d-483f-8d0b-0b76c3f6060b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3630c996-5bf7-4cd0-b8ed-2e70de28a9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ee97d0-6613-40ab-8e27-e507a4810473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba544e7-c9c2-4453-9ca0-ec3d6a8798d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad55912-aac7-4ab0-bbe5-ec86ff5bd596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ee2415-f421-41d5-836d-3c1162c1ef9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5754b35-55a5-42f4-81ba-4915dfc24413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f489af56-d9ca-4d78-86c5-4531b41d4853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509cadb2-96c2-4002-ba65-3527447d8d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8472378-924b-4fc6-85f4-d87f4c5e5ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2769ba-c3b0-4539-a546-e534f40a309b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4e853a-4eb8-4644-8ef4-e7460105c5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabf8010-3153-4308-b341-e0f1d6425265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d188daf5-6bdd-4f93-9626-f13a7f29174d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a21f5f7-7768-46ad-940f-67e06ebb5017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a79abb-2b12-4acc-bb86-91cbf3fa7b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abe0224-b34b-4973-8b39-64641c1583be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f82d643-f19b-413e-9c01-670a0e821849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0154396b-0bf8-4e65-b9d6-800604fd5070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eec9cd7-981d-438d-8b78-5cdce5da77af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f029c9ab-3e39-4212-9c61-66b4c836d1c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a242d317-c0d7-49f0-8832-70c266001772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d085790-e6f7-4c7e-b7c2-0b7139ff5949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1e27b5-00a5-491d-af08-c94c8c679e26", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612e17d6-00d2-4506-ac40-82b44980d10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52a5de7-b6f6-4186-a2da-e8b54d2d0255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd7f667-7ffd-4a9e-bfa6-9471037d7137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717e03d9-268f-4910-a1a3-ea41d355fda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591bfebb-01ad-47b3-b74d-b49c43bb5d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4674b22-19bd-42df-8e7d-3d748eb21eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb348c1d-bcf1-4e6f-807e-0f1d91c42434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84d7bb5-4c98-408c-a998-e5fab53e7676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9a557c-59c3-49cc-a270-aaf606de741f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e60b0e-5d84-41fb-a248-cd77b22e51b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfd61f5-8eb2-4fa0-acc4-e18203bffabd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884cfa74-038d-40d4-a488-92f1b47b97e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb01624a-2aa3-4239-91cc-24c937c72545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efd02ab-7f2b-4802-8c91-d07b26b3f6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df47a73-020e-4bb2-afdb-d43460ce2935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a816526-d1e2-4600-b371-0ac4052711b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5feb0d-8e52-4bd7-97a3-3d2ea3d81a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147263db-8b24-490b-bdfe-db807b5ac030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361ea2bf-ef12-4484-b0f8-5274bb74d9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562e667f-fb10-4369-af2e-4f6d7e373863", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279fbda8-09f4-4ae8-84f0-deaaec941ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d420557-2239-415d-94b1-97fa66f68b09", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3eb68f7-b9f2-4f62-a15e-ca41272df298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4fbfa7-31a5-4f93-8cfb-e0417d7cb327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e470dd4-bcb0-428a-8a73-6f4303f79fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0641d0d-af48-434f-b9ec-ea2dc849c1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b9b7d9-5e67-4c87-b36c-6d7de91e241e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad7edcc-72f3-4bc2-9718-16f786a00cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a264af3c-d2cc-456d-8e04-2ecf580a8e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e72da13-e57b-431c-8716-f80a2ed80487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e4ccc8-ec4b-4ffd-94ee-5bbf04b689a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576022c3-7619-44b9-8bca-be43807b52cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906f0a7b-70ac-43b5-a9a0-f3eb4b85f5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5526ab-b601-460f-a9ca-a71ea7b8e131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582591d5-79f6-48dc-a929-aeb90017ed5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01612be-57dc-465c-95db-25ceb080b5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3ae268-d465-490b-9813-3e06dd2402bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d215d103-f21b-47f7-a2b8-aa0d16bdbed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e45078-aa43-48f1-8752-7e861c6aed93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c82dac-da2b-4f55-a1f1-6c42ff4cda94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf16de2-abab-490c-959c-213279f80f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838197ff-8d7b-40eb-b070-6466242bb28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c2c5cd-60fd-4f72-80c7-22415b04a7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4bae3b-6a05-4f54-be0e-d8512e0963e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af59bd95-6f9d-4f0f-9769-d4f80a410ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77d868c-ed5c-418d-a1e5-6a55934930a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ab62d8-0332-48fd-9aff-3f13552f4bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ed448d-cfe2-47af-846b-a79791172d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab9c5aa-d9e2-4589-b878-d87bb5847ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43e3937-42cd-4f55-862d-2cb7c07ecdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91dbb86-89c2-47f6-b199-e68e3c20c1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791688bf-dea8-4301-b023-41e8676a7a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add058e6-b9d9-43f8-a090-0c07fb922f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083f6c2f-096b-457f-ac28-430d5de15bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719937d9-2658-48ec-a792-9d7fc249668c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f4a7fb-754b-43ab-a78a-730e16e039f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61dad0d-c131-496e-b1a1-f5ca4e8074b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be45aa53-15a7-4fd8-b542-724e118455dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c621ae27-87bc-47a4-8244-84dfc559e006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e30f1d0-a364-42e2-a6fc-34b738da5180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610fe809-ea92-40b7-bba1-1a7778a4acc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd428216-8c4a-44d5-a7b8-08ea029286db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba38a697-e251-4e6e-a0f2-b69f73af0fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47b0261-e099-48f3-9d2b-80d2bfee4ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3737078e-4716-4ec6-beab-c42de9f4571b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310683b4-b2f4-410b-9dc2-6664967c11fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70080c75-65af-41ed-991e-4ec9a2aa3938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a6eb99-6fdf-45e0-8999-9e0521d65854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198b74db-c0ff-4904-b9ff-a58719f19110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc62a78e-f245-448c-9047-1e3660072876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c6ece4-6a83-4f2c-83f2-995b3de2518f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bac19fe-84b1-477d-a6ed-23d6e29afe41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd96403-1871-46ee-9884-a19bac27ddf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fa687b-43c0-4bf5-8a79-8785284b9800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de306716-7084-417a-8e02-7e2043c5c2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f911e22f-7155-4510-af3b-082c78eff22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c27fb7-04b3-4e4a-9778-068ae93d6172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f401f4-3de8-4765-84c1-cfd0ff1f613d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1607b482-077a-4cab-b627-63d5a7b44d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d60893-7ff5-460c-85d3-1911fe52602f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe3293b-9aec-497f-bcf2-9bf1077eba27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ea4445-55fd-4ef0-ac76-400bbabce92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ddc090-7825-41b0-b101-ecf53afcc9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a822a9-e3ac-46b2-afec-3643690bac10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7daf6f-1a54-499c-ad87-0b36658e9a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47332d05-33aa-4d04-a7b7-15415a009d95", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4672a7c-4474-4eb5-9bc9-ccc2b0900945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2032173-217c-481b-bdac-b7a1bfdd0104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c7eae5-403c-4917-a0e4-d6c7df11885c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e455f6-c63c-428d-bb61-35a1cea8bda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d090f68a-427a-4eed-b27e-4cdbad0593b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532f4b29-74ad-4871-af68-8d802c715761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6197e25-400f-4cf6-b078-d097ca728784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d033123-4bf8-483a-ae45-69dd3a09a214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a04b3c5-c2bb-49b9-a0e8-3698f7ed4dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36655528-fb11-4769-a12f-907e11ac0b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53ecd9a-cf6f-4a42-b0dc-fd5722a725c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02066699-95ce-481b-9730-b69501b06f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473f36fc-572a-4170-98b3-3b873c0c19db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1823b5-fe0c-4335-8dc0-5eac50cf55ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313d51d1-29de-4e7d-87f7-815e80e3997e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e444958e-b9a8-48f1-b99b-4398745e5187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b9dd1b-dc2d-40aa-ad1d-096602bc0884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38aab87d-1999-4d97-b289-a9796d3c38fa", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b005a6-3096-42b4-975d-ab4e04180d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c309342-a860-42b7-9a3c-79883eeab754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e1a386-bfe2-4c56-8bfa-222b437b1918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b455c8-9d02-4aa7-80cd-834beca0d353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf530c51-ad74-42d8-8e59-0a099e296500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97d11b0-5608-4147-8097-70e482e0ace1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d73a244-1ba6-466b-a85d-23bd036fa241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839b4237-6f78-4636-8441-28b20a76bff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cf657c-5b88-4a9e-bc0f-9bb2498043e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8fb0ad-ba99-4f03-b5e3-d5bdfc9e1941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af22e7e3-3017-44f2-a2b9-9bd8c27c25c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66fba2a-7160-4d1c-8e04-50fe7d4abe49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a88983d-123c-4b91-9246-4a93f311eca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c64bdb-614a-49c8-8759-7eabd57d7102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0459d723-a9e1-4724-8eac-1c92a97e9efa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.168.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3721f306-f87b-4d33-b3f7-95c8e96a7b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.201.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f43988-324c-4818-bebe-c3371cb81551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.100.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b87dec4-a887-46f6-bd09-c6e9773cf57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.109.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd018dc-4623-4e34-ad41-93c5e966291b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0c5207-ba74-46c1-98f6-e8356e4d8b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6c24ed-bb83-42bb-90a0-b1f7e62be487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9fe368-2117-492b-8bdb-f09cf32a16d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d546349-9efb-4172-9fb4-a626e1f3c71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c5d559-c967-4c20-a974-537cddf32638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.59.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cad92ee-d777-4ec4-87fc-1cc81afe3000", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.53.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b231acbc-6952-4ea4-8ad6-d33051628236", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.54.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833ca776-1eee-4f8d-b5a5-a49124ccb1eb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.249.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d010c4e7-8301-481c-b79e-898187bf491a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2204055f-4371-444d-bd34-59e7e377bbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8de198f-7fb3-4b49-aee1-207b25c08587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634d8be1-f362-47d8-91c5-b0700ffed8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c649a777-c3c6-442b-b1d1-3bb03367ea5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a08453-2510-48b9-a2e4-eb4f2a95192d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a774633e-71e1-4eee-85b1-efc2ce9fa108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b6ba4b-5b69-4eb8-85b2-2ed1dd9a3c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77aa879e-5e7e-4657-aa61-61dfd9ac08ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14ae92c-aa66-4b38-bfaf-4fdf16b25fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006674c5-40c5-43fe-9c98-77c4e7230bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878369bf-5800-4661-961c-e13500279fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8ae083-7267-4cd2-8efb-43ef4ae36f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c03452d-7c00-4cc3-83e5-fa4da9e1dabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ed473a-6a30-4976-b80f-4857c430bc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c1864f-cca6-48e8-80e1-887fd5708f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fd7b3c-3684-47bf-9d48-2eea14939e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1074bc12-9407-48f9-861e-73a62fcd5938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9a59bc-e57e-41bc-87dd-ceeac0e41647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f13d26-a840-4274-adad-7be4d9a3bd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d01d80-34d0-47ed-a80a-d2c3c89e4125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6067838c-dc14-4927-82dc-4b62f6577289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7e5263-12fa-4d57-91e0-7a5f60048885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e697a9cb-0beb-48d1-a496-28633f7c3152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6549ab-c34e-41b6-99d7-0fef77960135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7893af-2f61-4d77-a1cf-56eabfee842e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a1032b-f8ad-4bc7-a138-49d2619eed14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37167238-6333-4df9-ab52-07b6c8759408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbb1c4c-07aa-41ec-8a9d-f3f5f910979e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad1037c-61b1-49b0-9cc2-37d71892c42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e2e5f8-25b7-4623-9734-024f79692ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2c7432-889a-4492-9eff-210e6371d66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e73908-bb35-49d6-bf6a-c23cd90df866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a634b6a5-33b9-43f1-a467-79363616059e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73149bc-b42e-4be9-969b-63d33941a515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f0e636-a99b-4415-9a10-edb0a57cabc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587f6523-242a-4169-9365-7ef9a9f0e91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f131f36e-d3d1-427c-aa49-c839f16d821a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0cf8e3-1657-4e51-aa9c-f1b9151ec152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c416d0-0c76-4fb3-bc88-373f0336cd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc91bc8f-bb00-4deb-b8f3-75d6850a3fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbabc970-b529-4ebb-b1c0-aa024b8423f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f8344f-8600-4761-9386-ae1b3d38c60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33e0881-3e2b-4488-a27d-d44172f33a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4554e63e-eb3e-48e3-bb3d-ee0ea79d6e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69efab40-5ab3-4a36-a852-f59e9e5302a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a754d6-3986-4813-ae6d-a9147b7b295a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d22b628-badb-4852-ad58-82ea9f890a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e997d9-6fd7-45ac-acbd-cbd626dbca7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19270701-0f5a-48cd-8cae-8b08ba648c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc5f4b2-926e-4696-8b10-69e66e43d7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f39ac7a-b5db-43ba-a40b-0eda82fc63fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119ff812-be97-443d-8466-b0c1b1a2f97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0418175-7e60-4e4a-9447-151e056c15e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e2f5e3-d89d-4388-9c0e-9542470e1578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b236079e-2363-4d0c-8422-7667ef9fe397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f53dc0-4ebb-48a8-b28d-5a81de0f881e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd886b06-1536-461e-9e7b-72abe06f1514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44427cdd-3860-447f-bbf7-2febd9eeeb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab95aea-aa1e-40c9-a996-20a6013c0f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49625fc4-59da-49f0-9db9-5649b1cc71ca", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.51.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a2dc50-2b3c-43dc-b987-2f880abd9428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.50.191.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13adcb40-00ec-4f80-be95-ecbcf9d739c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126fec85-8d63-4e37-9c70-fa2b25f3ef3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ca9e7e-b093-486c-9b86-3c7f368a7838", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac40217e-25e2-483d-a334-adfc0d1234d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2613d43-b72e-485b-94b4-6d384d7f9066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4678d789-da20-47fc-8fab-83d38c02fa58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe23ba98-e6bc-44c3-aaaa-799585ee2cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc26b93-3a7d-43c6-a589-b0955b263d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854b940c-4b97-4e53-af12-a95a462215e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2b76eb-049f-4731-a265-42e9ea890874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4f11db-a587-46f0-8ffc-fe44c00c88bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700cd4d0-32d6-47dd-ad62-8497cd10479a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cc2b06-980a-4b92-9af0-95bfcf0dd77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb536f9-d9f4-43df-952c-78ecfc189132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfb041b-383b-4d0a-88e0-3a4b3d8da830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.202.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d73c64-ae4b-4370-a06c-063078471d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.10.189.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5b0690-a7f1-4330-a305-3638b4267435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.10.32.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c43c7e-e5a9-4011-b2a8-ba25de6ebfd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.100.176.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd027f6-df7b-4eec-88fc-17c7dd9e6ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.100.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9819774b-891f-417d-9b9c-82cfde94577f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411e7722-0da3-4308-94c2-31971175fa56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.88.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2720da36-6956-4d90-949e-93b033a03509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.91.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650bbbdc-67b2-4aa5-9584-59095cbcefe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05efae16-1f1e-4633-9809-3f5959e2f4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.97.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fc3f3d-a033-4b85-afb0-2cb82f64a5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff882ed-f0c2-4b0b-93c8-72987dd8a00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef520c0-63cd-472d-a7c5-c82523639062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1172e337-bc16-4b84-8316-5fa41e747508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0df79e-10d0-476f-8cb2-8666cc202cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad42b7a-e81c-44c8-94aa-e5a2fe0f702c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fafdbfd-4b20-4ec4-9dd9-cb146bb1d5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.107.250.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac01a55-6b13-41a7-bb75-4553c45cb9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.109.157.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60819664-fab3-4d93-a216-b0d2cb420225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.109.32.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dac2ae-0ed1-4833-8671-36d6541ea661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.11.48.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb248a9-a393-4c0e-8656-b2f11d9cb9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.110.39.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4e2f09-0bca-4418-b446-5cdca9d5c884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.112.233.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fc6b25-2138-4da8-a202-ec0a135254a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.13.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc556bd-1f14-4785-aad3-dd3544da3a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cefbf08-cd29-4f41-a45c-ee60beb2dd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.117.241.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d593ab5-289c-4e9b-bfdb-da3e92f2a559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.128.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce98971-3ce5-42ec-82a0-9b410ec29219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e294ecbd-959a-4a77-b7b0-c9c9bc8eed6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721ada76-47b4-44ec-b53a-fe67db452dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.224.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc7badc-06fe-4db3-adbb-d4c1e50627d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e50932-b205-4046-af6a-fe10b1d8296d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a15eec8-0a0c-418e-b180-8032625ab0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44c869d-0d5f-4c8d-b844-f28f2e03ae6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c41ed16-cd04-4e4f-86af-e3465e62677a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ee1bc0-1bc3-4208-97f0-0aed4d1e431c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.248.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dece2d20-61cc-4e96-bfb2-64d756d86195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e54bf1b-0770-4566-b31b-f3712fc994a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e90d86-9215-4379-9b82-fea5097d7abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.120.225.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf27dfca-896f-49a5-badf-9c059952fa2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b724eb56-38ba-4e26-9fcc-b85e682f32f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.45.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9183eef0-51ba-4243-8a4d-573830d19fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.53.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6477bfd-ef8f-4e20-ad5b-a7a3743ce511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.67.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fc64c3-2c7c-418d-be7f-8ee46be6407f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.122.43.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb529cd-4cea-461b-ac3c-f3d688907078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.205.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b902408c-c27c-461a-a8b2-794f67b8a3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecc749e-3c6b-4dbb-bac2-ae527ce21a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.91.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3388b876-2198-4072-9c1c-f1d44fbbdc19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.92.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c080db-7849-4f64-8133-12ad2eba15e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.125.144.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a7288d-33a9-4296-92f3-3108b1c163a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.155.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41504b7d-f965-4021-a09a-6f5ec0dee688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd16550b-7819-4254-86e3-bd4a355ce696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b392f4e9-ca34-463b-bafa-8ddba1884120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb8193d-489b-4b7b-863e-45aa377aa702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.210.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedb260a-e04c-47f4-93f4-637a59872741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.218.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5552b8-c05a-4e95-a27f-461efe0e8b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.218.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6e5c87-0509-4bf9-b32c-783be86cc16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ff200e-c170-4d3a-b0b3-56defcada0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bbaf08-5b38-4b38-9262-633b5492243c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.245.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a8efa9-c16f-43bc-aca1-85175636cb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.35.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8c6038-0b62-473f-8841-9fcf1e1e6bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.84.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36aa8ea4-5ef5-4ad9-9407-e95e0435636c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.84.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921a3915-b7ba-481e-bd51-b25611b57e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.72.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82b2fbc-867e-42df-b653-b108cc67a3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f08003-8faa-476c-b426-e907894bf542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf85a17-7a31-45e6-be8c-c8c15d2d6ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64a918b-871a-45bb-9f45-d8d55948aa9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aaf994d-0e3f-4eb6-9959-4393def49a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8544a251-8c1f-49dc-90d0-7ad4f59e1c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57807fe3-0b95-4261-83f7-4fd7c6d37af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5468f5a0-3303-43a0-be31-249461924ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.82.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bd00fd-4d95-44f8-a2f6-9441263201a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.87.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7f7ada-596c-49bc-ba83-a9be7e9bdb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.160.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7e12f9-6855-49f3-ab7a-890d079b6a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672bf57b-0370-4911-8a2c-6349b46c03d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb6202d-244d-4b07-bdec-2bf5312fc480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ecf767-275b-4a89-8cd4-ffbc72657bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b324706f-0443-4af7-b879-e3409705c418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709c7222-3c27-4324-ac39-4d83ec775f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7c84c9-68b7-415b-a229-678a4bb7d5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.160.177.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9053210c-6f09-4121-aebc-860ff5a1b9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24b0cf3-397a-4832-9606-abce85f17833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d61a4e-bf77-4730-bd0d-cf8fcf8502db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ed1412-26d4-4089-bb2e-768599cf410f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44744bdf-b73b-4bd2-bb13-32763b04da7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832bc34c-95a8-4e36-bf2a-cd12a89a06be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536aac2f-0a5a-48ae-91a5-3836c8789465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbe0634-b5a3-476b-b5bc-33763d84c5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c11fd58-c7bf-4046-a2ae-0bcd2bbb0e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3dfee3-6bab-4b29-a8b8-c2007d4cb5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e025227f-4424-4695-a0f6-9953ca145c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dc2465-0225-45ea-a715-79baae5232ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc52945-7098-4822-9bd9-00cb5e59e709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c896d3-3865-4177-a49b-328d5de29847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793d8bb7-29f8-451c-8b6b-72984938e3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.241.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e49677-6f9f-443e-8876-caab8a9361ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c2296a-5ec6-4d4f-a444-4d3306ee9a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c200149e-15bf-4380-90c8-cd19fbd88da8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d89e5f3-f8fe-49e3-8691-20e26d087f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d58524-2714-4eec-b40d-c1db32959983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9846897-5367-4fb3-a4cf-d7374abb5eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.59.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7ba86c-8c33-42a1-abe1-fb0a2fc70c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a44f479-f19a-49c7-8daa-69d59dd386de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a9dec2-d83d-4e79-82a1-4f8d8a1e18b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0038def-bd0a-4cb3-a0ab-da7dbbe18e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f992e94-bbf5-43be-933f-e496519ea5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24c6628-39b8-495d-bd5c-9dcf69698cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a198543d-0e9b-4d5d-a7a9-f9a330e4a5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145f930e-54d3-4731-bfcf-104b4ef6ff15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e808ecca-c0ce-402e-b23d-1e2fde63c0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3feb1c67-b548-41b2-baef-6d6772bb8245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba37e42d-a582-4563-9d36-e2a66a5f76e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e3a861-ca1f-4264-a745-0b25fee30bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.114.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d36517-07ba-4ebe-95f4-9a228963010c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51dea35-2cdc-4fc1-af67-1d19bc856347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0318b727-1161-417d-a5ed-ac465330a68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec6c415-e246-433b-884d-bf6f6e439486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d67753-3efe-4d33-87f5-7d519cf42ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ffad2e-ad0c-4739-ba70-7f7991cae9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61848772-8396-497c-bbdc-2ba2b8c71f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7d367f-8b11-482e-8bda-89152514937a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71dd1bcb-c0ac-4205-b0d5-18297aab6696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32015bbf-ba74-40af-85b4-cd99cdaeb7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d175e6da-705b-49d0-8912-ac8a010493d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e5be1b-3458-4938-b3b6-6adde19b4ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3b91ad-458c-43ba-9d1a-35642209646e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849ca695-bb7b-4cbb-8d05-f468029c0d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fcb73c-a4fd-4e9c-8260-eb02e4352fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.15.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7c4672-b44c-4800-8857-8aeaa3d6d28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.176.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b76cd6-7223-487f-a3fe-a61568647223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96517ef-dd82-4b0f-9376-5236d95db77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e4d77b-eae6-462e-a06d-f6bc781fa498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaf6bf0-6754-4b00-b242-fe79ce381390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26678775-9f6f-4933-9032-bf6b28406860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db64c2a3-aaf5-4e79-8fcf-55674b16a61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c7ae72-e673-4663-a96f-59c7fb9ad87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043e91fa-78e8-4e1d-ba3f-d0d62ed4c16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fa5d19-461e-4799-85e6-781724e1a016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39981e8-8979-4b3b-b160-26557c727699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c768cc77-4b70-4384-9064-dd7fd4be4e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10846262-6b65-4adb-a6fa-92a9112ee354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b614fc25-5cee-4b19-a834-2e64f005f179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db1e8ae-87f1-4cbb-8580-bb2d6224fff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff31c36-4a20-45c3-ab08-576aa4c4d7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a434f94f-4bc4-4fa4-86d7-5570155d844b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87ecb3a-b58e-4e4b-a9ea-1fa3952b31a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc607d9c-1cf8-4789-aee1-5ecd8efa177c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5725223-95b2-4cc6-87de-2f5a111073f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a568f2f8-570c-4cd6-9a0c-19f4797ec578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fb8ba8-5d97-4d42-8bf8-7689b27672ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07409131-3499-4daa-a979-51878469ca4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f912a223-9435-4685-8812-194d3a90239f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5cdffb-afbc-49bc-8e88-8854a858385b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9578e067-44e6-44da-8056-b9bf0c2d2d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ea4637-55e0-4b51-8a5c-6e1afef42cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e2548f-6af6-4c0b-b5b8-145ab5e174cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa234e0-c74a-47b2-a12a-aaa0c0b58d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.161.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aba89b6-83b3-4d9b-9bb0-777e143c2bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.177.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c5e7af-553f-41f0-996b-864ba2084f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.219.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc56692-e67f-485f-8bba-72c3245b8caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce88ebb-2d54-48a0-b05a-1932e27ea26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5dd005-0643-4afd-af88-c4de7ff93637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6dfdd5-40f9-4a3a-986c-02247d4d2f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac65f8b8-4b3a-4b7f-bc0b-a2ce549e4214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cf2c7b-0f24-480b-a435-b32e673ce722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1440df79-2f2b-4273-974c-85eba40b2335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ab02fe-0638-4949-9468-10e0a53b81c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acad8cde-d1ad-4a53-9fd4-f6c968bf56ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.93.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89126dd4-cf60-455f-abe2-e422e0dcc3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913a2032-9d4b-4607-8e7a-6b81e6b09a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.28.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8839dfd5-f200-4b97-9238-21e96f475b94", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85c8042-b346-4910-b9f5-0ca2d7b49372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c4559d-0c3d-4599-bd3b-e194b363d5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4578095b-5131-4116-830c-83f0bf1943a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d156ca0e-c10f-4873-9f74-32f96414a7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.185.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb624e2-d92c-4502-9962-7d29bb9b21b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2a049d-bbea-4bfa-a6c7-651c8a828cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.173.99.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff5e1a7-bcae-4be8-8a7e-3cedecbe3420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.174.184.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9ef742-e2e6-45c0-a246-e090b2594584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.18.106.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f449974-4041-4719-8fbf-633144e49fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de261c3b-3db2-4d35-b16c-f06c5fa9444f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.187.56.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8edba8c-06ea-40ab-801d-1e6d0cdcce63", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.135.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45be0ba1-0fca-4a98-99d9-61ce81c4b543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d216f142-0911-4f43-b410-7ba6b2e5d878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.157.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effff210-c7d1-4e17-8076-4fd6bdd3b0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.195.13.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38a2e29-8e8d-45b2-9d8c-6dadac747b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.195.169.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a13835-4167-4f37-89a6-4c060ce131d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.195.181.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b06942-16f0-4836-82fd-a4877ecfadcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.11.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f780bf-8843-4c5d-ae81-09b931ce0cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.11.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78371116-dbee-4dc4-bb1f-f111bf742267", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.195.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7510ffe4-258c-4484-a2e9-2fae72da76be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.31.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64320b1b-ca74-4645-906d-78bf011b9d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.39.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d008218d-29ee-492e-b283-61362f41a352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.47.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01860a28-5fae-46c2-9894-99f38824c42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.198.217.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6083c2-d134-44ea-9162-d78a67b43df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.198.243.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b2be07-641f-4a47-97bf-9a80745a537d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.199.183.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110fca1b-6869-4947-a718-76d02781d28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.199.24.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcaf3fd-84d6-4881-86db-df52c168e9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.199.40.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2f028b-37ef-47d5-ba60-53822fbd001a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.2.209.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e21415b-3adb-4846-b45c-1ab8bc4a542b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.2.219.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7fc1fe-02fd-4552-a6b1-925b15bb3a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.2.220.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33fc874-e5d7-4e96-98b9-f6b852623c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.2.221.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb16ae3-19df-4101-bbc1-391b2d610ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.2.250.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad9e314-5191-4cc4-88cc-b94fe799f420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.201.77.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c32c29-5f69-4291-a144-4cf6b42b91ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.132.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254158c2-d608-4149-ba45-2eb4529fa3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.204.238.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a46c82-5ed2-4521-961a-08329a5dcfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.204.27.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbddd117-81c2-4b30-89a4-684b702920ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.205.1.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d06b8c6-23d5-4c39-bb58-fac0c9a41d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.205.115.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76e1b28-2adc-4194-b035-d9d2d9b16354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.205.18.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832ec9a6-e58a-4152-b9f9-60d7a908915e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.206.146.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c78c4e-10d3-4d25-abe6-b69d8ddfabff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.211.72.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce49de79-81ae-4b2a-a41b-20ee28f0d934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.219.33.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b674714b-bd8f-492f-922f-4fd6c89c7453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.220.173.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f2cc65-a348-4847-9d8c-bd6a33966c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed47b5f-c1b3-4cc4-9958-d72f00c175ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.60.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbba1de-531e-44ad-ad59-78b875be4fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4921ccda-e944-4a75-b500-4de23b6fe104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce00194-8148-45fe-a938-4110055075a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.69.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7770034-ca2a-4477-be14-32ded7331617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.71.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0320e1-2553-4f8e-8092-e02fe60338dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7169e172-168a-49c7-ab09-f27276be6193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebeab474-bac9-40da-b91d-67dd61391157", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.223.168.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948ee420-8b24-47f3-832c-88f8948aa552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.229.184.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbcd79e-d3f0-461b-abc3-c8a58893fd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.233.31.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1957bc-b62c-4635-bbf0-432817b09c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.102.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f64cfae-0ab7-4a4d-a9dd-add19d1eed6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.159.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd220f5-904a-4498-9ba8-1ef86c2498be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.242.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eafa998-cac4-4ee7-a1eb-e9c29be0132f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.243.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acf932a-e520-44c1-92c7-dad6867037e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.238.32.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513a0c1f-6d7b-4b74-8ebb-f4caaf63ece2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.238.37.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa0a301-0743-42a4-b761-37fe02407797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.238.53.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80203739-9a0b-4c29-8a54-30595d6ec3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.24.218.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bac0220-a2aa-45ff-9e29-0ae31edc3205", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.243.208.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01428ea-a43d-4258-9a22-3cc18e3c95e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.13.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fe7b26-0617-4fb4-972d-95314eb2142e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.13.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291b3ab7-4a17-43d5-b165-3cfe37e8490e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.21.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96b21d4-82bc-448c-bd1f-b745b405b0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.46.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17083d91-49ce-41a5-8fc3-e87a4f79de7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.5.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c61177-386e-45ad-9288-c6d6dffb81f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.56.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6f2eee-32e2-4cd6-9a9d-756f10e4050a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.84.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84dbb793-660a-43a4-ba75-251e430a98c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.25.151.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159317e6-5ef1-436e-97d8-652df9289d16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.251.160.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5454bdb-93a4-4c54-b13c-ffe9d17f81be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.251.168.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56531b7-19dc-427a-bb53-aa7c9f3ad6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.255.185.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40d6980-5056-4bbe-babc-86cc038bed2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.28.137.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcca329-2683-4b6b-8251-7bfc7801e7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f3c2d1-bf48-4a60-8a93-8b343c3d5397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8017e97-c502-440f-a672-44d9cf69649a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12440753-9c9d-4fdb-9dd9-96c9e3f28df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.47.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2de229-cbb5-43e1-aaea-c3d663f21701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5571b9c-3f47-46ae-a814-a0dd174b1bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d23d49-32e7-4742-a54b-d0768a583aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.56.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7ab07c-165c-4857-83a1-be3d0d96ae7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a843b9-e5ea-433f-94b7-92c040f0731e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.58.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972f732d-f09a-4f1e-ae69-f2ebcd3be3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.3.253.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dee55e8-f293-496b-ac2f-e4434ec809e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.44.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786a28e6-fc2d-4ae1-8473-fc81bf6c0ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.46.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ff98b5-d6e8-42cb-92fb-1deb8d6a8e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.39.224.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdbbb37-73bf-4f29-be3a-3400575e0b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.210.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f6a3f2-d76a-46d9-89dd-59f34088aa37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ba347a-ad9e-4d44-b6f8-61bd059317eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.217.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f857eba-6a4f-45bc-8b09-ca9babaad1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.248.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ad2c93-f551-4c2a-98e1-43ebeb626b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b4dcbb-4d74-489b-b3b1-7284e9eb0b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.58.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83680474-d30c-4a87-8319-d85b092e2de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.62.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fd9ca0-f843-4302-9459-b899b044fa33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.104.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f1a744-8c0f-4082-864b-d829562d7431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.89.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb69c21-dc9d-418d-b88a-3e1356465299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.92.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff30a21a-8425-4f8a-bc2d-974abba79c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.44.139.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1452d6-86ab-4bac-849e-737fe3d23985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7b40aa-18c1-4094-af81-d52c0136f1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.228.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31022fc5-c03f-4b1f-babc-b773f3366209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.251.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51067c74-f962-486e-b980-ebeec6fa69d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.42.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992414d9-fa97-4284-9977-53096ba8cfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.54.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f208997-a850-4e87-917d-dc9dbc82b756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.5.85.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d4f7f0-c381-468b-88f9-05356dddd5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.151.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ad603c-ef48-4eea-b119-364632230dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.24.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f078f456-bad5-4b61-bddc-6c6acaaf923a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607f7160-e760-415b-b49d-1f80a450c4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc90f0e-6db1-4d4a-a798-7916b7b03f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f567b9d-ecf5-4034-b8cf-ead69f698fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.36.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5828ef9e-7f9a-4a6f-860c-098e97d88cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.4.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50775a04-e806-4d5b-938e-31869371673b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cfc633-02cf-4fb0-ae77-dc2c5f660eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a4ffec-dae7-4686-8130-fbd61473bea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.92.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe91708-ed56-49fd-a51d-acb0e68549c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.98.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a0ba4b-ba31-445a-9521-377cce8cdc59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.99.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d6b113-adad-4090-b996-3f08e001ad59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.56.26.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a45c71-1de4-487c-b686-7b9a74e71750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.57.179.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f702cb29-dfe5-4bdb-8489-9f367ef1628f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.57.223.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f0bca0-fc3f-4512-a1e1-778c195cb22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.57.43.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7daec3cd-2a65-4760-8b3d-7a623e6a0bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.193.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63239618-4cf6-42be-a50b-3b727983e8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.63.17.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b24ae58-862a-4817-8716-059c82211d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995ba71e-636f-4a6c-a0a9-192de0a7ea00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fc57fc-fc93-4b16-aed0-fe0c8b2f50b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78161b7-b480-402b-91c1-4c68dc0937ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf7212b-6689-4cfa-af98-91b4b32c9bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3182f2-5cff-42cb-9122-c6c5222357fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e215cc3-0814-48b6-a232-d38a64048a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3abfeef-792c-43aa-b62f-750eaba1f086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81d409b-4d36-4cd6-993c-1b87a6baac76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6515d49e-4643-4230-a8b9-02aa8a16f161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28e6102-878b-4450-bad2-63334416c8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac9a70d-ff39-43ab-89c6-eeb68b2c5587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dd8dc5-5860-4afb-8b20-f20ab37133dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba63c2f-d750-47f8-9fa9-41426b934f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5ccd7b-852c-470b-b16f-5f5f87469f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d237fc-2ad6-4359-ba2e-4a0242e47d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7900d8b8-31b7-46c9-951f-988ff0bc9eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff049cb9-3474-431e-9fa5-33698fcd22b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0a694d-f321-4887-a212-cb2c2fbdf396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c62e6a2-956d-4370-8667-0989ac931714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f7a661-ba80-4567-936e-645368d6b691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2eb346b-5310-4df1-bb35-558caf50d486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d64cd9-2627-4fbf-a1af-dbf31fe3022f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b69732-d3f5-441f-921a-e74289d00c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd54966-a295-40c9-83cf-9c0bcbe388ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97229bea-8684-4334-9bcd-56c87b2fe521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9563c0b5-8cf5-4b38-864c-1ea5c0052db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5901af-a1f0-4242-b7a2-f0af25803a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe951c0e-38dd-46e7-8e7f-002c09dc336c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3971000d-e76e-4183-bb2e-17210af4a714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775a46ec-5458-46f8-820f-07350c37cc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a6158b-171f-4fe8-b508-5721a747ad2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c594c2-f141-4f09-9c08-bf6dbfc67e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831b2148-d0ec-4bf9-9b98-879826994bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b550aba-92ce-41bd-a745-185362a4c961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6bf665-e266-43f0-ab6c-66803767105e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b5f9a7-d802-4b48-84fa-b93cf0288fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817acc39-d545-47e5-b43f-710c37445d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.235.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c55e66d-4474-4842-b046-22b7ce6bee24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed47992d-9b30-456f-aaed-0870e4917e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0121ac7b-0ca9-40f4-befa-5944d0da28ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.97.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753f1ccd-e745-4790-a8d6-95e72bcd34a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5412ee1d-0441-4b43-a13c-fda9cc241f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5325a4cc-78cd-42b9-bfd2-be76dba6a5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d02a6e-2c8f-4824-b3b9-9904a994a2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ffaf06-d53d-4fcb-a6f1-e575b60ee536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f341f9f-5c68-4cde-90c4-e7c77db26e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.153.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3351f19-e3d0-4540-97f3-7a6467016e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d9bcf7-18f3-4aec-a9b4-cd4df27c776a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1c327f-6df7-4de7-9b93-c1e81b74ea93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e4861a-324e-45f6-bbfb-4239548473b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85f9940-2be8-4561-b32c-d537c8751c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.168.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e165dd3c-26dc-40b6-8a97-52eb12325a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.169.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4973c4bd-941f-4fdb-b085-a96d6460e24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56624093-e29f-4dbe-b136-c680b14a79a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af185437-6c47-4461-b045-b284fbad545a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5554e1ef-5502-4c67-a4db-06458457dc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113cb450-75fa-48df-b629-9e7328581158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4810b29b-6edd-4ae8-b035-434e3175e877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6973aa-c053-4a16-b9ea-18d8e1102400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c56cf1a-c08c-41d0-b441-e373056b4d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3956399-edb5-4a33-ab14-c4112a643d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec7c976-881f-4fa4-b990-57b81acff043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65c3307-fe6e-4cf3-8e56-368638c4dc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8120c82d-f21c-49bd-b246-205fd0cd728f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117ff4aa-c05b-4882-b616-908a2fc914c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f8d23d-b5c0-4456-b1ac-08ad73d6697d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf59dce-2b21-4904-b0fb-02107ac7bbf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d4b012-34d6-42b8-8edf-cae040fdd275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115d551d-152b-4d41-8a0f-f4bb98e51b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1301bee-1ec2-49c5-8ae6-8abf0500ae44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a817c6-fb73-41c9-b447-4fb0c07ee109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454102a9-c241-43bb-9e21-c543fec403f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f79362-aba0-4033-942f-ccf83c3d4ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1457048-ee67-4da8-af1a-de9740007519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166bfdd0-53ec-4798-803a-6bb3f3bf5933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766d2a11-d5bb-4ecd-9d2b-473735031daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3224e0f2-52a9-4298-a0df-e0d2dab88126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92ed134-6ab5-4158-8760-e9365a02ea3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784d3660-2c54-4769-89cf-4b15dcccdcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bc23fd-dbe4-4119-a6b1-f1840f68f791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6a8303-aa90-468f-8892-aa8902aef767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b493a13-dad6-4029-981a-3f1aa2f5e7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0287aa58-768c-48c6-80ad-366fbe6b7461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feca0c76-dbef-4ed5-9fd1-77427c329d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c661e4f7-e09a-4503-8664-395884584158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac71de8-ce42-496e-922e-605e6528a510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e325ae-2434-4aad-8de0-6d302822b6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1075113-382b-4a74-8497-e31c7e05be8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9a16c1-6bf7-4c64-94f6-519f6c980722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdcd5f3-aaf4-4b64-8f16-01362530a607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1d978f-2ddc-4c88-a0c1-e86d13471721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aac7f91-cfc2-46d8-a1f8-5d8cdfc20661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689eb88c-e040-4f40-b9a2-94c0ff7821e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201afe06-8b82-4c8d-aac4-c5ed1aa77146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334aaea6-0bf2-44ff-98de-48cbc5bd25f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102cf01e-4122-4105-80ca-c49711390527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94591a53-20cd-401c-874d-e9011da21263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffa9b33-e87a-47f0-9b62-a0fdb067335b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac436e2-7c18-4493-8d26-1f9e4e6d012b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cb544e-80a8-4ca9-ab31-eec460b17b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cb7a2a-39a1-45d6-8761-3d13799cf409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbabdf35-0a03-4998-a024-c2a1f8736ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.226.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6e7f86-f7c6-4706-9ac9-25dc5831966f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.68.161.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b3407e-61aa-40d6-8005-7216911ab8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.7.34.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb1c0d9-51aa-430c-a9ef-343d7211d50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.70.176.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894a921a-ee28-40ea-ac93-956beaee871a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.74.237.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c63a95-a89e-4927-a834-5d76a203bdd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.77.33.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc64caab-5350-4417-b6af-a0ab2e38edc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.103.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc8c375-a7ba-4708-87f3-6899b008ba37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2f0bb8-442c-4182-b10a-d5fa15f38852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.75.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99322838-bf3e-46ad-b04c-d8b211c9acb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.80.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d56b900-3900-42c5-a5b1-736f921e40c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9be5998-429b-4717-a884-906fc071a432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a9cd85-a3b9-4301-b40b-204169ca726c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418d6d3e-a030-45ac-95b6-e8e0fad7e311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b64f57-10a8-4235-a428-e19812296f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94e6a63-87e3-40a0-a0c1-ff8917cfe239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433b206c-8c7b-4c98-8d0f-d56f70c0adf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d9b6e9-42f7-42d8-80cc-8b73532a763d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.165.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c1f5d0-5367-4462-9489-a9490fef9ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26889849-6b88-4877-b6cb-e8c9565128a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.185.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4092f7c0-5700-4175-b30e-77e4f5ad4c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f205da-0cef-454b-a821-10ce7829d779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d51cb14-7a38-4eaf-ab90-e5848f08e10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d3f4f5-ce38-4cc5-8d19-0d158bdee4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.101.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1fd45b-0a0a-422b-b803-f014fea5fea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.105.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825c0989-4045-4723-afad-88af725d32d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.121.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0aacbf-1601-4c93-81c9-517f56b56429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43da97e8-addd-4dce-8868-398c2e11b5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a22568-9793-4f0d-9657-509dfe0d822d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9345da89-59d8-4bb4-b369-268965c7edfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.167.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89cbc8de-3ac5-4476-86b7-ef5e6f476f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.41.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d439cd32-e289-40b3-8cfb-393240ff797a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.52.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9f3ac1-3536-4f05-8076-8de5e978709d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.68.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b63dafc-e60a-42db-9f2b-b97b67f070d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.86.130.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c02b33-acde-40d5-857a-82add71909d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.86.82.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d009eae4-dd15-4c12-ad57-98e3534295f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.89.180.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468412ad-8400-45fc-a2b9-bcaa69bd4977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.89.35.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75221d9-4354-4b66-a59a-ac98bbb820c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.90.147.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ff8811-6c41-4a0d-a877-478daf6306ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.90.164.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf7b0e6-f90f-479a-8adf-f448749f13c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.90.74.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a357e58e-6353-46bd-8f85-39f2f6b2e374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.90.90.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5508b541-25da-447f-95a6-8c33907f59a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.92.144.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0d3697-67e2-419a-9e19-bf8d35e3ef11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.96.185.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4b5aeb-89d1-4d2f-b519-3e27aaef526b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331638d0-0d65-4c3c-a11b-5c6c26686be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902a679d-6ac6-4ce8-9cb8-3050b3d45c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.153.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2da556c-bee1-4d70-931d-d092c72a4750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bd5c96-d31d-4f9f-9aeb-d4290ce715fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.113.202.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2150326-d793-4be6-a0dd-f22f2c910f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.115.104.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88614cfd-407a-4e4d-8091-06a666a24b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.123.248.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d13b030-8e8b-4a9c-aa86-9cef366dc5b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.149.94.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7eaeb32-f05f-44ae-8258-397fe8be5c4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.159.189.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125368c5-727c-4aba-85f5-a5689a512a01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.164.211.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972607fc-e16e-4e7e-8e47-f0db32f3e97b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.223.100.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022b0d6c-541f-4f94-bfe5-98f77a752ecf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.53.88.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d777bd-e7b2-4c2f-a702-8383b8649fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.54.85.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26a5d4b-2c2f-4f51-ac5c-b5d208b757bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.57.190.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3314d680-701e-4ecb-8dc0-bd093db873fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.6.92.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c840036a-4551-40c2-b259-d5c498ffecb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.71.73.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909741a7-8202-4094-8145-215ebe6b6a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.8.228.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9801f286-6c20-45e4-8321-d4fae4c63bef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.121.157.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa9f973-ffc5-4629-abd7-4cbb145f2a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bce6a9f-beec-4903-9f5a-3a73d641356e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.161.46.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef31486-40c7-4fea-893e-aa0ef97afa6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.165.25.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ce990f-5d1a-40c5-873d-fa93bdfbf568", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.17.146.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d732ddd5-6dba-483c-adea-34ebafc5f8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.182.100.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf53c7c-d69a-4015-8f37-cd5630594ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.215.98.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc3de38-5f69-4d66-87a6-3db26e46000c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.217.12.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f50165d-f7a1-476a-a5cf-de67259e49f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.49.134.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ab140f-bbe6-4c47-9349-48790f7cb1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.71.192.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0844f9-e7c4-499d-90e0-89df2a7fb9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516e8c90-a0cb-4dac-b7c2-3f7c2f413d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.141.51.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f712a2a-085a-43bb-af34-fe726a2580f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.148.60.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ecedf9-cca4-4ca9-b679-d77ded80e9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.155.14.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b6565c-0cea-4a4d-8b9a-fb8b425ea8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.155.18.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f884aa-e716-4468-ac80-c15d10499ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.155.19.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6253e94-4a37-4d62-93fb-3766ac6f50f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.165.91.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190d882c-d064-4854-a4a7-fc3e59bd5b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.29.18.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e88f587-1641-4407-aa99-2143a2b5418d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.51.214.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613b2c35-d900-48dc-ab15-cb35c614abe3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.51.89.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4395c2d3-6fba-4af9-b534-67ae2dfa7feb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.70.139.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478c0968-12a1-4690-a302-31c256c6a335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.70.33.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2684bcb-a47a-4d62-aab0-c6fb7bdf454f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.124.40.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2460ee3-4118-4a3a-ba43-0ed35f142af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.156.108.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2438dec-edc8-431b-b440-a9a8992e6d97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.159.90.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f208c17-a240-43f2-814d-1a0caf790cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.162.234.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5459aae3-2610-4045-b42b-f959558f1e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.255.6.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a99195-7a7d-47ef-a219-d4930f8a5272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f725c1d-de72-4b70-98e3-ab03532b8583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d274a11-7d08-4d0d-8107-394338730455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49440d8d-cad0-4362-bcc4-a16dab743716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.88.113.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3340980-4e2a-481f-a781-cd44ce233a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.21.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc419b0f-0db3-46be-8fa4-248198fdf9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db20e9c0-b4ed-4407-bf80-932d28c39293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1194cc3-303c-4895-ab0b-703ed5cd985c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d096f2f0-cde9-4c4d-bb18-4a6d9cf11b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f4f24f-2d1d-453a-8614-15cfee320ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56091263-f478-4e36-bd5b-40cde679833f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0c9297-b52a-4274-a3b0-f4b1112fb197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb97656-35a2-48f0-8914-117fe17f5e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d8e530-dc95-4f30-8b6c-e15afe91f5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f1fdc2-1886-44e5-a0cd-9e4f9b007a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867a90bf-f3ac-4125-ba79-27e66ab3ea74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9c80da-5d72-4d98-8b18-e54390273535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ae1325-e630-407d-b4cf-408f2e3092d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c91c418-7a38-4f9f-b522-d7ad826da8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7928271-c42b-409d-bb2d-85b5a4466ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d03950-5aab-487d-bc1b-9fb1ac67fcf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d85eb7a-e4d0-4901-bac1-f71df609122f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5d3fec-4341-4e4c-baff-558980d2dd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859957e1-3df6-4e78-b349-25c88bab574d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd67da05-b6f3-411d-934b-833ab8e691f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8340a36f-b0ed-4a62-9ffb-65392b8cd578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb1456a-7f15-4346-bee1-d8efefb51caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76d5954-7d97-42b8-b73e-26925dba77ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f622979e-dfd4-4e0c-b27b-240496485ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436432be-12f7-4dca-9364-ae8496aa65e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f361666-882a-41a0-94bb-c84175c177f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcff553-951f-43e8-98d9-251954d0c72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23eccc36-01e7-4bb4-85b3-94cea4ee0245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c91e84-bd35-45fe-8e62-5e115329ea64", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a09794-6e51-477e-a435-520ec1b8c646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fbe5e5-a683-4b8e-8a63-b4315823b370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67c0006-1987-45ea-9ab8-75309c8d3ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23def433-73b2-4bfa-a02c-6f5846e93ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f5fc11-f844-465d-8ead-41484a15a658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da29c026-f335-40d3-9c97-ec3d1c342d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf26d66-7e6d-470a-9507-e6baac4fec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ffa2fd-f830-4776-8aae-763ae301814f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3340059-1a99-443b-84cb-02c05eae6a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb7e124-05cc-42a0-95a7-63aac34383aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e87758c-5685-49ee-85e1-790ee447b0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a4e8fd-1759-4ff5-8c78-cedee65903a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac86a4a3-6459-40ee-92de-ab8a6cbcfd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f50d9c0-4757-47e2-847a-5bdd1797660c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc864f1-7f2a-4382-83e5-ce8118391101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96f8c35-1baf-4802-bb95-eabd68409afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637b5834-1ffe-474a-9ac3-6a02271131a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951ab672-cba0-4242-b3e7-dcf3172bd523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a750a924-0696-48a5-a39f-ea747cb6d480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b236e7-4463-4de9-be57-191d15b4a5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ec1c8f-f186-4d2c-86f9-e6a25245eab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7804e0de-4f7b-4db9-a001-cd4f873bf901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf17ae6-0883-4e22-874a-cef93eca4c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df2d50f-8d60-4017-a44b-2a45d0723bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860e8a81-5587-4869-afbf-dddf256b33bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83810318-afbc-4b25-9192-d8417f16f40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f1b8b5-0520-48d1-ad64-78b9a95f45c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e24e990-0f5f-4c39-9796-e8ccf4b1d1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2397ea84-9c60-442c-8de4-d928c1b85cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028a4de0-c09a-4fc8-a618-6b019fd0621f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bae9a8-e315-4cca-a629-9db27d9afd6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd804eb-50e9-4dec-894a-3394979bc584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbc4cce-3663-48ca-b5b8-31dbfdb8d142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacdc958-9695-4eb8-9362-d6dee17b65d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2b8d76-423f-4db6-8397-70d62c48316a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d01001-c052-49cc-ad36-87c52f87ba40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e517cf0-f9dc-4117-90cc-fcefb1e718e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b531b15-99d8-4c9f-b5ef-c1f3ee1e25a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6180539-6f78-4901-a29f-e25056b3c7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba447647-ef2d-4d91-927c-38aa247a4f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ed080c-7bf7-41cf-90b0-1553c310513b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ffaa9e-c431-4dc5-ac05-79f9467e3dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e9dfed-87a9-4887-beb6-86fa45063d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b969435-29f4-4642-9e81-074e83463e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0ab763-5955-4e37-b937-7b707ac8e2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a8e7fa-ac7c-4e8b-9f5a-a22d950e5ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed056b2c-d58e-4af5-8793-c38d9f7c82a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f98a78-4e44-48eb-b951-6a791e94debb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a92606b-e4f6-48ae-81cf-bdb2086eab32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c44a26-d25a-42f1-a801-8a4887cadee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14655b1f-a5f0-4548-868d-22bf7e423695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620f95c0-189b-401d-b929-c1c8b4332456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88823db8-9e4b-4e78-a649-0d6e2de19823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e95717-dd5f-4e98-8006-9af01c1415f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004926eb-8f3f-4c44-bbc3-56533b0fdc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ecb43b-bf16-4768-8014-99a0174d85c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd67b68f-b1ec-40b9-a5d0-2d326d7568ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2d5072-96d4-4263-a7c1-e291a8aab2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47b1f40-4e04-4090-86f2-865a1e5d383e", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1015cda-5976-4e09-8b79-50e0c0738c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a261b10-857a-4613-8b4b-090da883bab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1421f43-0ff4-401c-8c4f-4ce023549336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b485509f-34ea-4aea-856f-1f8893e1ab0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0972bff7-0eb9-4fea-bee0-af76e5c96ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daeac037-fe3d-4d34-9c80-c1df42b1f29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d506f96d-dc32-4fc4-8e70-f90fb48b0e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7665461e-2e89-4504-96cb-89d31e88a46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376682ec-61f0-4c51-85dd-6e116bfae210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e7b7f8-945f-4ff0-b481-222e977b0bda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee80954e-9f6d-494d-81d2-afc778fa68fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbe1f28-45b5-4c00-a066-71dc5ff78bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb09d473-7aa2-4738-807e-7ab44dd9a35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3991d143-1041-40d1-982f-f32e2d69f80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc648132-cb80-402f-b147-e59ea78d95bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb8a0d7-9a6b-4d30-a116-003c1263298a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892bfe0f-f828-4e43-9785-3103e34f3e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973d573f-ffd0-4e42-b736-1b71c9f3a1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800b2fb9-19cc-4b6e-86ca-fc4cd6ed178b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da559505-901a-46d3-9fb0-e9f7bcca4727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67904f9f-0a92-495e-98f2-d5249add44a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897f61a7-14b5-49b6-a4c9-b44773547ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f58fbf-3d1d-4337-be52-58df1d1ae843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5874d4-78dc-4c31-8c75-39a450077496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8074306-9b17-4856-9a86-83a8de26f20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3399519d-9b62-48dd-a6f0-0f331a2e8a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf95387-2972-4f4d-8297-1892ab2cd7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3610d2e4-cc0c-41bd-84d4-eaa316f2ee68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90648670-93ea-4c70-80f3-5ad95d5055b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5982c1f9-dcf2-4379-83d9-bdb8a8be88c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34fcd45-2e48-4960-91e1-7f0470973248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a05945-be57-4543-bc48-c3244f5f90ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba269d6-ae02-4716-ac8b-0b60a5fde124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d6c26d-3966-4729-bb5c-8b830524b251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c37b82-0e14-45ad-9655-b9ceb429f47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437df29e-07d8-4d86-9e54-8047e84d44c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e288a35-4909-4372-a4b3-61cf203698a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd702ca-994a-4dba-9f46-0f9b85853f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839f0ced-bb83-46a9-9ff8-aac5e686cb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ddcd78-ab19-46e7-958e-416af3a2c90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab9948e-aa55-4a00-a335-8fc8e3129b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326e250b-e8e8-4128-825e-48a086ecabf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f399f9c1-fb4e-4c82-94ce-afd150778560", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a0dcf4-c42a-4062-b53a-172f44d5cad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585d0f3f-0d98-4a31-851c-415a1ad0c385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5206dc-4407-4322-8744-986a24d6215e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d622fe-c83d-4a7f-b235-d2a9e3b89bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611df30a-8802-4afe-b79b-5db864fb11ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa4e588-3f14-4138-a851-4ea38e4ebb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b695943-4af1-4ffa-89a3-fbd8b88f9da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e0f75c-85c7-47ce-9f58-436fd8de9740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e29931b-86dd-4ca5-b3cd-2c01fffc9ab8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.0.24.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f963c70f-e28a-4828-8894-0cdc554459b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.1.53.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223c0d08-ba06-4bc2-9d9d-9ee45dbc2c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.183.111.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8d981c-570d-4fca-9cce-bdee15bf07c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810911f8-16a3-4550-b13d-c935402deafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.124.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fb6c8e-5020-410b-a4fb-c59fc05608d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.133.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a62464c-cecf-422e-9462-8b6789dfe589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.162.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bfd8c2-db9f-4007-88ef-08507ef7dd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.174.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299fb717-8e13-4801-9892-017025cdad58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.177.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ada4bb-c7cb-4abf-85b0-f0df745a954b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.198.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0f9768-674d-4f55-a316-8d68ab035a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.213.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582543fb-7b05-4d8c-9115-f41a9684bff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.235.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054beb2f-62ab-4ec2-9909-b9c132e523f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.58.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fa445f-795c-4164-949b-bf41aac258c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.71.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bc4c10-5537-4b9c-b5df-105ddf76b355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.221.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3daed2cb-19b7-426d-a012-ef50288ac0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.228.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d103906e-534c-40b9-a536-3df6f032cb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.239.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4736a9-6e70-48e3-86fa-9ee9f923972f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.0.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac756b6-a48b-49e2-a322-cfcdd29bd521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.29.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8043ead1-20b3-4e09-b38d-ba9edceabb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.98.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e869c8-645a-4fa3-a419-af83ade8d6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.196.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7078da-a060-4191-8ace-ba918715c068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.182.143.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c7ad92-072a-42af-8702-0f418ea9f93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.244.227.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adac2c49-0bfa-40e8-ba50-aede135e6123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.89.18.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56de0881-4447-4b6a-8aa6-bee7751725a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49084456-e566-4690-926b-3401a197a9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edc2af9-aee0-4330-ab3a-dfaa1c6a0ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51da0471-0428-456c-985f-33ee5f931051", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b9527c-b67b-461c-93fe-3ee571ee5429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd76521e-18fc-4d28-9e01-2a038d607993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf24e15-665b-4633-a58f-2c7f2474f15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c504e48-4572-4f51-8e6a-6cd240e6db3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01486e80-ade5-4f91-bde5-0b74a2ddb9d8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81c55b2-1fc3-4e38-81f6-de9169ef3c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7e50f2-8ea8-4e67-8422-1bc244ebb974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01152c7-6e22-41fc-a80e-c270f897dc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e54049-be46-4cc7-b242-0cdc5b0ce153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc8ca19-b6b0-4654-bec8-5ae2267971a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4346a0e8-a3b6-4a4c-88bc-74be2eba58cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd22e508-ec61-4e4e-845e-4827d41f9638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5db5ae-cc0c-43e6-a86b-2682e38098b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05e0a5b-470f-467f-9eae-3fa302505e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00af0f6d-3383-466f-8be8-0f06dbc3b862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69d369f-6616-4d15-8071-d3ff7591920a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.68.93.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e83f3f4-86cd-4b5e-bab4-44db98fc9339", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315232e1-9684-4fca-9210-6647ba320c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e1949a-9b95-41d7-9ea0-037fa2bee19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0f1f3c-8f9e-47d5-b6e3-7ff08579ce81", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.47.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ca7303-e800-4c74-b3fc-dad2cd920a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.59.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e3ed48-1edd-460c-a6d9-250fcbfb2535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.145.51.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea8436c-d4d8-46c3-a0f4-c7f7905e530f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.15.114.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556de51b-4591-4204-9cb2-484a08883b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.178.235.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b29f5f-e2ed-4564-9fcd-ee5036239ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.131.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a1041c-7b31-45f3-a13d-bc2090d0d445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.237.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5c46b0-1c15-499b-ba29-52352bc5e746", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.70.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10c797d-63e8-4d9f-97f3-edba83be3b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.136.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac35fa2-5896-4ff6-a987-564c124e8148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda607c7-09f1-4f45-b43e-0e89c8fdb06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1997f8aa-ade1-4869-99c7-fbc6e240482e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a08d12a-ad23-4fad-963b-979b30116926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a23ea2-013b-476b-92ea-87f9cff7f099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a604edf5-5c4d-4e33-90e6-0c3729e29303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.103.45.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af626f29-8f1c-453d-b4c9-37d6d1284211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.2.130.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36983c7f-78c0-462c-88ca-9c9a54cc91f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.217.42.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6c5cb0-9f69-4410-841b-961673c547ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.114.137.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c48c5ed-8cb7-4530-92be-846a4e9843c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.115.132.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc61c34-a568-452f-93c3-dcb059f96a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.185.220.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acac42c-da95-4907-830d-0bd4f6dc2dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.21.48.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1b5fe2-9997-4ab5-88d8-2aaa353571c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.217.189.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1eb327-a417-4ba9-ba4d-d353c48040c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.253.37.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff76dd7-517d-4c47-a4ef-7dd4dc5635bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29743638-cb3f-4b64-8da9-15f33b512ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.48.162.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce22a01-a6f5-4b32-b196-0fd68a831337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd2702b-5bba-498c-8f40-23a25a8fdda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4435cf6-b966-41e9-9111-d7008c917c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.175.61.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3237bfa3-c6cf-46da-b3cd-2e38b59b7526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.217.118.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afc7ea2-d85b-4647-a6f0-ef393bb0ff33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.237.114.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9128e66c-e9b3-40f8-975c-b5fe9d6cc346", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.3.142.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8047523d-5635-4b1b-b4ab-00931393e5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.60.125.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffb979f-187b-453c-807a-04df7068fd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.69.84.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43447bc7-a3b0-4953-a588-f12e6e8a361e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.70.118.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b47475-b3fe-468d-9f9e-e183c2523493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76d433e-b729-420c-a98c-84c5d046ff56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbe76f8-ce3e-4574-940d-1f03f8100f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eae22f0-7f9f-4f63-a42b-961cb30040a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539c0515-b878-4e18-9bbb-2e4d0bd8956b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b90c8e-1aab-4892-8be1-6a4606c7c555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a946da-cd14-45fe-bcda-e5f6eac2b755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63628131-b9cd-407a-bd57-cc53f8a746d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759d1d6f-7d21-4db6-8b2d-f3a73068f859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b0b43a-86dc-4c86-9c3a-0ac679f6d688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994d1661-3203-40c6-bb5b-cd14f34a6e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626553ff-cdca-422b-b746-08fc8a6f2811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b267b08-89de-4038-83c6-e0175e77d99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5506b141-b1e2-4a80-94d1-ae744394530b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f523e4-7318-4765-a80f-9e602f042aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bf1cc7-11e6-4bad-94fb-fb9243325fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd2509a-a615-41f4-9cd6-301bbb013d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da54953-109f-4e46-8446-a494c68b7478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afd057b-df8c-452c-b43d-5b87b50b82b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de1f50e-3b2b-4439-b885-176db16f4d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abcfc69-d7fe-45e3-bd3c-69868cac29cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3c89d4-32fb-4be3-abec-f3e7bdf70103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b6fe74-c1db-46e3-90b0-4b3cf1107489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b8cd23-8765-480b-89bc-79636c09a6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824f5d02-fc2b-49b1-a0b2-b0048e928721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86555d4-157d-4699-a36c-62db234413d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84143c69-e60e-423d-bfa9-569fc71ecf55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e50a8a-f250-4ebe-a8fa-08ed3d5fe29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12baf56-24c6-4b17-9aea-c5cb82db4fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8608bc3d-790e-4687-8f76-26ffd9cb5cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e76780-0584-45c8-8ebc-97542bb33892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9031cc-360a-45cc-8269-dac92b3972b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23015e77-f801-4e70-9f17-d7bed7e3503a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f7c240-e5dd-43dc-8172-b8089e552ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51e85b1-bb13-43ec-8100-15f7952ab572", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.79.124.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52625053-071f-4a99-bf37-7b80635e921c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.242.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9932e7-0c82-4e28-afb9-0b6021b93247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.83.140.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554f7257-7463-441c-b8f1-6448e2c69db0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.111.66.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b3f933-d257-47e7-bae5-de235dde4f13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.156.202.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebcf528-db8e-4304-80c2-6d7a33216828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.164.196.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14ae71c-7257-4931-b009-55fc78c721f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.176.16.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec81e10f-b6af-4834-9f8b-0f013527481d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63df8cf8-c9c7-47a3-a61f-6eb28ea91701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77379b03-c42d-4836-98a6-9819a29f47c6", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb0007c-1011-41c0-8af6-e45a1c5eb98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b16c4a-b749-4178-99c5-f63b999ba183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299b9804-2437-469a-b816-55f527a7eaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0816afb7-d52a-46ec-b85f-99574469f7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa720d77-42e3-4143-a9b6-fda3fede2b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673726c6-4144-4711-ad7b-fbd6946ed03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d5478a-6f12-4db4-96b4-46e693eb4ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.72.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35f2e34-c22a-4476-a08f-adf654588538", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.86.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c0b7ab-eee3-40eb-9938-75751fcc65d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.55.79.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74afddd3-f1be-415c-a198-203dac7d6fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.57.98.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ec3539-ce3e-4be7-aadf-ecd9379d63d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.95.11.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6a0b52-4e1b-47ce-91bb-166966001fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.10.11.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b36eda-6ce6-440c-95c8-3b6c8ee561d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed71cfc-9516-4129-82a7-75b99692f3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74999cef-0ef9-4ad1-9ff3-044007f5c7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3801f400-f596-455b-a585-b5789b6b70ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4667d2-c7f0-4e8a-86fd-ef636ac8d1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23af410-c096-4203-a073-5c07a568e034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c595d3d9-68b7-4698-b8a4-9d83f2a7693c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184bd054-716b-489f-a5df-4194464d20ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f898c0-6786-493a-9cbb-4b299cf31908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f426b146-91ba-4521-ab93-fb7314a26341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cef52dd-3620-4270-a2d0-0dffce87300f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb3ca99-1a21-4189-a29a-4e821d0f65d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b358ba-400b-4e12-ac07-2fcc6bd8b143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c11f0b-5b2d-47f0-9700-30016163122e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a964131d-c209-4641-99bc-2e920c7ab629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd8eb51-a4a6-45da-b4cd-73baf3aa1dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6671be8-18e2-415d-b10e-9ed0336fe9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a549cee5-6d97-425d-928f-8ac72367abf0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6759ffb7-6cd3-4351-830d-8ad9defb921a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5e125a-a52f-49bf-9d69-04a07a95500b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301002a9-af15-4f69-9bbf-1609f942b32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14599510-a306-46ae-a054-d2a070bb65c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d31a02a-fbef-4116-9a85-4fb392161c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50174de2-00b8-42a4-b8c5-296759a504d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c5cd6a-0701-42f2-bc76-25cf0200146e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba2e029-1c2e-4915-a10d-df6f61b985f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd67e97-56e5-4c2d-b834-8b98c05f4027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6704b5-0c27-489d-a5fb-427945b4bfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e3067c-1d9a-44a3-b645-53395941f920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b452a9ef-a40c-4aba-9515-717e84687ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388623f8-b557-4a83-ae08-7f0d7fe1af33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4783e7-2d23-48a3-ba3e-8d93692f23ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6294cc-1c78-4260-95a5-d1f8f37131f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9ddee4-eb59-4e46-a518-adbcc2ade89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.239.34.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a60220-5465-4653-826c-1dff3d8821cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.78.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7810e737-6671-4018-87aa-30f61b940142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bdff63-a946-4f14-9969-2f408d4bd8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a049b652-271a-47c5-b3f7-3f4803d144e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941a7a6a-7539-413c-9a6a-0e8d0604d503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51dc5d76-522c-4101-8874-f505a6c5a1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbeade9-69d8-454a-8b94-f6edc51b9738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebad500-6889-4e54-8f36-6a8f6492b512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a7b264-9a0d-425b-a39a-fdbc0a9171be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6036740a-0bc4-47cf-886e-c00836aa81a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1895e0c0-7a15-42ff-ab7a-47217d58702f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098e7e74-e69b-4eb3-b18b-2d25fe7bae52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb730e69-62f5-492f-b971-1693f890f54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32afb38f-2aa7-432b-8f20-2b57c9c4c357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a776dce3-a5d1-40c3-b5e8-3f45afe87fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e10207-29d7-47b3-801a-3415400b4fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53c6b17-dc2a-46d3-92bb-6580aca780c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40419d82-979c-4261-8523-c554d2100b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4f9c6e-6f75-40e4-8701-e729a875466b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cafc4d7-48be-41de-927e-159bbaa9b44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef73cc31-cdda-42a6-9ea4-df96539b66a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef960997-e7da-49cf-9602-856205d39101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce860d72-fd97-4e45-a883-959019583703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02492f91-7f55-40e6-8cd9-b505b6a5933d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b7d53d-6067-4bcc-92a8-d3b05cf3b778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be9355c-e065-4e96-b0d5-a91d4a343ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ed8785-0961-4bb7-8400-023f73846ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a638b98-b33f-40e2-bc3e-61aa82493425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57931477-521b-4d48-bc99-93c1110cf616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127deaeb-9748-42a2-85a0-dc4484b43581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c435f4b-ef9e-4ce8-a026-0d928df81556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a61c578-9eb1-47c2-a9d1-ac0857b4b32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da22bcb6-0c2e-4945-9838-5632ccb5b8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41076044-90a6-437d-8994-a00ce9a51923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3443a5-e7f5-48e4-a538-db040e1b8820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa0da9d-66e3-412b-8ceb-86bfbae4556a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b0bba7-0342-48de-8084-fd8240cb3aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c14158-5443-486d-a531-44459fcb7886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ed22ef-8fbd-431c-becf-ebfb2a74a6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac32dd5-249f-4cc2-ab1d-b87aa5b04d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4d0132-58a5-4012-a976-57a17456f0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba591964-bcd8-4adb-90db-830394bf6011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bedf782-6c6e-4686-862c-e53bdd80967f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184794e8-24e0-48d7-87be-e8ab313578a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35daf297-cf20-4160-8d7a-56b765c4794a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87a1f03-81e5-4987-bd06-888e3ed3b87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc798e6-5c45-4e48-b2b7-c86b8ccbee8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93a622f-d773-4169-b56a-30ed99dc5464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23987ff5-1a2a-452c-82d4-e80d7686d5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5c2f0d-070a-47bc-a430-9f739ff07b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8260ac75-d3ab-4b4e-a3d3-cd0b2f22a25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc621377-d2ff-481c-85c5-5525a10261ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0368db0-d3af-46a2-b7cf-37d73a73a579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165c2226-4292-4f51-a8a3-4fa8c51b159b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bbfc06-4bae-4dc8-93f6-ffe8830a231b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69e3130-c767-41a1-9e96-e1e93bcea879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8105a10d-5e8e-4d7f-9dec-c64e7471f3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598434a0-3524-4430-8d2f-303ee5678d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4d026e-0362-4c7a-8d23-75ef6b7547ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cd1bc8-960a-4aad-9266-247754f74416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02936eaa-0ed3-4767-84f3-b5d82ec80feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bb5551-b279-410b-a55f-f0bd0734ecf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111ed771-12aa-4031-94ed-7134ae46e314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b6bf3e-a120-40b3-921b-bf10d98309ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01732226-ba15-41b7-ab5a-51fc2cc2a6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c132d5e1-460d-4c54-9f54-f88f0bb6b80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d409a6-7376-45a3-90ec-b4968bab6462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a749a39-813a-4813-b9ec-060441160118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c460a0-84a5-4576-aba5-6e76ecfaa861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2046e681-5af2-4a3b-a66f-857adc963dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6bd7a5-7916-46ce-8342-11e367a22498", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.70.97.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7504dec-4e1f-4ba6-bf3c-e37f3d97910f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57be5a6-0a6f-4178-b8eb-99e3e87dab78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4b8606-ba88-474b-a7ca-084f9a302e11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8616c51f-5a86-4aaf-8416-d39234f0e612", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.11.188.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3c63a0-b1d9-4806-96ff-752484a44b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.15.161.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874340f9-9176-4757-93ef-65bbe4ad6a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.160.194.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5838ac-9e1d-4291-9cc3-e25ff7854ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.165.132.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca1d19c-4c8f-472a-ad2c-078abc6a0365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.172.19.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7af617-f0bc-4d18-a28e-3c192bab1e60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.173.5.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dc2a70-a078-4062-98ea-6dbca653ea67", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.182.253.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccaba3c-13ce-4ad5-a3c9-a046b5684650", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.52.136.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbe84a4-608a-45af-98cb-3e21b9300fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.52.32.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a5c7e0-729f-44ca-91cd-881c1faa848d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0be1d16-2397-4adf-80c4-8fdebc78af0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.76.55.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e252da-211d-472a-a2e4-0cdc5d36faad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.147.106.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de74edb-fbec-454c-8eea-d4f85631143d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.147.222.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4da3745-007b-4eaf-8f94-c2a8c66a5d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.150.184.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db36830-b0a5-40cb-9a4e-7fe3d3c8dc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.16.144.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51776777-81a0-483d-9bda-4c13307df23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ba9bde-2add-4185-af78-2bed21c05ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.189.198.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc54ca2-82ad-4ec3-b9aa-c5536442ecb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.200.73.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04610e85-e0e3-44c8-b11f-6f3fcebe797f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.219.1.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ba9f60-4f03-48b1-bae1-1e8228de7f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.68.218.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f627e52c-e392-4f66-bb56-cf80316c9e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.78.104.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bccf5c-4bd1-4b53-8ede-cd612942e4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.109.219.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168492ed-46ea-4023-ba1f-5ff170745f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.109.219.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b01b97c-7f74-4c96-962a-5651a12de7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.108.89.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691ae59a-8fba-473c-b253-7c56825954ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.120.210.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bf2e5d-421c-40bc-9a3a-c25d72e65ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e85b7a-2aff-4381-841f-93de605fd40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.154.133.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a927d5f-0045-4985-8ebd-0f9f50e92cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.170.216.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e1c043-8acf-4c45-ae1f-a94ed24eebbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.176.247.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dec3f05-de15-430d-8aec-6c630613a272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acacd604-d7d0-445e-aa85-e192fbc8ebef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5318b0d7-0ed8-4e7c-88ab-200cf5a87950", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeac9211-6e41-445f-8862-b2307d0c534a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ba7cbe-34f4-4816-a692-60b9f2347fa5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d138f7f2-30ee-40ad-b746-d0c92a87e799", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e118eb6-1b24-47b7-b39e-6d3dd5533b08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d875585-39dc-483d-8f54-02f4dd9037e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b516954a-2de3-4b3d-b1d6-a4fbbc70ef74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6f45c5-2991-4072-ae55-1f9863bec955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.235.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4495a8c-4166-4a5f-85b5-ba31e40a5e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bf9507-1f97-434f-a273-fc343282f1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.0.11.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cc62c2-8696-4168-9265-c1480d0f1768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.0.14.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54f4b0f-9e6b-4934-bc23-4617ce46d28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.13.5.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057e6193-575b-4ce2-90dd-96b7f776e2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea0b096-ca96-43f7-a65c-32d69df029cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.132.28.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac6e9d8-2c0e-4323-8575-56d860cd80fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.161.46.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fa3321-752a-4a3e-814b-a924d8764332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.207.211.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1816396-c1dc-422b-a029-4e5f4ecf9858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.214.104.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db044d0-200a-4916-a0ba-f86bd88f52ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.229.218.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6d7c30-9596-492c-9fa6-795f9ca1ba65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.112.65.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a6d7ae-7706-4f31-ae79-d0863dc948a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.117.132.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9d52df-c1bb-4b42-97f8-c0bf9de4721c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.133.52.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9132de6b-5a1e-4134-b3e0-e878787d6364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.168.12.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854f7ef6-a26e-48aa-be60-ef8a7582dc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.174.17.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bc4c8d-3f9a-4773-bea9-d01cdaa512ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4c24e7-d695-4db2-a093-e2457860bdf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c695dcf2-0eac-44a3-a885-d95a1145c185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.57.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f220aefb-96a3-4aa2-a3f2-6b7780faf7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.212.83.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd427e33-4347-43db-9610-8a687877ce9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.215.99.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0d4349-f210-40d6-8511-e245fb70a766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.252.29.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b98bce9-82ec-445e-b979-d782c3933ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.253.220.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387ca29b-b382-4ff5-8f4f-d137e58a39ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.255.214.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116e0077-9d34-48e6-a89e-028cd48f1444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.74.219.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6832feb2-f92f-481b-8e9a-eb47dda5082d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.96.44.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d12e8fd-1691-4da6-aab0-71037b05aa66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.252.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f526fe7b-c823-4901-8752-11bea7730054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.124.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c424bd0-d071-44d6-b7c4-5afc4ec260e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.16.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb1cdee-f590-424b-a2c3-46c9192c6c3e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.35.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d242f2bd-cee6-4fec-8625-de8642c5e104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.71.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5378db-0686-41b7-b54a-6efe36aba3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8455b47-3a7a-4d45-9c07-d3208649e068", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f9a504-8e83-4ebe-8268-d01cd2a079e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.92.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd23620-bbac-43cb-b81c-1cc7ab474266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.150.27.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b623de27-bfb6-4acf-925a-5b63a33b1404", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.17.1.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b07218-657a-456c-9293-1f9a9d753484", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.182.114.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf67c57-a15d-4068-8563-ceb14173d19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.185.24.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607c0a0c-75fc-490e-a6ed-c984b3959451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.171.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec80a7e7-6219-4a0d-8c0a-7576ad7903cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.191.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3396c1ea-4f36-438b-bfe9-5352250ce2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.205.246.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4dfbc1-74b4-4cfe-9f5a-ebcd51c82f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.244.226.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792a2992-1b1b-4166-b9ab-5b4d02479cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.25.29.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c181fe-a47f-4cbf-b2ee-5fa988a05cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.170.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d627a97-ecd2-4530-adcc-d709f00e38e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.114.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93d0b41-fdb5-439b-b69a-3731a25e13ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.251.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a3f31a-d25c-4dc8-b5a5-2e3327fc7340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24088925-58d7-4c17-b889-9653945707fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e455b58-82d8-4e8b-af34-2edbb417fd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25c2fa0-0cbc-4d09-a6f8-4ea1c1473dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b826d654-5b38-4bb0-ae3d-a8ec2de55243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c8252a-47cc-4b77-880a-378f475eaf76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e142ccb4-e380-483b-82cc-bdd2d870d5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f04ce06-b730-451e-88d8-7b06d8e74da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff61dc6d-fe3a-4e42-93d3-ef9d4d3abaca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a5f3d7-ac68-41f6-bd8d-5f2a182b5b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2c400b-7439-4769-96e8-94ff3ea76786", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.129.64.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592f9c88-b50d-4101-a1ef-02bea7a03685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b452ef-7b20-490b-b52a-38f9c8da8988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.225.160.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1720f91f-3567-4626-bff7-72b037194068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.227.38.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9017a915-ddc6-4719-aeb5-0787de8fcbcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66a64a7-feb3-4f9e-a0f2-0cc3c5b19bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbfbd09-99bb-4591-8e11-34cf0f3cd090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.29.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975e7866-7463-484d-af99-2558bb756503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7030e62-491a-40be-9cd3-8135ac3ce99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6149cd9a-9e1c-45a7-a61e-406e640bd8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.8.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2279d94-4fcd-4794-aca1-6ede170e5837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.8.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7053dd33-6c08-47ce-a2b2-ce739d5cf2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.8.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed4f028-24c1-4f6b-9b00-b5be0f11d8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c155caa6-b9aa-4ca2-bf5f-5f073a046d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40df0d7-24e0-417a-b258-2b3affc5ebab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f31ee6a-1a45-47c6-b696-552eb41f899d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f8dc77-f8d1-4780-9502-8b37e4ac06d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4980eac-ef9a-4093-a4e3-a56d95b49c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404c4269-3463-4a6e-bdb0-e16db9e9cb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e552b1-a62c-4131-8e86-e7297ec46126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1b2da9-2318-4b29-89cd-67fa3b46d668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff94c7a2-870b-4f2e-973e-dd831139ac2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f77f3cf-2517-42ce-86be-03a6500ebca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849fc8ee-920d-4f01-86d2-daaca855b290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.184.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f485916-00bb-4e15-a3b5-c88b1980b489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.217.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f4ccd1-319f-4e20-be44-59a253665803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.98.64.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88101073-299e-4dbc-9fe0-ae9b4ac7e397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.104.152.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05db9bec-0f20-46fd-a389-9caaed6023e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609c72a0-b2af-49e9-b82b-b97e9e3c0d0e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.160.97.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ada8ede-93cc-43e9-b708-e449d93b25a1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.126.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5058305-c744-49af-b6ec-c6980f578f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.230.150.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac85b99d-d8ed-41f3-b8cd-8222f215a354", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.48.217.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698fb019-3490-4cc8-b62f-c99c37d1bf85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.110.164.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7527cfcc-16e8-470b-b767-6b8646b1d7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.128.202.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3848d43a-2b37-4950-913c-8348debfe804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.235.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1383ef-60d4-4d9b-8de8-2e68c534c04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.81.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9efb12-7b25-49e2-8a02-e6c3ffd4945c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.82.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2db35c-110a-497a-b9aa-67d55f626460", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.2.217.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9950a05-6e22-47ce-820d-1de4f9cb94ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.215.48.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f073a215-94b0-4598-b479-5a917f85200e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.44.125.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bceafc6-9c8a-43e7-9e79-71a50090e86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.44.146.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d708b6c4-269e-4d5f-a8a9-a5c73d1be9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.54.189.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355f76dd-1c9a-4db4-8bc4-49ad43345ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.71.237.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b7c2cc-0503-41c8-bf03-876df10cad8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.74.253.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966075a6-506f-4e05-b600-378d098e57b1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.44.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2c760e-f3d6-4b66-973d-4220b5828037", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.46.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea05e457-0f21-46e5-bc59-d941ca63675f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.46.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec121d3-11d7-4e07-b9c3-1672557c2230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.125.168.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31752a7f-3bf5-4c88-8251-e36d64e2f5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef917e0d-5fa8-4632-99a7-b86879526e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c419f0e4-8bbc-4dee-b66b-0cdc199a3a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a6a523-cb52-45c8-8c4c-a2d70de58123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e3b5d3-c34f-4f6c-afd8-cf858dd3907f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.227.192.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323ca024-e38b-4817-a25f-a977112cf737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47bf536-1887-49ca-997d-04fb018bb092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.221.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8def04-3a43-4a55-b83e-1d8fc9ff65b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.162.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce7b00b-86ae-4305-b817-1c18b0796014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93e9ee1-51e8-4459-b3b9-de19ae2876cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.201.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cade17-42b0-4ced-bade-90ea515b4248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.51.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ebd5e0-c1f4-4652-9bff-56694442cd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.101.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064b5a35-2598-4ca8-92c1-db03b0002235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.250.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596467c8-f3d3-45b2-b27e-e300bb5bd6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.186.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881cc0b7-8d16-46cd-ac73-0fd16ad966db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.104.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce4bb74-2a75-40c4-b206-f666d2c50a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.81.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c2787b-d407-4e96-b3e9-c400ca83eb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.169.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eeaef37-8042-4f7e-ae1f-76066c5a16cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.176.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28561a01-6f0a-4631-b7b0-b99a1b8a4749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881fba9a-9a0d-4060-9c82-ecc5772a3892", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.134.118.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9538df37-8065-42a6-b42e-67e42e9bf6e9", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84a5355-f898-4f3d-8b56-6aff6f44727b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d0d484-e1f1-4b8c-9336-ef8f7e2fc4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656efc94-ca86-446e-9df8-e18485377753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbd03bf-9fea-4d2c-b2e3-c9b3949d84c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbead98-3cd9-4941-a399-ff014eb7ccdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37864449-a9a1-46ea-a12d-4fa7a7ade0e2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.7.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ae694a-e80d-4c73-8855-9ce940021933", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.15.20.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860dd91d-13c7-402d-8ce4-ae4275dcebb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.167.11.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4e5eb4-c62a-4953-b0fd-34b00a0c227f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.146.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64db0726-022f-408f-8f96-556104d4f0b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.34.49.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81ee874-2d00-48f2-9868-39aac6db2e17", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.51.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754a81c2-5301-4619-ab18-d15b905b395f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.204.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2728fe-4214-4050-aeff-cc1efa7d2bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd58af32-0725-46c6-81c6-57774a09e169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeada496-343e-4780-9501-9f1f010d1444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6eb9a6f-4697-464c-bce9-c37d08ce811d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1bdcef-554a-4d98-aff0-f51fd0222087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee7693a-5813-438f-8ba6-5b091e24e268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea5c574-ac72-4eed-a7a4-c541d75b2b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.7.66.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3b57f8-31f7-4faf-adf6-2701beec4430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.7.86.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bbedae-7879-405a-915d-8587794e22ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.77.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7e1c60-55e4-417f-a03d-c7c6048dd43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.227.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485f3695-10f2-4593-80d3-eef96f5dc4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.192.67.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fcd3ce-5d91-48a8-8631-246a4a0a024c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.191.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57edfdd-d53b-4299-afe9-e794983b543d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.10.58.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59314acc-f4ae-459e-8cba-00c1106c1b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.223.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6407ce-6f18-4924-9043-c6dd6b4e8b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.95.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797f39ff-81bb-4b5c-ae43-90fdc7965063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.125.185.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3458310-2560-432a-971d-453ab4e1f89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.126.195.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aec5ed3-2a9d-4db0-91b6-7489efddd556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.118.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335d9812-680a-4b02-9cdf-19c526eb7037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.231.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dbf88f-71f5-490f-94fa-3964146e2875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.50.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0a0291-3eac-47c8-8aa5-279697295af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.104.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3c6a7a-21e2-4907-a3ce-5ec09aa7195f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.125.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07a2101-2007-49ec-b8c8-ce3cd5e9ddc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.179.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be037e84-2929-4b67-850c-9addb65c873d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.66.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49776b5-33c7-4f65-8657-4c3316598299", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.73.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1703a4dd-e7c1-4857-b687-299d0668db20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.109.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a55ce8-0d68-4b83-8b12-d16769afdd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.151.142.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb44764-99f8-4fdb-98b5-8b417428c7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.12.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e80ee35-c8d2-40e3-ac5d-17e37a018b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.142.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b315020b-84b4-4252-8cdc-32dc7936425f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.144.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92044d54-6b66-4717-bb39-11296cc6b3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.188.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7c1be3-772e-4117-be11-11bd5a4931ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.213.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222a05a8-9b7a-4726-9a8c-8114f6be4013", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.229.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56bd277-f661-4f56-a2f3-836c00141a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.230.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ce8547-113f-4d26-89a7-4536e549135f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.239.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe21f8d-fbd5-447e-9c29-207ff5b86e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.4.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2df64a-f80f-4c3b-8324-077e1a12fdb5", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.72.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5954ea-6e20-4d74-b2a8-ac3a76d7e1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.173.138.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d8c984-442c-4beb-b2bb-56aa69722cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.139.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d9e0a0-d6c6-4acc-877c-06637d505531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900da2fe-3b26-4e47-a602-7956f9f9a185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.203.202.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76891c4-7f25-4a1a-b327-6b7e4cd0753f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.204.53.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77afd163-7a8f-44a7-b677-cfe87e966598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.139.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb8de95-c338-40b5-9e77-b82fef8669fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.207.109.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf6ad82-d31a-4920-abf2-2cea3c321aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.120.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f8e5c6-e360-4375-9702-a570fd29b348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.162.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2596d5c5-65b7-4ae2-bdf4-baaea523af0b", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.214.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b65d867-4526-4188-80f0-50084ac3ff0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4460249d-9680-494b-a89d-ff5cd07913f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.63.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da073f01-4eb4-41f2-acdc-1d2800d1685b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.229.16.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c250023e-1ea1-4f86-8aac-4bc1572e5285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.229.166.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4390e966-6e07-4dd5-bc4e-76a65a274d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.234.82.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6fba80-6aed-431d-8e63-46e078bdab42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.130.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9484e1a-b4a4-4089-a908-939798fa0874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.148.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf20c61-2909-40ca-aca7-d975be9ef7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.235.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00227b9-fd36-4016-b393-ea74d3503acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.32.151.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df7dfad-96f1-425b-b573-b25bb1d24f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.151.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c031a60e-fa64-4d7f-8877-64e84a0961a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.243.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdc308b-3b7a-4d5d-a020-f5ab2748cc22", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.47.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fac4af-cb0c-4447-9fdf-28139b378612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.93.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acb45b5-f753-44b8-830f-8966db1b6a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.94.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c9aba9-6f2b-42ea-8646-ce8fb46eccc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.4.25.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1c5b04-5c42-4bd3-8dc1-166e3818c00c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.145.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904d5546-bd9e-4477-9e73-d2d54c24c0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.45.115.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed0a20a-e389-493f-bd20-f08ef452083d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.45.216.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309c7a84-b17b-4077-8cde-7ec9248c41f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.47.27.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b36ba0-819f-4e14-980e-024603992d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.47.64.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21f5b2c-5f8b-4c89-b547-e323dd8d0010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.252.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a44ee6-0354-4453-8b35-ed2ff414bac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.133.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d7621c-886d-4ac3-b521-59c6708cc09b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.136.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6e305b-a6a7-4a57-8cd9-f642100cce7c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.163.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fba9f3-bab7-4881-8519-fdeee2b434ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.186.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be694842-ca41-4be0-bb3c-ab7b2ea72d7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.56.21.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d455e3-9ee7-480b-992f-53168116f1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.61.190.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9e3754-8327-4389-8a15-d5b767d7468d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.156.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b98e99-daa2-4ab9-89e4-9f32f29dbe2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.160.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5674e4-c95e-4813-914f-2aed0abd9616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.178.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb2fa22-d034-4f55-ae99-552a0a3734aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.208.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1798a6ec-1f3b-4267-8fa7-791fc2c999c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.252.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4a49dc-2c54-4572-8c63-e77ccf54c714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.4.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2045b7-fddc-4680-850e-4c9ccee28aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.48.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebaf546-6974-4518-8b36-f3ef7a98e12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.95.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402f0c48-f1d1-4623-8c3f-e72858949671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.73.147.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ffa678-9d61-4c1a-ba42-9950d3677c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.214.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7dd018-fe5b-4f46-8900-3d697c827b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.63.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f577f5a2-0ff7-4957-a44a-3463bd186bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.111.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e728596-f619-4904-81cb-ebed84d2eaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.181.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255ea533-1370-4060-9276-8de41fb57a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.217.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f87567a-a403-4c76-b67f-0b680a822988", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.43.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32f5a12-0505-4b11-b34f-0ef618f2ba5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.54.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b7c8fd-24db-4b97-aa32-05e5ad37f93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.59.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5d2a0b-88d4-4f4e-b5ed-6fe4db248886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.60.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587380a7-99bf-4c0b-a4d3-f8c2b81b70ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.65.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a1bdf8-e361-4115-adc0-0c65caa701b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.110.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1236dc26-ab2b-430a-8e79-1b7a4047eb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.147.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007423e0-1cd6-42a6-ab62-e056aa143db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.131.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fe5f7f-4c78-48d3-853c-4d34d606624d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.207.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebf00a4-4707-47c5-a329-e5723d56b324", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.214.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d6bf97-d6c2-4225-93d2-6efbb02d558a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.59.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e41d739-8df3-42a1-93af-32cf1d93014c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.87.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32306e9b-2adc-49bf-8821-ea367889681f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.174.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55b96bc-8f4c-4c0f-a0e3-df937bab334c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.68.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9485dc-04ea-4148-b805-ca4134a42656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.89.253.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19937c1-9496-4f32-96c3-47ea6c533c8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.9.172.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7aa92f-4158-4080-ad76-6468715d9df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.96.233.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8f7f7c-13b2-4b91-887a-e833a281b8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.98.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1abc28-1863-4ed3-bee7-c838c8265f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4e22eb-dfe8-401b-bb1a-d31166f353d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.172.91.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5885ccf-4b74-4dac-a14a-a4250683bc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.175.190.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb1c16a-8cdd-4cec-9fab-be607b1c5352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.110.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6054fcd1-8f61-425c-9b9a-984cc3206ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.175.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fdfdf7-aca5-4f70-b146-3484eb339d29", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.231.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e1ed45-f8e9-46e0-acea-4ea667e7e97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.174.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836c257a-9448-4c2d-b886-0e33076e4131", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.18.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1a6082-5e06-4e19-8fd3-5a9868c3686f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.195.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea5a852-d485-456a-93da-39c310b22e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.232.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe629e5a-f831-41a3-a85e-b883b6002c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511b6e48-c6c9-44b2-a390-79ef3584327c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eea5ca9-7103-41f6-ab4a-b42256d35dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c0bdbd-73af-4f73-a1ae-f97bdeb46bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5ecb72-50ef-4837-bf57-dd9cf1ba4e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e17a653-c1a4-44b3-8aa1-61d4a342e27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0abd86-ec04-4a23-b46b-2f168c19f93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2a3167-4624-4d1a-a0d0-3fa9dc990fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c92bd2b-2dbf-43e0-ba21-abdb0dfade6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7430fc6f-f776-4a4d-9e5c-8d4344be7067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13edb86-0c1e-4d36-ad10-3f4faa16129f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7ba57d-2e9a-4e03-a470-4865d3da4a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8df8b9-1507-4942-96ee-e44029ee0b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889f9b3a-0385-4d52-832e-c5733c63c9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43ed4ba-0d70-42cd-bb22-24e1a06a33ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98446097-f0b2-46f4-ba0e-6a3eaf59c9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec39927-2215-4eee-a89b-9a33e0f75e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd96931a-ba6a-4d0d-838d-0f0d56e6b29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16abf94b-cfe2-409e-9367-a671d19fbfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafec83c-0f5e-4822-a9c8-13c1f1b10d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ebfec3-bac3-4eea-833d-9bda85cb3e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c80cf5d-8129-4a81-b09f-0c6b8d7a3379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04929ea-7899-4ba7-a91e-9543857d4a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a659d6-4817-431d-af88-dbe611a7d7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc48ec0-4e69-4c47-a715-b19a50e2911f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3deaa6f-5e39-4406-ab32-afef430d67f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3b4e2c-bb63-4d53-9b46-0c74a23fd718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8929a7-6e2c-485a-813a-b6e2231ce3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19d4ecd-9654-4bc9-a8e0-e9d1d9e58a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5add8c1-4de1-4440-bf0a-0a161a66b573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c69738-2031-42cb-8d4e-2907ab6daa23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b184d74-e69b-48b6-b396-610eeb5a2b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399ef0c1-b67e-41e6-ab23-3c65d9293517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af057484-1c46-4f66-af65-62af6b74b571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a115302-a6cb-4d4b-badf-c3e8ec307033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7698f1-893b-4b46-b837-7ad4bf427610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5311099c-cba3-431a-a954-eacddc30b641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926a73f4-91ea-485a-ae5c-00454c40974a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16fad45-a95f-419a-8d9c-c69b487a1a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6ff35f-79ce-4ed8-bf25-eb0b43f22af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28838259-1c5e-4041-9369-f44a778bdd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362f777c-4532-4343-88b9-6a1fa3d83fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a31f0f6-d051-423a-8a8b-ae7bca8b2116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f43bc23-fb78-4a22-acf1-66a458e5eecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8579d123-5a1a-4aeb-998b-2fa8c32578c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222a5ff6-33b7-4a27-87e7-b49bb6184cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81192b9-b1b9-4c04-9e54-04ada07a9b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e11f0ac-cf83-4e93-a6c6-f6b6880fd8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a1f3d8-70d6-468e-b46f-017c8d0156e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b22bc5f-fa66-47cb-82b6-16b552331e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8385328f-3c89-4c0b-9e10-94899633187b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddf1687-6bf9-413e-92f0-b2e0ba243716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd76fd8f-4097-46a5-bc7d-95bbec555d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230a90a3-4e78-4efb-baa4-7a160276e652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecaca49-b490-4f7b-8ce9-d7679aaf7879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95eb3077-4b5f-4434-b0e6-4c92c4fb743e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ded0d0-5d1b-4e62-8de5-b7e37501ef8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3c4dd6-c67e-4a82-8086-b1112d3d6689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d54f1b1-6161-4840-8304-9351e306afad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bda99a9-89bd-43a9-bb36-6d20036a7faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27702fac-c078-4ace-8a81-96d7377adeab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed1e33e-4e48-4cfa-ba0a-d1013e62671e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a670cc8-15b4-4a00-b64c-f57b93cd9779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebc2ea6-be3e-42d5-b8f8-3f53a8d4b524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e3af3a-5b5e-45c3-a642-a9d9b4f679d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13e16c9-5665-423b-a776-ea27471410d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c471ba-d1e5-4f9e-9fdc-91ae4db758bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fc8366-b0a9-40db-9e0b-40689d780c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d80b36a-a007-49b9-b017-1af4d91f7635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8572d9c3-35b0-4d99-badf-d4988d1ccf22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc0b8b9-349a-42af-a2a7-0337d29021b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1cd2bf-4a66-4220-bbe5-46bac2d60cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40def7a2-77ac-434f-96e1-df069fcccd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fac12a-8e0a-4760-a4d3-ca5f9d767cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b749a09-5dee-436c-996a-d640220923e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813180c6-dc2c-4a87-be10-4e63d948c454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b00c33f-3603-4b45-a5b1-bee48852a44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f6dab0-d0ce-42f3-bdaa-c1b4ec1b5969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32656604-ac7c-4c74-9141-aa0df9d4bdd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11da2306-4a58-4d49-b6d7-8c4579c5d241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2143782-d61c-42a6-a4c9-e9052b70e805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e043358-d74f-4463-9497-106ebd336dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4ddf90-d1bb-48a4-9cd3-7357274df0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b912e84-5821-4a3e-a5a9-5383ed871b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065edaf9-6984-4de4-af7a-bd00eade037a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9314a3aa-07ff-4876-82bc-73586c144789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ab9518-1475-44b7-9881-724f5146d895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847911d2-2ffe-4a0b-a63b-3871ac6475c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a2fb26-af66-41c7-b42f-a375ed20eb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22118857-e391-4702-9726-73a9106ca5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c5fec7-2d74-4635-8c99-6ebda91842d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193c671d-0f0f-433d-a927-ee2b9606a4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9339cc95-ac64-458a-99f3-2ff10bdbc927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e518c38-3acb-46da-bc6a-1bd92873c66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f56de-279c-4941-8019-4e84b64ed3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9df0641-a8ac-4a20-a151-6264e0d8d357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7f8638-308a-4cd1-adfe-e520902931da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311ca9bb-d733-4582-a484-69aeab653131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36a1dc8-95d9-4d29-b0d6-2cf12c097c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cf46ae-b8e1-4c8e-affe-fe21b3305211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd360873-2c27-4c46-8a53-04173360d756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7496d33-c2fe-4c48-b05f-a371280318da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae696892-fd97-4815-bb97-cafa7f598cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95024fab-e3fa-4e37-8171-3ffc77a0b591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63ada20-6649-4587-bd53-f0984acc3dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47abaa37-bf3e-4908-b865-e4ffcd281bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a76dfa-6b5c-4225-8977-8fdd13bee6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17251a91-df70-4e9c-acae-1bed550f0fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbfc56b-df8c-4c5f-9b34-7f11c82959b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044d079a-f8fa-4191-9553-c7b446654a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ebb023-93a0-4226-96ce-ac1234ae0db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686fa2dd-e3f7-4a39-9856-1b82d8d3e10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8008e9-d6b2-47de-aa13-d2cc456928f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92883d08-7a2e-4f90-92ab-c2857b0d24f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1f6d36-39b8-4c20-a1db-258fd407a5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b191ce-682d-46bf-85dc-b25cc05d6baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c89cd0-7b48-409e-9c55-8c3941ec7090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfa69de-4a53-4d85-a7f5-a30b5a4054e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf49ec06-7959-4419-8c0f-e429b21248e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ebd845-b039-4856-bb02-e6b9bad8f0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e1a18c-953a-4fb2-9be0-f84bff63d703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efaea7a-f9e5-4606-8507-ad36bc575123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b927770b-7d66-4e17-92e6-3f8d21a175a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7bc8e9-4532-4268-ad55-ffd8cc1fce7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32140a43-b57e-444b-afbd-465d10c214e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfa4a7e-ad85-4651-8d2d-58f82b1957a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78329a16-b9a2-4a16-a914-ec92859bd673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b62ef0-0b3d-4ecb-8566-3938415921ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a200b70-9c49-46c5-986e-ca9f02b5cd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e39b8ab-fe99-4385-b0c7-bb5a053747aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d07a6f-cd7a-4ee4-b0ac-206c2cb9aa71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb268db-ebd7-40c7-bf56-fcab04cb4de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fafc7b7-1b55-461e-82bb-deaa7eee295c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d7d7f1-61d8-47fb-955c-eea8ce287ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fb77c0-ee95-43e0-8417-276cb73b58df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c335c61-2f6f-4626-a3e4-089380af03bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b280d403-ec16-4cf2-a25d-e9fe8cf7f920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907599be-9da8-4dd2-8aca-f41206eca742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8452d404-8832-4f6d-a31e-cb7f0253102b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761f73a7-6f35-4915-8203-4857a93625a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fc32a6-090c-4fe9-ac71-21ba8e52e646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04b62ae-904a-40e2-9f56-5d475196c66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2847223b-e90a-455d-af42-b6008052d432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3983e14-27fb-494e-8f46-c1ea1698420d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc92691b-f6f7-4875-bb4b-042bd181498c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1c739e-0e6b-401f-92a2-d6f7216b799c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964fbeb0-fade-4544-b385-47e79400c147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c8fdae-21df-4273-921c-e3c6f4943272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d13dd7-9bfa-4eca-bfad-711a3a0f635f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c747ba0-3d22-48a4-aa60-34df1e3286c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc66500-ad92-4165-8caf-8004c5853967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc50f1b8-acbf-42cd-9a2a-687749906ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736a0104-fd28-4f82-bedb-2508feb8e3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176bf59d-4c72-4264-bc42-328766a1e53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1708a57a-6cf0-4d9f-b2d0-c5696f22f738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31565d31-41e7-4cf5-802e-7a09ebba0a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236347c9-7716-4035-87b1-d5326a2e789c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4013116-2308-4db2-8b8e-1cc8896a1645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204fa4ef-ba51-4b25-bee5-2984d58c2d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d1739b-a2fc-48a7-b198-0e2eae41d9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44232e64-9692-4ad0-8840-5448439bd238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdffae1-b66b-4cc7-90f2-800c0951d2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207e1449-7909-4ea5-a4f0-61e356ffaf1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b156f9e0-cf83-4cd9-8786-1b63085297e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3cb067-6137-4bd5-934c-27d120155829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b573c34d-8b61-4343-a210-3fb3c9195c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec84dc6f-85f5-4987-aab5-7b46b278a844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f851531d-5749-4d99-a0bb-0380b2ae9598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2755c506-fe4b-43ce-ae25-8552bc475d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232ff792-0025-49fd-936f-fca5ecf5b686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8685ba-668f-4222-9cad-94d4f9486e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca264af-a581-4203-9591-1d74e73a05ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18d05c5-356b-483b-a6ca-189fb5f24d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e71bb5-8677-47ad-960f-1c3d93471ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761a7ab5-4110-466c-a28d-24a8bc869c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b9721c-5e36-4712-923b-a36424bf1b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b99bbd-b5a0-4a4e-94ee-1297d98094af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2967761-b979-4075-ada8-aa0c36acfa43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63dff5ef-ec05-4eec-8dff-a4f6a38a9e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd384798-6c7e-4bc8-af3c-457c41e6a73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8651d51e-851e-4dea-b674-a9a4d959cf95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94464b6-baf1-4a86-8c0c-2655b3071ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f830ad1-4df3-4e33-8fa7-a54a1d910a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce0f399-bded-40ef-98c3-852bbf9643ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c9d700-1508-4d14-9b5c-5b763fc39674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05dd060-3953-41a4-9c59-50c4ed5aa443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1267de8-a39f-4e16-a24d-5a45b8416e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270ba26c-7ce7-42cc-9757-02a427a879a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d705f3-20ed-499e-af0b-9ee6bb5995b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4099ef-5e9b-484a-bea2-48cda4f33621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3736dbd5-eb4f-4de2-bde6-717436adea31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424aa424-569d-440e-af31-07b6cb0f4f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f6d1ce-8daa-4560-905a-db5f81e24068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5684c8c7-e437-4512-9a84-473a583444a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d96be9-396c-4723-87ad-19b989339282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87d545c-7b9d-4b08-8d5e-3b1cc45b5825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044358c9-84e7-4b34-a147-535187470ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e998ee3d-ba53-47c7-9c25-d0d24bbd1b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385e906d-964b-49ab-a25d-0fb623d3f0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ba711e-4a27-4d98-9134-a6b837ca15af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc453a7-a6fc-47d6-9850-450d75598c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdef52d-ddc4-4c02-b9ab-5111dc6a9d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bc7501-9a6f-404e-b917-bb98d12fa0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc86e46d-8b66-41f6-b634-6a4020e712e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b637c86-bad7-4c58-a99b-4495626d4b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67204b51-38f6-47c2-bd5d-8ddf4e3f4380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ed934c-3e24-4254-b77b-b3843bfcb4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71b342f-aa7e-4ddf-8d1a-ffe4f27a89d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fbcaa4-325a-4a0d-aa3d-def40dd371c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccda65ea-3d41-4911-b70d-becdf75e7efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3496fab2-25c7-40f0-aeda-40c738fb7040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62a9f20-27e1-4f80-97ca-20eea94d5801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8591e3d8-3b5f-4fdc-adaa-8b82f74c2f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7986611a-aca8-4737-9e64-4ae8fa89d336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb46dd0-4f94-46a3-b3be-1fb8c58318ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f69f407-ff58-4e7c-b442-567d314045e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c2d678-cb49-4a7a-a57c-9624fe09e443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c04bcb-15bc-4dce-a3f5-36bb99326d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5356e6b-c8d1-4d2f-a4c4-16582a7ab4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f72f54-6336-487e-98ef-aa00d720a052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942585a9-b29a-4743-9222-82b54c7f097a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848959fe-03e1-459b-a87a-ba9e3d29f558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fb50fc-3fe0-47fd-8d76-48f0b20b745c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1806309c-8f9f-42f3-a9c9-1821cac0c6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20995e55-1c44-4505-b66e-c4aab1e8cd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb33d7b-0dfc-4b83-a345-d16576f889b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0028cd-cfed-4143-a4fb-2cb92909da67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3d0b14-a5cd-4b82-9655-cd5536514635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847697a0-6b2f-4c88-bf75-78f6c75eca41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd13792-ec9e-4153-a88a-04bb372a4a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1cf356-14e8-45b6-bc3d-188041cf534a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fa8f04-e182-4987-995b-a54028c39452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3c0021-9ec8-447e-8f9d-90fc0fd4f3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a946627-62e8-4f2d-a91c-608e28fc6504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cb023a-d70e-42bb-adbd-b7aefbe0787a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbfb2d7-b73b-43b4-9eb3-dcd4dccdadf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9436e492-f006-4cc5-9220-095c45299639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe781a9d-a523-440a-ba58-d32802ccbd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fd544b-f5cb-4c1f-8cbe-8faab162967d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f82f3d-e9be-45e8-90df-bccb1c96a168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e093e682-0acf-4b41-b9b5-7d8907b86e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a5e1f0-698f-4f74-9a12-7d5758d9a75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5689dd-7136-4c7f-8800-c70ba979dd1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd92ba3a-22b0-46a1-affa-c95f1c8cbb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3798a09-6d5b-4171-9d5b-57484397db2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ad17ed-2aaf-4ed9-bd5c-ac4a99ec5b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48289d98-3b3f-4eb1-bf1d-8fc0ba0287f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb674d3-39bc-47a9-8c4f-126e79bff9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68877007-3cd5-411e-b423-06399e327947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a3ab4c-1893-44af-889c-fc521346fc71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfa3d27-34eb-4abf-a2a9-c76d2fbfb594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fbf13e-d033-4976-b45f-99616eb6d76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8d0ce4-0a64-463b-9cbd-add6b48ee745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71c4271-b852-4265-8c64-8acab5b5a8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a1f063-753b-4a09-9b0f-c537ba52b529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6378bfd-0dac-4fd5-b694-ded05f463e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161efc5c-6d4a-47a5-8632-d8c774d03aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88216555-1f26-4b02-a778-e5b19ff491b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae03ca4-ddcb-4add-8c87-dcaf9a757bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0842ca-f8d3-4e65-ba50-65195a8f773b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb94be8-ff94-42b4-986f-f523aa7bdb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99992a2-862a-4d18-8952-deefdae91491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8cef15-de5a-4672-bffe-ade170c4570e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bf5eca-8280-4c4f-b8d7-6dcca26b3b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96022867-3430-4bda-9ea1-6b3d02dba72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6696db-5dd2-4837-8f0e-9e1efcecdce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92eb5ad-e960-4859-84a7-9c3716c6a420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137a2ed2-ea81-4890-9198-4634082bf0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346df071-87ea-483b-9c5e-e80fac863225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911c502b-2a21-4462-9cf1-39d6d1d828ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd0f155-c4e8-4de9-91d6-81105240ec52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7c9cea-2839-464b-be41-6dec0d39aa1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785177e9-fd2e-4210-9184-11d035ec290e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63ab0be-dc6f-4a4f-bea7-dc5d9b255e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7f926a-6456-4de1-8593-e846d8df50ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80325439-1082-412a-bdaf-d4b3b5cbdaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5621f5cb-85fc-4033-a18f-7eb735d71da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4573edca-a5a3-475c-ad76-e59952c0e05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a9a9e4-72f0-4ba8-805c-e068394e15a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24161593-323f-4025-b549-1b4c2c09d777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2174dea-be4a-4585-935e-8d0d614332de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93120612-81ca-4075-af74-8553589fce63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322782ca-8fad-440a-a7a2-d83dfb691fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb48b9cd-a177-47d7-946b-737ceae5b5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d22f6e-38d2-4bd1-ad22-2d4af3b1a55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f11a51-0520-4118-9d1f-83342bf967fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aba6b1e-574e-4b47-aab2-8abfd0c6a3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09be246-05c8-48a4-906c-cf0dfed57cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8a67fe-70c9-4a9a-b54c-cd4ae2ee41b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838f2fe0-e007-4800-98c0-2d0b47ae7b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ce6f84-3867-4066-8352-bbee5ac41e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf40fd23-bcbf-472f-a8ec-1366dff9d70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e05114a-df73-4e09-9313-39cb0073a8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95aa0e42-0eec-4a49-beb6-6d54a22cf922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc434dfa-0967-41c9-8cbc-6717900308f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab066b88-dc0c-48b9-b75c-5f65917a7542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2e9997-4093-4d43-9852-880031d36623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d3baa3-4b6a-44f3-bed4-71c06072da1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13a811e-52f6-4202-9e3c-df94581c6877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d29052-2749-4a3e-a00e-13167cc0763d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437a8b07-1e48-4b47-8b55-59e190c8d3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9de314c-1b6a-444e-be47-19bd7619aba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97596816-8f22-40ee-8c87-03258a77d7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79ce6c7-9ca0-4b51-be60-10a5b85869de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f844cb63-a399-4e1a-a294-a20e85938ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d877d7-cd5c-4b77-9b3f-c0e75a694632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6f6e54-53ef-4bbe-a63d-2fee8c4c44fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6c3265-3493-4dec-baf1-9aabc83a29b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb957b78-cd1f-4cd7-992c-8ae32174b770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e52d820-0a9c-4371-bd85-62ffe0ed65cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b59646-f016-4642-9a04-794c4f88e94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecafa26-12d3-4e6a-94f8-10c1655b74d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d459b8-c33b-4dff-8e2f-bbf408517033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb25055-89f8-4ed3-8385-a1d69845c46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe2e94f-688f-4385-8b50-ef09d3c23128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f729b51d-d603-4735-82e0-6e063f4f3f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b24325-52e1-4aa4-9396-6ecb531ee023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee9a094-6b70-429d-8a26-17172261c573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e634cd-8cce-4236-a494-43fbf8a252b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bcfa45-ff84-4f42-8a6b-89029c413aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414fbdc9-8693-4e73-a48f-6560ec0b2247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47f7877-0c6f-4f0b-b222-ff7cd3c1ba62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df95f5a-1e44-4e13-8634-0e35d9271223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc47074-d792-4b17-87fb-821abe884151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045cf901-ded1-41d0-a0ec-07556602d668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995d54b1-3e82-4651-9e0b-9fd664809b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae4127c-0e12-4294-ae5d-840a8f64b48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0d571d-0ccb-4460-815d-520b8bf1439d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0afe078-1b18-4069-97ed-42e66ad91f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b0f302-05b0-4599-988f-7517afb561cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6ab872-36f6-49bc-abeb-bb9671c11681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9a13a9-9d43-4c74-a0b9-86b4e3292343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed395397-dfa9-47d4-99b1-3fc560ad37e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85c0997-ff53-4678-94b8-9a30c54f2ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d52aa4-4222-4815-9fc6-1c5d5481be27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53663473-8a53-4562-859f-3bfa96fe6b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63f1f3d-c602-48ff-a455-cb1e687ef150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc25044-a57c-4104-b266-d163ae6970f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75f27a5-2520-4a15-8428-8de61e998fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81a13ee-7a2d-40dc-a48a-30bc10adf35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1de7f01-e118-4023-87de-66c83988ddea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21791df4-5785-47b2-9595-b5a1d7b1e7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4edbb8-8f44-4094-a55c-b28665ce022a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1406a493-c3d5-4aea-9579-b5f723ee45bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ae946c-d6e7-4f29-b17a-28f03b2320a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f4ac21-f475-4a1b-ad22-ef1fa7ae6dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb78a70-e793-4c16-b116-1f9e48c23d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd06a93-7e50-439b-8b76-257c77e20a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756bdae7-5858-4d6d-a2bd-d8c7640493df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9f08ed-9667-4c7e-9f67-626c9416b0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13c22b0-708c-4bfd-9885-9ef1f7d695f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21123b34-cb03-414e-8f39-8815b1e13773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f01dd7a-60e9-464a-9e80-ab7827d5207f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cfdb36-d49b-404c-bf21-cd1bf35f0b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad06c6a1-b9ce-4513-aba1-f483ff32185c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c767d499-3150-4ecd-ae76-82e963ba8b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d29e0e-5e47-416d-a65a-71687ee56419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83b34d8-4089-4536-bef3-335c4475eb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7367389a-fdd6-4e6a-ba7e-587cec2a34b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a375df16-0ed1-405e-a80e-cff69225ac20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd1ca91-7328-4c19-845a-4b89a6b89d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcae8e4-a997-41ec-abbc-f7df90e23f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165e12c1-ea05-4296-ad2c-b945d418f313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dfcdc3-3658-4ca0-9dd6-e944c77ca06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3eea57-cdeb-4ab8-9c73-0fc2784b43f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6581a5f-46fb-4adf-bfc0-016af3b77a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6f204a-880d-4cac-8741-0dd121db70bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fadd36-99c6-4a23-9544-391f7a6b0d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3035c7cd-16f5-426b-96fd-aaf7f22b699c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.204.211.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bd3be9-6845-40c5-aa3b-82cad9cf27d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.122.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117d5bb9-7558-4279-aa34-c7ef7dddc465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.210.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1392a2c5-0b39-4eb7-a41b-6349f7d334cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.214.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0479b4-74cc-4ee3-8f4f-1803264581ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.209.43.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1822244f-dbe3-4e0f-bd47-ea0bf28feab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.204.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0652cc-2c07-40a4-90ec-740e6a68ffbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.116.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717ba0b7-ad4c-4d78-9194-627fab2b1bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.42.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd1b1e3-1be4-4678-bb65-75c28e84f976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.78.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edb3477-bb00-4651-9540-bee1384d3fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.112.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a716c49-5991-43fd-b1ff-36189316ff14", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.103.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff245bde-5f5b-4a40-848c-41a00dd86ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.42.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3884c34c-1b37-4a29-80bc-3445bed62a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.83.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4c8f1b-517a-435e-a70d-06aedcb27e1b", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.97.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eda0fd7-98fc-4b4f-8d91-63e85891c8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.133.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828b3a9c-85d2-4bc8-a833-e4c409d1f976", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.211.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2d3f04-e32a-429f-8b7f-88d00e77d03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.246.44.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b7fdd4-6ca9-4d17-99ce-3e01337ff932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.254.228.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b02ba3-b45b-49af-a0b8-c6c8e0e32678", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.91.59.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837301c9-6a4d-444b-ab33-afeba59af4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.27.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f48cac-cdaa-4a38-bec4-2f8f942a5f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.137.58.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a681e7a-a78a-478a-8a82-95c7a2ad920a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.138.159.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ff7e39-65d2-46ea-b858-c7c37b9bc70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.189.82.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50502d0-56af-45ba-87ca-15a5442c0b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.227.169.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabab764-58f7-4c67-b39b-1abdc5a22d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.249.2.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1457a5dd-70e6-4b2e-be6e-c5382f5f2567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.220.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a8f222-16e9-4625-b307-1aed1918570e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.221.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0205c6c-c162-4801-96aa-f97655bc4176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.221.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1b56a4-2036-4872-8af6-f7be716ee03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.220.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8efc315-92c8-4f19-ae5f-a1e6bc77165f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.32.3.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165d1aea-d0fa-46c3-b1ec-ed4fa5e601a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.66.162.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4574563d-deb9-4702-91c3-8d37a0f6e9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.66.215.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fccf92-4b2f-41e4-bece-80b910ff8d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.75.24.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c052cde-c02a-4170-b4ab-7638d377b958", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.81.74.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d7e45d-c1d5-491b-ae52-a28794340a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.91.101.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46821550-d78c-462e-8cf3-0444f5bf2dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.92.14.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ae514f-ae1e-4ca0-a4fc-5204bdd61c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.93.21.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b29092-63e1-4ac6-90a9-76decf35317c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.93.249.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66746ae-4488-4a92-9f4b-d5704dc98af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.94.9.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c31b89-93dd-4cff-b7fd-839df2d3db6c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.103.81.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623abb21-7f52-4de4-ad7b-d9488bdb21d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.109.19.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde9cc80-f0c7-45b2-a376-1ea7bf0b74cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.162.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3415b898-1068-467b-8dd5-1317055fcc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.154.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f046e6-88f2-448e-a0b3-6941bb53ce73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.97.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1415187-9ce2-48c8-947e-663fd0c2bdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.212.24.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31b45e6-4588-410d-a9ab-a06e16fdf22e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.212.32.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c80332-13f2-4072-b0ea-be721920cd10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.216.94.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3093ce-7f87-4d0e-8984-4f5ed63d5af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.195.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fa5656-0608-4983-a98f-e05d08249cc3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.23.126.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01fd261-c656-4df1-bb39-3ef03bba0290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.110.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19e1a53-f94c-427b-b52f-97bb84a9462e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.34.206.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea2bcd6-c4aa-4eaf-a1ce-99482cb300e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.34.233.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4588a990-83d6-4db4-ac4d-950d42edf1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.34.248.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4569467c-df1b-420b-aff8-565fb4d7f7bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.36.192.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280a9fe9-305d-4aeb-b698-50a40cfd5d0f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.52.114.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f30c2d1-e34a-46e8-a827-cde9f7981f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.52.24.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f4fe32-9224-421c-b5b6-190bbc588a18", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.55.127.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7fd117-0303-4ae9-a381-c1cf3eaa82cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.67.148.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fecb3e9-4146-4220-830e-ad5e5889ba13", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.103.170.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfaebf3-a421-44ff-b922-593e59844d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.110.46.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8678ff-c604-4a19-8340-b97d0901500c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.137.21.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42abb247-f905-450c-925f-ae92e0c25241", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.137.53.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a02133-e40a-4097-b731-60b70f8c96fe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.148.249.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1486999-24fe-43f4-a97e-a52fb4d9b546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647edbda-20d0-4f25-98d2-145892c7a303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.224.90.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a489a898-08cf-4128-8ec2-ab71c9fffb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.225.205.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0d6535-de9b-4c0f-b2d7-76d5be12570c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.187.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03654a60-9f6e-4e1a-92d8-29355683fc14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.224.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c834d5-07c4-4eea-bcc7-bd40c77f7bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.46.219.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd356907-5b07-4c30-bf32-8f7dee8dd10d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.49.219.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1803227-f1df-4c7d-afcd-867da2a7f830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.55.145.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdafe0e-e732-4a9e-ace2-4413755c2ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.9.119.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9d8cc8-b360-4f72-a817-2cdfc93699a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.95.88.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20c05b6-68ff-4d3d-a580-c5ab38895238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.106.79.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675da18b-5db0-4cbf-80d6-414ac806fa82", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.136.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87a0327-02f5-4c5a-80d6-26ca854bedde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.164.13.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032f3d4d-ef9d-4be7-8b3c-4f5bc756d9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.191.13.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04667a78-d520-4b1f-ac70-f7de73f97aef", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.34.187.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ecc68c-0170-4f14-bf70-79b37f33a72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.64.105.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fb5f20-0db3-47a9-a5c9-a3552a55f32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.73.148.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9bdd64-eb5f-48c3-b941-b21651b6d86c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.89.135.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdbe61c-1b16-4e45-9287-f6c4c58640dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.97.224.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa482de6-ae60-47f7-9444-d0c71bc7b311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.99.32.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc2cb0d-bf89-43fb-ab15-2b3dbca57e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.191.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb2c3fe-036b-4679-853c-39503f48133d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.155.234.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca12fe7-18e4-4c37-9421-d661a0b914a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.155.255.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db3c94a-7dc9-4ff3-b7fa-611c0a99ce30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.178.136.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402be288-0f70-44fe-85e5-1ea009d6da9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.184.121.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2492c82f-fb02-40c7-9557-fa751125b09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.186.31.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0663068f-dff0-4656-a7b0-41053a582923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.188.251.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a20dba-ce12-4425-bd64-a47a43e60751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.188.82.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b543939e-92c4-4abc-b3d0-62a91b21a7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.193.204.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbd77e3-4edc-4dd3-83ff-ee144e2963f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.193.250.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a7274a-89de-4a6b-ab05-1b93b40a9cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.194.249.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3d389d-af72-49be-9652-77072685e765", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.204.201.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0fb4a4-561c-4b30-9221-b9b1c28a222a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.118.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf16925-653e-4ec7-b93c-c7148d72292d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.95.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaf49aa-5e59-4eac-b9c0-7f87aa9178c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.223.154.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff09318e-0b83-45c3-b586-3a79b34cc506", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.224.40.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69871f56-1b38-4636-846a-5668220dced9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.224.86.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af139193-03da-4f4b-b682-b9fd8edcaf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266c0cac-494f-4406-b9ce-1d0f815eb18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.228.106.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30293de2-af2d-40ac-a736-8c1bd160eb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.230.10.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0a048e-66c3-493c-b5a2-efa45af8ba24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.236.161.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4762fb80-8f83-4793-8d80-3a31b5f3ea7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.237.73.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1008d7c-5494-4095-b76c-7ce79dd98d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.113.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88cc9f5-b1d1-4028-a0f4-3207435ffdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.3.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469967ad-a883-4e48-b4ca-8ff0b80fd61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.95.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc297634-30f8-437d-8b44-0caa7c5ad4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.245.232.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556f7957-5e06-4650-b768-5a8364fb5199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.231.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fc7849-4b49-4691-87a5-272db8c7c205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.247.139.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ff29a1-165e-43e6-b7b0-e9afa7d909da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.247.146.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc2ecb3-3c0e-40a2-8ba6-070454063f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.247.176.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9748ae2-b30b-448e-bd62-3dc837c41581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.113.175.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cafc1a-30fa-48b2-b0c6-422b407f2625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.118.131.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722302de-7a51-4463-a042-cb552491d856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.29.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac812483-2e23-4bd9-8f83-193858ec7036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b460d6f-d034-410b-88c5-5d335246b88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546171ca-354c-41f7-bc01-96c7671c171f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.121.182.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e12d3a-b6b3-4e9c-94f0-aa0737831c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49099d82-0e6f-447e-9fed-5bd3bde6b471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c5179a-3205-46b8-95c9-a1515e7d0522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529b38a0-8111-4203-a8ee-878400d32ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340e879d-6bb1-4240-861f-d971e7a0125e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcda532-7a5d-49a2-830a-83f8a371246b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e2fab3-ed3d-450d-8b04-f2862e55d656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98ab54b-a4fc-4ce3-8a15-28a82b124c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c3780a-984f-41d8-a540-39b1a7632ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799e2432-bb28-4716-8768-bc68281b7b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4927ad-bf1f-4739-a72e-017b4e7c6933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea086cea-3af8-419c-9dbc-78b39fbcfd58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7834dc59-96c8-479e-9bcc-39c66aa8b83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d30993a-3377-43bd-8fb2-61c97ff9d26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198ee80b-9789-4a5c-99c0-b03264dd6966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16f9034-bc92-454f-bed3-542cdb1725f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb59b61-ac58-428d-8251-3f32db627b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a99c9c-223f-4cda-b7d2-e5d6517e2857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dbc04d-2c8e-4467-ac9e-49eb5a245911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c188a1c-82fe-4e39-8303-1a0e7de10c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723ae4a8-85da-4aa4-8022-b947af98f796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.183.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61de77d4-4e61-4919-a7d0-274ea156367c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b18871-97e5-4918-8760-7899f329a94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552d49fa-482c-4116-97ee-3c8bb5c09c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5886090a-059d-422f-9a22-be7365056028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b60e3a7-9a90-40bc-a024-fb02a69dd4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc96f75-65aa-47e3-b5bc-509c914fd887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196f28cb-80ae-4c73-aa4d-3f0face2920b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.86.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38de205f-f5b9-4650-b679-7974a9873f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.97.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565b5245-df9d-42c9-9f80-19099abac186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.134.126.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbfd131-cf0b-4e54-9502-2f724bad3fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7033a6e0-fec2-4da3-88ea-e66603f62f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88eab0ba-2591-40f5-9857-4def9d612b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2715146-a195-4002-9bd6-5948e14a4d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.69.70.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db23de88-93eb-4e82-8fe1-c04d5bed86f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.71.117.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac9580e-afd7-4776-a413-23fea34b468d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b3fe2f-4d6a-4837-a216-4ac64b63773c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cd56c6-d7d5-45d7-adcb-e9b2d306b304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.75.143.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d21950-4669-4141-bfbf-1cdd4dcd08f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.107.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260d2d72-fe84-40aa-8ee9-88506f665dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5511f9e8-2be5-4d20-8836-6c8c6cb499e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.125.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5abc090-7ccb-4a6d-85af-32f4b7a97b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.229.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc7593a-d206-459a-81f2-dc5728fd6348", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a2ecd1-264d-403f-93e2-6c4f1df4f5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.17.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4afc29d-2a76-4a02-b5df-174cab7f23fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.243.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968179d4-5578-407e-9ce4-8b3768b2ac71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.82.198.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2425885a-e814-4386-8624-f244cc41d43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.82.214.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f0f2fa-14fd-4f94-9d92-53b315f7242e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.86.99.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771649d0-6db7-4dc9-8fb2-1d62aaa84d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.87.98.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f761c482-bb6f-4ec8-8d72-1af6374baf0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.248.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbd6291-ce01-44ad-a93b-6e755e5c068e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.129.105.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7c481a-482a-4706-83f5-aeca769a8295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.130.140.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de10796-642b-4abb-bcf3-e9f3b7079eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.140.204.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94b614b-90f4-4c12-96d8-37fd594285d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.143.32.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da399742-c48e-4ba2-b153-7171c9171057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.168.10.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dba554f-ab74-436e-b85c-ed82f13fcb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.188.181.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351a9efb-1c03-4e93-8029-840e4b5e3279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.191.203.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2b8236-1c9f-4e32-9c04-0e896ae48d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.193.154.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abd0064-0faf-4da7-a32b-fb9830a7cf1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.214.110.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5e5bd4-8b4c-4199-9642-ad0ad0a80087", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.214.55.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d379dcc1-3ba1-4e1e-908d-29026bcab2a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.215.153.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946e2701-2f9f-470b-b72e-acf3248d9dad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.223.73.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c2aa17-5d03-4a82-8cf1-f8348151902f", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.25.40.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a767ea5c-5e64-4aa5-8ac7-72215f93bda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.32.147.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca728de-4ce1-485b-8412-613cffcee3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.32.86.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e22daae-2cba-4bec-938d-502eeca78fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.38.6.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef07c501-ac09-4443-94c0-b92a67b7cc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.63.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cae1fd6-023f-4a92-b62e-6ee76cb2fca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.65.223.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d08c03-9f2e-4e23-ac11-a92c0dc98aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.72.155.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afedab4-c56a-4c79-acef-64d8cd6db170", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.83.146.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ae3000-2cc8-4dfe-826e-c28a16738559", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.83.238.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612161c2-c4a5-429a-8f46-e61a1b63df18", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.89.96.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b07b810-0253-40a9-ae2a-307dc393c1de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.92.114.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78373c12-c037-4aa7-b595-26b8afd4d3cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.0.6.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a217ebb5-b6f7-4ff4-8fd1-71484d60f29a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.118.184.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30abd8b-31e3-42fa-b4a7-3bef3c1ac150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.192.115.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b6f6f5-cabf-42d5-8b51-25d4ca0e0c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.194.233.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09bb634-5b01-4987-a684-6be2eb0aa6f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.194.241.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b5dd97-d75e-455e-98d7-de91a8ab5882", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.200.66.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a4875f-1e2a-4535-a7cc-ae0c91ccc036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.37.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f0163b-074d-4471-8441-c2d4447e0757", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.1.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c864d1-0a37-4f90-8728-3247adbaff2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.107.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd4ec3b-f891-48aa-8fbb-c5a5ac1ff228", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.121.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55078345-6cbb-4514-93b1-81315b291911", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.229.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07e9ead-9028-4ac0-90ec-d3f6b64bfcf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.252.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0de3bf4-35d8-4806-b2d3-6f0a4b14e82d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.27.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a366fb32-2ec3-4868-98c2-837bbe38a89c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.87.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c66815-b39f-489f-b521-cdd3dcfefaa2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.163.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9df274d-bd34-4243-aa08-09b578ab57cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.207.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e06031-bbd0-42c1-9ed0-52d05f0a407a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.208.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26de84c8-7d04-4cfe-9a33-b380477f0b4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.235.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31da1cb2-14be-42eb-926d-95daa52c488e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.239.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb96890f-de90-4e42-8705-19f1c4380518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.65.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d596ca6-9297-479a-ab01-552e458b2ed3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.77.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43276d9-b7d2-46ed-b5a2-2299bd32b605", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.95.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cceaefe-2002-421d-ba4b-10e954ca46ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.102.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9772f2d-4935-4160-9f0f-87766c93785f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.107.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c73ee6-87f1-4dc9-bb9c-1dba91bebea5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.109.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2408eb-eac0-409c-8a23-59eaca2401c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.11.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b97912-60da-4d87-9aff-59f71bf75868", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.118.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f251cb3a-59d6-488a-bce2-ee0ef6e4e5c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.120.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ead62cf-702d-4657-a129-863d47e9a9b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.125.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c130a5b-6cd8-42bc-8b0f-1a03774cfa81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.132.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d2fd5e-c2f3-41d2-bca9-c1c29346f014", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.134.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f528082c-277f-463c-851c-4c4137d71452", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.135.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cbadcc-b981-4f0c-931b-4058619abfa1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.14.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3105d8-d309-49e0-bae1-9a3f4df87212", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.141.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37edc24-2033-492f-b10e-0c612519db82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.141.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90da19f1-7a70-4821-a810-e7947a069d92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.141.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8973a26a-4e09-4edc-9679-07e41b5d7389", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.144.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5450533-efba-428c-bfab-72214e3050f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.145.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efd0454-e136-4d0f-a321-efa0a9a48b3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.147.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2c15a3-edf6-480f-88b2-1b0bc854bc1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.152.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8938d611-118c-4670-9789-99daee90d4b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.157.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd99b18-cde8-42c1-9212-2b5697364114", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.173.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d311a67-1a8e-4d2c-95aa-7051d2727424", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.226.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370d1878-9243-4911-9f59-7f71908ba850", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.233.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74721d4-3217-4b3f-8b5d-4e597ee5fad7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.234.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234a0144-3237-438f-b757-d338afdf24c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.239.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d65e74-7a8a-4bb0-9f24-e7aafc6c12b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.245.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc9a8ec-c0dd-409f-a20f-914dedaff305", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.247.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914af027-6011-482a-9112-b84b3db38346", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.250.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7b985c-f81f-4dd7-b72f-9e922ad3d539", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.31.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38feffb2-9cca-48cc-b2b9-22efda26a4c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.38.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dcde56-6884-4841-b682-fef5615c54f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.59.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aca78c5-8ebb-4a77-8e2e-e81adc1a8415", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.64.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9921d3b6-9eb5-4e79-a4d4-ff77da813c73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.65.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fa54be-ae03-4b01-801f-23d94b656223", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.67.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14b552d-3e8c-4f85-817d-c7ae8636d265", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.69.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12169fda-eb9b-4db2-b4f7-6ebe46e548ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.70.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3c1ac5-444d-4257-96d3-c0db05bcb715", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.72.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39eb2da-688c-4cb1-a158-52ad0cca8f21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.74.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2371ec-c037-463c-8c4b-6abb8814dc07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.74.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97122b09-aa15-437b-b1dd-16327c307992", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.74.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e3791f-949a-4f33-846e-c2e4d81af4c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.75.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb78d87-c611-4203-826c-cc6b4576bc7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.79.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0975e55-a25b-4ca7-b7ba-9151efc49e38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.90.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c008540-a43a-4272-949e-4f9477d48a1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.91.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aed9a64-034c-4188-a21b-cc93f84dcf2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.1.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4599977f-1ee6-4111-9897-55c859e3bd19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.2.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe29be39-4974-4f55-8c93-cd7a7644ded9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.243.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624d154a-9166-4b8a-b3db-7e9283d4b092", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.25.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677628d7-96b5-4994-80a3-a9e55a46371f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.26.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66842d06-63a0-4752-a791-47a68122441a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.3.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3fcff3-c4a0-4d75-8fa6-2b66027ec34e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.30.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d339d26-8f53-4d17-8a05-815a24a554ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.31.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61d7e5e-a08e-428e-bc7b-573835144f6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.31.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717c9e6d-fab9-492c-937a-21da19107fbd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.31.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61294a9e-45a7-47f6-821e-6599afe57d81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.32.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e361fde9-5300-4f21-a343-0170620c633f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.35.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08550cc4-d8e3-400d-a344-9a3acfdbee49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.39.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c50148-8c6b-42fb-9482-76c4d57ba0e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.48.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0a28be-c259-4664-87d5-ac143d4b955a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.52.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb5907b-b6b2-4aeb-bf03-5a53adb7db54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.59.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74bcad8-27b2-4c8e-a522-da3eab49ed35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.6.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d2caad-1259-49e3-ac7e-8ca5de659aa7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.60.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782e8755-9235-4fb1-b35d-03fdec6fcbd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.62.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2749fa-d4ed-4e6a-b4e1-1fb2ae8104f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.63.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a1e348-83f9-4b60-af43-0a3bae6cfced", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.63.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e755679-8f7a-43a7-a12c-3ff730821a3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.9.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da45487-3997-47a8-9742-fafdb7887060", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.117.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35668eb-8c6d-493f-9977-8e9016ac14e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.175.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a3e20b-a0ea-46d7-ae39-f102fba5925e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.247.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f739a65f-910c-4649-afe8-3b1003877348", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.249.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdecb57b-cb23-4185-9bfe-f9e8d81ce1cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.13.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d718362d-7615-4821-beaf-ba1bc19c008c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.14.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41a83ed-8d39-4417-b95f-7c0fdfa49cfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.161.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2e2672-730e-4afa-8aff-483b8c855556", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.161.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f62878-a7de-49b0-bb6b-bddf05908569", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.164.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135004f1-1daa-4322-b771-0d792e4fdb40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.164.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f13d5f-0438-42cd-85bb-8a14a4491c85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.166.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595a1295-8009-424e-9a5f-de1b31e87b9e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.169.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b0231a-2127-42f6-9c80-07126f0e1804", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.170.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fa0a75-4ce4-4111-a16b-026dcefead5f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.172.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab39694-75f6-4452-86d4-94ed2697fdc5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.178.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5a8dbd-620f-4969-bdab-159b23dfd406", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.180.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa195caa-ab90-463d-a76f-2f263abda765", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.183.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3088a1b6-392b-4f1f-a2cb-261330fd9dd2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.184.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6410bbd-536b-4395-99fc-b0ad02650a47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.192.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59839e2-41d7-4c27-8c22-817cfac7e91f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.195.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cffbdd-7a88-46e4-ad5f-c1575251be20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.198.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431f898f-f90e-4d0f-bad5-089c4046f8b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.199.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d309363b-7683-4d44-aad0-f19b10229a56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.200.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a1bdec-206a-4bfa-8d4b-95c65c3bbed6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.202.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718e5226-73a3-46bc-bce5-7b8ceb7da672", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.206.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91eef7b2-c3d3-4a06-86a2-1dbd34ff7968", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.210.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463f2de5-59ce-42f9-9894-f31c5e5f02ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.214.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bd695e-bcc5-4c5b-9223-38139045abbe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.46.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169faa26-dece-4810-86ea-4fb6b4b90eff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.60.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98296e0-4bca-4926-bd0d-985597acdcde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.62.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77595f26-11cd-407d-ba09-bde867acc816", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.7.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5679471e-a698-4968-aeee-8380153b170c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.101.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5bee60-11a4-48e1-90a2-b4c7e433f7d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.107.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecf36a9-e436-4571-b0a0-fe196dc804d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726935bb-6458-44da-8dca-c1d9265589b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.117.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c98eb2-bb5b-4636-bff8-5122d82828ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.169.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b8e5ae-49f7-4714-8507-f10966e384f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.17.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acffa55-3309-4aa6-aa90-6ec21179e57a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.177.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c432d3-a93d-48ca-b4ff-8074606bb48a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.191.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f312d892-ced7-4d44-9bbc-e8df93f889aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.221.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdc72e0-b37c-4c43-95db-8f66c90bdce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.236.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192ef4de-e8a9-451a-8b14-df65c47c35ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.31.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bb7550-7d0e-4770-92b0-faae042ec7ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.37.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ece79e2-ff3f-44b6-851f-a4e8edc02789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.38.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d0083a-b371-4fc9-b612-047c08aee1d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.42.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b518ab-14d6-41c2-8307-e99f9344980e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.5.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84cd7081-2eba-45dc-84fc-c911449ebc2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.7.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f034f2-1698-4e0c-9861-f8b93289b380", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.75.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57f2563-233f-419c-bc12-b5847e041bb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.78.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6723089c-04c4-44be-bca0-9269192d4282", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.78.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d82cd9a-96ff-46cc-b3b4-3a0017702063", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.79.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8c13d4-961a-44df-8ee9-05f8dd16eacb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.83.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8356a7b-b6a2-4abe-93a8-574dc4262223", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.86.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cc7dc6-a67d-47b5-a521-cb629813c38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.94.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51e83c6-e34e-4341-8fe5-1509fb3af297", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.97.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a87ee3-02e6-4ac5-a47b-3b44594074b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.97.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3a7e17-733a-49ac-bb7e-24b442d9bb74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.98.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9c01f0-d4ef-4545-adf4-ac088285a0b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.1.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9141d6b5-6dc7-40a5-91f5-109b2dba4349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.115.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df6d019-c451-4ca3-bc34-46af51d3bce9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.116.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df792965-979f-4b19-b08a-044adf3dc070", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.130.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1548a5c-8841-4ff0-ba63-f16d821a2125", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.134.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f53c53f-75ea-4b6a-a7e7-e6a04b62c836", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.134.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2005d5-3897-4746-8b46-427d5f3c2553", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.135.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6085d7eb-b90a-42e2-86b3-a4e0427abac3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.137.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b1f782-8352-471e-82f7-79821fb64284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.139.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d85847-4375-44e0-9b8a-9532e3654153", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.149.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73dfb30-e90b-4af2-b6de-56b4ab15c56f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.149.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1519ccd9-0c1a-4dfd-b971-c4a83dea22a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.158.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f836fa-0a0e-4a15-aae3-a51003233935", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.164.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbc7bfe-06e1-4265-9bcf-01b9bd83e6d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.173.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3233aa7f-d3b4-4051-bdf9-20acbf045d0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.176.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daceedd8-db42-4f60-841f-e4245e456e3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.178.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e454879e-a4a5-4a8f-91b6-b7c1ac0e642b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.181.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f2b465-9c05-46b7-9137-2e595b97f54d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.185.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e31e12d-d06f-46ee-b5bb-300fdec0dd2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.186.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe93af61-6444-4b16-84ea-62648a70f28b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.186.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b89dc1-322b-414e-8334-ce092b5e29b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.20.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209a3f4b-5f78-4991-88d7-29702b909335", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.28.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3f73b7-102f-4bd0-a891-b57f1ca58d93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.44.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6be8895-76de-495a-a91f-d4a0b585b9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.119.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de6a3e8-3cb6-4a6f-86ce-5b2b952487af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.142.122.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec6ac27-39f6-4db7-8b0c-506f30b1eded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.152.72.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65a3c0a-88a3-4a54-972b-74728c9f640b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.10.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c456971-969d-4098-b8a9-3fe57af886ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.100.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70399127-70af-4df5-9c3b-261844eaac0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.103.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9190649c-b03e-43e3-be93-0ff803daf445", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.104.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d3fd3e-597c-437b-a9a3-8350969a8dfc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.111.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0badf9-541f-44eb-ae1a-5b9038a0b221", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.111.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819d001b-aef6-4aa1-9d56-6f4d9dfbed2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.114.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7842ab-f685-4cc2-aebc-cb2c0045c84b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.118.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e0eadf-8764-4a71-8a05-6f66a4bac113", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.122.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef17e4e-c347-40a4-a941-d76a87e0e61b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.123.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0617029-4f68-424d-9f1c-afbf7086a3e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.137.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4112ce-099b-4513-b443-97ec42694724", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.148.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f662c35f-7509-45a1-9500-2c0d2cebf578", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.149.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be04c3a-723a-40f8-945f-cde58ab1d4b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.153.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a7f934-f451-4970-8e18-a235fd3fb276", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.154.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6b647c-35d1-4c09-9aa1-aeb9b3d1fe3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.155.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5092bad2-d69f-4e6a-9d5b-f6755899e1e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.157.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e4e544-a774-44d2-ab6a-42d46f2d547a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.171.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b9a4e5-1e40-4dcb-be83-e70bc74c0d18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.19.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7022c3e2-089a-411f-9d79-ed2157710868", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.201.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896e55ca-6067-402c-abc6-0963f3580e6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.21.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cda543-d67a-4afe-827c-02061a7b99b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.212.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b5c743-6709-4ab1-b964-a710b165a1f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.213.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1cdf83-6ee8-4b53-b3b7-f75700666999", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.219.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a3dd31-d69e-422e-8bb7-6e85639913e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.220.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a929eab0-774a-4bf5-96ad-f7fb2ef678eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.229.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df880958-b289-44f5-8d24-6bc02c663e48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.23.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cbeeca-4bf1-4c1d-87b0-dbaa04ab2592", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.23.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f53c69-f0c8-4868-acea-13d9e0209500", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.25.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f555d1e5-0e55-443b-aa0e-f2b9b5d722e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.31.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e214c4-9ef7-4ffe-8d83-b9fae4855e29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.34.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97e4484-5a5e-4beb-a872-ded0c6d5f32e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.37.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5920b6-d394-4f07-94f6-8ed193eab00f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.4.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd87d556-a31e-4282-82f9-79416ff965ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.45.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b34422b-4a99-4156-a742-cf7d2ba0879c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.49.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e5123c-fa9d-49f7-b4d3-632b90a41458", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.57.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847b54ea-3511-4887-98cd-5cce741b79c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.57.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982cb123-dd4a-4576-bf25-7bddc9127fdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.57.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8004732-9765-4795-a4c4-3a3112d04634", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.59.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c815d1f6-36d8-4d00-9f2c-d22687172630", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.59.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64840442-2b89-426e-a862-293492b1c2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.62.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47dd8091-e7a6-4ae8-9667-a5079c16244a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.65.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f6bfe7-67ab-4d79-a0ff-7c9d11222b49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.66.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fe25b8-1a58-4e13-a50b-6146dd185fa4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.67.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f271c7e0-2d7a-4c9c-bb65-d3e4e1668d84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.67.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44225db3-53dc-450f-bec3-9a0603950c24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.76.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adec222-e1ee-4147-8367-241fa89582bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.77.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff891f8-bd69-4851-a59a-34d755d7ae92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.78.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8238088e-81d0-4a4f-b03d-f662e1bbbcac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.81.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b33353-0089-44d4-85b0-fd19fcc18479", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.87.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edecae42-4f83-4ba4-bd14-1f5a68996915", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.96.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4dc9d8-3732-4b82-912a-fe7738a621c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.96.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b5bd7f-b7fc-4bda-8735-9d4041ab2ea6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.96.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1fa222-8437-4f7e-8328-8333fccea45a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.106.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475be40f-f75b-48d2-a8ed-c0b6bc2966a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.119.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cb6fb2-616c-42c9-946b-9f18527d9c39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.153.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907b6da7-46db-4a5a-8910-dd86cadb8fe9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.159.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb6092d-4db1-43a9-99d5-dfa89b1fcc23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.160.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5de5b8-b3e2-43b0-9f7b-db8ba3d081e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.203.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb53f489-d52a-40e5-b49f-c4c3d38f9dde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.208.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f252f9-34a4-437a-ac05-4e4da96dbedb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.215.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dbe31e-0b9e-4288-9060-40ae0b6f3e59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.6.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310922b0-29fb-4050-b0bf-b697f9d5851b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.69.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea3a469-72c6-401d-bf95-6337abffa168", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.93.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8253c195-da16-4eed-9c2e-0b761d46455e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.99.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c9f866-360a-46a7-ba67-b95755f9908b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.105.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe364ab-fc89-44a4-8c08-439bc26c773b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.114.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e82d97-f10b-4153-b597-12f6a8525af4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.117.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb7231c-a66a-4e59-bd4e-81775dcca1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.21.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cb82ea-0947-4338-8cfa-b86c474109d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.3.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebaa2541-246b-4cdb-8fca-96a0fae0ee83", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.3.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e9d4a3-bf0a-4953-a835-f086619c44f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.39.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54d8d77-da22-497e-b2f0-092f493a9bb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.71.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51437481-64ad-4be9-a276-c544dacb5ad7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.103.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cb4b77-0837-4146-a461-a867f1135fb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.104.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125fd62d-d3f1-49d0-8921-c9b2b32b7f70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.111.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8683255-ae3c-4e03-8e5a-a710b3df1da2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.114.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79fddb1-cb52-4256-bc87-55607f7f3cee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.114.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8aa0a7-2397-4fd8-ba4d-b5c85813ede2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.119.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5aa134-5a88-4639-aac5-e96f985f4022", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.119.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14d079b-3a27-4bfd-aab2-9a2ec782c1c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.120.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0cd570-7034-4ee6-9e6f-588d466c5f89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.122.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e7b2c9-eb5d-466b-8a3c-a556d75379ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.124.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c27e79f-6646-40f4-a55f-73b002cedbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.145.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba237568-d3fa-4942-9035-26f843179256", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.146.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723d9384-5986-4146-9488-43ffb48a77ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.157.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd221d0-6251-410b-b163-d91d8485e6dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.159.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b640a66e-c9f7-4d73-bc30-a287788aad5f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.171.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ed68f5-33a3-4d62-ae20-c157c45319a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.209.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cc07c2-a333-4de3-aa2c-500b5f920426", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.228.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5d337c-f2a9-429f-8c54-aa79288178f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.28.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64fc964-20ec-45d8-87a3-61aaca79663b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.31.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750fb850-787d-409a-8d5a-ee7ca5c99d2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.49.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955f8f62-e8e9-464a-b32c-ef3462196658", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.52.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c639fea-edaf-44f9-b8c4-dc98c6b645f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.56.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a36110e-e61a-41c9-8afd-ff1ab4d18374", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.59.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f112f9af-760a-457e-8983-347e7078bf95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.59.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bde649-770d-4fb9-a9b2-8416f1fb0bd2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.69.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a18ce9-68ba-4606-8e13-82379e016042", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.72.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90c5b97-0780-4c43-8104-d131b9bd5d87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.78.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0167e36-074e-4922-9eab-37c9b53721d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.78.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e3fc7b-0b1b-44b4-ba07-9a2782732807", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.79.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5868eb27-6c29-4bb2-a0c9-29b8b20d709a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.92.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84372ffa-423c-41de-a6e5-a6ef71ac9c4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.0.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb6d09a-e70d-44a5-a843-75e94cf2f6e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.1.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1221df9c-7c60-4806-8096-fa4879da5edd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.108.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a9fc48-52ec-454c-8b0b-58d58c47eca7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.109.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb4c455-403f-47f0-b562-77ae3732964e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.11.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf467733-19ea-464f-a438-4fedf3f46b16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.11.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0071d91-2fb5-4b79-8a85-65e93f606625", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.118.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8faa51-111f-48d2-ad06-551c8b683bcd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.121.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc8506f-f195-4f1e-9f42-551e1c4d8473", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.122.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb42f38a-c44c-451a-bb83-b29d97bebbf0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.14.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6257e4-847f-4496-a37a-bea4e5674f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.148.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e4b7c5-a5f4-48db-8097-918add1abae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.172.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08c19c4-e0dd-4148-8b4e-55e79eb532d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.174.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec23384a-039a-4b9f-9d5f-4354b58f6d95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.18.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16eca3b7-edf1-4b23-87ac-195f64261e92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.20.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e49c86-e257-45ce-a43b-ffff0614e7fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.21.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d53316e-6ee7-4997-8144-9f8a91c964fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.22.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33ad0be-d4fe-4e38-8fb1-bc845871cb57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.22.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32281cb3-ef19-4f4e-afa5-b529116cdd3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.27.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230451ff-4dd4-4412-94ec-790a4638ca90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.29.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f529361c-e771-466f-adb0-7ac2761a5685", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.30.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2114a1a-2db2-42b6-802b-79905f3d9fb8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.33.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575891d2-0e74-4b04-bb31-dd06d4818efd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.33.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452a4f29-a3d1-467c-b877-545b1673af58", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.38.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465d9a6c-7f26-4543-93b9-2d71d07ef92e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.40.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759b0071-2ce5-4794-8df6-0ce8daa91dfd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.45.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ffdf27-0ca5-4225-88b2-42c277e1b365", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.52.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6faff110-dcce-4012-a334-17b83149a1ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.58.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9505c600-2300-4cd5-87ba-ad581d1553af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.59.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a61f95-94f4-4ea8-9031-8c8693d5c892", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.59.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a53d02-94d5-436e-b2eb-3d2774dbbcad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.6.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff474e1-2f71-4784-a6b1-8bc0e161a906", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.60.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bac1eb-d442-4b6e-b915-a8cd3d5963bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.60.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7445c1a5-4e01-43a9-9a1b-b251e330b3ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.64.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460f1432-7618-48a1-bb13-c7df6ff005df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.66.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6896fc0-b2d5-47f2-980b-b6a6099fff7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.71.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d0c830-93dc-4430-88ec-3ef64e48788d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.72.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac224f6-accb-46b9-9052-3393e4245b73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.72.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1460b9-3a77-42c0-b6f7-2969a9bab726", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.79.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f95095c-632c-42f2-a552-e97a521d8777", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.81.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42eac17-9e1f-453d-8e13-dc56c92c0c95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.83.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62484f6a-9e01-45f6-8fd6-b84c200950e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.84.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5414a147-77fc-4f12-b383-ed6a6df2a7c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.9.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88449a2e-3958-4c4f-965c-871f2f3fecfc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.9.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d842fdb2-7e84-4c7a-92d4-3bd7fe0b74ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.90.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba87481-e24d-42be-9588-0456695112d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.91.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3befc1dc-0873-4f42-9f22-3e64948e4e19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.94.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bec18fd-47fe-48ee-b6eb-28152038e522", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.97.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae9dcf8-4607-4904-a3d3-77b644c36824", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.97.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7b8517-1753-4c0f-a62e-a214779e8f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.98.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d123880-cce6-4b37-bb6f-594b7384ffe5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.129.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cff1293-f476-4279-9b1d-ee81e4bee848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.143.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035f6b0c-d693-4598-b84c-3294ecd9f21a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.146.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7397626a-9d24-467c-b855-b1f82b3d74ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.152.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa41296-1c7b-486e-9b64-684025d1da35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.196.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d195ae9-b20f-47f5-94bb-f46730053f31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.201.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572ebb7b-1b39-4724-9d01-50b906d00348", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.201.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c7d7cd-1ead-4377-9e9e-b2865a7015a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.230.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba23e3ec-d947-4522-8d64-13f79d7f5c0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.34.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a35984c-b822-4ce3-b3d0-054d4f792ad6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.45.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c186b57a-db0a-48b6-88d5-90ebcfcdec3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.54.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3e3d4d-d18a-4be9-ade9-705a41e05f07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.58.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7a43b3-f30b-4022-b16d-e2222df3ac1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236bfbdf-ab82-41b8-9023-19e64b2f1d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.237.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbac691-383c-450f-a9f9-b9aaa11d1924", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.0.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d204b3c7-57b0-421c-9b63-18fc014fc1c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.112.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf91339-fe3a-4b52-bdeb-32cc1d9bb438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5441c4f2-8841-4543-a9f6-b12cc67e6ae0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.123.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4c2129-26ac-4021-93e1-a74a75e99e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.124.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b344b16-82d0-48d1-a0fd-cf06e33fc8df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.124.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a45137-ffb2-4d9b-aa88-92e0bc029e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1d9b14-771f-4f3a-a347-322d099bf2ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.82.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc6ac54-4d83-40e7-9d5f-a3f1c047e4aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.84.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94e109a-f412-4dc2-aba0-08bd55c15375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.93.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7882de4c-fb1e-40dc-9cd3-22f8fc6e5d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.197.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2c6581-b09a-4bc8-bbc2-ecb95a8adc56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.83.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619aaa1b-1169-436d-a5f9-80575c9ee4b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eba6905-59eb-472d-a115-b6234712111a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.170.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2797836a-5017-4ee1-b132-9434ba77d2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.197.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27afe60-e135-4632-baf7-7bbd5d24fc6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.128.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7fa373-4278-4b73-b057-22896a8ec49d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.130.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f288ad-60e0-4507-9303-ba80002618f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.131.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d23c2e6-14f9-43d2-a114-9377c62aa9d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.133.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c23bd22-2991-4f41-9fed-5ef5a4c54e28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.140.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9442853e-cbdf-46c1-8ebb-247cc1443d02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.140.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b215187-d91e-4470-a6a0-5b0ce68fcdde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.141.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8ba850-1016-47d0-8ee2-26c1bb370fce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.142.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2835cfcf-2bac-4673-b4ae-930a6fa32b92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.153.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e52997-d2f9-4055-9f95-067f92e9dc29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.153.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2c0dc4-bd72-4054-8147-2dd264d3ee82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.154.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454367ea-dd60-4ccc-ae6b-fb1ab900c45b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.164.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a974c8f-110e-4904-9ef7-41e4f313747c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.164.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4402e43-c7a1-4511-addd-ed7291b751ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.164.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c233de-7aa5-4c82-a05d-1b570d7c5cef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.166.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9efedda-f14b-4ae6-a3ff-c768723e8ed1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.167.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4ae7db-3acb-4156-9681-f6539a3dc5b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.167.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d884c7e3-905e-4925-9de2-535ef396768c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.168.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8115300-b4e9-46dc-9fed-8bdc5e053a8f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.169.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff491f10-172d-43d6-9811-bd3db1369028", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.170.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a41d533-fc5e-4f4d-aa3d-690ef0c6ad41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.171.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c17a727-66be-4771-9400-b75959494119", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.171.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762786c9-0d47-4630-b76b-2cbb4af76da3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.171.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644e1c1c-0d89-4276-99c9-bd28e8d879f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.172.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654a9b9e-f60a-44a5-a82c-2c7657649014", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.172.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315ed0d7-d193-43bd-89c4-8f211fd1f210", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.172.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76aa144-3868-4769-8483-5fd118db4d68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.173.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff52da7a-96ac-4963-8268-bada78881a02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.174.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576e4591-c155-4439-ad67-0eadf4b65cef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.174.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb4d144-4e27-4608-bbb9-132670c7e110", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.174.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97b1f37-9491-4ca0-926b-d83a9ba897c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.175.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89011b7d-d375-4209-9b51-e4e95725a39d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.175.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5826093d-fd82-41e3-9c36-f2a4df69dac2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.175.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3880f422-2f05-4d63-ab2a-aec24e1c64e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.176.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566f589d-2bb5-44a2-b5d0-e1613e6340f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.176.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1e6210-0869-459c-8f39-3ff0dc8ddb02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.178.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d23375-3113-4694-bfd8-93b1f4c70aac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.224.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a406fe2a-cc3a-4be4-9880-8a2f6f533b59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.224.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627e44d5-513f-4a76-9bdf-63d9656cf91d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.232.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0030d9-9011-47d0-9eac-61e95c7f4c74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.233.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc9e1fb-7cde-4f12-a592-4ad5c9b532c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.237.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d1252c-d8d0-4547-b6e5-51e292b9a2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.239.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1d168d-809a-4101-9c19-f34b2029d2c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.239.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4801d9d8-e191-4c5f-b6d5-ab9582856abe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.239.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3952e6f0-e53e-424c-8259-08b5eef60bdb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.239.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee238e28-bca2-4300-8522-c303a49cc402", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.240.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de5d27f-c2a7-48b5-b3ec-f122bf7adf97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.241.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d84d51d-f445-44ba-9272-4f67eaf6b2c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.244.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31eec649-f22c-48d2-839c-76103a63cc1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.244.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5255e1fc-db93-4f82-9446-4afd31b34936", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.247.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd44254-5fa0-432d-aea7-840db110339b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.248.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ebd597-41ea-4bab-9e1f-cb2e844d3564", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.249.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816d8e0a-23b4-44a5-bcd8-9fbfa3e17172", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.250.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc903e9-541d-4cd2-b47a-5209f20ec696", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.253.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f85d0f0-7660-4d98-b0ef-b0ec76f2e629", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.254.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8518c2be-ee32-4221-b898-332202acdff8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.255.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33795ee2-f0b9-40c7-8e66-6205c28ed5bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.156.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068ba544-61d3-4611-bf3c-27642fde6224", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.157.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66df7454-ac95-46d5-866c-5b4169a13b48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.158.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a42e56e-d88f-4c39-a0bc-af592ad1998d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.159.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c2da5b-8c31-47c3-83d9-1b8274305717", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.163.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5293ac2e-942c-434a-a982-cd0e22a59a1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.170.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b29b712-8cd7-4ee5-b947-4280f742a1b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.177.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11ebc4e-f934-43ad-a8ec-77f197ffb65e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.185.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adac8ac-650b-4cfa-af8e-4872ccf1798d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.185.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90346029-5877-495b-abb2-0b130dc5eff5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.186.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d642499f-f12c-4a60-8514-e1347f46f4b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.188.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e93ac3c-a710-4704-950b-46c22dad2be7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.188.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dcc150-430d-4353-b9f1-3482ee0d6143", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.188.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b3cafb-ca1d-4f38-960b-565d87435cbd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.188.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f88b314-f682-46ac-bdf3-e45409bc90ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.193.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f7b1ab-6258-4245-a4f3-70d3d42f054e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.195.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30e8e7b-9443-4c2f-a61e-464870f81fef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.199.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22423766-b54b-423b-ac61-54ed4356df77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.203.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65698674-0b47-4bbb-a1e2-fb0b81cc19bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.203.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68635abb-9e32-400b-934c-9eefe9565269", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.204.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5379caf-6109-4547-8af5-31277124cc61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.205.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4c4163-0bb8-4342-9188-47bfd618b66e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.206.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7832903e-703b-4b3b-82ff-f3ab2daaed1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.207.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eeb50b3-7277-497f-8576-943673ccfbd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.211.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f710b318-9035-476b-8d27-12975a996c02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.213.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ff2284-3f6b-4c88-ad05-59ae5717ab38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.215.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b859c75-b232-4054-8b28-e86047604693", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.216.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4ac1a6-b2fb-41ca-b3db-687d378dfa4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.227.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0eb0f8a-8ead-4345-b5f1-5be843b77529", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.252.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781f7f0d-ca15-4331-8cd0-81e04a55c5af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.254.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b1d531-1ced-4e68-aea0-987786905f29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cca3ada-6566-4940-b990-73a7984da0ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec988d49-bd96-4a78-9b28-aaf6f0dc9f69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a8130c-ef8f-48e3-81a9-4a81be76acc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec95b86-10fd-432c-a61d-71dbc71ef581", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6164a78d-70d7-4881-90a7-a9582f24ccff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a15713-df7a-4361-9a18-4e3bf821f0b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae47ba0-d488-43ac-8de7-64c3c2caf7cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268b1bb2-1c5c-4637-a056-8b098e0d492a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386d5c3f-07cb-4c56-8069-889fa97eb968", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e99f84-9da1-4dab-9369-8240d741cd36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51910a7-8a29-43ac-8247-d496b28ebdc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51563c70-fb2d-4b43-9eeb-d828a1aacf8f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a34ec32-b3e0-4413-899f-a632bf001985", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3718efa4-b590-4b46-b00c-bad5ab43ab49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160f4054-7d53-4310-907a-89bddf18e29e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cb48c5-d1c6-4416-89ef-396d834d3b7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca77a68-0876-4818-a936-a1952566fdb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f65bb97-5179-41e4-8ecc-541c840c4b5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8755ade0-b4d0-4b56-b915-8453458bab22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edbfc2b-a09e-4d2e-bf39-23aa76672d8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d727457-88d7-49b1-ada5-9cc5351dc1c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f39dde-056a-421d-9af1-383ac33dbd03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecc4b3e-e3f1-4836-9b32-ed3955a87b8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87f47ab-0390-4af3-884a-bb4dde36df6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c20fdf0-b250-4660-b54e-5068906b1c43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e9cc8b-43ec-49f4-a7b0-0b5366caa246", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101e4d41-bfdf-4d02-9943-a50f351d3e1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8696c8c3-ce61-4e7b-9008-2e2c1bf47d46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77e9741-988b-45a6-b83d-c19b3829a461", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645b3529-870d-400a-b0f0-892f52c8083f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df46db2-fbd0-4ec0-8f09-c453e742c91d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb6f64b-ecdd-4ef6-8962-59cb1c7186d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7963d324-5cb4-429c-bbff-2ab340341b06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdbd2b0-120f-45fe-8733-ce3655f83861", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b5a960-d8cb-4bda-8314-48f4a1a74357", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eb60dc-d167-4611-85e4-a5b83e84d7ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89423054-ed49-4ace-aeec-971e0bd30f8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfdee94-21f7-46e3-a25f-d3acd7948012", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e6e66c-4f9f-4a1f-87e3-3484e3306e46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab703b2-e5f4-4d3d-95ff-a0013a7513b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e71909-8a9a-4d72-959b-f0cdbc74738d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4392770-38f8-432b-b7ea-2538b6321b1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3058c13-11d6-4ba5-8c18-800d0c03c498", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c84dc2-ca1c-4a45-8187-a9ed2475597b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c9fc02-fb93-4323-8a18-44030c114f33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eda10cd-8b45-4d65-943a-b7e928362c12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0baf4d7-6ab2-44b1-b6ae-619f7848b73f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7888af2e-8c0c-41d1-9d10-2778c659a360", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cb444b-afae-4988-817d-e57db843049d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72959436-45db-4cb9-9b65-2657fe240d8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4795bdd7-ca5d-42af-8374-ba735635f000", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4dd31f-1a20-4799-a7df-210961e6c1de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50429bb-f5e4-4d09-8f6f-ddcb31fd7683", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63c0327-90b8-41aa-a5e9-7ed9ec7a8ea3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08107ce8-4bf4-4178-9cea-f841ffc064ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fc44b1-7929-4100-b2c3-41c4824d91bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5d052f-70f1-42d1-bab6-329003ceb6e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2af70d-4435-4a29-b113-8da83738497b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63db718e-8414-41eb-99ee-996cbc4a0f18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b749be6-fe49-4f94-a290-df537c572c43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028436c2-6621-474e-b876-8dddd32e2463", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48f8e24-aaa2-4a26-a303-38be984f9e72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee6cbc9-cbe0-4caa-b224-3805d5b29c9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d3f610-e642-4938-8afb-06d7385093a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89a8536-64ec-4ce4-ace5-4dcdf601ff2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d187d26d-2d27-41e3-bbf5-fedbf9bf4f0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f18fba2-36e8-4293-b8cc-275cca970c74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0b7aef-37a5-476d-a529-9c724a42e110", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b4166e-a08b-4357-a470-7150af33bb46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8f4fd1-fe42-45b1-ae15-9829566ed013", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89b74e0-753a-4e3e-a5c1-6ade55e836c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d23121-ae8f-400c-9a70-af0d14ad5806", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f0977b-43ae-44c8-b701-62b58bb720d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527f5e41-2da3-468d-ad77-9fba84a018cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4baf3a98-79d2-4f38-851c-d2a6734db232", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898c64bb-3f7e-431d-ac8e-fc902bf24f99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979cbb2d-ad3c-4d91-ae84-b1957bfa6fc3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc1370b-b304-4a9c-ab21-5d6b831ca6d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b192d1-fa01-46ce-93a4-92c38e0e3e5f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e847218-158c-4254-948d-0e58c74424ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf1a297-d8ba-4a3f-8038-530b499227ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1b13c4-dbb9-4e42-a3dc-e1ecf1d2b206", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0630905f-7e3d-4537-a89e-b904d05f7cd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057edd8c-f44d-444d-adf4-7c0c5b1957d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898e8492-fc59-4c91-9a37-491275a15140", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfc7d61-4f3c-4679-9bd8-828c82175cfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10b5a8b-6367-44c4-8c45-0fea72530f60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd1263b-aeae-44a0-beba-fd94a877f985", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfa5a40-95c0-4de8-b2c5-d079b59593ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a6ff4b-51d9-4658-a5f7-a9d31592dcdb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45efe5d4-d56b-4009-8c77-2f4642eca44e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a426be61-93bf-409a-a66f-7253067b2d8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76f88cf-b7fc-4d16-9f27-41486a90f78a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca38742-01eb-44e1-95aa-ec550349eb41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8043629-8956-466f-9164-60aed9963ae3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199aa79b-9180-4c9a-97bb-fe455ca37fe6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.118.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f3395a-b7bc-4845-a4ad-16b48b2a03b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.120.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4605bf-e90c-4119-a72f-d7db5aeb5a60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.124.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01152e22-dfbf-4eda-ab9b-0c8b0bac06ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.126.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dfeda5-7046-4ac3-98e7-66c10d86703b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.126.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd77c9f-4675-4de0-a2c6-67ae7d873869", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.127.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4de4f1-70b2-47b7-816b-a9d4b67cf07d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.127.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3faa483f-9a43-4a21-bf42-2ecc5320ba0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.160.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1bcc90-3e0a-4cf9-88da-fb9ee4bcd9ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9429699e-f922-4468-9b4f-7e8155b0dd10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f05bc4-bb43-4834-8e76-d56c5d3832a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f027f8dc-f2cd-4691-9191-2cf2e70c1e41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350dcfcb-f165-4095-ae14-f10f38d935dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e67e42f-1168-4e43-a425-72cb21b6c118", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220a6c29-88d2-4a68-ae14-972a3cd8d8a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04b1186-461f-4cae-b5e8-2930d90e7553", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a3c145-8a68-4035-ab4b-463b7f3bc335", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c0212a-cada-4d3e-8a99-5a6fa391400f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16bd22e-f0c8-4aba-90e8-8d262c9fe818", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb90b90-4cf0-4dfc-af44-01b449d75936", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12915e9-271a-4764-b82e-f18f6c643a64", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fff918f-99f8-470b-88b0-dde7b7a96017", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0218365c-425c-4052-8955-011b105d36ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf4a05b-50e7-44b4-b6de-f5293f53aa87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc892f2-0213-4f5c-8b25-e1de22516864", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec12109-1871-4428-a8ec-962a224a3595", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4d4176-6661-4a23-b25e-53a353b4cede", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6effce-ab4f-425d-9665-57004d94f7cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35406be-cd95-4afd-96ce-c67ee31178a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5c420a-250d-4eec-972f-b440f39c7287", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d21f1a-00ee-492b-9c1e-900835f5cdb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45492764-ed21-4cc6-b48f-f2125f2698f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24964cf8-04b8-45b4-895f-2ec49d584c94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d07a1e3-17a5-4ca1-9467-060391018a10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ab4a4d-d1ab-4051-bd58-9f8308bc15d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cd8a16-32cd-4595-880e-30cd66715bb1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba6b392-1be2-4bd0-b438-3ad2c6a13c43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1975ca-9691-4595-8bcc-90a7ddbb210c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3736d40d-03dc-41b1-a867-8966173a978e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b79a45f-3327-4e3b-a5b8-c4e8c4c20afa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c9ff66-6bb3-4d1e-ae00-ace5ad985abe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d109f1a4-24aa-44f4-a699-e403645ae392", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1124af37-c07a-45a7-bbb5-65ed4f9d6391", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec019998-ea60-4a84-9bdc-c06faf9aace4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6109e170-02a7-469f-b067-276d521db88b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91a77f8-63cd-41bd-b4d7-7515b3efafd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a015ba82-fb5c-4601-83ac-1c165d516dca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ad1a7e-5eb6-4892-a88d-60ea6bc0ba45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d38a9f-599f-477d-8904-a083d5019615", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bdf833-a727-4ea3-9810-a35d9951b258", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca8b58e-8454-48c2-bb20-6d1ddc9ef1fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a5ad13-e0c6-4558-8a9f-cd5f01346870", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d818c0a-cb04-4fbe-9cce-f11d00effb24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deedc375-dad0-43fe-8045-c4a916e67667", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edfa9ef-72eb-405b-af22-6c79427dffca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a3852e-0dd8-4282-b18a-0c6dacbc4986", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607f63a8-82e1-4007-b084-e089414efc13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f337fccc-c5d9-405f-9401-741d3133709e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2205db52-eaaa-49f8-98c7-d715cec3a6d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c11031b-8214-4490-a666-eb10713d0ccf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668de1da-5ffe-467c-b7ce-f21d657fa5f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8261412-d97d-4b50-9345-92851b80e164", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b86a7da-1ab6-4fb5-9c73-68296b04f4f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccaaa9d-b16e-4bd4-bb98-8599b764f24b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd29a3d-02de-48a9-bf4a-3c6953377367", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a390c48-8508-4971-92f8-b6f18cb809e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d866e8c-4885-4dba-906e-d32d694b6e61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6a3394-6738-4e8e-af36-b563f62f4b08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d7404a-7ee7-4c99-840f-ab4a3d065374", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d5977a-9e1d-4322-af43-ae43e155677f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d2169c-9d0d-4134-be09-b7ab1d4fd48f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29596d4a-005f-4581-831b-a0a360839cf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3beb600d-8a6f-4df9-928f-d7f356ee15ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09cce6d-7b7c-425a-9be0-79e1ec3e3235", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fce291-e802-45ce-9438-63e0fa1ac194", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991fae47-7c87-451d-af3c-5545c5b4ff52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedc7063-249a-4dff-922f-db7e078beb20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd45a46a-57d0-4848-8ff8-fa02650ef5c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a8934e-b054-4179-be5e-4e55a1938af6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdb8f15-f8f0-41cc-a93c-1b98dd3f1c20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e749ca-2e34-439a-a64b-63d5b3bd1335", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ac4c53-b261-4bf1-86b7-9f214de081aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87ff7f8-da65-4800-baaa-e236d287144f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe552985-4f36-4761-a3a6-98627fc7f42b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce72cef-b845-4baf-a8da-286de450cd17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bdaab3-d18d-4d72-9dbb-b8c5e06ad2c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f623cd1-6cb3-44d6-8904-dfb3a777e6fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a0150e-4ef7-47e8-a788-4763ba8a3b81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4814aecd-8fb0-43f0-9d9c-bde8cbe5b4b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955f335e-5fec-4b96-868d-3bbde1997603", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d599acc1-81c0-4078-8c5d-b6eee95dc2a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df688e69-471d-41a3-9e0d-e991012bc63a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e946dcd9-f9f6-44a3-863b-95b73a45bbd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1255c976-61ce-450f-9866-f8fc7724d201", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b57193-1e9e-4e0e-8906-fe311b3084b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f55aef7-fd23-4d0e-957b-95a9d1a217e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db394d0-2087-43e3-835e-7156003cba3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefb4404-de9a-41ca-82a4-aa0dca5c54ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6aa8bf6-2f0b-4448-a768-a8e543350b8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9f819c-80a3-4a1e-8116-386b6a79d4bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20eef13-ad2a-4eaa-9e43-6865c2d5367b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6268eeb8-0dbd-499b-a7ad-5434b2435842", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219a7081-266d-41be-b5d1-4b823a17eea2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2489116-066a-41fe-a6f0-76e14f71d8d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f9281e-c57a-4c80-9d04-79545719b5d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efc3c8c-a19a-4ad6-835c-a17e72a391f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a29af23-7db7-4e47-ae47-e70772278cdd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d101fd8-b1ee-40e2-9e2b-8743523cc15c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd284fe-7d43-48f9-978a-0eab9ffce512", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd7c301-c14a-4cff-82a8-95283b5ff020", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa92b30b-1dd4-4d89-a39d-395f30f7c787", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284a6b1a-658a-495e-ab1a-1a2e22191c93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2763a2-f1f9-4dd4-a9e8-5a193fc5f61b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551d92af-ad9d-4ec5-866c-dec345840768", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07304afe-642b-4b0d-b8ce-3b1665cb9204", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37512f9-bc2d-4d1b-8a73-9355ba90e414", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb822cc9-2aad-4ee3-b8f9-d0cd4fcbcd37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94658a1b-baf1-446e-8d20-e548b0e0f86c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce21e2d3-3fd3-40ee-92bd-c5bc9282f148", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2074d5-073f-40b6-9f41-daaabc333268", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd5c470-6626-4fa8-af66-b17c8ef5d9f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c413f95-455c-4e9d-bbf7-106d0ecad7c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a773b9d5-0259-4510-9c0f-ff125c472f8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4258d290-7ac3-4583-8011-33c6dd3399c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4ab2d5-c8aa-4801-bee1-cf88c93c21b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd4729b-b59e-4bfc-ab6f-5b9aae370e4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28302a8c-f639-49f7-8ebe-51cd0b142299", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eeadbb6-0a41-4080-9476-9ab969460caf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09512715-27da-433f-889e-3a66a9721d88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e7d310-64f8-4919-9990-153aebdc3599", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a59e91b-0231-4ea5-81ac-1a15349ee4f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85ef495-53d3-434c-bb3b-c766d558c7e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da018d4-e97c-4e8c-a8a6-b4f0e5ae7921", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42000a03-853e-4fcb-948d-13c050f5721e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb86d5b-bacb-4042-938c-6f3d9731a5b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ebc105-aaeb-4f4b-b5be-8d9daf634364", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca16d9a-7a5e-4ce1-b2aa-1ab0f285fad0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8249125-ac09-483a-a467-d0ba05fb95c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bba952-ef50-48e2-82ad-148d59b650e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2c04c5-5589-453c-b1d8-ca086605f70d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d351f85-e4c8-4837-a987-5f1d11c6a45e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f95dbc7-cd0d-4617-8721-c55a8cd5c739", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b201a455-b18c-4db7-8814-9488b296e109", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b62b0df-9e10-455a-a6ae-2036675502d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0805ad65-7a26-405f-9364-409217352834", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83195c2-b46b-439e-96fe-cc88966c0d08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef811b2-3af8-4562-8090-c9a24c530af4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948442f3-f416-43a6-8d6a-3f126f21646b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bc5eb2-707e-446e-bf2a-9b8fbdd03995", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf851c1-9ec4-4c3b-a795-f60ab95792c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182457c9-37c0-4b52-8b42-825e0c3fdcf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cf3fc9-6b9f-4aa4-ace5-533dc7c4975c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064e0e77-fe4d-4372-b6f7-4fc1d4b4b094", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c11eff3-b81b-4ea3-a712-00819ad6f425", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89b4853-601e-4cb3-9249-5acd5acf527f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae23a426-bb3a-4420-a2c9-fbeba21c7399", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53435a48-35fa-4aee-adc9-a66fbb9a6ae2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2494a34e-1c7d-40e5-9310-f3adbf015ab0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1996f16a-163e-4a71-acb2-24738522db0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb13276-159f-42ad-8628-90c2d5f5064d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db70202d-2563-487a-b57d-4e0b07617d62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d722ac72-e827-472c-9f31-f3657875686c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b906e1e-f001-4db1-8bb8-a7d9a001736b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df81ddf-c540-42cc-9b19-ee1ee2982890", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7042a7d8-a6b6-4025-9acb-8e919c565b6e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154ec506-372e-4bc3-bb06-7eb6f8f3ded6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f42f44-02c1-499e-be66-77297eaaccb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5455bc56-d120-4181-9c94-2e1d504ddd9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c26c5a4-8e7e-4ba1-ad6a-c14c86cb4092", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f3f812-6c79-4f07-922f-bfab6391617e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fb2343-fdf5-49a8-84eb-9b78f8fc92ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641785c8-6c83-477d-a604-b633c3e58d3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9c7e97-8099-4354-894f-7a9279d9658b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0a6edc-90d2-467d-a6fa-39c5b068d774", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecdaa23-4713-4805-83ad-18d051fac117", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e3bfab-3c91-4c12-9bae-997e987ceaa0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a423d09-60e6-48e3-933e-6ce1d02a4554", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82ce228-2b27-47f9-adc3-37dbd493b46f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce5b20d-2e20-4de9-a7b2-7c12656ac2b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb41d4a-0582-44ee-97aa-e022c0599980", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e229f6-b577-47a2-84a7-e33dee8f7937", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1879dff4-0f39-4d9f-90eb-8df392b35173", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2c3aaf-04ad-48a2-a3b0-aad7696d5158", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09561b28-abc7-4142-92ec-6e3066efa0aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126ec006-59d2-49b9-98b0-ad0658d96ffe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ba7bcb-3bc6-4d87-98c7-5e6ffb22cc97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ea9322-fadf-4df9-9679-071030c9b97e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed499e19-b575-424e-9675-b2346fccbab5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e425626c-9cef-4d28-ae15-ca8f0bf9beef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1417114-d1d2-42f1-a808-f110180b47cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bb90a3-e2d4-4b49-99ab-5186540f7701", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24994ba3-9ab1-476e-bc5c-9ac1cd686e9d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1529f612-6d98-4048-a6d0-50191506b051", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3559754-4799-4dff-9d5c-3488aaeb6069", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33baaa0f-b85a-40d3-bcdd-5a3c0839acf5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c64e731-b7c2-492b-a623-b28f6bd10f01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac4f1a6-1921-4569-ba21-9cc06ec79fbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6281673-8aaa-4153-aadd-2eff3edbb026", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be54208-1469-4e01-b95e-615e92fc5cf5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5202939b-a625-4e2f-8f3d-ad4d5f75461c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae137b9c-886b-4fe8-bf4e-5ac9d1490521", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2839c4ea-1c95-4b4d-98a2-a61bf22dd2d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91972281-6e8a-49d5-8202-d1eaa3dd7bf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c2ac12-b221-4ea8-829a-94b26f041a3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24fd485-832f-42f7-b82f-865c313d975c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db123c2-63ec-49eb-9607-d68d5ec3f001", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b6835f-ac92-4751-b190-ba25bdff4ce5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab19b2d-b2fe-472a-9515-8024a5a56b33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66c2016-2615-4181-9a65-9dffb6345e2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738185b1-fe7a-49f7-8c92-2933ffd41b59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d94d95-7bdf-4d6f-b216-186a8d95aaaf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f822dfcd-523e-41b4-b20f-0d4b67e18bf1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e1f0dd-9445-44ad-a490-cc2d497c81b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf45c4c-d1cd-4fc6-a01f-2abda3e4ca30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649195e6-bd6d-494c-8472-e304007fa0d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22279797-ed55-468f-961c-f1944abd31e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac69a973-f4fc-48d6-80a2-b4d8a8699e54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3a20aa-2ac5-418f-b2a4-ab0001b0a224", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e824dc5-50a4-4764-a858-3153d777fc3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acc0762-c2fd-4bf1-a18f-b4c8ae7c5533", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aaf4633-23a1-41ad-b602-beb21bc11fc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac279ff7-ba08-4f7d-be5b-e68409206ec4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08b6927-5300-467e-951c-8de62c4f366b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a921100a-aeb1-4c4b-bcf8-b85394be13f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0874e1d0-b63a-4d19-afa1-5b48c4de0462", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e62747-61c6-4288-a0d2-6bcf9455eb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.75.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6321d3ad-adba-4108-99af-9d6a7a9d550a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.37.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306f718b-a8f6-47be-a92c-0fd7fb53d2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1df5529-f2db-4f66-bf85-6ef9d6505cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4714cc-7054-4352-ae56-0c1ecb9be470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca02838d-a5be-4152-9882-128c3823fd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ebfeea-52b5-44e7-8763-8cde1f97bbed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.37.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4190d319-bd45-4501-979e-17e56a20272a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.229.92.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581fb7cf-041c-47f1-8b04-f5d5c4cb3cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.230.94.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d75bdf-d88c-44a0-87b6-855906a08ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.247.250.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0138362-6e5d-43c4-bed2-f90ff5c1b6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3092acfb-b437-4149-849d-3b2c9193677d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9863d10a-a1c6-4cf6-8324-78c3b0a7b9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2635e67c-211c-45d9-a12a-bf36ba33a0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.255.141.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e88f4a9-4dad-48f5-a14f-c942f0ec6d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.62.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff1a28f-a955-4754-a4dc-284c613b73fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867e6188-52a7-4e12-851c-1f152765bc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.21.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2752e0-e767-42f4-b05c-e1df6a692572", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.114.89.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fceed4-d85f-4620-8e93-a2f2a538799f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.115.107.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3d1dd7-a28c-4b30-96e8-ffb253f98698", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.117.104.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70c170b-a1fc-43c7-825b-23636e09810d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.118.146.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28480345-c3c9-48d2-b656-ad7c2976c6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.118.73.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56bf771-1141-4eb2-ae1e-0bbd04aba3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.237.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ea82c1-4f3e-4db7-9b96-b3c821d7dc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.121.25.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93d84c0-0f36-48f4-ac54-249df6845050", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.83.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c14e33-f7d8-4aa6-98c9-49fc4c3df9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.92.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac15567-2211-4c65-88ad-e8bbd1862baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f55a2a-6f59-4109-873a-d31e8ff268f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7b9100-ff2f-49b8-8ba9-8bf6704fc4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a60b6a-ec7f-471b-9be2-67d064b3d85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cba40f-c264-4285-a5d2-2eb45639323a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a6edf0-6fbb-4f09-b389-176d212425b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e78b260-57e0-45a9-9f4b-09215e29c33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f607eba8-de1b-462c-929a-118169d2ba28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827ed814-b471-49f0-a81b-23bb9f27d76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff89b95b-ff80-474f-aa96-2a68f146141b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af681ea-11b0-4d47-a499-49120d4059eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b55e25-41e2-4ad9-b760-f40674955141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3128c2e3-c925-40b1-a58c-48e67d2114e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ccfff4-755b-4dfb-abb7-f2864fb8db2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60059a28-e128-4375-8835-db2f1778d8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d399837-c687-4e4e-88cc-fb58259aad62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ded0a1-bf62-41c3-8cf0-4fb8b80d5ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb94245f-3a54-492b-8e8a-8fcbcc9f04cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a46051c-1e81-4e47-9ade-f3fad281fe5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897d961f-670f-40f4-82c2-922b634318d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff813751-7821-4086-8493-a5f3bda8ec17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a28d23-910c-4dfa-ad6b-d1c8b483af05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.252.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb6be61-6066-4168-bf00-df73bc2dc7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9b149a-5c1f-4eb2-9586-8a173de63877", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4deb774-61da-423d-9f12-3949ac9578e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd147187-5721-479e-bafe-24ba06480dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09858eaf-05e9-47fb-8ea4-f51b335102a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a78bca2-1623-4756-bd88-bd636426c462", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e39889-01e2-40f3-b956-14b9cc60afe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ee5171-daa2-4136-b05e-2d18739ba08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f66f8e-cd0a-4a88-9583-25854d4b26c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce90e37-09f8-4f9b-bcd7-6401a5c61fc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819e0349-ab2c-4239-85d8-a6cd493c56a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3faf5892-60e2-4fd4-bc28-46b9461a8757", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.15.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db578036-dbbf-4e9d-b5b7-63fc18756368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e07e458-bcdb-4b54-803f-65a415a429bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4585e5bb-01fa-4e02-83ee-888f2b44dc89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afbe2c5-bda8-4e5b-8599-362623610aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63710083-b197-46be-b49f-986cb243cab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44391888-92ff-45b6-88ad-df33aa5e906f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05430c7-8218-42e1-b089-d99313d4758c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4feb84c5-26ee-40b8-8472-00c933eb9a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135eccb4-fe4b-4c55-9f2d-f1f3a6e714a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102c0d67-309c-4aff-be79-50d46bd374d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b7f976-e7f5-4f71-a05d-fd15fd506cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a62c52b-26e9-491f-b289-d4b058b964aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9c180a-7f3f-4d00-a04a-152b8f1b3918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454fd822-bd24-482a-a2a9-8fce42c140ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a6ea18-bfae-440e-becf-56e6e85726b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f9b7ad-9476-4428-a22b-1cc626fcb52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f77253-08c3-4499-8d53-772267e6b5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8a9090-0612-4488-ab1a-596f466b8fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c611a4-c3da-4d52-be2c-d5d1e07a6ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea03890-7bfa-4a8c-a9f3-8b0cea370bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd977512-57c9-46e4-9a99-d52f04bad4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32278da3-0d1c-44a0-8c08-84b3a104da1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe7bb0e-dfb2-4632-8693-c73025d03a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbe8dfb-3e54-4af3-b0a1-a2cb594e8a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826d23bd-2d7a-42cf-a296-fee3173d7a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91af0b0c-26b8-4f24-9e7e-c29405fc8d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5538eb-f33d-4fb4-b38e-1d66583e281f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b71d16d-0fb9-4213-86cd-c70e6d725901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9383bab2-855d-49ba-b578-52c5f3b0102e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e5fb70-03ab-494e-93ad-7fb67ff32b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06db0e2c-c4e2-4ad0-a811-a065452c2294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ceee6b-cb7f-4f6f-b0fe-325d1fe14c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bc0441-9f10-4f1b-8608-a6fcbb8a2cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b852ee89-865e-48bb-9635-38e3800184e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e459213f-57d2-403c-925d-a3f29b84914a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2febff98-2fee-48e1-8718-569ed096cbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef03761a-bee6-4682-89a4-11b18480fe95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1948dcb3-0333-4204-bbcf-566dcea71ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3f3d15-f37c-4a5c-9144-16803d5ff78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c47b7f-60d5-4516-be17-cd47b8733701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1640f056-d44e-43e6-bb7c-ba093c1c11ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c065f8cb-13da-4a49-aa60-3c90a3c1a9c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.157.233.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e084fcdf-1966-48b2-8ac1-d36906749369", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.159.74.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8f6ba3-2437-4d20-a6c8-9381ca2ff95b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.160.12.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c5bcb2-e1c9-4484-b8ae-851c3a151e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.78.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54f8ed5-b978-4eb8-97bd-0d2e6d066c57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.165.77.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1610b554-de94-43c7-a796-9fd881f1c9c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.167.162.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2846d258-3072-4414-bc8c-7eb750eacd61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.168.185.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06141e5-049a-456c-8248-ce115d679078", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.168.23.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e64906a-cdad-4e0e-b398-dcce62686025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.170.206.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7669ea52-3c31-4180-b19d-1e3ead9d43ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.217.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb47089a-308f-467b-807f-0638678aadef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.199.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb834bb6-6170-415a-ae86-c6b6da6997a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.105.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3791b66-8cce-405a-8734-1620a909f6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.176.142.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40fd170-1e02-4a31-b644-13eecdeb99f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.176.240.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8963ac0d-9f99-4729-8522-7cca8b62fb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.177.164.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73154f8d-47f1-4357-820c-bdc475c31621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.180.180.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7ccc18-9fad-46ee-9db4-43be1abead9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.180.218.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe91f05-d68d-48c2-9b34-d783ee914b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.102.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3e351a-d627-4460-a646-b1c2ebdf9a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.242.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1a1b5e-a918-42d2-b862-17159e41d162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.33.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82f806f-6d93-4617-9ab9-6e566eed34d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.86.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b807ef-05ae-4bbf-9410-ddeea5aecf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.182.208.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086baf6e-9e23-44ad-b931-12a4a0399d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.183.112.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3f0ac4-6379-40f0-8f3e-026d7d3016e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.183.115.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c82dbe-bb38-4132-af35-e9c25d9a2c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.183.34.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a49dfd-ff35-4cda-b81c-2089c98e5fa7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.184.152.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b2ca59-95f3-4847-b117-d7aba37d995d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5e9fb2-124b-4590-b0e9-73e45aa2fb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1413c596-48d8-46c8-ae7e-1bfef5b4a816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6665246f-6466-43dc-acf7-bdabd64b80d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f96496-09b3-468e-98ea-e1dd9f0e22cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffcbbde-4175-44e6-930d-3deeb9baeb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7850e2b-575a-4f2f-a673-1f978ccea79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0a7c4e-2317-498b-8f38-45c4a2d8cbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d863edbb-1b5b-49f3-ade1-863f271ad776", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.89.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f85bb1-7cae-4f26-bb1c-97865d391b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.76.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69414e9-155d-4ad8-8bca-a8adcfcb3c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba2b92a-fa13-480b-96e3-b7406ee4688d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc531ff-1a40-494f-93cd-22770a34ce36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddb8cf7-d301-464c-acb0-1c2cbef4cf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5ef943-20af-4ac2-9dc1-4053e6f95126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcac787f-5f5d-4065-b56d-fff8d5828d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89344730-97af-4365-9a7a-59830d97a3a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889db226-2e22-4b46-9ed5-0e1586022240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5ad2fd-3d9f-4ef1-830e-520ee60e355b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03db292-967d-42bd-9d60-e84c8664abe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d737c5c4-44a7-4cb4-aa6a-ea7e6e00fcf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1ecebd-f8ef-4b24-8c22-152b2038ee0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc13c639-d4bb-4f1e-880e-4552de261c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469cf5d6-68b8-46a1-a91f-4b05ef39a9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfef0194-73c0-4f88-9ad6-2b0dea496f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef4e0a3-cf57-4520-9211-84c9308c6994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e7f6fe-9b5d-4bd5-bd7f-742f4476be20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.221.72.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0da58e8-c2a8-496c-9242-9bf30ebff30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.222.128.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f9aa5c-87d6-4727-847b-155225f0d359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddbcf52-abc8-486f-84ed-5e854f5d3c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc48b6f6-10e9-4036-9e5b-aa1adbbc910b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8deff629-3a10-4d41-80b7-8911f95b03cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.207.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae518dd4-4970-482e-9118-f48a5b4c6ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf7e9c5-2253-4b61-a9d8-81b28b7a858f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.228.101.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246ca7a0-4484-4ada-95a9-69b8f7592fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.169.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668dfbc0-df8d-4fc5-956a-d5bea6d34b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.169.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615640b8-2415-4f04-b8d2-f822d4c2ffee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.232.3.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51dab40-869d-4d06-84f3-bd9e7e97d6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.233.113.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34d340a-74fb-4c6b-8300-845aac19479c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.233.77.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a7d76c-0c5c-4ea1-a543-777b6b7115a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.235.229.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9358bf7-d67e-4f0c-b171-5ec572e5bfa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.188.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146b566e-df42-4a6d-ae89-23eaf9ebe1cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.248.151.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbb0bde-0f4a-4a7b-bea9-e358b93c00e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc6b087-7e6f-460d-856b-55243a71d646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a37ea0-2d40-4d70-b753-3dc1af01f8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bca2315-0989-471c-aa2a-7f88f83561ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.26.128.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4000d8-3fac-4339-8460-f6e9280280f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dca3060-ec3f-4fdf-a85e-2f37f2eac8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa0f565-8e8d-44bf-bc04-d0b9179bb16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc0b345-186d-4e17-addb-f2dd316366e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee59dbd9-261c-4eec-88dd-2d07464af363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ccb254-16be-45ca-89c1-c6303e7a2f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.125.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38587196-1a43-4f01-82cb-31e81f8c630e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19544e59-473d-4853-abd6-ba9e35ff5a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec9905f-b2d1-41e7-8a48-bdfbec186983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728b6c57-f4f7-4522-9e7d-612b039a2a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.60.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d825fb2-fde0-4001-819d-99231cdc6407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.60.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e274e7bc-bf2d-4638-a623-fe093de43fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25bbf2a-2dc8-4807-b821-921019e05629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.67.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817c80c7-5dbc-41ba-afaa-e0fc1ef3d69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33329a2e-77ea-4dff-8c9d-e049d727c7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.75.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cf1da7-c61a-4172-bc31-2cc837d06698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc230e7e-d7a1-4fa7-87eb-498c60f7031d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cdc302-b086-4ff1-bc74-1e22d194d940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027723dc-6e00-4413-b2ec-658444626f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ff8094-8d2c-414d-b1aa-ce3c2f1e0c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25eda89-ee4e-49ac-8a3e-d46ba1d85af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910ba0a4-7fd9-488b-b361-ea0acc578cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fae24c-a148-4b23-a141-8e424c85e4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f738cd06-fe90-40ff-aaa0-febf0b3e68a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924b2892-3120-4712-b63d-ed87f239a494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4aee0b-5a54-4d7e-823f-3dca2743f370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e7828a-32dc-41ba-82f2-1766a35b0cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7275e1-2209-4ef0-b094-39f5edae850e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b53702-d051-4d3c-a66c-8a3118d0fe00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16acc251-6970-417e-a123-0f0ccbcb08b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db46087e-ca68-4dce-b802-61755247af33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c67f2dc-cfbf-4f11-882b-2901122eeca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd5942c-3338-4af4-9a1f-4314ff6ad25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018efac0-92c3-492a-87eb-face68618fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b373014c-3afb-49f5-a096-5972e5883023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1098c0a9-cd40-4829-beab-a395933af603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1081f555-3803-4399-970a-e6d0747b0c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac5ab49-56dc-4423-98c6-22b26ea9c43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.152.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199ae3e0-a45a-43ab-ad35-bb9d432eb694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.151.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e020ce-7a1a-4d28-8e0a-4dcacfdd219d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.55.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c15061-5e5c-4424-8f38-1a621aa5f42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc921da1-4633-4098-b1e1-84aa27536a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498e73ac-3d95-4f39-8b05-b323ade7a983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3b0e93-a6e3-4d6d-af5c-ec6e8d6a23e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e213387b-ca02-439d-a7e7-25e1d1483ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd313520-446b-4264-b413-6a00cbd4bd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d761d1b0-ca42-429a-aef5-97fe1432f88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d8cbc3-8796-45c7-83a2-707caf5164d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa11aff5-332a-453b-8d62-b1402d59dc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb4c1dc-c284-4e60-a4f1-2ce794903ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2789270c-e5b1-4d65-a62c-b51f10954e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21366356-4691-4c89-b038-dec1e4484400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa050f6-eda6-458a-bc35-633d6aa9f4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93260fe5-5ad0-49b8-baeb-bdcea5b975d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf0f424-c60c-4e46-8a21-da47e7389f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888ec14d-f162-4eb3-8377-8dfbf6c50414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9daf3e78-fcf7-4bfe-aa7a-c47c7622978a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84c870a-5428-4df3-8d64-72a860c15771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cd23a1-464c-4c3b-912b-a136f564b8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.72.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361415f1-1387-4901-a011-15a70f17d097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582f15f8-9849-414a-895f-7a262507d316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae96c190-79df-4638-91f2-291655f8845a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f01d4c2-7a22-471d-ab75-d2b9d380c979", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.150.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19644bee-130a-47f8-ac89-c1c3ce83a8cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.150.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d685fc-99e0-49a5-857b-81df077f5786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cf5946-5dae-40e6-a5bd-d5230fc5cb95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.65.232.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513464f8-54aa-4527-a3cb-e8ca9f250f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.71.89.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c77893-19b0-4135-8eeb-d8b57eacecf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.7.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f8c7cf-8f3e-487d-93d6-ba770e604d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.76.107.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12313751-40d5-4c19-ac32-5a07d93d8876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a8bd4f-4187-46ae-8811-3df55a7ccb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e467e90-2ad5-4689-8c0c-4c981906136b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ba024f-883e-4e88-8657-b8d1efa8da96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08dc5a1-0379-412d-9e55-c638923c7e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef34473f-9604-4a02-beb5-1831b84c2a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58f0970-a408-4879-8b93-2b06ce57608c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840cad0c-2f48-4b03-b7db-2605afe3cca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5de1b0-5c09-40a2-9a35-5ad4ee0242a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bcd9f3-8bef-44d4-8954-abee5efc4259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.139.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de41d9f-89fe-4d76-89a7-92f52391f541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2115099-5de9-466e-84b4-4e95d3bc0e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691f0fd6-87c8-456d-a133-fd931ab603b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbb4ec7-ddb5-4ab8-abcd-54a9f7e757e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a28c543-0ac0-47f1-876e-dd0ecee4a360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad3cf9b-ecb2-44ed-851c-133ea77ad18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738c4609-26f1-41d9-8e09-52e991d6eb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c088bb7d-f923-4b62-b0d2-331f3680ba70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877fe050-9cd8-48ec-a7b3-aa6df1aa4b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddef4301-4b28-4b0f-a7aa-fd02b670312c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3caab3-8e94-4870-8858-ce95deb98cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e35de5-0ff0-4977-89bd-16eda12c33fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bac9277-228f-42c4-9960-d18128c7c76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bd23ba-9b84-4244-af62-22e3f77b5ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc99e12-99cf-4599-ab0e-d0dd7b31aa24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48604410-9088-4d16-aa15-2f728d87a770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f29100-f6fb-4b76-991d-59556ac48450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.159.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec50ad1-f252-403d-b903-42b3e3be402f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a82f0ab-16c0-4ae3-b1ff-24e07711ea3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae46c5a1-f9ab-4fab-8b14-4e9083201c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81759039-2d86-406b-892a-9ab290e4039c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.167.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e76dbf-8bf6-4685-821b-c6807e25ee43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d31b1c-b44b-4fc1-8b59-ce37216c4817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a987d17-bdcc-483d-a51f-dc9a5182d761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1c9bed-d726-45bf-a634-211f2fa07acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ccfa89-8a73-42dd-83ca-e50a227769fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c9c01c-1d37-4c21-8e31-48f8d3baa802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722e7d2d-8a36-4b6a-ae17-6b7613e5e8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.173.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac79272-6b1d-42ed-8b8b-8b2e781eece9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32ae431-f379-48d2-8c43-b46f398f8415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6de56cb-43e8-4174-9479-81c8b664827e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da368c37-da6e-4d2c-b799-ff2c18b9641f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9d44a1-540f-4727-90c2-4a3b28f264b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f10c77-cf44-4ae0-b09c-5ea79f5ab361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ebaa8e-c97e-4c19-88e9-14a235f965b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298b3dbf-2073-4e8d-ac49-ab43a0de56fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.187.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24415bb7-2ffb-4b9e-8903-c3a20d2baaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573be75a-e081-4e1a-b894-e94232a2bbde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2585680c-ec89-43ba-8760-06aec297c0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70074ac1-e235-4394-818a-ec6140bb7442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d228935f-644e-4618-889c-ea18ba3f7e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c24fbae-b48e-49e6-8329-15973cfe8c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c4454f-0e8e-4876-8606-3fe417e71f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624d3f20-7fb0-43ec-98ce-788aa8801baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39897aad-4416-4a65-811c-b6d1807f1e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd81b95d-e242-4004-9a65-35e35ac80aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb6a8c5-a0a0-4280-93a0-9ae31d92e9c6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.56.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2ed5f9-48ed-4923-a082-6c1d5b936dcb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.56.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccabddb4-5221-43db-8aa6-4b0010749f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa47f84-ec3f-401b-a5c7-8c04e67aba7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a7b12d-b075-4f12-b16f-de701b104b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bda57e-7575-429a-9341-c1c967ab75f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608c4890-5b5c-4dbf-95a8-9141fd37aae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2083e9f2-b07f-4a5e-afca-3c1e0f6f91b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6479bb0-95be-49b7-b875-3fdac2d07a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c8a6b9-2b34-470e-836c-837195addf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629eea8c-6220-4f9e-9f5a-0ab0f1bd0e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7f58cd-f89e-495b-8c4a-8d91b1a03855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab11fbe9-0c82-4429-8f40-814b0c5a9983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb88316a-7024-4771-a29d-2fe94d62cc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382aea56-a74c-47ea-8d9c-9f498a55ce37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c82fed4-9b73-4ef6-bffb-0daf16c194b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f549327-a385-4589-a883-df7225254454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d95d562-6da0-4c1a-b2bf-c8fb064a6bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d55260-0e2b-4b2f-90fd-0292ab1ba459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2252cc49-c03d-44dd-8da2-13aa29134b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ffa75f-d534-4ade-a32f-c7c2cf7d48ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378d4e2d-4942-4bb2-9de6-e30215484dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdd4894-c599-4a89-b238-4ad1d8d136b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b116fc5-b655-419d-8afc-810635a00f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e342c4-7511-4cc0-ba59-d87e78fc8139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37aa113d-6133-4643-8545-451e46daaf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b951ad-1422-4873-b958-0e323e8a33e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed73544f-00e9-48c4-b548-4e45e78b7b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3824f264-e085-4590-a051-348e52e693df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99404905-ac8a-4832-bfe5-0261cb2a7308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afe7960-7bcf-4e2f-99a6-a1f6a005ec4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86eaf724-c6c5-4351-ac46-1a96b0a889e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6c5ce9-b932-4aa0-bde5-d2426e8a03d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44492d7-b0a2-4536-8a49-f73780cfbf79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396e92d5-82cc-4d93-ba63-f814f8988a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbe3cf6-b2e3-45b8-8231-51bd5e3fcb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dba83a-045c-4497-b6d7-62f784dba5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bca4acf-09f3-44a4-bff2-5649409279dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa6a1e6-344a-4d60-97de-851621c02c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb23c828-91e2-41a7-ba00-677caffc253c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b352b9cb-ab4c-464f-b013-f334bd056129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305c1ff2-6eed-4b65-9ad3-111f700e7633", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.84.138.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa5278f-ada2-4dab-9893-06078b28ba94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb146a5-f80a-4ae8-b1b7-63c6880771e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.80.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0d10bc-ce7a-44e7-b7e8-79fa0068961c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.98.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12ad63b-3a26-4843-8eb0-a9cf104db13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33720e73-2ef8-4495-911c-a81a7f7971f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebd9a4e-22b3-4339-8087-dcd6804e5a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c346bb-3e22-4c48-a405-9aaa0b085b9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.229.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded7475b-f0e0-4416-a8ad-353341434910", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.229.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd71a3e3-c843-49b4-9d2c-3c97ee7cc9ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.217.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ee4e10-b4e0-4535-b5ed-84e7e122fe0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.31.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c909d665-4efa-4107-a9d1-717ce375df77", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.0.212.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c7d18d-177b-4fd7-83f6-b68676de4c53", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.125.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab65c24-abbe-4312-9c88-51cd5e524aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.147.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a49176-bf7d-4d09-9e2b-720cfadf99b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.158.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb057e91-ae87-4187-9712-f748bf483cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.180.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b752f6-6b15-4679-8f8a-9c366b2b9d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.181.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b302f01-f1d3-4089-8a5e-f71a70c9394a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.211.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b188243-a8cc-4217-bfad-1a8f73b7d838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.244.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91506750-23cf-4d42-84d6-54b91f830474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.76.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7452d4-5015-4069-aa99-748c697835ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.54.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01999f0-9b59-417d-8c04-a3fc77ffb109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.186.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79356e27-7774-4d04-8c10-c52c2b9a85ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec43a038-d4ac-45e0-906c-332df46749bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57656f0-60dc-4fd2-8d5a-65e5aa47d9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af17e57-fac9-460c-8519-cdaeac43cac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10df6b7c-c32b-46e7-a6c7-d6b4b3aeaa0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b597be-bd27-420b-ad6e-f62f3d33836e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.16.78.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d04ca5-1ed9-443e-a162-9a6794c5d0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.161.50.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd9b61c-01fd-4eea-8bb4-4034654db886", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.172.90.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81301aaf-860c-4741-990d-a595b3f93d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.188.102.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3ca342-f05e-4e8c-a647-da1c596dab2a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.137.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d288d090-aae9-43ae-96ea-fd4626f658e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf05e975-8d55-4fa9-ab5d-6f521adfe55b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.201.189.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf55ad7-1a1a-474e-a512-a0bff7448fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.229.233.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e84feb-400d-4911-ae63-6c4c64a3ab34", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.231.227.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e8ab56-1ed5-4af3-83ec-ed2f1ca710ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070b35e7-df9b-4076-9487-3c3b4f507d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200c1e92-4e61-4a58-a8d7-42c863e6f4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad4f243-b70e-49c9-bd8e-2b160f0712ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b49051-2074-44c0-a94f-0677a76b4ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd91730-ec58-41ce-8e1b-e0e1e9730148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b19758-0e97-40fb-8611-f1149e5730f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acab22ff-b83d-4e9f-8588-497f89ce377a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98066458-eea1-4b40-be48-047cf818fbf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e875d8c-3dfb-457a-a8ce-a6f386d76e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cf82be-e2cc-4785-b30c-82ee8d30dcaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f565c360-116e-48b3-83ce-ee66b5a6f158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1330f3e3-2820-4f5c-8426-debf3fe2d687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e081104f-047d-469b-8148-f451fcba95d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd010d7-5d18-4638-9111-862e3e7b9f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47edb3a9-b1fe-4038-a5dc-4b0d9a310430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e3c51f-8046-4c78-bb78-aa135d3485eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5be0b0-97c4-49cb-9982-23dc2b3d0567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d48018-ca3b-4c61-8c34-af72984b56be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc7b778-b2ae-4365-a38f-a492721dcbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2ac44e-fe22-44a8-bc3f-99259835b366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.29.192.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9d8698-0675-458c-9cb5-e17085258eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.4.66.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58dec60-1d0c-4108-b7eb-5f949f08f568", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.40.222.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4927de-32e5-43f6-b7a1-051012d86580", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.242.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4014dfdd-bdba-4b82-b559-82503942395c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.141.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d6bc73-aff9-4c6d-b287-1f3fea803657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.104.176.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3d6aeb-32e4-4463-928c-f80dcc8c0564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.112.12.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a71bce-fd80-42fb-932f-20089264dc69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.119.123.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c146d4-285c-419d-bfd2-e01f1d7fa67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.120.53.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf45ca9-82d2-403c-8001-8d9c9b85787b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9beea4-955c-4beb-ad65-e8b4e151735f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.130.108.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdb59fd-3bf7-4b04-857c-85d83d6fdc75", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.146.220.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7653dc-7f60-4949-a9e7-786a0bef8b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.150.228.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba65e137-7965-4d2c-83d8-3c691c352cb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.159.14.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3212ed63-e983-4507-a245-dd63f48c3f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.162.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b4543e-05d1-4cd2-8ac8-5e52ac8acbf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.165.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6878922-4f17-47ae-b2d8-0e1f0619e12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.167.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d5dfdf-d6a9-43c9-bbcb-3287875e724e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.170.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43529d0-10f0-405a-b8c0-eee32d21c8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b55af98-97fb-4fd4-99c9-7889ebf5aaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.124.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc83cc3-6379-4b3b-909c-986074bb9a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.190.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4141be16-8a22-4dc6-b1eb-529c7755d89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.2.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a3125b-b4dc-4f72-b08b-b1c85e1b9ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.103.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452e6fc1-d3bd-49f6-819f-3455987d6196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219a2bfe-5f02-4528-a51a-073c5d4d3492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe78b1ac-ac1a-4a43-869c-7499c5ac656f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bef35c9-ce2c-4155-a8bc-da2173ccbbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e43ca8e-5344-44e5-97b3-28fc1d46520f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0281fb10-e298-4f80-a7ac-9d8c5d743c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ed3334-5d33-4cc3-98f4-6d16cb745ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fef02d8-3d0b-4e3e-b69d-9464cdd276e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee18b69-5a46-4df5-99f6-8b6c68f1cfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebfc4ad4-20aa-418e-bd71-05e711e41334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65dacc33-2ea8-4b2a-b0be-b22352c12569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ff0261-677e-4be2-8236-8bfef91c4088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9273d898-cccb-4aa7-b424-d0de3c7fefad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b33716-e066-43f1-9a2d-49dfbc304f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c726605b-13cd-47fc-acac-69b2b92e592a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80f912d-8251-417d-9925-ae0a32a2fe3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48523cf-0417-4901-8e40-1dd2c1871de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768a37e8-3fa5-4a79-9a52-4ffab680c510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06f0cbe-9364-4386-8313-910627713a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b70cf53-9588-4246-bccb-228d3009bc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff157cf0-c2db-410d-873e-d1ac264b6f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c144a67e-2e71-49e6-9f60-a1fa046814d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.179.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd776014-b909-45cb-bc3c-a2c4ed0f4996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb46451b-fd29-4840-8055-10ee63ff4ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19fa223-7a78-49b9-8c58-d154c50bb9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d0a02e-048f-4410-ae8f-0b51223ae636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.121.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e893c6a4-9924-4caf-a179-6d8bddc083f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afc5076-a5c7-4c07-90a9-5bbe79a29f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1ea56d-d860-453a-938a-abb0a7d691c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731de61d-4ede-4cde-b1ba-3f43d3f8d8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.131.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df18fddf-c746-42e2-901e-8bef5e1871cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.139.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842f09db-cd66-42c3-b77e-7ef0da3c2c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.141.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c0ac73-5fde-4271-9d7f-6534dccb064b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c92de2b-9108-434a-88bc-a5c035be35e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.163.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0376d6-f794-48d9-9369-e18bda086fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f6d2a5-b364-4304-99ce-77450908620c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97427e86-eb41-4059-9081-508b7b111e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840c408e-ef9c-489c-af20-5012b8256963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.187.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9439110e-c824-4200-bbb6-ee85e012fbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.193.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116e6764-e08a-48be-9c06-08aaaa797ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516a515a-a2c3-4d1a-a307-5b75698d3159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21114096-72ee-4145-a4af-377c5cbfac08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75512653-91c9-47a4-8d84-949daf9575cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515918d2-b933-4fde-9d68-420c7c992a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cc505a-2087-4699-9d03-b6f1d6e5e3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e476ac-9798-4981-b05d-583e5e2beb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78d4eb0-f1b4-4252-a978-bb6b37a33f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb7d9c3-8ff2-47cb-bfdd-76dbb36c9daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9ae5d2-aaa2-43f9-ae78-bd3bc4951fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d76228-83dd-41ec-b088-5809086247f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cacae24-339b-4715-ae40-3a36195f8e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b91104-d26b-4d6d-8a5b-d06fa40f91eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fa07ed-2e89-4674-a84f-500f1395314a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f79fd5d-a2df-4c36-98c6-638c4c722725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.90.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51825874-851f-46d6-a041-1d6c448710e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d9e654-08f9-4224-bffa-94cd0895cfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d60cd19-ac2d-4259-9324-5427dba47ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf1129f-3913-4055-9e1d-aa60a204f36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c9a6bf-a8db-4418-8564-020a746c4422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7f2a94-a399-4d71-9ad1-19487def75ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee171ea-b9bc-4f41-b87d-fb97964d164a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4178d44-7511-46ad-84e9-597ee03eab88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960bb83c-9f2b-4632-af6a-0cbd3a6e30fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.108.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8828b6-d78d-44cf-bf58-8bd30b80384c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.109.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7324fc1e-02f9-4cd8-908d-4871df267637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efb633c-c120-4a56-b3c0-c112cd6fcb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.113.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff9f465-5ea3-4908-8c12-356505c86825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.113.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591e7262-6cc0-4582-b0a4-b4291a8b8a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea5f492-e38a-49b5-9597-2bb9c0c4147f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4f6e67-089b-4a8a-9565-3d6e146cfaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfc959d-8f1d-4e89-8f1e-2f3fd66ac3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d25b93b-4642-4bd3-9b8b-bb57afc07fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6126bb46-1fa1-4624-a3ef-166449a95355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e975ad-2bdb-424b-bb2e-cb70ff3949a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdc82a6-2833-4fd7-9640-79f6a55ee784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a6eaae-0724-4708-aaef-ce7d772bfbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8806ad96-5d4e-498a-a2ca-87d3bafde1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3abfd4-7ffc-4ef2-99e4-7e88df36eefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00fdcce-878d-434c-9c6e-b8ae9e7d7e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe788cd0-835d-4788-b643-17e9729fe4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784a73f2-ead6-4ad4-b96b-b91af8a2f988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc82b8c-73ab-4a35-a3db-b4684d86f62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbba81d1-29c6-480c-9e7c-87dffcc1576c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f5cc1f-92b0-45ce-9b73-d91cd7ba3dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38db616c-014f-4bf4-a7fb-0160de6760e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4ecf59-1625-4a49-a86d-8465b6771d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87327689-2513-45cf-90ea-6abf4309a65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.177.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278e88e9-318a-4ace-a3a8-811b555d59fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32b54ef-68b5-43f4-ada4-c566990e70f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18ded55-18e2-4cae-b618-a3ad849497d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.20.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d232c5be-ca0c-4a99-bfab-7f6cd024b7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdcf08f-f4e2-4221-8511-88a72097a504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fbab1a-3498-4314-ab27-6e7d0736c7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e746304e-bf32-45f5-909d-022d31dd5fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.247.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42b4d0c-35aa-4523-aece-4241cfe97527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e61cee-6116-4737-9beb-6cc267e2d705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f46f3b-2f3a-4c65-b7a7-4eaac3e1ea85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0014b5e2-2d8a-4d86-8b27-c4fa09ec31ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad7ae1b-5669-4723-a6ad-d2a653aac43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54da7c51-fd14-4165-aebd-36a7dee6a9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff9cb9f-2f04-456d-98f4-9a9143eae94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcedc50-3cf5-4a48-8da3-3df19741cc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.31.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b022163-21d0-44cc-8890-7057e4d74551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.33.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e45e66-8033-4acb-b9e0-0506157729c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7b61b0-42c7-48d1-8172-119d669bcfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.47.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac28b00c-619a-4fbc-a58f-36520e281dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9428595c-19ae-4608-a151-ef0b2d1b2f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.6.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31056da-3ffd-4f66-aa76-b74c7e22cc8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.76.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3fcdd6-7d76-4f37-a732-df83f0b24242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4753e2b3-c569-40ad-9a8d-278f833cbfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d68f870-8bd7-4bda-9061-b303797d4597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.83.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb18a60-163f-4261-9992-e22d105a1cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.9.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb24b5e-6b07-401c-9b03-49468799c95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf86d476-20f4-489e-9d49-4d95729f18b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.95.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c4cc5b-a5e2-4a22-bafd-5f4a1963501a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.16.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c09c5ae-12a5-4686-bd81-8f7e9684e6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.201.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8f9f7f-da45-46c8-bd67-0e40d4b47bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ef35bb-50eb-4703-a8af-5d2464966295", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb32be1-9524-4ed4-9795-7a425c532c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.126.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b48c5f3-4491-40b7-8b7c-450d93534e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc269a0-71c7-49d2-bebe-7c3a68aa4f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.14.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9434ecf5-83a3-4b81-9480-c5171bff2da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f95bf2f-f038-4b8b-ae23-b286ebb7bfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ec6852-c8a1-473f-9d39-4358234e5918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3852c9-bfec-4646-a706-876672a290f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccff63d2-99bb-4647-8220-29e51685de56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a34b5a4-b36a-4aa6-8ee1-b819678bf074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b2c835-86d1-47b4-97a3-8026028d62e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e4bc40-ab67-4811-8157-41bce90f892a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be1fa44-fd61-4d87-ab2b-779ff55bd963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ceffa4e-6e8f-4f67-ae6f-3c909d69ac01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751ed333-29cf-4f2f-a5eb-477565054ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e595fd8b-68b3-45f0-92bc-6a9d50183859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.2.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547caca2-56d8-479f-b514-d3ad4ec86300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.20.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b533b15e-8a38-4b3b-b716-fe38b5e41340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa95a03-b8aa-4e9a-91ef-95dc4c89102c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.204.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6aafee-dca9-4a4a-b8fe-4e881f1254b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.21.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbfcc11-5471-4f25-afeb-b79106431851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8454a28-5f6f-4bf0-9b93-c52fffcdd691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05eec5a-a1ba-4041-b8f4-f945a7e94077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.235.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec7dff0-51ef-42fb-bde3-9e512d9b38c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c70374e-0e09-43e9-ae1b-efe85bd28a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.24.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2ad2a9-b6df-414f-9761-3904158e92d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.242.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90236513-0113-4295-89e8-ab76686449f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd6ed45-400d-4a43-91ec-39d6d050fba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.247.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d663ad-b627-47c6-a00e-7a759e60d976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.248.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689e2723-c162-45ae-8a9e-ce7542c20040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1483a692-b659-4344-8dfc-218b4d616a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.27.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005b11dd-4025-4a3b-a10a-a7423b947333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7848944-f4fc-4ab0-b6c2-3d094b688842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f69892-956b-4bc4-84c0-af799ed54051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed3bcd1-fa48-4f0e-805d-4c9a2312c746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.50.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fa04ee-3320-49b4-8683-3472d043c40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.66.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e197a101-605c-45f1-92d6-886e53c26dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.67.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de688b0-6e23-410d-8458-e9d4561eeb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.72.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99694b20-ee38-4d0d-b8ec-5c255cd27da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.79.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d39fd5-c53d-4f3d-b834-b9be5b91bbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea5aa20-9dea-48ed-aa26-87b55ac98bec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.30.231.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a51cb5-f0bd-4c39-bb70-a4a914921460", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.30.28.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cc911a-2056-40c6-8c9c-a669fc8fa3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.42.131.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d76346-33d6-463c-9f40-a2ea67a7f327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.45.19.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d404572e-afc6-4885-8b48-0eebcce0462c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.52.147.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3bb515-bad9-4ff2-888d-449bde26b87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.1.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44195f69-768e-41c3-b1cd-ea4ef9ac80f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680f4c7b-fe2b-439e-823a-906329189a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.56.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecb0ca3-e835-4fa6-88b9-adc1aa4d3018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d14fd39-1f88-492d-8cdd-08da4cb2a1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.195.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3b0b94-2ba7-40fa-92d2-785210759ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.212.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4774e8c8-6c31-4f9a-a264-0e2c93970d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17146eee-c6cb-4222-b737-12de3ff38e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26541407-c018-47b6-ac3c-f998b4eb8416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d34340-166d-4580-951a-a9b0b4272b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccad40b-539c-4a4d-9ad9-acb8557172a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86aa7aa9-a277-434b-a5fb-0329c08d482b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef7f951-9ca9-45f1-9f76-45b55f10a3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5593e1ba-0334-4e84-8c30-9033e140a538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1087e771-ad97-414d-be24-07440b604de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a70b9a-0a8a-48f4-9b56-f15aa18ce314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4056866-45ad-4601-94f4-966a54a67e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd21cffd-f81d-43da-a7a2-5d04f5d6a290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d9cddf-5f11-4b54-a8e3-b6a20bdaf541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.80.240.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62cdab0-8d71-4b47-a8a7-b351df5e68e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ff633e-1f85-4d46-a3bb-8589d0b34d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775e3b52-b662-44c4-94a1-7bdf9c377ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce185fb-3854-461e-8dea-3fa5d79765c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689b13e9-925f-40bd-b052-fdc4e77f93f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb54256e-71e3-4263-98a5-0743c47e35f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec57eac6-6ec1-42ba-83f5-dd2451cfd99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e56ea5-3f1f-49a9-9456-320b1b0229ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc27d21-daeb-432b-b456-c50379124f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811f2556-a331-4b98-982b-f747ee5acb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2333f8f-36ef-47f2-9d99-8c38e91ef2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93ebab8-b7c3-42b5-9fdd-0eab959b209f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7290bda9-3e51-4139-90ee-ead7566e121e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee1e400-6676-4acf-be16-72ba576377e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c447d516-9673-416b-bd24-35de596585ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681ba948-353a-463d-95a1-eff8f4199ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f0a357-518b-4d36-bc3b-e05a5ecbd695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbe0ab9-f250-42a1-b7eb-294b8cda0b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bedff25-0e0d-4517-83c0-866246290def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce35812a-d454-48aa-8d4d-97c95549ca10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf40010-5038-49f1-b8f7-36d79f8493ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.114.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ddc6eb-1318-49dc-ba0a-fbfaf59add98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162904c8-d0ba-46d8-8a02-7b9dc18d54ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.118.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e8e70d-7e8f-458b-86d0-40fab0046fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebd89d5-e06d-4177-88ea-c72a32347362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f5a9e2-c873-4227-bb46-a6f29bb8c01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df299341-da77-4102-870d-4fd3a0fa540d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db67d3dc-f2c0-4074-ac5f-fbfaa5edca77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c42edfd-2ce7-4ec4-bed1-944606b389be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4df4a35-a19c-4ec6-b0ca-496b41e282b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89215621-bc48-441e-969f-1219ec719d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ed12ae-9481-4a35-8599-db2a8d3ae649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6a5b99-8284-4d9e-ab57-04f74d65512f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1e3c44-18cc-48c3-a4a5-47f16a44012f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8a4b27-ca31-46a5-aa35-cb774706ba07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8d6259-b5e4-4795-82b9-c6e4cd97e974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7a4706-0ac2-4e98-9226-41ad2cbc782c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523a0007-4f1e-434a-aedc-6d82d10cb5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68450722-0c61-4f15-bd9e-4860ec91623e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcee73c1-11db-4172-b140-af383c740840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.184.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbe3bc7-dff7-42a8-b90e-ed697a370c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba52a62-4d29-46e4-af3b-467edbd004bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba64b5ca-e2c0-46c4-a734-6e7cf8e005ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.202.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb621e3f-4491-47f3-9e04-94ad1be64757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f5fd89-14d6-4a10-9e85-f51aee4b5417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2a243b-fafa-42bd-8065-4d962f58f44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fcc884-031f-4b64-9015-ab0365c3d619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504ac72c-1003-4750-9596-9dc5dd068d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0799b7f1-6b2f-4af1-8a33-33fed3e6ee32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.58.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5119a4-cd20-4168-b85b-e1a5336cd83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbadac5-d0ab-4a77-9e36-c62de8affb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.87.82.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59db964d-eca5-4d97-814b-d30abf2de172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.15.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75af84e3-3ff9-45bc-b8c9-f1dbee720587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.19.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86030e37-e6de-488a-9852-3a053e766176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.29.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98249b0f-beea-4de9-8af9-13d4cfcc8a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.3.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd24af8-413b-454f-9abd-d2974d6e5afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.48.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d84e313-8d69-4a77-bfb7-23dea19033ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.7.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94057ec-6bec-4cd3-af9a-cf20adff0c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.93.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4583ffb1-c46e-4dd5-aad6-7e09bf06faff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.154.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833cde93-8400-443b-b437-1c78e73ba1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee089865-11d2-43c9-9241-319ec1876395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba56340-5718-4b1b-a014-bd3be46d56b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.246.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1139ac2-d05c-4f6b-8399-3fc06cd6673f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.2.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9197e2-2526-4d67-8f23-fb3ba45bd352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.24.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbd4014-34b4-4ea7-b1eb-d33bc397de75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.79.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f4bc89-73a7-40c4-8341-b8f90dd4a581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8934dc3-c7a1-4544-baf8-c966d3531aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea95e803-9c60-4028-944e-711adee42106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aaa8c1f-62f4-48ca-8663-6923a0b39526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.93.243.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54850e25-c0cf-40b2-84ff-a01fe6cac220", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.234.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db9258b-aa1e-43c2-acdc-2c2a73d109dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.210.53.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6753938f-0354-45fc-8362-aa145e818377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf34970-23b9-435b-af4c-389c037c8b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de944d66-a1b5-4327-b079-9d596318560c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacd1ed1-1d35-4996-b774-b8d8343c8a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.242.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b2e8bd-8e49-43ea-b9ed-7a77e5baca09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.65.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c1bc0c-ce73-4dcf-b687-1745a84e44ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.84.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65ff320-10ac-4f52-a96b-65dda011f75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.87.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ecc690-d7da-4c19-9e73-332d575b0283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.124.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc804cdc-4c17-4a7d-a3b7-5225d250d640", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.174.174.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83f71c7-2115-4d2c-b53b-f9428bcb54ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.205.64.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e42a17-ddcc-48e1-b61a-d0a325deb93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.181.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff221b0-ffc5-4cd7-9fd7-94d910ec6468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.186.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260200ac-7fab-47bb-b516-6ed99a7e018f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.233.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62ff6dd-a0cb-4901-b9b7-8545956cb813", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.232.104.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a6889a-76bb-4c5d-b900-f8a8470f283a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.232.214.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f18ddfa-6871-4331-a6ef-05445eafb7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.233.108.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd88f39-06e4-4b98-a4ff-60505fb1b824", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.234.192.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f25640f-929b-4d69-ab0a-5642372b27a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.43.135.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99080b62-f067-454d-bce4-cd4174dbb1c3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.43.243.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3b10d3-bc30-48fe-8ab7-f659069fd2d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.141.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46eacb70-5fa0-4179-9b5f-8be98e9e4841", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.160.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e1a157-871b-44c4-88e7-b9f502978d50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.166.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f837479d-0b8b-4ff4-a3cd-9549c2f457f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.183.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541cc70e-8931-473c-8ad5-f0df25e3cf96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.199.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2155556c-277f-4180-9520-dcebd1acdb80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.233.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b02c5a-d723-4c73-9b81-9e6e87945fe3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.243.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9860967-725f-48b9-9706-32bf3870f475", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.244.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e36b92-ce75-4144-ba01-905e568cb0f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.34.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3030f744-d652-4ecf-b151-7bffc4ea1f0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.35.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f013ed7-4706-4da7-a2ae-1dd616cc45f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.36.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbdcf96-8aa7-4440-96eb-413cacd59de2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.50.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8761ea95-f787-4c7f-a2b1-e07c7b6a2e28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.69.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386a498d-ff72-4207-b361-3311983a8550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.0.128.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba84898-1ce6-4721-9d12-7579d7dac7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57886bf-4bbf-4858-bd29-e0c828fd0114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.126.90.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6f7a40-0a63-48cb-9cde-3a028ba760f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.128.59.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd5b098-259c-4775-92bc-dce4f40fe643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.117.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0910a4-3ffc-4f74-a7a6-842a985ce554", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.194.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe18ef4-11a6-4bb9-9a92-de7b39f6bb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.130.243.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9f7860-ff10-4925-a073-a6ebb6b4a5b9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.10.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166effec-ee10-4a42-a0f6-d12d4fa89202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.149.158.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12479beb-3519-41eb-9a2b-a3e69303c513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.160.97.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb456ec-766c-40cf-871d-ccd64f932004", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.83.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de53a36-5ef3-4c90-949e-fc38044b69ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf1694c-2618-4496-9d56-14c15b2df92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61df1831-8af8-4a55-8bae-f9b3f80699e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab14890a-91aa-4fee-b6c3-26b7bf813de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.19.144.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c551d09-d8cd-4d12-85ae-0abf7200ed32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.191.246.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49667341-0b3b-44d3-99cd-4a5dd5fccc07", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.196.154.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac13ba8-8914-4123-b2da-17fd011b85cc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.20.50.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343e7ca8-34c0-4d3e-b6e5-5a3e6ae6b95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.202.68.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f61ffd-b6bd-4013-aa90-a51391af1d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.141.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705d7e27-1e2c-4f99-963a-5bb5e8bc41fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.231.26.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ce05ec-9712-4df5-9bd6-177e75dd8e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.236.208.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e062889-a50a-4d75-b64d-e647ea4dc733", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.244.171.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d06040f-62b0-43d6-8d0f-e5731fc5d065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cf660b-2772-485b-8b1a-8eb557a72b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e128246-e091-4527-8877-81266531c0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4308567-3758-4e25-85e6-59f7760fc466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838bec62-6755-4021-abec-4534597b58ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857461f7-730c-4661-b8d3-84d540f7022b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b4bc61-4832-43f6-92c8-6c51a6c1a394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536c76c4-180b-43c3-b3da-4c1bcb11cd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0656cdc3-c185-4388-944d-b59bf6be5ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e87559e-e59a-4174-8fb6-2c00ca6af551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07df6b3-9d0f-4e1b-8fe1-05a0cbcbb81d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.253.102.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b339159-0f5c-4760-91df-980d25b9fd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.253.38.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a89918-fc07-48b7-963e-59a70d2d5e27", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.97.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5965bc64-3854-4f18-9bd3-aee114393c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.98.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ef88d6-6ce3-451f-8df3-ee5657614a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.40.184.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37adb057-045d-4355-83d6-0558dc19f11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.44.100.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced889ee-3b7a-4b02-938d-d9c66cd217d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f51d8e-77f9-4c94-8c79-13b119d344be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6767b5aa-3469-4cf9-9fed-db3d3b5d083b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbbf155-2526-4a9e-bef5-1cc92175bfda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.63.115.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e76fef-f7bc-431d-9545-114246376c8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.76.37.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67019cec-6d4b-4efa-8ff5-0cf001c14f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.78.64.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c407cc61-fb68-4c7c-b052-abf90138bb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.129.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e6683c-e5eb-42f2-af40-d3be200d6f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.138.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953b7a2e-9f22-435c-af2c-79df705ed7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.30.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3ab42e-ac6c-44fa-a053-48fd67358b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e35e91-ccc0-473c-9104-ca96f26eddef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936d3ddc-2f63-4fe2-a5ff-a5a0fc1b71a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f7c7cf-acf4-48fa-b80d-3429f67e1adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95519dbb-9a4d-4bb5-98e2-cc8a7a026472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.58.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04571616-9aa5-4888-8877-6570c717a135", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a6ad67-5ad3-4588-b063-f66a05ac25e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6447d9cb-8a80-4ac2-9d2d-c7b685fb0218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.16.30.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5916ffd0-5cea-40f9-8180-d91dc5c944db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.220.53.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb9f216-7c0b-44b5-ab68-ef1979db8fb0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.25.101.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6421dae1-49f3-4750-9f50-426b2a813e4c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.228.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cf643e-ecef-49d5-a7fc-e0d7d6af7fee", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.62.183.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0216f5-116e-4893-9457-d89e98bdd628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.41.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f30cc0-c9ef-44bb-8c05-38ce7af3ff33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.91.244.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64025007-d07f-4ab1-8aa1-3fcebdf45c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.103.29.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4343f37-f601-431e-8d45-2da981503e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.11.178.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7646e5d-de85-4abd-8052-7409b9cd45ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.120.4.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb646d7-1c5a-4145-81c2-8680bdc5043e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.142.161.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d574b406-be38-4df7-83e0-4eb2f20b91de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.143.217.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f5d948-c2ec-44e5-9202-3fee11c4dd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1887e318-7643-4ea5-8c9a-4405879219c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd2ee5f-88ba-4cd6-b13d-5adda6c21ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f26b5b-bdbf-4db1-a6ab-4b97d54e94fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.125.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b1bd34-bef9-4931-8d37-f3818b586631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2ac632-e495-4280-a7f5-fbfa5df98c69", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e480845-c7b9-4762-b837-885ce66f4596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.209.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cfcc7d-06c7-4019-a67f-33cc19d2269a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.219.82.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2571d626-5e2b-436f-b239-e845120bb814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.223.64.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87028556-7204-4f15-b71f-500ff149ec89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17a5b0b-eedc-4a32-864f-65ccfb06bad0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.130.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1650809-0daa-450c-9f1e-04eafc162825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caba5c2-8de9-4628-be40-23938e0ba4cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.39.33.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e678c07-9a91-4589-af30-77f52a4b4d86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc256b92-18df-4e8b-97c0-719eee424140", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4208f88c-60cc-43da-87c4-83bda8a9579b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.190.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd4cfd2-62bf-4071-94ec-1e6552743211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.210.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f66d13f-56d8-4f63-b62d-26327983e979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.77.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63b829d-a12d-4576-9cc6-8363b08a5351", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.29.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49013efe-e99d-46fb-801e-e5bd6df54a96", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.37.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f7b270-d65c-4482-8ef2-1faedd6c2db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.138.213.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3347c4-cdb4-4bab-819e-b33a3d151fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.141.31.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5992ca28-ea93-4037-9292-df8317a99845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.142.188.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7102983d-928e-4be1-8379-c9b6fb1d4c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.152.147.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006f7b50-b117-470e-9196-2bdce1d14c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.154.140.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a35aa0-be5f-4210-8b31-5e927b328d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.156.122.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6bce2f-07cd-4408-9242-075b08f7fa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.158.236.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8a6144-4f33-4ac1-b089-5360debd8a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76af443a-8155-4f71-bd74-030bd4d018d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525ec2b1-8d34-4e2d-b3ef-b6d829615684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c99bc7-d8e0-4992-91ec-b411e967eee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.90.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3ebeb0-dd36-4b47-bbb0-70341a3dcc27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72e7b28-a249-4f1e-8bfc-80fdafe3eeb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfffbc45-4753-49c2-92f0-5926f5f46391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.168.108.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ffa2ad-9dbc-491a-bcaa-6f5458e0916a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.175.218.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65db3db6-1238-4064-bd30-22138511716a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.175.233.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235922d3-56ef-4382-9d4b-b53796fa3d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.175.51.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b2d648-4caf-4759-a751-169faeae36d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2945e0fb-6398-41b5-a84f-8644ee76b6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cd73ca-12de-4e66-90f7-9b72ad5d9bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb446eb6-2018-494e-af60-882af40f163d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.158.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12ccd90-d654-45a4-9c87-d7b30826e914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.184.16.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5913d02a-7872-455b-8cbc-9530b90c955e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.184.83.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5176c28-d5af-4ed9-9a86-b4f6544a2038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229eca3a-8a9d-43f7-acd5-3247063581ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.187.126.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7f027e-c0ac-4af5-9f36-466604670564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.185.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0492464c-b82e-482e-aa79-b6475a15bc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.191.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2347c81b-0d97-4344-9f2f-367d3c8cec16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87007012-84fb-4166-b9a9-684021179696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f46dcc-245d-476a-bf6b-2c3b25164241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.191.142.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcaa787-635d-4ad2-96c5-e74465e1412b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999a0336-6455-4dfa-9bed-8b4447707b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72081744-6d66-4867-aa0e-7c7063d61a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.226.124.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ed015a-0764-4b42-bacf-c1c47cb5d56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.231.157.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f5c0d7-f53f-44de-8bf1-e8fa370b9863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.231.181.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9a2f27-437a-47e2-ae50-a2601f8f6093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.233.83.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c010f5-9646-4a6b-8fed-cbaf2b2dd0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.255.171.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fe7c17-05e4-4ee4-888e-be764a39b87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.58.241.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c598fa37-fca3-4abe-a017-b7cc1bc03a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.73.212.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e426b0f3-6d48-48b4-81f5-af749a636d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.83.65.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9c832a-83f0-484a-8e13-d8b116ff9dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.87.218.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131d79aa-6fe6-4762-b347-91eb7a46c3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.134.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7983bd-94d0-4e6a-a7a5-b527ce0cde41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.156.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95123cd0-2cbe-4288-943f-87c49d26a651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.165.130.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b3edde-27df-4aab-a018-b8e748a78271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.165.219.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b0f716-e2a4-4b5a-81ac-ff6fe2a31f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.145.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7c7f71-6419-4fd9-8e5d-4c758cc127dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.196.150.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da043379-aecc-4fd8-9b02-4d726a88ec6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.116.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfbcb2b-af2e-4eb5-a74e-b5e1d1707801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.58.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d68a8b2-e66a-471d-bfbd-6c6e4da40e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.183.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba15f65-aa0a-4c93-9b4e-32cd5f30e2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.67.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c999152-5ecd-4dbf-bb08-b3f847328e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.235.52.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4e99e4-38a0-4a60-aa38-e1cb57903f3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.176.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfd212f-29c3-4179-abaa-147bfab927cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.246.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772e39a7-a210-47fa-b8c1-1a1dfe87e73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.89.101.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c7f69b-6db8-4d4d-af69-b4cb62573bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.89.47.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e4a22a-c48f-4db9-afc8-23a1735fe2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.90.247.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b88b48-091f-4631-94c4-119ad5078acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.91.134.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca60d42-c600-45fe-bcde-38c0ed6bd048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.195.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097e655b-b3e6-4907-b2cd-7db41edbe71a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efd3ed9-cb36-4c9f-8024-625b1ecc5518", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5c415a-0a9e-4c6e-a89b-9d8c2b482b29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc99a221-1f73-4129-8667-812672239e4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874734ff-be0e-4fad-89c1-81d846a413f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc793f48-cbca-4410-931c-17b5fbf8695a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50563d1-6e43-47ba-ad42-7b435e88fbc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cbe2d6-cdf8-4f4d-895a-b0d65ef3d083", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0589ec27-5587-4713-8e97-e29ce426dfb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d811b08f-0a69-4e37-ba27-4d3b4345c902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.97.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6f16bd-e86b-41d8-a38e-a14291504bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.33.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a85bfe3-9be0-4c11-ae03-e84ce1e80ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.153.84.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f2c595-38d5-42b9-90fd-f7623a2446d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.211.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9e0169-42b8-40c6-b78e-498efe107a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.155.67.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbe90cc-c572-4f8e-9a4d-9f79349555ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.158.153.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f752a7-2ea1-430e-b3d4-9788e3fd7fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.158.25.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400f3aac-74d2-4d09-b0cf-f8bcc2c372ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.10.5.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35aca94f-bf38-4d57-8f66-a4d735c81859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.136.171.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1662388-200e-4bce-b1e1-3760a59da886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3829db-550f-4e30-90e3-854771b88e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.215.186.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5053fc-80c8-45ac-bdce-73034eb52988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.146.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94591650-83c3-4b3d-9895-f7c33f5afa98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.240.112.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02bc5b6-60f1-466b-8214-7ab2affc7551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.241.238.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2a8762-eae4-4712-b13c-4f4e1f1d7dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.245.214.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cd308f-2b28-4c19-8c8c-444abaa19b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.254.16.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b44086-786a-46ba-989c-d0e4ada73f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.33.118.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b3dfd2-8f2b-42cc-9896-940eb8f0ac44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.33.209.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8286d9f-5426-46b6-8ccf-dd7baba80472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.42.84.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7740de-6e0c-42be-966c-58d8bdb712f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.76.159.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7961ef7-188d-492c-80d9-d75b42c33b6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.84.61.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351a7018-8202-408b-8771-857ae002583f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.97.220.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0eb6c9-992b-47e7-9483-3b41f434140c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.11.42.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8450a61c-9547-44fa-88b5-a4b8e7a620e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.12.203.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8430354c-f142-431c-8c2e-6ca6574f32c0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.125.213.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7d2c69-18e4-4be7-863b-2f30eaf024bd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.16.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf1abf7-24d3-4e54-bc62-2377230aa5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.179.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe739d9-0c53-48ba-81bd-c2e65580faec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.68.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d597cd-5b93-4532-97c1-84c69aec5096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.13.68.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fc3979-bbf8-4839-86f6-399485989948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.36.18.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53c88db-1575-423e-bccf-d1f364e7cd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.100.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2e6d6d-cfde-414a-b186-f2b27cad05ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.102.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007b33aa-19b4-4f8a-b1e6-16180340d55d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.7.135.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007997cb-fd2d-4f83-95aa-e2e6c6abaff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.8.179.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd39c8e-1aa1-4755-ade5-0bf3ee65f74d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.91.224.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc22efc-e11c-436b-8e25-af9b77c1f572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.93.130.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11665916-3e0a-4fa2-bcef-179b939b6c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.12.103.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390c253e-d0e4-46e6-abae-42c6eac073a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.177.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d8ff82-aeb3-41e3-a957-c362256ffa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.6.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e0c360-4f06-430f-8bce-a6d75c1d15dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.145.219.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc18aa9-6068-4528-ab42-33b69df03190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.199.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040d4cd5-c63f-4509-95b6-21445fa194c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.170.122.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d08176-39b5-4952-b265-783131759f48", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.176.192.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fd4cd9-4840-4d73-a905-f3ea60569034", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.177.205.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a734f44-e279-409d-a7de-352dd0cd3955", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.179.251.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249cd282-a7a1-4e05-92ca-a84b22063de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.184.185.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49e315b-8971-4494-80aa-88d877158c13", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.184.94.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6e593d-378c-47fe-8d3b-d69532c3b97c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.185.181.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f6ce43-05f9-4176-801d-d56c20c73352", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.189.65.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec13a13d-1a93-465d-973e-c4bdc83d417a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.190.17.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102c36f9-e9a1-41f7-a61e-e60cfacd5350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.190.30.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1324e3e-aaab-4fa8-8a64-f5a96f24f65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7007a03d-1563-423a-abe2-74be4c1738d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.217.227.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360f0078-15ff-4c7b-8db3-c682903a61d4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.241.201.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e243820c-ba89-414e-ba13-40e5a395d93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.49.18.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac68e8e-a5e2-40e2-83e7-df7afc4533a2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.130.49.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951fd36f-c741-4733-934d-677a75c6cd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.138.113.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23318af4-0c6a-450b-aa84-eff4a2917ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.143.2.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf1e65b-bf0c-43a7-9ded-1bb2411fe7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.147.209.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4f88c1-2ab4-4656-9431-8ed9c48d1dcc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.155.106.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9805dc-afe8-45b6-b3ce-9226aa7d6a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.163.26.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f84617c-302d-44c2-8d7b-02b839070604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.174.209.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4d6604-78fb-4463-b084-c848c5e721e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.2.73.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5c9d20-dae3-46de-aefb-8a6e1d384603", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.223.76.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4549ec7f-40ac-4679-b22e-eeb1dc71be13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.242.178.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b778abbc-28df-482c-a278-bfbbf90e2f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.30.172.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8048a0c-8550-4a26-b021-e469c9dd9eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.33.63.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7496b5a9-26cb-4e88-a393-9f6bf4511921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.56.193.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d9348b-6135-4afd-b462-3a0077427cc6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.38.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606a787f-bb54-412d-b4ad-c13644327574", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.84.246.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fb3405-27fd-408f-970b-e4fefda76774", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.122.209.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fcb69d-9996-42ec-8690-b5a6f28cb75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb8ad24-fbfd-4a6e-b074-67056b2734d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e45d60e-b115-4cfe-8f1c-ceb44de4266c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99601f98-1fa6-4d68-911e-f94fc68f1c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.186.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abae39d-370b-498a-9277-28dd3a91f749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.209.49.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870bc9f7-64e8-4a9c-88b1-c89a13b437a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220e1c82-204d-4caa-a556-a2d0d7e0abc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.80.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b9b599-7c77-488f-b8e6-cf929397fd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.234.193.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79510d62-a423-44f8-8c52-fda9851f5504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.249.157.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decde7c7-d817-4d18-bf40-ab0a032e5fc4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.4.55.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4130c58a-8aa9-457d-890e-275f66b579cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.45.96.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa86afa-d12d-40f1-8218-d51daf00fc61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.54.176.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f834225-9e35-493c-88bd-5e964e7535f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.56.196.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcf1ccd-73e2-4964-9e38-973149bd6340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086313ac-1811-47e2-afb1-ee043b928afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3713982e-c001-4d33-af90-8e257c974bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.207.214.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9aaaaf-120b-46b6-a472-42945c70728d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.34.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1890cc-0bb7-44a7-91df-0db7271da418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.40.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c148b1a-acad-4b0c-8bb8-c78f8aa5f070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.56.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3947007c-0b9f-4fc4-ad16-1d4df761034a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.74.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc90863b-be7f-4bbc-9973-100276ad65c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.86.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1638cc-6645-47d7-8dea-b39ad1bc22ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.1.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8944d419-47ab-40e4-b251-fbe5fce0d6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.109.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90d1b4e-d09c-40cb-8187-bbf395cb809a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.160.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8c9ada-e499-43c3-932d-04dbd7d30d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.3.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f3c699-c1e3-4392-9efe-4e710036810f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.8.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5754d9c1-c756-4880-9109-e1f564797232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.161.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ecfdc1-65a5-4bbe-ba46-51690153611f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.214.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a192f69-52fd-49f5-bad4-2cc780aa30bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.217.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc222927-8200-4e60-8b44-2d8859ce1259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.247.196.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0f60b0-a08d-4519-9e2d-0b3e93ab7a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df65736-40f0-4c1f-9ff3-662c93c21174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2869c0-58ca-45d0-b541-f59670680b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2ecc06-1e84-4803-8a77-5097604fe9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a45e4eb-8219-4018-9abc-2cc75547151f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbe3fae-b0d4-40c0-a57d-88c806f93878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c26848-2846-457d-8637-656ba09db024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e282b15b-11c9-4da5-9229-7aadb46f4609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398cb59c-be18-409c-a3cb-9875baebeac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34153a66-d819-48e7-9baf-99629a50ff4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97b8eab-511f-4ffa-9e66-37f2f196d879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8856dfb-cb28-4f9a-affd-8137284c67af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f922dc80-3728-4e6f-876f-bbf2eb3c7d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1ef736-35f4-4dcc-b807-7e5e468d6bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4521e8fc-0391-4b95-936d-26edab3ff497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8637acfa-6e49-4879-8920-297c2c0f413a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ee4ff6-23a5-43f8-97c6-ddbcac1cc19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e17787-e77f-475c-9e31-478e75975516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73419e6-9178-43cc-98d2-ceabfb38482e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794f7863-2a4a-4112-aba9-8bb2928b44bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2025b242-60a4-4abb-ab45-618c8339df9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1c9136-d2d6-4de1-82c9-25cf16457709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a3d72d-0374-4737-a126-0f3f62e189cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e4aebf-6252-4469-96f7-db5b0a5f32f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25d21da-e5c5-491b-9b89-30c51cb9aa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbeff46-0fbd-444c-882b-40e6efed2fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97009fa4-cfb5-40e0-9e14-c4d5f1830031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248419aa-44b0-4696-a40e-e2a4f4ff5dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9739198-e35b-4088-aa13-75526dd5af80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8c0f0f-c2e5-45f3-94a0-8a183f221d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f1d661-86ab-45f2-9402-ecc36ebce714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec2e8a4-a3c9-4c0e-b18b-640c2bc462cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1df516-4e5d-4a97-88b8-e19ceb614a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef8cd2a-2a6b-4c72-91ff-100b7917f8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b181f225-3935-4306-b16b-f612a1ebe4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9489e647-07c5-4d04-9736-ac68ccc71759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932f584e-ca4b-4bda-ba43-682840a682ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bb6dc6-2b07-43d0-a33f-5d482571597e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095953b9-d42d-4e29-879c-a3747449f5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8091c6d-cd09-4f30-b8e7-486115d63100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3afcc22-3beb-42e6-8eb5-c511c63ee641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3c6dca-84f0-4c13-a7af-887d80e49d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cb0564-08c5-40bb-92d1-be868ed6384b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebab45a-2552-4a3c-a754-3b6fd306f48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b74f28-dcb4-4c1a-81da-d08ec14ddac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b002515b-9b0e-4616-a2c5-30507256eac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6768908c-d737-458d-9a79-cea43fc93c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e599e0-76e7-42f1-9b85-048ec46e7bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4b884e-8169-4dec-b2da-1bd68197350c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d983afd-93a9-4ff1-88ee-675435dbcaf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b0016f-d7cc-4c77-b9f0-54b1e79569f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d723b7d2-b8c8-43e1-88b5-465fcba8b575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43627e41-a38d-4735-bfd9-f840fdfb81df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b48a8a-c190-4424-aa0e-0ba3b3820869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded78c0f-3528-48b0-9308-97f57a72ac5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb43cd62-b1a8-4346-b306-18f27662a849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d4a005-f0e0-4e08-8309-797b7e3fe8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ae37d5-d164-4672-8394-12300a7b3b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc3a704-230d-4207-99ae-9e7086e97a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b74a661-04fc-48d1-bf2e-0988a54808de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6685e0a4-a73b-4b9a-8603-24536e1f4fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36760809-445a-4177-a5a8-e24f3a9d781d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a8327a-67e4-4eb0-9c33-8e3390082fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205738da-efe3-4f05-bfe8-104d04881287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a926f7c5-926d-47d7-a6d0-9b906463c8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c44471-fd6a-4958-95b5-5e71d3f29918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0ec43f-9783-4968-b853-166836e57ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7064b31-00c8-4d0b-af89-e3f92e5b7c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151713be-a092-4935-bb6f-c9364233f521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216476d9-9403-4083-ae65-a77000ed7a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ff98b4-ed45-4eeb-b918-871d1acfa26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8baf9ad-2e99-4ce0-8e24-cd358679f4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062f7d7d-ea98-465c-a422-ef65c8075e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7e4bf8-c6a9-4060-b6c2-bd38e7f7dd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16eb6cf5-e6ca-403f-97d7-b42a832473bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f64f582-37a5-4641-a0fe-6618cf4aff41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88da2701-559a-4ffc-bc73-69c9506619ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e6c6b9-8d26-4b13-84b9-fe1872eeafcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb91a031-4f43-474f-9640-092a2633a83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30078f6c-ff29-4fde-b373-cebff2c07412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8d7b70-708c-4684-9170-91dcda38737f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1f1c92-8e05-4ac9-8edf-2d34a99b31f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6317ca-4938-41a3-96d9-3598e41db1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97db3cb6-e21b-463e-8e0d-003c3abe963b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f112074a-84a0-47f8-9392-b06b0315118c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfe1b1c-83f1-432b-b4ab-45443a294ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf94da8-cd0b-45b8-ae29-992d05d57420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e1b551-4584-40c2-bc2f-d95161845b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7631e5-a189-4f3f-83e0-b5df909c7ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d251cd9-1a41-4791-8632-b7451e6d1fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14df80cb-2cea-4c23-9885-e30713b3529f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6d1203-9421-4a6c-9ef3-92c04bc82837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cda6e31-f3ce-42c2-af74-7d41da68a7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69dc7a6-41fd-4ef2-987d-5042361355a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156af834-d2bd-466f-8fcd-59a8ea44f732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a6036d-0f5d-4a35-96be-dd89326df9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61da4e88-1d7e-4a2d-a67c-8e0eeb128f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ebaa79-7819-4800-a850-14cc39d3f8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207ed22f-bb1c-4343-9f6e-a453234cd447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7832201e-784c-43de-be93-e076adbc82ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9758031c-0c3c-414b-8c42-443c0949dac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5900797f-c31a-4a9d-bb36-27fee1e98f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038d8fed-d7df-4561-91cb-3eef77d389d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2165e61-8fbe-4fe3-9b01-4073977dfe55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b36efb-8755-44d9-8e40-eb091e873299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a172fb-61a1-4672-b474-15378bfe12cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801dee8d-e6d8-4710-8313-7cc0d9551c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a63db2-a342-4e7f-a865-5e251c062e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5639d9-9609-4c24-ae11-fe934b4220cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6a6fd2-0287-4181-b9b2-f77160c2273e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7c4666-b65b-42c3-bac1-66e070ec9af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4db625-6011-47af-9495-eb69ca848e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e4477f-4978-4013-96bf-74fde7b316d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf061fb-9f8a-41ac-b5eb-c63d34286723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d8130f-2d25-4b2c-8316-7e35fd90c2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71faa7d-c4ba-4202-a89b-52d08fb7e784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04654d1e-2790-4131-8f24-29b3855b22e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7bf2b3-20da-4387-80d0-158d069f03f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb57d623-4e12-498e-9f9f-dda4ca33a1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebe7c90-bd4e-417d-a7d1-751772bcee52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76699206-1b84-4a41-ad47-40bae6c9f140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c4c371-1f91-491e-908f-bf74951b33ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de12d700-5d72-4e3c-8260-44e686539f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ec81a1-c93a-48dd-91cb-541cb14297bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cda02ec-bd05-4afe-a28e-272531d76a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640916f3-fa5d-4036-864a-7c07689b9769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e106ac-01a8-49de-9106-920fd6689241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e571ca-9c2c-4027-88f2-4caf90bf64e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9769ea7-07b3-4ff5-a8c9-6829dea72b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2584ff66-a959-475a-8dfb-1ff7510a2cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49550aa5-98cc-4703-bac4-ff20f959c46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fa860e-69d4-4775-9bcf-a2c96939ea15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08f69b2-23a7-4169-a200-f2ad7cb61712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af17599-b1f1-47ed-aad5-4078dbd0c7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96a7689-7c11-4c3e-94e5-43c6a72e0d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a1f9a0-b2f4-42c4-8950-cb4d6217bf16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030468d3-37d3-416c-9a6f-87201e7b1f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981ceda1-2b43-41d6-8a5b-4631b9324ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586f88d4-b44d-4cdf-b8af-dd598a6b05d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8fe49e-4596-4444-bbf2-6c03db5fa943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291375c4-6ff0-4fad-801a-67e391060aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bcc341-bf01-47d4-ab89-500a8c262c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353c32bb-5a63-4e02-aec5-c55777539bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03887d09-efea-49ec-aec0-01bcfaf65a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b125e72-cb86-4aca-8d4b-e53e55466fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9c53dc-ff29-4155-ba74-d63de94164e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a22046f-a666-4606-8a1b-2f10b2507ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60aa8518-d529-4c6b-a5f0-325552d88149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1490c74-183b-4a2b-b062-22d9436bae19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8232ba1-9090-4544-82e5-edc333a898cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49ee06c-d3c1-488f-99f2-0015f7f18a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fd61bb-f2bf-417a-bfaf-49c586d0c459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702b8054-eec2-4155-a80b-2ebfb3ef70c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5308ef80-3805-4875-8731-b7acf0f8a984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e32aae0-6bc7-4bc4-848f-5e1712cbe5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84570181-6513-42dc-8106-6a9e0c7134be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a844c4f-2a5f-4b6b-b6e2-4d2be4112804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d3b61c-a2ac-4237-a36d-11c998f5891a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01205e9-843c-42ba-a7d7-73f2ce7bb578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69f00c6-6aad-4872-81c9-2e37f28d3be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df6d1c0-09f1-47e5-bf8f-1eeaa9eabd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1550e899-3e94-4ba7-8270-802baa254df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65484b15-32ad-4daa-bb3d-2a56a092827d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af00627-7474-42df-be72-3ae9c5de3f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e811501-3948-4473-a67f-f754b88a0b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19252725-a203-4dee-a7f7-98e83b8e5483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e1a4ad-b873-4856-a8ff-6a9d2f36c55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dab7539-4fef-4898-b1e6-4161b8398891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f46d1b0-0e41-4589-86e5-b523e11ba65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb66457f-e6f6-49c5-bee9-4b78c0b55011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdad1b41-d407-438a-8d8f-759ba4f9bdf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9b534e-93a7-4659-a8ed-6994913ffa64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8401849a-4d4d-45f8-9f13-5776ef856b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13327961-5102-4d28-800e-07e5a64b1f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23048f93-61c3-4d07-8fd5-500892c33989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e95ad26-5361-48e5-8590-599b3d403510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dff15e9-c91e-407b-a667-bb4a46f2dc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab88924-5da5-440e-b993-aaa56485922b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d824df66-43b0-40d1-b8f7-6f2ee7175906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ac3e1a-46a2-497a-8872-0197eb46d942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f788a30-6c94-4555-a564-af83b3d9c466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa1f074-0b5c-43e6-ac98-09dc8c12ed57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca22dc5e-5ace-4573-8ce0-e580b47fc251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b2e566-08e0-4c29-ae33-a10b849fb4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37e922b-2d45-40b2-a974-440c54cdfa45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4ec919-a38d-4af4-a2b5-a621cef2e77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82198c9-8cc3-48cc-9dec-618ae0fc5c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854a8012-dc87-4560-97a8-556783147b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b623d6-3a5c-454e-a931-f804205811bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca01477-65a1-4070-86d6-8cd3af07a1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365f656c-448e-42d4-b4e7-0d7cb4d8afd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d13e73-5b02-4a1d-bcd6-4ac56fb97f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5b77d8-bd84-476b-8555-a97b7dc0ead1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e8e4df-2b60-4bdd-ae6b-322c234e11dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047705e8-ca02-4bee-b7e2-e27dadc5d9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b232db-ee1c-44a7-80ab-d8365a5a36e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddb10de-3d0a-48ad-989b-fa2734c48d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5de1fe2-34c2-44aa-b1a1-76ef3c8fb9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97e06ec-1d49-45f3-8b57-696b6bd2b049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf98ae43-4a87-4776-9468-228f90738889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf427eb0-a5f2-4188-9987-498a243fae0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff4d1c9-8e27-4dd0-98a3-9987384bb410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef1db4d-fdb2-4868-8c05-4046bc69b493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dee6cf9-873e-4320-8722-8d22ba0f9d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cccabb4-7632-4f8b-9326-1301f9c94450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66d6da6-01b7-4fdb-96eb-2af21d5dc52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82aa962-e105-49a8-8196-ed765d8f33aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.76.8.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a434263-4f96-403a-bdce-5745e2a25058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a99f53e-f620-496c-bc84-6cd4882d62ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd6ed26-10ba-40ce-be65-63010d531bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e13c96b-5d63-4d76-89b5-e76156e9f02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2498629a-628a-4aea-b9b0-9b14720fc24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a29800-a31b-41ea-ae48-41d5055d7bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1fdf2a-4fc7-4dd8-910f-eaebaec96405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d43099-1b59-49fa-875f-29958635f0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041b5dda-85ea-495b-839e-a46628e53807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a0f043-a285-48ec-a463-1e1a05b35acf", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417058f6-7dec-4403-a690-04b0dc7b16df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c04908-41bd-48d6-b23d-8209ea74da27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4238866c-0360-495c-a142-e1395ac29f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33d0e3f-de58-407c-9daa-7d2b181dcd9f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeaf962-525c-4a5e-b720-58fcbcb8c318", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b545d042-b8f1-4e89-9298-797a1d128105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3b12cd-bca4-45da-af8c-434c6100bb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7bbe02-6d4e-4b79-bb81-854d6a043384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58418eca-6e7d-495d-9c7e-a3c93be9df66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600c2b85-0069-40a1-923e-7ec637b0e5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f16f69-53b1-47b2-b273-5ebee575d31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98aa20ce-f72a-4c7e-a9ce-89f06f42571b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad14ee1-49be-410e-bfcb-58c1c68ffad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed70ab6-f6d7-4331-9eb5-e18332d0a0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10530540-1522-48c5-b1bb-94a38a063ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16799b6-1aa3-417c-b40f-d58e2a74415d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a40d99f-f93a-474f-9399-5346cdcc5ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc8f3f4-69e9-408e-9315-36d6492c1041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3963f815-d4eb-44f9-857b-83bdbfc7b5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5743a8d4-7e56-47fc-b813-e80f9d06d147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1a2854-bdce-41f4-9f5a-160f806d0f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899d906a-ed5d-475d-b762-fea6c56a00f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7f2cfe-8200-4244-b6ea-fc0afb1b09c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b92f24-2f9c-41d0-aae6-a27f95245787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e1f86f-fbc2-4a0e-9a99-c2abb6d31ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cef2b3-4317-4400-b2a9-ac6bd1431bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953bd971-2b07-4731-8e40-9c691b3ffb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db75957-c7c6-48a2-a6b2-c3c941f69152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f36778-971c-4505-9a98-7b675052e4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070284f1-27a9-43fa-aadf-2049877adc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b54ffc7-d29e-4e55-8c96-eadb3a9fb9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ba3d9c-1580-4dcd-9418-bd13a12cdf0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7dd530f-3d63-4449-9d21-e348b06b5b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b1001f-c1f2-4607-a01b-71a9e670c598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d348654-8453-4a1d-ac7e-714fe6c0400d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f55e7fb-f034-4de0-84e6-5b05d0ffe19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c1841b-a999-4c29-8100-b197ca913eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1e19bf-4e17-457d-a679-89b8d535e27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e9a2ae-c5ea-4fcc-b958-5a36e979a901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8d2e99-7aba-4db1-bb0b-97626ec9db2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fa878c-7f8b-4163-94d4-06d310d971c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c66209-a120-467e-9917-feee60c75c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2398a5a-ded7-49db-aea5-267fb4ba885b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e21310-a72b-4011-b0c0-2882397edb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0bce94-1932-46f3-8aac-37373f04c021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00a4934-cbe4-4a31-b701-325b91295dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754086ce-8b17-49e6-9add-bf1c5a830502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce2c4e9-0d0e-40c6-9464-65d902038f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61eb6e06-0870-4476-88b0-caf263b2beda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8e1daa-f920-4382-99cd-c117090bd426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2700a2-c384-4722-b95c-cfbdde6d3a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb104d6-b98e-4676-889c-404c0e64d9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f550e8-5953-417c-84dc-f58b7185e5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a7900d-5d96-43cc-8b2b-4f233349c414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af611f0-4c0f-4e35-aaba-9f4548e92533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bef7f2c-03aa-41b3-bc79-dbc065d22b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15afdbd4-0eee-4719-95b3-53b77da4433c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e27c4a-46fb-4934-82ef-76ace9301187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720b6600-8358-42d0-88e1-322995861220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391eec40-9024-463c-a97e-54b4f9764e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6371821c-e8b2-4bd9-994d-c7afe36b2b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53c146f-52c8-44b4-8790-d5ff642db98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea2bd0c-863d-47e8-b514-343c4c27af40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75125007-8ae7-4d30-8603-e0c3ef8c5532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68467620-0847-4717-84b9-99629c5d3269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d462cc31-689a-48b5-ae2e-397eb2934c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7883bc39-6f03-4222-9b83-a78e72d2e53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d06f787-dc30-428b-a8d2-7424db0af7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20db5818-3b18-4e5e-beea-8c817a581014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda84cfd-9cb6-4e66-a23b-4a9b9ab30c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda47000-108d-4c0a-a1a2-23981438fd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41dcfa0c-0ba3-4f37-b981-8af438ac969a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f5f9fc-e492-4114-a596-5ed86897ec51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f1611f-05f1-4098-bbf3-efb2a47781da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c84d273-87b4-4414-9e52-3ec8ddfcb220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e4916f-aaa0-4d62-89af-13f7a387864d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc92c4b-9160-4886-9e51-eab0eaf91368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c06ede-01dd-41b4-8378-a04344058f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdd9864-918d-4d00-bd7d-3bca3da6137f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2e6dd5-984c-4ab1-ba09-268844f6f2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b1b3f9-b91d-4a08-ae8b-b8af529343aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb3e8a5-67c2-47fa-be2c-e1588f4e628f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac23ea8-8c74-4171-a942-c87051517f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa693b33-7ab9-4ee5-be85-b5b33872eb52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae7b00e-de9f-47f3-a5ac-0707bf14768a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b053e206-eb40-4639-86f2-aaa6e36c9028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2533af-7974-4c81-9cb3-25259a3e7be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da806583-7e8b-4dfb-94d9-dcc7036a8d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81ee602-755e-47f0-889e-7c1801cce657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df7f212-ade9-4284-82c3-d09ba0bcc67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda55f46-f4a5-4149-8a63-731a09235985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a5c1fd-3bc0-4c95-83f8-34fb0d305da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a54348c-1590-4bf8-80c3-2538b6b00757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e9c589-c900-4b64-9dd3-a5168120f47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8b8a6c-0f0c-44a0-8407-36b7739722a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ebcb57-ba9d-4343-97ff-a34a18959b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d7748a-1470-463e-9503-39249f11798f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993d7217-18aa-474e-8dcb-e3ac3bfa6ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680a7fc4-bde7-46f3-8f7e-dafbe7ff39ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd245ca-ecdb-4212-b1ca-ebed97014bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a7e3d9-369d-4c62-bab2-a6f5acced1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adfb910-8ede-4190-9e66-f8c06b695e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20dd233a-9ac5-41cc-9984-74239a019ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c527332-84d6-42e5-8b6a-3847ff2fc8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb336470-caba-4023-84f8-b85a6ee4f7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367fe426-6f24-4f85-8d3e-aea7a16f6fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00679986-d595-4c96-af6b-2c93a4127f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e6869b-f0ee-409d-b1f4-b57509c0ce46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90d0299-48b6-4564-924e-5b347390fa8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0249a96b-a127-4e49-8faf-23b467c6f292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1a301e-700c-443e-ab80-330f9395b00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d022a0-80ff-4d0f-82f3-2f31acd4d913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f6e509-fb42-4abd-8145-6f0564976ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7c94e6-96dd-46f8-9ee5-96ec895a9659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63191a6-fb8a-46bd-baa8-87ef7ac83f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e80c734-6481-40d2-9f3d-ed1ede6eca4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef44fe7-b442-4c01-b676-00f392cc6a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8386b249-971f-4f8d-b212-52f877a4521f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103584c9-5084-403b-bfd8-77bc509887a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684a9fd0-8329-49d1-b6b9-4a4e5a2ea408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34eb2fe6-1cc3-48ea-b524-2bdc02472379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2120200a-3d5f-46ab-b7be-c1c462335cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52213fca-70d7-4463-aadc-ab18c82b2827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c758f000-c649-4b52-b60d-679c9f7efa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a289e3-d190-4304-8609-dc1cf55a5513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c78e7a-9fd4-4565-b462-dc939e7ecd97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ebbe7a-94ff-4ffb-9975-4a445539979f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4089a30-57d7-43e1-949c-9111842e123b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dabced-2a40-4c58-9446-d12293000890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474d4511-f985-4ef1-a899-194077c5357a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e97ebf-a5b1-4f0d-ae17-c77d3b31b9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5edbc20-47c4-459c-a240-687876746b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df05e863-cce1-4774-9c8f-59043d130429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ace576-d2ae-4ddd-b36d-fbd95fb875db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f903a182-0366-4e42-aa4f-0ee17a9ede0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f31566-0253-4eb0-b475-89b5fe76dd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675b569d-70a5-4124-b8b5-abdc74dc3f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897ca03f-19cc-467c-8b5e-7fe9be150f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd3fe0b-b3bf-451d-8618-66a57df454f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80180408-d922-43df-99cf-b7ed2f742027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5952ab27-1f42-4699-ab28-0d9abe83bed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84bea61-38b5-4215-be96-2a04f0afe34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a6b421-9aaf-419a-8ee7-0526d62f91fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2012c4-29bc-4f48-a38e-6327c66d53c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8fb1cb-3496-4128-8faf-13e32176ebfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbeaf90-500d-4b08-95db-ea1573b21a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9213a457-a0b3-4773-a7ec-5157fe1ed45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab52f70-a4de-4a4e-9b1e-fc5c09984f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1a56e6-b568-46f1-8296-76f7dfa33530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7b254c-6292-4257-9209-1fd012a03daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1d7aa7-19f1-4459-af0e-8c391713f747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48072948-df6d-4884-bb81-7a8ccf6f2a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03782015-df53-4f46-aa00-c9b4511d0ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6f2deb-2a13-464d-8e8e-f6356090d02d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15182441-b20b-47e4-9249-52a099e34d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7fc9e4-8969-4bc8-a652-aae849c2101b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7250c78-abaa-4351-8682-54c54d8a1e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4c5ba3-ef97-4af1-8831-40d922243557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53f1fd3-4d2f-415b-b1d1-492a7c945d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc45abe-1268-4a00-8867-cfe62a3b3e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a32ff1-6c8c-4954-9b4c-635d9f4bb2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3f7e39-bbed-4bbd-bab3-9caa233b7936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112b5697-2139-4ab0-90f9-3a62bfeaa348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814086eb-d4a9-4c45-908c-e90b08d61ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9829a9fb-67a8-4859-a980-b93bb0fc5f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4de957-1357-472c-aa10-0768a7423fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb8def2-927c-4a75-87a4-f55b217e79c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3035ee9c-4541-481a-ae35-92bd0a94fcfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d311b8c3-946c-451b-a3f4-ecb35f6df02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db40f54-d25b-4d05-bb19-e33144dcc89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffcb7fd-7e4d-4f45-96c7-210f401e9ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d3fb79-de88-47fd-960d-82eff56bc972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a7f3c2-3224-4175-b673-2833b31b940c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.87.7.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2cf494-9fc4-4d25-915e-8dc23308c7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.116.246.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1f6a03-82b5-460e-a684-e0ff4c750ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11954115-eff8-4f2a-aa4b-939599531a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2f6382-c19c-484d-bc79-b0427c325191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5940e216-f4e1-4100-a8fd-eba2d2f20a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98255432-f755-4966-9d66-6ba841d2e144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339c362b-7adf-4182-aaae-9b48f2cd67cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396b90e0-9de9-4d47-bf69-c86bb80ac024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b83269-bfa2-41d8-9870-a7fff3474fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abcd60b-cdfc-49a8-851a-9eaa49c173aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3db93d1-369c-4a72-9d80-6ee91e678f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d9ddb7-9ca5-443b-a2bf-80f7149091aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf2b3ff-c8ba-469d-bbe2-4ee9fe8542cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048cc7a5-9e03-458a-9361-1d048bfe0aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cb47f0-c2f1-4503-8b07-bf424c91a551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf8cc32-0d7f-497b-b774-8d57ee192642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb3bfe7-e032-4602-96ff-8ce5f63063d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ef29c8-8576-4a94-912d-cd17949c925a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39413c7-9919-4721-8f0d-c3f06fcda61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89885107-f561-4f08-b7a9-30493f6f7e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbb2080-7cd3-436e-8b80-70a75b66ef58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ade3c62-01c9-4295-ba21-cf90ab25d9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f8a7c2-7daf-461b-9074-bb7219883f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bbaecb-626c-4049-b4f5-e53aee5eb526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb8f221-d89e-4cc1-be8e-715953a78510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcffae58-4168-4faf-9333-069d6d81225c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d02dca-0cf0-48d3-bb58-2382448e5ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0037a2df-86cd-4ef4-b92d-212c058923f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abe8889-2214-48a5-aa52-07e827eba063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52993f63-a58d-44d8-8b98-049ce71b183e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523864ef-1fb7-4158-93f7-2c1ea4019d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cee9347-725a-4f37-a365-8f40d13bfa1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c75a3e-5cf3-4389-9591-747e7ee8437c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85202172-d94b-413b-87b9-d3672d970389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d01f08-29ca-4e2d-b460-ef316bfeb2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d407c4bd-481c-4aaa-9c6d-96cde282590b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f243391-4c22-4e20-95ef-c7b0135e6252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a59d098-b003-4f61-8850-87c966fc1030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5d390b-67a8-4a70-b0c2-9e8721e4fe70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe736b5-1d74-44de-82a0-a642f19f3147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa24cac-72bf-45f8-893b-5ca6a621303a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f9502a-35a8-4031-90a4-631541d36231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28153b03-9281-4bb6-850c-faf16fa668f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c5a213-a7cd-46c6-a8f6-f0f53f0276d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0e9ccf-d8c5-4131-8674-867fb3b9ad87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dcd013-5b88-4781-9cbf-25b058bfe298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f267eee-3aec-4145-a61b-6eecb8898991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9619ddf9-83dd-45ec-b548-c46bd73efc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38cd6e7-6ace-48d3-9a1a-2f3f390bcbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4420a5-6a33-4fb6-a107-8ba2a3d70657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66090978-f8de-41b4-942e-abf7104a1414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfb6c32-2cb3-4ab5-a349-b40200cc64dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9438a6-6cd0-4445-8ae8-4d18dfb6d400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6b1dc0-b762-4fea-81bd-b872a3ba0d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847690f0-daa9-40f3-976b-f0d2184b356b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f93ba64-df71-4180-8627-fbf9a48d050a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848f2b19-1082-4ae1-93b8-d5aacf96e7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0bd40e-32a0-4db0-be1b-feda4d36d834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76abb91d-b1e8-4826-b012-b206b0cfecd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd682faf-96c5-4ac8-8e60-e629f9c989d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4dc4b8-c1ca-4c88-a2ad-9289d6f8a2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cff1d85-54dd-4eb5-987f-fbaa74e4f9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9cd686-1dad-42cf-8e9e-ac293c05c708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8c1ad1-bb4e-4bd0-ae5d-1e6c8c49373c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e578d29a-1646-49c9-b581-b5d2372e6d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67aa5080-d993-4302-9bdd-abd29330d9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae365a6b-bc32-4b70-8889-72aede9672c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55afd43f-80a2-464f-a336-4fac262dc25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924028cd-ffaa-4dd9-8564-568b90fa943f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17542f3e-a975-479e-a8fd-ae11c3649c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f57c41e-d8d4-44bc-848f-a0ba52ac540b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab15908-fb4f-4533-90bc-08119603bcb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4184759-11e1-4443-b29c-c556c4685238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43e4d4b-3b77-4aa3-b80a-905ecd7de6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d95001-2639-4a96-add8-f83e7d601395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a968e40-48dd-493e-9e43-4597cb1bb2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4006575f-5c90-49bf-a166-9aa2275984a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b8e8c1-23aa-43b5-b2da-5ec9150e89d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc890fc8-2293-407c-95da-9779eb3c0c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379bcc37-bb86-48cd-ad8d-9bcf9c6628c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9359b44e-b6cc-4e71-9682-a36404289636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69371e63-2855-4811-ba74-4a7ff5bbbaee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b32d6b-fdc7-48f0-8c83-8072256c911c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9927265a-6490-4654-8d5f-3f61488387e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b261b2a9-0824-44c0-95df-55279add8128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6300de39-dbae-408c-a84e-1d2f6ccd874e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed91f27-e310-4300-a9c2-2b58309c1a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3cfb939-494a-4002-8a81-76ff29ac36e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a051340-72cf-44d5-90af-bb7f3e180288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defca8db-13f7-4295-a0da-f0feddac7e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432dbc2c-205c-49c9-b7db-ebb3a273a822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90ec53e-7010-446e-b649-dec6fdb06fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39e81b4-9def-4df9-97bf-d37a40888726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88549aa4-fd52-4f2a-a652-332caf4f7138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4496a288-3f9f-42a6-9553-be5d1a9238e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5b79f4-9738-46ad-9688-f09e8779087e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae47d87-cca4-4672-beed-3df8ebf257f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ce7bbe-344d-4b44-a2e0-2e2964f870c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f35998-d6a0-4922-8f58-c9936714d903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c83ff45-e1db-4961-80c5-37e2c07ebc94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823e64e1-ac73-4643-a7b4-052a5fac7360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d019bd0-4eb7-4650-bf47-fb43cb16c75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67a9198-2ad6-4ff6-a11f-a9c68f8e9c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a981c0-02e2-4240-95b1-b88b992f7480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456f6ceb-6dba-40a3-a0e6-12c023432f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ccb62c-ae81-4dbf-b435-0bd8d655fc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6a93ce-ff8f-4dc9-b87d-39f781338029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25415acb-7e8e-49e2-b6c2-2ba9877886de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4386ce59-4001-47c6-8c4d-022a7712b168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f890b2e-3d27-4e9e-8c89-319601dfcf9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d0979c-8c3a-4cb0-a8d9-278fad532128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711eb52f-b436-4631-88d3-223cdccb881f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b89a7ab-989b-4dbd-b64e-15d8006fe63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06766b1e-c118-4a52-91db-0cb44d7042d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d89efbe-d53a-4a14-9046-ea4694a0d264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c66254e-6c6f-44b8-883e-c3f522401b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4bdf77-0acc-46e9-981d-b42641fdfac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d0c4e4-1ad7-4361-bb47-313555ea31ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673daec3-b9c2-4045-a528-dce138b07b07", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981f6c01-73f8-4786-85f7-20fbb85f8c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40389557-aabd-4656-8595-31449d704713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c83c6d-8f57-445b-bfc8-1007c0c8f5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3341773e-0621-47a1-a8d6-bd1351ea2e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec74b710-5f2f-477b-8914-99078b1daf85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80413a87-8dfa-41a1-ad4d-aa935976bd97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5d38fd-ef81-4a6b-b6dc-99987ee7e2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb066bf2-affc-4ad2-b810-3bc715c26ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.177']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cdd1cf-855c-4020-92e4-ae7133f19bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412a6734-35be-422b-afd0-b2408bb8ec00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e3c69c-0035-4396-9c49-c6e359c962a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45da3197-790a-4e3f-a45d-4ec2658725fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69426caa-626c-4625-b156-6d15a8328b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6888d4-4a11-40d8-99e1-a588f0b3a54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7374985d-ec67-49d6-8330-6cb31a763ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80259727-992f-4313-80b4-4d382ba1ba42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca33220-a9e7-4ca0-9b13-26c812c00a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca73354a-ce2f-4b21-8c6f-c049441d25df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9950cc52-d6ab-4d5f-8cbb-4080b4282718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f8af65-8bb2-460f-87be-9a165fd65608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af97c82-d1c0-4b17-b9f8-e6854963bab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523fe69d-19a2-4116-aa53-0191e316b097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6467688b-5d84-4e31-8520-d5be80d7e6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93af9467-2655-4903-8c0e-3daae1a59ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f19f99b-ecc2-44fc-acc8-b50d45351ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876bb9e8-3460-4b48-96cf-2c0e41082f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839d45f0-8365-471b-849e-8c49c5ba84ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932ab3a5-d56e-4b10-83f7-c3c471e6f688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefe4bdd-9c2d-442c-8852-65cc7b59279b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ffdbec-5833-490b-b6a4-a2292f61b80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bbeae6-0ee3-4751-9596-542cf53f4e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060e052d-990b-4019-be20-e0ee881504ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a3dedb-2075-4a72-9e01-370e6dc5a594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d5a99f-3fd2-448b-a206-d4cf291cb972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960f9a21-6e87-4cbd-9c85-779425aa6e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2e3cf8-aa54-489e-bbf5-f40f89afddbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3465ff76-aee8-4d16-bafb-d094cb436082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abff9c4-c050-4186-8519-be199f85b9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41483fca-ef6a-48e1-a1fe-1c8c504d9251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedc45e6-962f-4535-a01c-943793400390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496de5f3-8764-4c0b-95ea-4d54e3d76af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b0373a-13f5-4b37-bb32-073f45af66ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca3b063-7228-45eb-ac4f-cf9c86580c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c97187d-1c10-4a6f-a1ee-79f6ca7954f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc51e75b-e157-403f-b4e3-47d4b170164f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1458af60-d475-4f84-a476-e46522d5db15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51942c2c-4e88-4d8e-8830-b0993367232e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e541a318-1408-4e6d-a62f-dd8211a0b914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8240a273-20f5-4242-9242-eb5c12365d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ef8cd8-2b0a-4c53-9428-e1d246f7a9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd95d250-b4b9-4dc7-9f41-36939f3c6da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03ee730-7d40-4057-8b92-23fa310d9dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9576f491-849e-4aed-9427-de4d7fade7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb519c7-7f2c-4eb4-a056-687d099edab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1ba92f-db4d-44aa-97dd-98b34c8a39a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2fbc60-96c1-4ce7-ad23-6dbdaec8aa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938e9bce-1a16-4be0-8134-fc7530124b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a261c29-bcf8-43eb-a86f-a4dbef069f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692d6c9b-0cb1-4029-892d-3ce15eca9a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649f8b95-3cfa-43fd-bfe3-4d08ba19fa26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c328c12-6c79-41f7-a443-5f706480d7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e05875-d42d-418c-a36e-1a8afc83bd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884b45bd-e590-46df-80e0-a6525d594c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb3c0be-6ad9-478d-9348-82d731418f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cde9d79-2a99-462b-82cf-5551b5a12577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bb1938-830f-47a5-b7b4-ab9b5f92b8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd3bcb7-cac1-4107-b830-6060288441e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e5ff57-553f-46ea-8643-a665b04834e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8bcd11-42c0-4781-a282-41e4b110ba7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98752c3-403f-427b-a4a6-7bb704f1e293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e4884a-6a63-4a2e-b54b-59ad32f54fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f011bef6-857d-41b8-8a73-3db5317ef15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7e3217-1b54-4cd4-ad8f-1919b0a1b5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18edf3ae-caa4-409c-9a14-6c420cb8f4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b956b348-220c-4b7a-86c7-ed50dd861bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfa37c0-483a-4e41-815c-1a67b7f4f575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffab28ad-54d7-4dc4-9a58-c6847d24df11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650b0ed4-695f-4377-add8-b4cbcc38c749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e002d2-1e95-48d8-a386-85e0c11b90ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d34ea86-5b3a-4fbf-8e77-60e06db2afe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe598ce-9d6e-4ad3-8211-592cd95532ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e597f4-139b-4128-b598-cdf87fb1621d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0ca4df-e8c6-4805-a4b4-5db01c212790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5c2a78-822a-45f4-8b6c-896b0bf121d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a3e025-640e-4446-adbb-0bf308f03a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f5f9c2-68e5-43c3-a9fc-468924223c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6a85ce-d432-4e25-a9cf-ebf1a635dd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f450c7-10f1-4712-85dd-36522a4f6b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c08ace1-d154-4991-b4d7-6b95c3f6d890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38450ead-f67a-4b91-bba5-21fb77571338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dcaf40-2600-46db-95ae-9c58264d993a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feda25a4-1238-4710-a867-743096dad070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8243b06a-39b9-43fc-9a05-7c78f60a2d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c280cc-de49-44d3-866e-3a2df704a570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c859fe1-8ce7-4301-b49e-33f0eee2f55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5b6e91-1b4f-4a8d-9544-b784beaead7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50750c9-0d05-48e1-8307-88a8f0dac513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43266c77-5f35-455e-92e7-fc4596415343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2755ad-80b6-4cbd-8aca-2b418504046e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57251f68-833b-4852-9352-ed18caf3560b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da56770-98d0-405e-b071-ad5c9af7b65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6721ec-da71-48ba-b64e-95fe36be2bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177aebe7-81f0-411c-8d01-97534a6a63a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99c71dc-b112-4e04-b2b2-bae095e1c779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6707fc1-4cfa-40b6-a125-0b4c5de3dbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a7bad9-4de4-4fbd-a61d-a4e163bbbde3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff872951-d9a3-47eb-9522-3fb613196955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c648e5c-2434-4452-bd7c-86da6492b2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f74d9e-8480-468f-9e23-047928fe3ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b62f7d-2ef6-4278-b223-fce54a2fc656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46545196-8e77-4b50-aaae-890fd3f0b947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24c27df-3258-45c6-b48b-e2233ad6a7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e184a0-5ce7-41b6-8a07-dfe65b957d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e024bd48-31af-47aa-ac41-f277044194f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1855c6b-8514-4b07-a10d-01198bd969ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a925028e-0b3a-4c0f-a103-17cf155eb1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab6fb1b-7612-4046-b9e5-16209dd82456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194a5802-3eac-41c3-94ec-297443a51751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4472157-b91b-4c31-8bd9-f0551039e43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54c5713-ef11-49ae-bdb5-4ff509e6c9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7eb2d44-01b0-4979-a828-f4e3fd4033b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0206941f-080e-438d-88cd-4b6bfc9f6dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1293f8-e1cd-425a-a8f5-93a0cfc52833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db438b4-4300-45e3-9f34-45234fbfbdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544c01e2-0ff7-4e1f-b304-01ef52b3a339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad7f4d5-a468-4713-973e-f14c8325d040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9da17c3-251e-41ee-9214-c0a839e65d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df055325-e7f8-4838-ad6b-785a83beb7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937f0e32-66d5-4bf3-abb2-92218c07d5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15302605-1e43-430d-81ca-ffc546386985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504dab58-eaa5-4d8e-b769-68e039f5a635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73842bc4-29bd-4a96-9483-b49e324ed07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80af51b8-3218-4dc6-bcf9-e45231670722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971933ee-3c37-4080-9760-6b50a368ca44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e4ec81-2e2c-4595-8545-c650d2fda99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdaaefdd-da7a-4d19-9fc3-7332d4ff984b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fc9289-9e8e-4334-8fda-bf48262db1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986a9281-7d52-4c72-8ebc-8f1af21e7734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f17545-b254-4fe2-8ffd-f7fed0a6b89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b6c2d2-b484-432e-a452-58adac33a639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc91344d-88c1-4066-8581-67616287be76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39335864-4746-4c17-b6f0-dd708fa53c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59eb0e90-490a-45e1-aa8f-36f38d142601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b95eecc-8870-494b-b2fc-ae1166a56c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3074ee-e48e-4262-a979-dc783f707444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23466a88-8e89-46cd-aa14-5aa329c610c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedbae08-8048-4bc2-a8c2-5a304eabf13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f6d481-8602-4d57-9dd8-3f3cb445da9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9433efb1-914f-4bc0-aa20-c4e88ebcc094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697c1fa1-8b38-4809-b498-1c559ca93938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcfcdc7-696d-4fa1-8118-c2db7bbee6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382d506c-8db2-40b5-854d-6ea5332d45a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfc6412-3f71-446a-86ce-ce5a731d80bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90fc18c-bfef-4c28-958a-b8c1aab69dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cc46df-84c2-4187-b8ef-6dfc82f939fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc676344-773a-4914-b3eb-1e43dddc70f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cd6075-6e1b-46ab-b147-cb55157945c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.154.100.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4925975d-2ab3-416f-bc63-979e6c09d323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.154.110.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1904a939-8ba2-46fd-a334-13ba136cefc6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.165.227.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1f67d0-1091-4ebc-88ed-5d4795d89a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.172.253.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818a821c-0d99-4808-8d19-6c866223aabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb00e03-1ed8-4a04-b3b9-d65908d0c5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55288624-fa04-48f8-b158-0cda460a7a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9251d5f5-4cde-4fab-bdc7-8f738a73a8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0f5c00-b716-4b0d-81c0-66a383d7acc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942485bb-f45b-494b-8d09-6a2d2fb77815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4b180e-439c-4d63-9660-e8668d5ec496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.181.39.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2771cff3-76ce-44fa-b1ae-9aa4d37f449c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4adce1f-95e5-4832-9121-4c551df3228d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.38.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3f8dd9-48ba-46ec-88a5-c6c283ab75fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.38.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7192b0-7400-4ea9-bc6c-c9f17bd28131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe13fc84-65d2-4708-b2ba-a546a4e57e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43798e9d-de02-4130-94c9-2cebb3398cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a3bfae-af84-4209-815e-c92123495158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f35a869-2c9d-41e5-a8be-5a7aef19cb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09141d04-32fb-4272-8d32-d11d33fb0d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83da3d3-26d3-4bc6-9312-6b56d9372623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e91b3c-d8f0-44b1-96bc-51b2886b89ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d1bbda-d294-46c1-bb2f-c4f8619aacf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f87a0ab-71a7-458f-8a60-0d15032e406f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf42a4d1-dd8c-48ec-9750-06b19fab1d60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.73.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6661bba5-3184-40d5-ba11-41e22b669a21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.73.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27cbd54-d6ee-4460-8533-eb94f60401b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.73.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26751383-a4f7-4e58-8864-525e6d9d4584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.92.198.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4bcfc7-9237-4346-9936-1681d6dcdb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.176.84.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7440d9d6-c980-4609-8135-e97de388051b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.128.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61b70ef-98e4-42d9-b7f8-0d4ad9b63298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.145.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abea7340-c25b-49ed-be78-9e3174c8b4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.147.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149e9d51-d010-4a58-8398-55d15b50da44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.165.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1db90a-0e12-4949-bcb0-0d0a04f93aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.165.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b75fcf-addf-4e71-88d2-e53651b3cb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.173.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eed2478-0014-4727-811a-61eb98c12c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.185.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bc4fe7-6a42-46c5-88c4-c307bac45fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.81.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8093254-d16e-4cb4-91a7-89f4f19e1308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.87.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f17b6c0-a674-4784-9614-3a58c4db0fcc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.52.95.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d97e02b-1d25-49be-844c-175b461767c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.55.176.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2294710-8d30-4a68-b21c-1ec130472243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.154.1.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca5fbef-a2ba-4747-b2c3-395ef692498c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.167.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4527716-1168-4964-af8e-8d635bf20957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.124.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860e2037-e615-422b-bf99-ac31913f7b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.129.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e55e9c4-8a8d-487d-af2c-95135c6dc666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.141.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13a4c82-9414-42ea-b2dc-d6798e5bc9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.169.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83821ed9-2908-4424-9b5e-8ee9f55019ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.171.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a85a5b-cba0-40e0-884d-82ab1942c721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.193.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7d1eaa-3ba3-4c0e-b36e-e218151b1e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c0f9c7-a29a-4ea6-8431-1913ac6c4519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.26.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66376ae4-74d5-431d-90fb-e20f2d17ae6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.31.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a002655-de8e-4b2d-96fb-00edcfcd5918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.68.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6561d04-39aa-47f0-b870-ae1da2de5249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.210.186.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e2801f-a8a2-49fb-ac21-36138db8cf48", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.233.116.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f582cc-ae77-419d-89e7-6414f5e40d39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.83.72.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e46d22-8c82-468a-9850-834607c8e0f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.159.178.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c662d5-fda5-428d-9b93-d37e4f259c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b631363b-2ff6-42bd-9576-8ce6cae5f409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.212.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b059aec-303a-4b3e-a0cb-30ebb6dff978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09297e5b-23d0-4e45-afd7-e77712f9a996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.216.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7339588d-6277-41f6-85b3-b50bc097d492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245393e1-2020-43d9-b8f3-0910bde08891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446a0da5-fd39-47d1-8760-efcacd2e4820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3094498c-bc7a-46b5-9fc2-9d08c3a4ce34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b20c50c-ec4e-41f9-8358-1a97b22c10d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d773fca2-89b7-444b-be26-8fed74f422c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.165.75.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced621ad-4ede-4278-90c5-41d520165051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f80affb-1485-479c-8fba-1ec8c80084dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad40349a-ff49-4154-b1ae-1a8ba8409ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5fa8d2-9322-479f-9013-2710fe2fc855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85031919-461d-4b56-9eeb-76ea92e58362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1def97a7-d8de-4af2-bf3d-5909d15f3ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bcffc9-83e9-44d6-8866-2c9256f29386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfffa799-7ce6-4121-a9d1-ff42451b495e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d36b65-83b5-478c-9633-8b24c3e6d262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6ce416-f225-46e6-8181-bb1259785b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.182']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f01dd52-965a-4a44-abae-8945db37875e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22cb1aa-e5c3-4e1f-bcc8-fee25a21a45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22df414e-ca57-4e22-a66f-feb1b0302e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f83112d-3512-4e13-b108-ef5d60a1ba33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d6112d-419c-48c0-b210-15a3aacc0583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b74b30-5e03-46ea-9170-60188aea61f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80982157-8293-44bb-a126-bd12fa3024ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc464eb-7174-4333-a16f-696a6d98d72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b144bc6c-a751-4021-a9da-02d6f4f51e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775206b8-4c65-4703-b250-3a7e0d14c557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a115c5e8-83b0-4db8-b09e-627c60954a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c9d70d-0f78-4b28-b58e-ef02051e58b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8c9c11-a748-427b-9629-3ecf505315d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49561527-2a1f-4610-bbe0-e0955ed24e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4763a769-f55a-4782-8f7f-24bf3ca8ee89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6783d71a-60ed-4ac7-8e75-5538e3285a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a20152-b45c-4e76-86d8-d1cb858f7929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1680ed-e24a-4091-92d0-6e470a61f293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce75c3a-e73b-4b7e-b0cd-272fd39deee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab08a9b-2d1e-4122-8c60-c4c8c3b85801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c92c85-04d3-4511-aeb1-6a4b603c0b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4493f82a-1c91-46e3-961c-44a182ee3629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43370031-5f83-48aa-9230-a531c8f861ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5df4abc-877c-450e-a170-03367f077187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b5b407-dbd8-4295-8941-a632bbd3c41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8d67fb-be81-452c-93de-81cc8f0b7cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3310ea9d-34a6-4a6e-a88c-364aeda6c8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdeec44a-1135-4fe4-971b-6857cf498aa6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.20.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce41e712-4ada-4cb9-9d77-f6412f34c091", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.23.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa35fd9-f7a6-4889-8694-d0d3edd0fd87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.23.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c40775-62d3-46b8-b91a-ecf864046b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2475fa0-2c94-49cd-9c86-4a8ad0c92116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aead0468-39b9-4447-96f8-c42186035835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.153.18.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ca2c33-ef16-41fb-a557-011230ceaadd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.153.97.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb8f6ee-24a9-418a-b94a-582ff7c78cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.172.38.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f396b492-e4ef-4b97-a308-a6ccb9e238e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e07fbdf-6996-499f-85fd-1db219c740f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1637b1-449b-413f-994f-e67002f83590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424b2605-2030-42e9-a552-48c4f7d967ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad07d25-6e0a-4cd8-ab2c-4fc82116833f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8730a84e-aa97-422b-9f17-a200f307c530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc9bdd5-94f5-4bb8-a869-18735d253d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a93e29f-7c96-4513-a4f6-cf992ea4ba3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cbe6d3-353b-4a16-882a-3e89835154dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990d6971-7b38-41db-a804-bd5387a5a4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cfa388-80d2-437f-9c8b-8917ec498170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5d07d7-18db-4244-b4b0-e7db99e943c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5bb05d-123b-411c-92c1-9cafc93154fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a95ee6-2517-4024-b8aa-efde2cf88856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2989b67-3fe3-4b7b-9bbf-19f1f7c1320a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0baa0e-8138-49c7-a8e6-b438bbe61102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a729ab90-52e0-4318-ab56-a3d74fde84e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10aa2d87-21c0-4155-9de8-9c3894396446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.176.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e902531e-93d4-478d-969d-edcc065feb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f4045e-a81d-47e7-aba9-118d13429574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.176.182.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222ea30a-eb04-4efd-9c72-b1260b47282a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.5.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2151f6ec-79a1-4a17-bbd9-6cb495d57e15", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.18.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f1576b-0ca2-4f43-8d85-49dc94661615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.33.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2918a7-14a4-468d-a0dd-9f4900887ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.59.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed67bf3e-20e9-4450-813e-19d32ed1b791", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.56.48.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dded9e6-63b8-454e-9707-9ea704782592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.212.14.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8e94fc-5df0-4e7c-ad8d-64e492f55f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.55.232.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd86d95b-6f3c-4cdf-be21-404f229e8e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.72.45.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9e2f5a-e4fb-4487-8092-a5f9d9f56fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.162.64.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f4ed0d-7087-49a3-869e-2826dfe5d46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.162.64.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dde060-0ea3-449e-bd8b-6fd7630688d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.243.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a265d02c-6131-4a4b-8e1b-17d3814c5126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98960db2-34ed-4fc0-b271-dab0d6d6adf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.254.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270a43b9-b43c-4de7-8dee-08c53f6d77b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.126.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee89816-ffcf-431f-87e5-cbd356de795d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.148.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8590672a-646e-4eae-9b3d-a3ab9e79544a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.197.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f89473-aed8-459f-8297-f0b461162b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.202.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28f9342-f590-42cd-b8cd-d2f61e46bd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.253.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e28735-95fb-4f1c-a5f1-6ae308ef44e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.234.48.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb137297-02ae-4e7e-9c9e-743f18e7c879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.104.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a57a2a-40fa-4099-86b6-232cb609bf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfadcfb-4ab3-487c-88d1-42640dd36bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.140.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e689bbd4-7f87-469a-8611-427358df197c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.184.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982e0281-4682-45c9-a651-680c9f121a3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.248.33.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d131b4-f86e-440e-9c43-a90aafb2e745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd72c08f-9746-4201-bce5-99b56986c7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290389ca-bbeb-4d06-980b-b5a0e406500e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1452da5-f874-48ae-8eba-e643b4c28c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b673f43e-99eb-44bd-8f15-1e010a529176", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.59.232.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7144c46d-f2ce-440e-9fad-e0451db6541e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.167']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53985d25-56c6-43ef-a99c-ad25e9c989df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa081e2d-d0e2-4028-be02-91db04ecd643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7271c2a9-33d9-40f1-b471-b66c68f1d7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d473ba6-964a-44c7-a906-551786fb22d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931c8d16-ff78-4fc9-99fb-49243a01d4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51eb4bfa-1112-4cb0-a883-c2dc7b4c01a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be155e65-7ad4-4b06-ab57-3cee78838679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9f554f-3a3f-4316-bc8f-eab84189a30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a04e2a3-5847-4756-ac7b-a598474f36ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebee377-4123-4813-a332-507ed2da67fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cb26de-e74b-48bf-8b4d-cbcf9832a30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3ab45a-433a-469a-82a0-121bcbd2cbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e66285-842c-4f0c-bd8d-4fc7be743a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fe3ea7-f427-42ac-9b2b-4a55c31b4f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09413566-58c7-40e1-b909-fb2cf5722ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4cd7a1-53e6-4152-a764-c786d315173b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db54c0f-2a06-4075-8b80-a4834544e960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659a7868-5bdd-498f-8f03-3d3519f33b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d26118e-1144-4742-a9fd-9bf151f0a142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6007546e-5d75-4d85-b0d2-c527dbdfb11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bb128e-a57a-4537-ac95-fcbe451c669e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bdc053-9990-483a-a218-2324e79fe4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6fc98f-ce63-45fa-8247-a70729d43fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64932c43-f763-4350-b384-781d43d57f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.119.155.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b775c7f1-0ece-4a00-8d04-7488a42a04f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.74.254.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1c639d-186b-4cef-863d-0262f1de80ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.83.23.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3fef4c-fe17-46b9-8aa6-99c26858c4ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.161.255.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55445bfd-1f29-46fe-b340-232e9da78abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb37cfc-e60a-4ca8-8712-495c0009916d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5462740-c602-4d02-a2f5-3981641eec04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.40.61.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ee2b94-58a5-4c92-9217-41191429cc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.52.194.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137b7cd1-01c7-411d-8cf9-60f4d56cc6af", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.69.255.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27f5fd7-5b7e-4c90-9159-41235368af4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa0a503-d73b-4d7a-a5e6-e140a9628960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.17']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9fd77f-0356-4be4-8286-1083a96e35f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f19f3ff-49df-4229-a2c5-cdf32ec80a83", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.85.232.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33383a70-5010-4e54-8fdf-147ddae1dec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ad5a62-57ab-4bc9-a710-f1a208a866ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ce30c0-4a78-42e9-bced-5af70a01d299", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cbb821-2e85-4ea0-9a34-6719998b678f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed477c1-2cba-43b3-b679-fca46a48cb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcc2e74-4986-4e0c-9928-b8b494e3961f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04605ca-7826-40f5-8518-852938658085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0029637-1602-4f6e-b77c-c77176b9bb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbcfac0-8e2a-4e0b-a9f5-403f84445412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4105ca2e-9266-4ffa-bf5e-fee6a5f33f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a19f0bf-cc29-4ad8-a480-2baf94e4b3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3953ba36-35b1-46a7-bdea-e5f0e1e240b7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.117.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f509593-51d5-4b6f-b4d5-4ce062d0ea0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c37cd35-1e3c-4485-9c47-88d343a455f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029f614a-6820-46c6-8594-c9f593758831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5f788b-9e3e-4c65-90de-0b2e7094a8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5febf9fa-1503-4e4b-86c7-6e6006defa75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23218eaf-80ea-4b02-9f9d-c42cfbeb45a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d3b092-5e85-4f3c-8fb5-4745ae1990da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687d4acc-0335-47d3-867c-77a415ff6c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b55f711-1158-40a0-b092-60c80e97e05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a3e00b-3290-458e-a889-deff26daca92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ef15ba-274a-4887-a32e-470c93c92fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.87.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0723517-805d-44f3-a5c4-aa6de8b1f0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4732c6fe-a6a3-4d8b-8094-9797785abe22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b4803a-00de-44c9-b16e-a56650f3de73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00265d6d-4ca5-401d-8027-830b84233df3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.38.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d434704-0405-4130-9beb-c0de6a5cc548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.26.199.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a34f549-4ecf-4739-b4b3-72b0103234ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.29.39.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b936a452-621d-43d0-905b-b2f06682b4f5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.56.19.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b9e8f6-da90-45c3-b3f6-ca7d5c821ff4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.106.11.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d90b56a-529a-45f7-a2d1-5079294c58ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.116.239.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca097d2-95fb-4a88-aa20-ec246f9f609c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0e566e-5e64-458d-9cca-8fcafda332c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94ce510-c25c-49be-9adf-4abebc02b2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c133c7-3797-4385-a3f7-fef629192a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f00395-a081-4ae2-acf2-32d422161693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9f9b9c-01c3-4885-8961-1d5317624d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe69c27-0854-43a7-9337-ff58553424b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54fafdf-79b8-48af-8285-3394a16cbce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a93264-7a79-464a-9f82-111122fced47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5cf7d8-4e15-4ae7-a842-59c92ababfcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63103a9c-b957-46d5-9aa5-bed523b181e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b49874b-59be-49d7-9af1-0d608edfcb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e54dd5-d180-400c-8bfd-6794fcbfc112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596bd991-7cb8-4f4d-8850-739eaeb0ce0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5eefbe-5e94-4f8c-8cac-90f7ec430d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c4373a-58f0-4491-96ef-0fad3941aec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9377312-7b1a-42b2-ac49-e9f2fd9f00cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9245740-6bf7-46b2-a88f-b49f3c88ad1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33c6e8e-cf76-4c0d-9fcb-b2958a83813d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.187.129.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20393269-d87e-420c-ad69-df13ed3a0210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.62.207.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c95af14-70df-4518-bdbe-7f7dd801d49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.98.102.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7c4b27-7042-4b16-a772-3dd4c6edd346", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.98.115.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bba7f65-cda9-4ac0-b946-a6a20c2336f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.157.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2b7d75-154d-4c6f-af76-79d3c0b20646", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.189.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8763638a-7ed1-4305-afcb-102d0c1f52ab", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.154.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf796a76-de8c-4d3d-add6-bf689dbcdc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.212.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e6b7d3-2a23-4dd9-be4f-7dab99dd5310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.140.225.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e5ab0c-00a8-440c-b436-c6e2da67b524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.153.110.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d423f2-fcfb-49fc-af4b-04a0dcc13f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.163.111.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe71778-56bd-40f8-88c7-69b3a057c55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.163.65.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a1b19d-a652-430c-ada9-4f4988ae9e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.163.75.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc59c597-474e-4554-b871-d9d7e8308b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.3.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789ffe27-9a47-45af-8318-f670224df69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a80ed6-bbe5-4426-9df2-dc29be6a7771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.106.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5980d073-7c20-4e96-a34f-bb4523e6282b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96342f0-a468-4bdb-a1c5-d154357b3078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561e5d68-f096-4aa1-9fdf-fe85981767b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.196.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac25699-26ed-47be-aba2-31031d84c84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea8fe79-9fb8-40cc-9e63-4028c26d2e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078b9961-953a-4fd4-b62d-73ea0ce17db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.215.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679ae36d-5982-40c5-a7cc-fad3f3d4ee80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.218.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e5ce46-2e2c-46b1-beef-12978f4b177a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.228.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b42f9f-bb2f-44e9-933a-2623a50d2f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.232.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36f8393-f1d8-4847-b14a-ef9e7e96d891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.232.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cdb97a-d1da-4985-b5b3-abf7f171a2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36318fc-c555-4bdd-9bae-bf76630a9e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.239.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ddb425-09b5-4520-b041-a99a4c693cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.68.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2260cb-6b3d-440e-9492-c9be6045443e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.74.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777d5b3e-6db3-4b60-87ed-c83da8f144e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.74.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ef155b-ba19-4ce5-9445-121554eaa3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.75.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2da8314-6540-44b2-8abb-06d03af7feeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.78.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6128f1d9-4a7a-438f-ab09-3d22d6199c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.82.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e093ec-e6e7-44c7-930a-bdea87e3daef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.89.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fce1ca-8b29-4489-a37f-bbacfe27dda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba856e48-8c98-4186-99f6-6e1cd403dc09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabffb76-bb25-4e5f-b03d-194d1375ecb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.97.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0bbd05-c0bb-4ffd-af1c-b31aabd58702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.97.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a80bc4-c0cb-496b-b551-9ff317a931de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace84d29-28b9-448a-a3e3-88b709839d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138dcb0e-114a-43ab-b09a-8ad4294c03d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.142.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98db8ed-bea5-48b4-9f41-e1be53d672a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.144.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcf65f2-50c4-4f97-aad5-ad612d2453f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.154.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc497ebb-c7d7-4198-944b-f3bc99669b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65929aa9-f879-4152-86f3-3772a0a35720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.173.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001ab31a-eb80-4a89-9720-f7b628c29e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707e9f77-d3a3-4743-a62c-f5aeecdbdff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.101']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c90535-7765-4d84-8baa-7f3cd2042727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550ed43d-25d9-423c-baef-01f6af7bdbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c93247-5ba4-4bf0-8330-ac82e3109b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b546bbab-5cb4-4fc7-aea0-6e846aca4f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8d09db-9dbd-4135-93d7-c9527e65b7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62669554-7e1b-48d3-9ffb-91a0d91d0fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4c8f96-ccc1-4f03-8f7c-a80453047521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88fdad0-cadd-421e-bba6-18668c027049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb3dbcc-7672-4142-a541-3b61c483a09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723055bc-2aaf-41a6-9de5-b651897d8da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb964fc-a32d-434b-8451-1bef01ce79a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c642ba-bc18-4a55-8b91-d30485fec870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d147a25b-5bef-4dd1-ac35-50bf52c71b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59704509-8665-4b71-be4a-7c9d691fbdb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d38dac4-ce3b-4070-a01a-f8590ff7fbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.215.38.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0b1e0d-f6a5-42f6-aa3a-7ceafe3b9644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9daf2b6-f180-4ed5-840a-5e5302810e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f28a6c0-0f93-4078-b1ff-7bb4416a77d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b6e232-2981-47ec-b7a1-cac6a3b64be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935fcbd9-8b50-4ebd-8912-0eaa310103e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e38ddd3-8bac-45be-91c2-39a2ffdc0356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ddd54e-0718-4f06-a756-803b4cc50f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f97cc6-080d-439c-93ad-5987544d55d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c705c1ff-d5f5-44e2-85de-445f4983f20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da93aac0-b817-4bb0-ad8e-a98c59a82243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513a0957-2bb4-44ac-9d00-dedde4ffe6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8103b57b-8bcf-40d8-853a-c86d384c4ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08fcc3e-f887-4c55-9127-63cef15b635d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef20979d-796f-456e-bc4b-eb4c219f7808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28829de2-2b84-4959-92e4-e278f45aacf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c957bb8-aee6-4d43-b8ef-448d47912600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.18.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f473fac9-7554-420d-9756-849679ec2ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f36f3a-258f-4c25-ab3b-69a70adbbe87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b39ecd1-4795-4be2-84d3-3d2591f93965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10840de-553d-495f-84dd-a61868ad9550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e6dfbe-d06e-4a3b-98fa-9309c9b89c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d1633d-a1bc-4fe2-9118-c01551841601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8209a915-8c04-4d5c-a531-1455ae59b8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27694dd-bad7-4530-a694-acf44eaedf35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907c4086-9b3a-4542-a916-ad20aa92f59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c1a03f-6376-4680-b56d-c9e0cef0f4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d21525-6a96-4dbd-87c6-31e76a8971a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e608564b-ddca-4ccb-8701-1b351ddd0547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d21425d-4403-4791-ad80-6a62f3df8369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ca2c10-66eb-4be4-b9df-b0352ac0c748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c655f748-12cd-4375-9b7d-38d2fdffe52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.82']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ecae25-6d9f-43d5-bbfa-53e6a429b3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412d597b-292f-4d52-a568-ae992bb6e217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd79b10d-3027-4178-9c42-b15cfc818954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b38055-a239-460e-9863-f87558b89b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10c3f75-fd7e-45b9-a7cb-3fde889a182f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3e8be2-c735-4fe9-a264-db8377c6d495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc16ec2-26d1-417f-bc86-f92d0e09206d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f976ec6-90d9-40c1-9fae-11d3edc65cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789dd726-0d52-492e-9122-842f2f9866ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842291ae-0f80-42ae-9266-574ad5f8783c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e928e9-6c1d-4ac8-9f07-b3aa8f9063d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b855df9e-bbc4-4833-9372-b3661bdd323e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f885fdf-29ca-4567-9c23-86c12a47ad72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5eb7d4-a47e-47b8-b9ba-8387ea380f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.85.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b7c683-2c61-4451-81d6-3c0bccc1031a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd260e2b-0230-42cd-ab98-72a7877a3f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a058005-a4f9-4543-8fcc-fc1ea2bd47b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f15e72-4d5e-48e4-9382-22ef2826c283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.19.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421de8f6-5c63-424d-bc4d-80a133da01dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.142.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828173b6-04a3-4797-803e-739269f8866c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.238.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53d1dbd-8935-4e8d-a721-490edab57dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.68.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fc58dd-7088-4cf8-b400-f562d1b57bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.220.202.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443f9f4b-501a-46a4-bf64-71fab347176e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.11.68.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46eb14f-1e86-4191-b736-fe74bbd05569", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.2.10.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06d3523-84b9-428d-a382-9c689b955d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.211.185.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da94096-86d3-43fe-9b0c-3a6fbee6770d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.234.91.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18d31cd-dd30-4a2f-9fbb-7d51359895fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.244.44.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e2d744-1fec-4812-918b-c4169f8a2293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.66.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d93975-6bee-4b94-9fdc-4a4cb6379394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44470451-6da6-403c-95ab-fa5cb3b4079b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dda9bb2-d255-4df1-87ae-ecc4e43aa46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.80.163.81']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1825b3b7-e635-4dfd-8ee8-95aa2bce3edf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.65.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eaf224d-639e-4d1e-a81d-3d50e9013b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f296a961-bc0e-443a-ba39-c715c3fceac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f045239-f066-4669-8690-742c4a5e7f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f3da33-407e-4581-bdaa-f89faae562ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ab29dc-e404-481d-9b49-50ade81d004e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d07676-2509-47a3-a461-63cd23abffa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fd93b6-1b3c-4272-9b0c-48a8f3797471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2549074d-2165-4c57-98fc-b36d3b163377", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.250.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e15ec2-15f2-4981-8d0f-1ee3781e89bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.179']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec13b825-e9c5-4add-97ff-c46669bc6888", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.55']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5087ba6-3864-49d8-8d2d-82b0a10184ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b5b235-f68f-40d4-b347-2cbc0d762293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02189742-da02-40a5-86fa-4d7b48afa3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a899a0d1-95a3-46d3-b710-d8bebf6062ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53986067-771b-4490-8d65-e0e5b1d24431", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.102.69.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f971b314-b0c5-4b18-9b81-3af0ba3ca579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.106.23.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5b661e-240b-421b-885b-9e8d58e10be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.242.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d306e43a-7bc8-4613-a5d3-88419614af74", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.163.126.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a854bc49-8072-4270-af01-fbb439666be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.17.28.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d75026-43e4-44c6-8daf-ca85e07d158f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697d34e0-bc02-4e7c-859b-8458a9405716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99aacc9b-8525-4aab-ad19-26b6747b42a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a141f648-f703-4192-a7a5-7bb68fb5958f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1700e9-3a9b-4a2c-87be-9c1cd14fcc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f1798d-91bd-4171-a893-a3b1d8a6b5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a601f179-4329-472a-85a3-3ef17a4636c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a975f88b-3fb9-4270-adda-4c2eebb64f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4614d0-597a-425c-a2b3-b7f21d7aa002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.84']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f4facd-b0e4-43d5-9239-da40c9e68bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94900e79-08e7-4d27-937e-fb4f2ced911d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.87']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6772bee-2bff-462c-9b4f-4054f5a0b6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91b60c9-950c-471b-bdc9-1d9d22afda54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8727c5-b3d3-4ce8-9462-e54cc951daec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7359af28-65a3-4faa-80ea-fb7d032b153f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ced0a7-1768-4617-b9c1-fb75e82f6312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.226.129.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c721cee-f565-4847-bbcd-7ff2885e10da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.229.186.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dbd7d6-dd78-4ec1-a3c4-0b11a1b85003", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.27.155.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d556639-7665-4cef-b78e-8ee730c55363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.70.104.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0c1daf-f2b7-4bb8-a501-ad8d2885fb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.70.2.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12850548-747c-43ef-b9ba-b4942def2e65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.88.148.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef25666-dcad-4775-94bf-5aebb4f635ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.112.46.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32bf48b-431c-46b5-849a-ec7695924ffd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.127.132.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2b4523-e140-4686-badb-dc7d2c26240e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.84.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3012a6-d829-4ada-a93e-79b70f465adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.84.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ae9815-9708-405c-a37c-8929e3f169d6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.84.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8a69bd-62a8-4bd0-9e67-4d4b768e571a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.85.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55bb2e9-ffc6-4653-9af1-f820ec7370b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.85.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0898e6b-c10b-4829-bfed-2d3f91e1eb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.157.100.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86d83a1-0728-4999-b009-d55532956c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.157.207.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc85fdc0-4854-4d10-aa96-6e4cf4807e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.180.146.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebc6a00-9940-4972-8630-4031e4a4d452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.212.87.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f965ed89-13de-4ce1-af82-e49d52217d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.29.53.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed6e5d3-818b-4ab7-ade1-bb982615a284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.29.53.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd7c158-3472-46d5-9c71-6644ebd5f933", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.34.42.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fba8e1-6eef-4676-bf1b-0c27a4cce8df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.36.23.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c21558-4403-4f1b-8ebe-c814e07c4f70", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.39.35.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65fd6a43-1e1c-4fdd-a9f5-1d94be8a46c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.57.144.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f587663b-1b0e-4d0d-a642-92a988308ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.109.60.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40467caf-f45a-45c2-93df-1c6598274188", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.139.5.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a6f6c5-dfe1-4555-93ac-2cbd260fe36c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.174.240.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f333019-0f9c-4af5-8bcc-ba51e8150888", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.32.137.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f86e47d-f0d3-4df4-8875-7250d8c63651", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.246.91.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca18346e-e879-49d4-b5db-fda38c1243b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.139.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b07ae2-d48b-4ff7-94cf-647e4dceaeb4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.70.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a8a50b-0926-4f62-abd5-e9fb9244d814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.70.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546d922f-82e1-4b3c-bbc6-432a24237f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.71.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ca614f-2540-4e24-a0e1-e6e06efaecd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.72.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33caeba4-97f9-4b01-8932-4a3455e1c7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5097946-9c76-4017-90df-f05fa1bff2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db2bca7-ce1c-480f-9033-fb3f793c9b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09af4567-68ca-42bb-b6ec-0748f4c9b206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.159.216.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9e9859-c608-4315-8871-8da2c017ce06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.159.216.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e9f71a-bb03-4556-8cab-e66961e588c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.174.181.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ccabb6-fd94-4f23-b233-f63c9c38d13b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.198.19.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763a7432-2cf0-4d78-991d-eed0be9018b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.204.70.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160a3acf-892f-401e-b004-3b6ace9e87ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d885e02f-d6a4-4f28-8388-59ae46eeb8c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492481fe-a922-4794-b15a-919addc444ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9842811-f9a1-4153-b56d-7fbbb79cd26a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e1bb36-6dd0-42b6-937f-f6f4bf8d55e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc78611-e531-4c76-9742-292c453c891e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ab83c7-5481-4f2d-9f7b-9e13dd8b2c69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0182aaa-ca76-47f0-bd29-68dc0c15ea73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c6d2a4-f5b8-4538-bdb8-81010ea2af25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c95518-db5b-46f8-8bb5-39011274b0b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ae143b-66d8-4a8c-991a-79b76ae4da13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15fc359-6023-4677-8108-47d83811018c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113ff73b-a90e-4e1b-8ab8-25b17351c11f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fe61af-3f85-48a8-ad5d-cbcb86de7742", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a06aa4-a156-44bc-9dde-d8b3bb614d5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1d07f0-a6bb-4a02-b085-46d1cf6cb8c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d382e294-6876-4046-aacb-28cc85f68b1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf16632f-5533-46ab-a6f8-c18a8ba44830", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd94616-4a65-48df-9693-63a1fc0959f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffa93bd-89fa-4d81-b6ae-28aa0315b419", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7e0ad5-00bf-4682-beb9-ebbe5fb3b946", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6a9ce5-6e0a-4332-9ecd-9b56072b6a41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eddba02-3a8e-47ab-a0f2-580a70ca3857", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2273e3-d34d-4f62-86f3-8d7e7e89240f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.230.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ad3968-21f7-4cf1-b6a0-6e060d778f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee14f34f-c344-4a1a-ab99-471e986c2b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ab868a-caa7-4207-bab0-bb077de1841e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ee257c-ae31-4060-a4dc-a776286c46d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c2353c-e642-4509-b7cb-758dfd61f0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c014a5-4850-4347-b2a3-696aeb0e1fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325d838a-326f-4267-a032-b7f75a70655e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28d593f-f615-4e85-a54f-a80fba3fea47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a48b2a0-b40c-4cfc-bfc6-471fbaf949f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79689cbb-8ef7-4ddd-9b32-b7915a06c8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43a7b7c-7da6-4eff-99ff-057c335838ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004cd3c3-e76e-463b-89fc-fad3740bd675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db23fbd6-1ca3-417d-9528-5ac766eafcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd838e5c-e948-44be-bb5e-f66352ca42b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9db771b-b8d0-470d-99d7-bf27cd7426b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ded0787-f716-4573-b343-cde074a0b995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751ee908-3c13-43a7-a1dc-f504efc03bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2d654d-21fb-40e4-8e69-b863b822ac2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e12ac09-96d3-4f6a-84aa-c92ec21678f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6823c931-8a27-487c-9e27-c31224c890b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037ff037-a66e-45a2-b9eb-ded933ae0d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f841cbd-1320-4822-a17d-c40d03f4f4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335f79e8-7f58-42ed-8fa9-5c3f436db70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5bdc6dd-c2ed-4587-bf2d-d9e07bf86183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3504677-bb8f-4ecd-812f-d5c7988b0e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf58090-5893-46de-ab48-32d74a4a96ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2c569f-b411-4182-905b-8fab1e86f954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b15a10-10e9-4565-a563-3d3f857e6679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d8a57e-a2a6-46c4-93f7-179bdbd6a9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b58fca1-6d68-4c82-8225-94fe8f804fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d5781e-0902-4e90-bce3-3e177f5c1396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f423b0d-4959-4b99-b82a-a1cd3f46d2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc9026b-4971-4505-ab66-272fc2b89613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5c4533-bd19-45ae-867a-da4d9ec4e41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24199d92-901e-482d-b9a4-24948f3252b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc85cf5d-989e-4b58-aa66-7c0843bc7469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e691338-6c05-44d3-bf29-de2cc7f85185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447150e6-c0a8-461e-9336-8b5acc7c2240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a0e090-d8e0-4f7a-8fec-6ebf3d130901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2a3b2e-3b13-4550-abae-dd0187c223ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e8a903-e335-4e8f-baeb-0071caea04e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f897e2fb-be2c-40ee-8bf4-eff477b62794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7205d0e0-4915-4443-ba94-9ba15653352f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365b09a8-1d63-42f7-ab36-94d6436aeac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827c7e39-299a-46ec-af9c-a8cc0b0e942e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07101d0a-55ab-4a71-9d15-9e8ea4e88f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fd957d-275b-4e14-9e43-3a283612fb23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9d9cee-8dfb-4f66-9b6d-c558e91c4964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6704c99c-4fe0-4007-bee6-d640a06f9f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a3e657-c771-4a60-8607-f587f1d7b5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60940786-b07a-4e25-8dc8-89407a473d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61335a98-1e3d-4c13-a74b-aa9d317df577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f56111-748c-44d2-a24a-b289fb0e112e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cfa876-fda2-4398-a6d9-0ee101415b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec009b7-8582-4193-adaf-94460b5551f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99318348-671c-4952-8866-bf77b4d08493", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85345903-d451-4eff-a475-6b65ffff6f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f3f40b-c026-4157-b41d-ff975b3354cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d2c763-c6e9-4567-afa5-97d61f9df86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269dcf43-68ed-400a-b97c-78df4ad5d63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366559b9-13f2-45c9-aeb5-fbc7aac457b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82394aae-350d-4a39-94f6-d0ce2dda279d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05e6ed6-4ec7-4021-bae8-a1f2ab6da544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11ece6f-6b2d-4d92-94df-f108e2799bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7158d4-f29e-4953-8317-57a1948f249c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8988727-7e5e-4bac-b3c8-19c1a6395aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b07f6e9-1fbf-44fd-9773-949be073df3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658b1e1c-63f0-4e8a-b03e-c3478ff98273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97bebe5-d807-4155-9d1f-ccc69e557ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62428904-0cb5-4d5f-b272-f9c6d6d87911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e112fe86-c956-4db4-bce2-dbaba41d1ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bbad16-9e5e-4ad4-908d-0aa2a17f267e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8438f8-f86d-4a1e-8fa2-872df196ba49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04dbcbd-7c78-4543-90c6-c0d0e79119bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f823eaf9-1b4a-4a29-abee-85912387f104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d815d114-858c-4cbf-93e9-10547357bd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1a686d-157c-4f72-9410-cddb505de408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ddd0c8-4111-4fce-89ea-a8622cecdf92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.147.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd8cf96-b792-40f4-b242-3d442d42204e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.250.250.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d018e4-7d62-4581-b5d6-e2ebf46a5c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.73.86.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14424dd2-efbd-4ba3-9a8d-ba964ca2137e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.86.33.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b40eb70-5326-4874-b57c-573389f42353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.93.60.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582de6d9-49bc-4f2a-afcb-0cfb74419fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.180.173.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc1834d-d2de-4e56-9489-8f1bdf865845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.52.52.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c801d148-8eb4-4084-812d-0aed39cf028e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c7c9e1-8e77-4d7a-a586-ccf6acd54d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa6bd83-7140-4252-86e8-e79b73ad0ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6f5ec5-db95-4210-be11-dcc20b670758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bad6e6d-ead1-4a48-96e6-54824af4edce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062553ef-674a-4c07-9dbc-e164dc38baa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51fb922-e065-4092-b2aa-3c3b636c411b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.97.148.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75a0f5f-6f06-49ee-be83-8180c6fab3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.135.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6564091b-0007-47b1-95ea-03561303d43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e55244-a277-4c96-abdb-5b9c335a2399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.197.127.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c406c995-976b-4807-ba70-35b01b83571c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.200.250.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fdd42e-0e0b-4628-a5fb-ed95725a9fd1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.222.13.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5ec3fa-4107-4f10-889c-d37900040363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6d320a-7152-4522-876a-3857da8335a0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188ee138-a561-454f-97a7-de2354c4ab77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf51ac7c-617e-4636-9e81-34fa4f1c6c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfef4182-8093-4bd3-825f-8a606ecef666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867b7ea1-0abc-4b1c-970e-d091ea7a7ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff1bd69-6d3e-4fc0-b3a4-dc0bf4024cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a5d643-e2b7-4aca-b1df-afc8baa3bd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5bb5f6-9025-42ba-bf7d-62344a69c65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58c75ef-036a-4dea-9129-57fa91c1e8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.26']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b165417-89b1-4fe0-9d70-76b4272b4402", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.246.54.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54495a38-38b3-41f7-ae7e-363d892058c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.248.254.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861c717a-f3b7-4990-909d-41f2e15d3ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.249.128.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede6f942-685c-4d1a-ac43-201359817845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.255.204.58']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cde53f-9e16-45b9-821f-c9b8c9dae814", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.3.13.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce7e8cd-3788-4a32-9365-413ae574544c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.238.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6947a90-1236-4441-9bc4-28094695bc73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.51.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ea1544-4d14-4193-a581-83779aa62eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.101.1.103']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c3c72b-b1f2-493f-a290-a18b986d1a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.204.254.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c928011-bd29-46c4-a86a-fcface7bf84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3a4f35-bdcb-4fae-a7ab-8b58d7e18625", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.238.14.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f57f09b-f4d8-4a07-b694-fc02915416cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.45.222.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1070f8-967d-469b-bb2a-4d27707661f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f4a1a1-33df-4359-87bd-42e27f70201f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0670321a-03fa-4bd8-923c-f37dbb9c78e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.97.172.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e3785f-fc65-46cb-9921-2d001b606090", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.126.211.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53386523-086e-403f-83d4-e0213b6075b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.152.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21166f04-06c7-48fc-a94f-7fad6bb678d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.116.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1b6d3d-c81e-422e-86b4-ddf4fae2c637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.168.47.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b934437-c799-4395-b6b3-03b247d46962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.169.125.165']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bc7998-c066-4f7b-84d1-a04b5e32e5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.188.117.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f77328a-9f68-4e6e-929b-3c7fceaa00e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.205.124.57']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270d2385-afe7-45df-9a5b-fab61b42da81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a968384d-0b31-4fd2-981e-e7fc144e5ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc628702-2aba-4a76-a631-2fa5b6489a75", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2b9a13-040e-4d4e-a2be-060341004eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb17ccc-6a9f-4ea5-9f3d-f9b11b87145a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9006487a-d417-4294-b3d6-f24cf998723f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a087380-ae24-4c9b-9d19-78d26b2b569d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a9ec5f-5f3e-4b65-8628-8dd9d57c994f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f5ca94-3e0f-4458-af90-faab5be3b1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005778e7-50a3-4829-9d46-e6fe8b5624ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.183']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ac5b5b-dda8-4bce-afae-a54f31543b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5fe05e-ba2e-4e6f-b69e-c15072a78993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f31bf4e-b90f-417f-864f-e39b437ae573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dcc749-2182-4046-88b4-942c11c2f5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cfd2da-f1ae-4421-a100-1f60fc7f5ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce48558-4099-472c-895c-44ef3afdf440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5534bbd5-af76-4434-bc57-4ad6aa7f837e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd032476-fc89-4212-a0cf-9ca9c2052a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.9']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465393b8-ab72-47de-9659-57eb7816009a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.70.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6eb00ac-2972-437d-9211-8f4ebf4b2034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.32.41.63']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1c2c20-0566-4853-9071-9f0b3f652043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.6.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d208d41f-e6d8-4da9-9cd6-018dfe77abed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.97.248.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e71553-ab47-4878-a5c8-585a2fec2bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.169.195.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb869df-9013-40fa-a71b-af9eed5303df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c617a02-f347-4478-95f2-ccad4f69c573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.152.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bf1d93-4b90-4eb0-a7ba-99079e3ea023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.12.217.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e166e8e-99d0-4be8-a5b2-dc5dfbb3f3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.215.186.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a658f78-953b-4809-93e2-006225816a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.218.206.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8030bf3-201d-4254-88ed-5a16def37fb0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.252.129.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f98597d-7e00-4c95-a0d1-47978a825b48", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.36.93.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7849ab19-9cf8-4f3c-9e4a-f49cc61eff01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.84.168.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26514f3-2637-4f42-8568-67da013cfae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.106.95.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53eb319e-9027-44d5-84cf-22f9796f34cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.124.130.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a72a1bc-f294-45ee-9365-eccf8f29b6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.125.85.161']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8308df40-2453-4d50-b98d-78dd4f29afdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.134.137.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8375ae40-a96e-45b1-a5c5-11cb9e5764f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.134.78.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80b3fc5-60db-4b67-a431-6c4549fe64b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc533678-3a0d-41a5-9d0d-5fe77902c933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.247.24']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d2bd3d-56f9-4a25-bb3d-8cd26982ce6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.188.130.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63a4abc-3a13-47e5-bb12-0bf33f49a544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd3e99d-32a1-4eba-a9d5-5eb57c0d7077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b9511e-9fa0-45b6-90d9-3503eeb4da3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e90a42-189e-476d-8625-cec1b5e09801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e378f9-e502-4026-8936-074c29780cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.192.6.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a617740-33b5-4570-b065-bc5acc56f891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.193.128.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc6eb37-928e-4b3a-b4ae-25fe3ea34812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09866f5-0b63-47fd-a843-5666fbb3383d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffdef05-ff76-4209-8962-07e7b1a27003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46711b65-2829-482e-bd36-fe138d8b79c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81896173-5b57-40b8-9648-0d7727d952e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96978b4-f313-4f9b-b58b-b5c3b2bbab94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1785017-f13e-4e6c-95df-ead960e07f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a82b09-1c18-42a0-acc1-03a09a307c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e716d3-db20-4038-9474-017c2a83a6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906b57a9-e8b1-476f-8966-27b68874e0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b482ff0-a931-4b56-bb8c-871263056f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30801545-9afd-4efd-b336-6b4106126ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477a8a80-eb39-4219-b6fc-c6e1cfe56bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fc9dc2-35a2-434a-8948-a97c747a8d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c66082-a045-4e92-a6ee-35ae12d2c667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9e56e6-cd53-4f1a-ab23-2003a0a80cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed76266-4a03-40aa-aad8-e3ce15df8190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ee59d5-ed40-4afd-818f-1602efe8d575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f98627-b40d-4cc3-a483-5a747927a935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a1756c-7579-4f41-b3d1-28f6b79917d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2116d5b9-7948-4004-9177-26b69534da1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111cb1d1-4e61-4cb8-8ced-699428f5043c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.194']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab847c3f-5f18-4014-bbb1-0f4172bf0cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07edc788-7cc2-4861-b476-1b0428b24ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b75a646-534c-49f6-8c83-e72373192f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.197']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9ad13a-07fd-4512-8011-de154c22f9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.198']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61555e1-36e4-40e8-9806-d06efeb30b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.199']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78dcf30-9e27-4ac9-8456-3a1924ba44ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c05f89-7ddb-4f73-9b1b-46fd2664e598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194e27ec-3061-444b-8fb6-d18a6efb7f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca0c40f-c5b5-475b-b0f5-082b9511e3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a254620-5602-4809-8bd0-d9f039ebd445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe74fe94-1a13-41cb-857c-7d472a43e64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e1a8a4-f7a4-4bf8-baa8-576a4b43562f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59773b44-9baa-4d61-a38b-89cb97f2ca19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae12de7-aab5-4b4f-89d6-2d4ddf9f1248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91d2172-909b-436d-832a-fd256cacf65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72527901-98e8-47aa-9251-370742ba776a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.216']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2731fa-280e-49a9-9705-edb2f954a4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c3b851-f531-43c9-9f80-b0c5851078fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3932c6ad-0cae-4347-b7ea-5b7fb68b71aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb93d93-7122-4c64-b8b9-a5080eb760d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498d7a01-f95f-416d-a969-507b6687ff95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.220']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e08308-5d48-417a-be92-81c238ddbe55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9210f03b-6eea-44d4-9292-9ade2369e55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226f89f9-ffc9-4e64-a079-43bb541076ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c184a8-24b2-40f8-894f-4b4857bd194b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68e118d-97b2-416f-b2b5-dbae4397b512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f474c2-9d98-4dc9-926b-8186296c4f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d02aba7-904e-4679-95e4-d8fb27908357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3942ccf6-8498-4d9b-88a5-96986ffdc398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e3c772-a936-4db6-875e-3fd5819fcde7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fb5d95-8fe8-4717-9878-b896647c66f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25b0bcf-0bc0-446a-943d-ab5f4b3ee1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3984f7d-cf66-4d0f-9d15-a984d86fc726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.240']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b781abd-1bb9-4c66-96b1-c18eff1feaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b08227-e1f9-4663-9b42-68a86ea85c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.242']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426e7fc5-38de-4f8f-a405-461a3b5d1fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecf6ff2-38e3-4a1a-90a1-d262f9f93d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.244']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352bb552-cedf-4f9c-bfd6-740a7388bb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.245']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e199f20-8836-4383-bdf2-2a6009a12aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb55434-d8cc-4652-b538-82c2d3ec747b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.247']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8b2299-131e-43f6-af84-d57b82514643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85628f9-0fb2-4456-a0ae-575130a2fb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6804e2-db59-410b-9afe-daf3635af887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9256f2-cbcc-4c8f-a78b-d4137f8a2143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735cf2e2-f05c-456f-a140-6010c05faac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323b3972-65b3-4403-8fc2-5ed8ad4c98eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.34']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04747f70-10ea-428d-abad-12825234ed9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca10fbf-b3d6-4e4e-a022-bc29ad646bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4f1254-715d-48ee-9d0f-10cf0dd80ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c9332f-4ba5-4b39-a6a0-e2db8d087c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b463f98-8663-4f19-bb3b-df7baf5c014d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86758663-a20b-4ebd-93de-76ef171817b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6375bdbd-cd75-4bfd-97cf-c33288c46c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.231.97']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0216c366-f573-4430-9de8-5c9acf5ee305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.133.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780d0209-0935-4f2d-99a1-fc177edd5566", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.233.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6998986-e46b-4fc2-bfa7-c2c3457ce30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0caa5b-4f9c-47fd-8ca6-e1ae1224d5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.212.52.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd5281f-d3de-4809-978a-7f24b86cbe93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.214.137.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816efa2d-0eec-42cf-8f63-47bd98693f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc2ff1d-b8ea-4f1f-8670-d9c2eb5dc03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.120']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecce204b-16a7-4ae2-8a32-b875ad5bc83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c6be84-64c8-4fe9-b952-243e86b032cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.122']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c00de8a-03ee-406a-9559-63e9b1a923d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb13e3d-3022-4d94-aaa8-4465ea250539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4f4175-aec7-4470-a2cc-f55648425bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdb4275-6553-4ba3-ac0e-b5e832e843b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56691a37-cd84-4470-b3ad-9ed3b471cf33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e533cca3-efc6-43f5-af76-1776e83299c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.128']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091f52f8-0605-410b-a0d7-4758b69e9325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5af89a-6477-4a07-a18b-06abedf96c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a248ac-a9e6-4b86-a40c-7b3b7115fdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9016b7-681b-4d3d-9f3d-3638585347e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57586743-5d68-40d0-80ad-f57c75380f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb55e225-e331-4cca-9794-3e4be6a4261a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ac1475-6873-4a76-90b2-7e9cba7d01f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0ee192-027d-406d-9ef4-3292f10a47af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.136']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e6b968-ae0d-4212-aec2-c89ec6f5aba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a78f96c-abb4-4996-9202-d60f9377eb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.138']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087f69f7-469c-4573-9cce-4c39d3680bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46cd43ad-fef0-4bbf-9cdc-39f66541cd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb63f56-bfef-41c3-87d1-5daafbf5be64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa3fa9f-c915-4b2c-8f3b-399428689270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9bc803-e949-4238-bb56-10201ea4a763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5661ddca-4de2-49c5-ace0-70742946e31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9bf73c-98d0-4252-8d5d-bcea1dce005f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b050292b-4403-4642-aa9d-b59313b8cac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.184']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83fef02-15bf-47aa-934c-85bff374c0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4fdf7f-2a69-46e8-a51c-c49034384317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270402ab-e25f-4510-bc41-607119782b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf2c446-6ff9-422b-9ff5-30bd41d12a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.188']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17336ea4-4df8-429b-934d-913d69b4ef1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d67690-3e51-4e11-966d-41b41971c1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd94316-ba2b-4c0e-973d-55c316d4f48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0b4284-7b86-418a-bb2c-28288b522966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d7b3ca-83e5-4570-8a68-84485c4486c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606d26e6-5ab2-4ed0-be00-6feeec311148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc44b5b3-e6a5-4a0d-af45-87a68f6e0161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73ec7aa-c8c3-42f2-bcef-c8cf8fb5a699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77ee25c-8bfb-4e3a-b8e8-7f150b52c9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a19e48d-4277-4299-8024-eccaf6963f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.214']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acefa81-35a7-4b6c-8c39-46ed82bfee50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e176ae8-cd06-4e07-ad60-2e78e79f1a6e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.218']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fef2652-5ff2-48c4-b98a-bf00212b8fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee7cb80-b926-4ebf-88e6-b381ec42ed78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7224c202-fcb8-4ba0-826a-049876deebfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826533ef-7608-41a8-8710-328b2a79062c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b272a2-8a60-4689-b992-df3873b32cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b176bf-5553-46f3-a0a2-dc95819b2433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5126f33f-bc20-44db-ac99-135a939a561a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1cb591-48a5-4b29-8135-e96148ba8b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3b1b7c-c91a-4475-8608-794da61288b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d237715e-8e9e-4497-9a47-223c34ff7d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51460a74-bb67-435c-aa70-623bfdcb8be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ea7c8a-2bc0-4457-8d8a-78ecd5b4c921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a29becd-bc2a-41d8-8cd4-c847cb81c942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea80449-5663-41f8-93be-68b8f494678d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1aefe8-1b8a-444e-930d-c043007a65da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e163f86-f91e-4bdf-8a93-c3a49b1d37b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9578f3e-e48d-4d3d-bca8-e791186bd517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec8cbcc-abf1-4918-9791-7c7b0a54e609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b2a28f-cdd2-4da1-8687-0b0aa4c8c6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d40118-dfe5-4474-8c13-924386c5f223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c21984-04b5-47fe-857a-82a0682656d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.86']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e63c9d2-d574-4485-b434-6a3021b957eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.88']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14140e7f-cb5d-4bfd-8d07-e67b3bd0b55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ad8deb-3ded-400c-a3cd-7a2e174d15cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22696864-c71c-4548-90c1-36f935f6332b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb592f83-bfa7-46b3-81a1-e20ac3edb98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e419835e-afc0-4b42-b306-120fd43940b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3739ffa4-60ca-49d9-b939-197c4863b5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.94']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85d2ace-0691-48ca-a384-2567e767b533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1e2ac8-35b0-40a4-847f-e464320fa555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.0']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891d1277-5342-43ec-a6ab-23ee7c91a2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f93d5e4-4943-46cf-8070-ba171c0c77cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.104']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308d962b-726e-4198-908c-1f471191a450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a703d5a-5a61-4a2d-9635-b6597517fc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0830d10-77ca-429e-abc3-91570d9aeb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458fe413-68e2-4bd7-8d9f-08c0e67e2a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d61728-09af-4c6e-9998-5f41d1cdf70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78d4303-5ce3-4d93-88d6-39dbfd557b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.110']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41a8444-3a50-479d-90d8-2035af4c4b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0c0d85-3c09-4141-a3b8-7ead853a267f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f5a165-dbd0-4d88-b891-bcadbf57b2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008f0d4f-51c1-41b5-ab09-0ec92c063ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3037298-3acd-41c1-ae25-f23bba63ec0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e06a865-bd51-46f1-a834-952acb18e53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.116']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc968a1-8942-42b9-b158-ecea0f41e00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da4ec6a-bf36-4daa-a63f-265784a46b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.118']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5695ff47-95bb-44ec-b9b7-14878f0059f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1010b39d-cc92-4700-9032-c3326112046b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8391a8a4-78cc-4b2c-9d6c-71beee176478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.144']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03047de1-fdd8-4542-bec8-53a4a0aea292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411850c8-4a32-44a5-8569-4679c6d4eef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de0cb49-2595-477b-8440-e60817971a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74904cdd-15d4-4d88-96e4-7a0d9d2a45c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.148']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2daf269c-d8e3-42be-9d20-b1c1ea72cb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9486c4c8-d13f-4f88-a623-5aff5d5558fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4e96c2-f01d-4197-ac51-ccbb210afb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585d8342-c7ce-4954-91d7-b2d041656199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd35777-dc51-4615-a219-46e22b8c7910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a936be35-1470-4bf5-97fd-6af508e4bc3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.154']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17accd78-4ede-49c2-a6da-5fb058176099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fed027-0d4a-4313-b162-6174f454c85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.156']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d9ee9b-f335-4bdd-bad5-b06ce39e3813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254a952c-99b0-4461-ba27-f11c480f1ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.158']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91339af-5fc9-443c-918f-f0860e87802d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabeb813-b399-43c5-84aa-ffe962f340f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199acfeb-442c-466e-b288-669192240dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3385b0-fc08-422d-99a3-5b8ecfb49e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbb1bb1-5a17-45be-988e-9a47c5293966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda3dddd-9827-46ad-a77a-671666b47d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.172']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17878aba-c689-4a72-b676-4a690c6531e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9430b0-3e6b-43ae-900f-16194955b7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.174']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca72bfb-85b7-424d-9d6c-c3ac858441f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5d1e90-e9b0-4b9b-8eb1-12399c19c2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9383373-24fc-4795-93ed-72720c704717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.190']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9739472d-e6b3-46f2-b3fd-841b7c1cf557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.2']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5c4710-646a-4131-a97f-150e6b662935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958fda3c-88cb-4670-94b5-881c37bf526d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3409fb35-fb44-44a1-a0a8-9bae293355be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.202']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ca9153-c77d-483a-b999-a3fc40cd11f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ffbdbc-adab-45f3-afc7-49cb099158c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.204']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264075b0-0691-4172-b9d3-f40aa889ad2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2ddc92-27cb-485c-807e-673091475737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.206']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971b6023-4d24-495a-b0a5-d24ef9888833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309bb787-1c1c-42bb-a67f-9915ede0e120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.224']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12806cd-7f0f-4bc9-9d5f-6ae0dbd2d343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d340035-cf56-4666-9d2b-a91dc1a0975a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412dc7cd-a362-47fa-b356-a2b13295a93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e0a426-aca9-495a-822c-0ec575072ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.228']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4ccad6-d09f-41b4-b60e-78f3f00269cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3d2bca-79cc-41d6-bdc2-3f4f269e0259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee28ca50-37b2-418a-9401-a76e317bd18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052ffcd3-4517-4abb-80a7-521d70b57a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.232']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74651779-f978-4b04-acd3-a9705ea69e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4b114c-9015-42f6-9fcc-4fb9e3d4730f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986c4263-5f64-474b-99ea-c062dfa42471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6b206a-fbe7-4c16-ba2e-07609926d384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.236']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852dcf9a-370b-4ecd-bddb-82807ea454af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b33518-2cad-4b6b-b056-3841a1f534d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.238']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5428ca-14a0-453c-ab36-ce341ac4cad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da03877-b0ee-4d81-8527-af65f2db475e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433bddf1-55b5-44d9-9a3b-155d70b89e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e19c822-8451-4227-8f64-1d607d8f658c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.250']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df66b2d-1dad-4594-9e07-f25345db628f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f016a86-6893-4872-b7a7-d7c375687e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163d4199-362e-4df5-970a-751d13711ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedfb1d0-9332-4dd0-9caf-8c470272a9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e130b46e-c84a-4ab1-8ab1-f4791872a5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10fe229-bb99-47a9-9e21-e089764b3811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6e5b22-ad59-4964-9d7e-3047ff4aa4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ed2f84-b700-4c30-8b32-b7fa5c007ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56f3d1b-2a6e-4aa3-9675-faf74bad0f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.4']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d83485-317c-48b6-8d71-d64c0b378be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dcadd3-47c2-44a6-80bc-29906d43be52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4970fa-dbe5-4297-9597-a7eaf7af2296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.54']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647f43a1-0886-4787-aa54-308622be67ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59d09f3-8c81-4b22-92b3-69027357a535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66ca661-24b8-40bf-b39e-2a9b7bc646ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.62']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba79de11-072a-4e1f-bcaa-ac48449fbcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.64']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90419cf0-fe4c-47b4-a978-9f7299db3f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ad4245-0dfd-4e44-bfdc-07a2fc6721b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240fdb53-96fe-4b67-a622-7984c78ef443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff46a77-119c-40bf-b9ca-26b53fa2143c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44106234-e09a-4314-97a9-f72599e8a0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd306df-83cb-489b-bc5a-2e475b0b7003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cea0e7-0105-485f-8a9d-c4f9035e8f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.70']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ddebef5-c8e3-4e85-8d4c-0c73244ec199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb155adb-3a55-44da-8258-125cf31094a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d86b724-2415-4050-b646-541d1c781c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79cfe13-bcb1-4af3-97d8-c7dd7c67c2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31728ed-2a91-4745-a341-968e746196c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663ee843-4aef-46e0-9437-e80462de2994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.76']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac64ded1-af2e-4aaf-9600-b96e2efa45fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5113e98d-3670-437a-a779-cb1be675aee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.78']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfb04ba-baec-4789-ad8b-df6b7e9806b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf01323a-d95b-49be-a9f8-e121aefcf22b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f29ebc-de66-47ea-bf35-6ed22f9fd81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.25.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0a4cb0-f8de-4d2b-b501-ab3c73cfb44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.237.122.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a058b7-2fe9-452e-b5c6-39de8333a229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.141']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63b0c6d-06fb-411b-8635-dd64a6b5551e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.72']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079508d7-19db-4388-8822-d8bc47e5abd3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.90.11.16']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5d13e4-1008-4a63-897b-80b01323f52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.10']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edad6a9a-a9bb-4061-b43f-db2db2f276f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f028b119-c052-4775-9a5f-f058cefad3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d24942e-aa8f-44a6-bf8b-f71efa5b9fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.237']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c039ae10-2cae-4ba2-ada9-9acf96392f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.41']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82161551-3d4d-4893-8111-12976428ae7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.7']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee7a7e4-5078-4a26-9e8c-ee90bc507ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a553bac-7c4f-4416-bdcb-5cf06c62ce0a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.133']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9422e3-907c-4796-ad68-96600b351ca3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.195']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f7c04e-b543-4309-8f17-538c1d9ab4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.233']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b78745-0f2e-4572-b188-77dd4f71266e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd0feff-29da-4652-80b2-453ac41f37b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad7f5f5-47b7-4c0d-bfb5-4193e19dbfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.80']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6496e6aa-dac3-4290-b25d-2eb2f212c890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.43.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f3acac-92da-4110-86a7-a9637f2054c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b51f285-4614-41a4-9edd-a67b553dd74f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.90']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c6bee6-d2f4-44e3-94f7-9e2f668e1137", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.86.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecb8d04-a5fc-4bdc-834e-8dfb76b82aa0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.97.247.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7159c1e4-a0c4-4637-92ae-018828567a78", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4285f5-24dc-4302-9949-fae316591d8e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d70ef1-e1b3-43bf-b124-542566112e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76037e59-866c-4336-be26-668dd73ebb6f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075e9098-6831-468f-87da-0a6907bfcf52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7596dd4e-9564-4ca7-88b6-93dfa08a34dc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.77']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe68ac3-31ba-40c6-b495-64e10d3c06e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7c2028-bddb-494e-bd68-192612ea6a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.169.226.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4068521-7513-4f4c-872b-3d0622437d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.19.24.21']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad563462-2d7e-4550-a337-972b724a5b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.138.142']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f27ea85-fe9d-40e2-8932-032c3875daa0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.138.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6925b4-513e-440f-bde0-24bc2e4b344f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.20.173']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8d4f6e-2a4b-4238-bf52-28894362473a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.240.218.157']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92de883-0dcb-4257-851a-9d754c8473f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.242.220.222']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799b6d38-dcfa-456b-bc4a-5d6e546a3fe0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.27.157.252']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb5a5ba-8c8f-407d-b979-cff7ce573239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4ecffd-6ac0-4769-9075-d65491d53f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.97.8.208']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1cc7f8-0d23-4f6c-bc91-ef2a59b1351b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.112.160.32']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a1352d-b0f5-4e48-854b-e3d3b5acde9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.116.6.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864946b0-8e44-4d18-b6eb-2c5063ce76e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.42.60']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17276e8-a38a-48bb-9678-ce5a451ace6b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.149.163.126']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fb7be6-2776-4d6d-af73-642491cd36fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.150.247.18']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d025c9-a8ad-4028-b204-80ab1aac7c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.208.42']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebd1c94-cdc6-4a24-a38d-fda819c25802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4b5ee5-aaf1-49ab-b160-6e3c174b761f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.224.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b570d0df-bc01-4711-a2f8-c8040bbb5f3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.156.203.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9ebabe-27fe-4af8-8578-a9654e80649f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.159.230.85']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909844b1-70a6-4708-aee7-2cc693ac5083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec4ac6f-9169-4ab3-a937-e9ac4ca0f72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa0abce-a5c4-41f0-b887-991b22f6506c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.51.116.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81889d5b-8fc4-41d4-98af-6d30f5d25c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3feda835-a701-4a83-aaca-c17e38fdfc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.103.188.178']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b472560d-0082-42c4-99d9-6151a7e12208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.124.166.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c783f526-4188-4e09-a082-e132aa40e589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.139.242.30']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e46873-3934-48d3-9fd3-d693145aa007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.141.161.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bec1f7-db8d-4b27-83e0-28b883f7f0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.141.70.215']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fe5160-e130-44ba-8d1b-134fcdad756b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.32.170']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1978ce86-806b-4989-97e7-a21179c25791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.102']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f56e191-ecfe-417b-801a-b8e9216ac29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.114']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebf3011-251b-431b-9080-2ca43510d7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.12']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89c0f87-2948-4262-803f-bfd69f3a9804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05718e6-ce2b-43de-9060-8a4d8e769e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.146']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c351cc21-06b1-4458-b44e-5ed4b7569d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.164']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7281a72b-15a8-4b38-9d04-e1770841f416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.192']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c979ced1-7c51-446f-8624-c749f090a24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.196']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d81673-b7fa-485c-9e14-a095794a06c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.200']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896f4caf-3407-4377-9eb5-9800744daec3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f0122d-77ba-4352-a4b8-d1e632b5c057", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.230']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a845cab-eda3-43c1-b417-c94c2ac3290a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.243']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046438d5-0696-4d48-9421-0222b3e83ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8947cfb0-bc47-4978-bccb-4ec34cc8c971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4915b228-4f21-4747-865e-8834ac7bfe59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c9cea7-c0e3-4c6d-8dd8-7e031c9bccfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.5']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d906b1fc-b0a8-4fd0-9104-480a9b882bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.50']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b78467-56ec-4580-aa1f-da2212823ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674b0316-aa81-47c1-bfa7-563cc27d2dad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.56']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83e6398-fd28-4782-bbfb-52b0980d3836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51888d66-0daf-4aa5-8821-da42adee7e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.73']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a15a08-1d98-40ec-b8dc-800e6d6660cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a379c8c6-3f29-4e90-a85d-3ce7f9a82541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.92']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b619bdb0-b541-4b80-9323-9cee17732302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.96']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f1ae21-5afe-4a58-a184-56c91884922a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be25b26e-84f4-4d14-a8ee-6eb1e472350b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.205.180']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a887325a-09e2-4f8f-921f-0b40c1c94d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.105.176']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca65dc32-7e05-43d9-b821-5cc6e3977230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5331c2e2-c1f0-4152-a3ac-0adc99253e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.176.74.139']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffd0410-6390-4ccc-94af-d3079bc15ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.182.107.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8089dc93-96c6-4c80-ac3d-b6c9bd7ee38b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.20.98.49']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3235e5e8-85bb-4efe-82fe-671a40179df1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.23.188.219']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad6afd8-f250-4bda-8c9d-5dfd2d4b4c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.105']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b5028a-4c8d-43e0-8d10-2694eb0c0411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d9d78c-1d18-463b-bd10-ef3bf9fbbe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.109']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d56a21-497a-4a39-9838-1434ddfd6297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e30aec-0e01-449c-9d76-1317fe508372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.134']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005590f2-ace7-4ed0-8ff6-0e70bfb8921a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195ecd46-cf02-4b17-94a0-fe991aec87f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.37']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c628e426-dca2-40c8-9fc8-10f9b84513fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.6']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c548e45-365a-469e-9c49-f86f63d5c1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.36.212']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b261c9-716a-4f7c-adf8-658df56d00cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.41.17.74']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1cae77-b18e-4e10-ab91-abc18a3632cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.60.189.181']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34baddfd-60c4-4832-976b-d5da52c867f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.104.89']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a78b6ba-e4b7-47f3-bd0d-5503f3f6a97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.98.245.246']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780c1a4a-3e8f-4ca5-8d31-de419beea3c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.107.115.254']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87fdfc4-b6e8-40a5-9a52-d1a866807868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.110.57.132']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40353218-6535-422a-823a-892bc7694c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.111.236.226']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110a28cc-7f75-4394-87a6-a5a25e68d7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.201.65']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967516a3-a388-4060-afba-9309a4d9944f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.36.66']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b1ef5c-4873-427c-a213-775fccccb129", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.167.182.234']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2d8096-7829-4cc8-8a4f-d18c132eb73f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.174.118.166']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57159280-d0d6-42e8-821b-d9a35dd58ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.180.249.168']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e728b3b7-194a-46d1-82b6-0627229ae5ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.232.51']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52feb48-c52f-45de-a400-8fd5043ed643", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.46.68.61']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f32c04-0d5c-4a4c-81a6-9e4385038e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.47.246.223']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919fcbb2-744a-482c-942a-1bba5a34b8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.57.207.100']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311b9348-8e85-4477-ad58-ddb7ea625e83", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.60.214.130']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c963bd-4f59-4ef9-b407-431804dcbe9b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.68.132.91']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc9817f-d91f-4f28-bdb9-2d15551ce02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.86.207.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9bd5f9-c15a-43bc-b782-603d5d2addb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.113']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909c18c2-f6a4-4f00-ae2f-c5be4e393235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.112']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4a63e3-9c14-4305-9075-6181df3dfb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.126.40']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4e67ea-c22f-4221-aedd-1ad71a50dc9a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.78.175.36']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8194ab2e-a602-4b0a-89df-ce9055de89c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.68']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa550f3f-6037-43c9-adb1-c1ba46d80c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6ffb60-67ad-4f21-af79-49e495ed3b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.241']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a96b15-1db5-4baa-949b-48c020f9ca11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f908361c-3c3c-4052-943f-fe341c4bbb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.160']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f705645c-305f-42db-be76-521f6ec4ced6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.162']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b941df-e7b5-4871-ba7c-b0d97303ecf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.210']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b83fb6-258e-476e-b990-495d2452f987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.22']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bb5e94-9b52-4521-8778-59487353c06a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c0d80f-f4ea-4552-b630-43eb407b07df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.0.108']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a93072b-0c67-4133-9b40-381619a677af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.45.38']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9209896-ea97-4d3d-9439-358913d53638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.52.248']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a95a9ad-788c-4559-b3ad-824b4ec1fbd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.119.99']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be09e994-7858-4ca1-b8a8-6d90bbe7896d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.4.124']", "pattern_type": "stix", "valid_from": "2026-07-25T00:00:00.000Z", "valid_until": "2026-08-24T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-25-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9105c5-3310-42bb-973d-570a99b3ed75", "sighting_of_ref": "indicator--92ab34cc-d0ee-4e25-976b-be5e2ad284a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbf32ea-46a8-4ed1-aa5e-ac538a2deed5", "sighting_of_ref": "indicator--92ab34cc-d0ee-4e25-976b-be5e2ad284a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bace810c-e893-4423-9e56-35eb41f3f372", "sighting_of_ref": "indicator--fe4bb7dc-6ae5-4959-90da-e4b156b30f4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846fd4fa-3f01-4103-95cc-7205adf12d2d", "sighting_of_ref": "indicator--f77f3081-099b-4d1c-95d7-8dab7332edff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5518d63-b634-4302-b985-8e7c4a623878", "sighting_of_ref": "indicator--d4dcda68-8d6d-4716-b989-5186b96e431a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7619a9-dddb-499b-bedf-e38e86dc5f46", "sighting_of_ref": "indicator--85448b73-9cd6-4ba8-a67f-f7d4559a9ffa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef65b54-dd65-45b4-9440-502d4c879d83", "sighting_of_ref": "indicator--1b12fd34-30fb-4c2a-aed2-5e6147a69362", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155cbcf8-1724-4236-8da8-9fbf487dd36e", "sighting_of_ref": "indicator--edc7f371-69b9-4d65-9c24-a16bee368e32", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed0c3c5-443b-4f45-976d-e830ed30fecf", "sighting_of_ref": "indicator--013204b3-8500-4505-8727-1ab3b6c14d83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d80dd7-a221-4991-a39f-76f1c792b67a", "sighting_of_ref": "indicator--05fb6a7b-9edd-4e70-8d32-65798ba15697", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b964a479-fc7f-49d3-b491-de8be53d60e9", "sighting_of_ref": "indicator--b45a803a-8de4-4354-b7e3-60cc386813b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8ce3c5-68d0-44df-ab44-de45791cf02b", "sighting_of_ref": "indicator--aaa5b12c-84b4-4c6d-ac39-2a5cec57db77", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb99ec5b-096f-4d8f-bf84-4a1b9d062beb", "sighting_of_ref": "indicator--aaa5b12c-84b4-4c6d-ac39-2a5cec57db77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21826c9-0c7e-4000-8cc0-7012b15274ba", "sighting_of_ref": "indicator--5f84f39a-aeeb-46bf-8245-8bf3098ca021", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92120ae2-fe40-487c-a87f-394e6445cbbe", "sighting_of_ref": "indicator--46fe22ea-94b1-4a3e-8063-801f597d09ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efc1ba5-3551-455a-b9d0-d63e6f925a13", "sighting_of_ref": "indicator--7f5db0d1-f0df-44e8-8f92-4912c2f581d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1ed604-8b71-4aec-89b6-a9e48da0bc7b", "sighting_of_ref": "indicator--8fe128bb-e1a1-4989-a0eb-d6806dbfb757", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6ae7b1-d061-4f08-8bcb-bb223c96c084", "sighting_of_ref": "indicator--99ab0974-0a3c-42c2-a8bb-4eadbfa44acd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd60206d-9a4b-4ad8-bb1a-9efd6c87cdd2", "sighting_of_ref": "indicator--92a56e9c-20bf-40c4-9287-0baa10307562", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b30f08-811f-4c00-b752-43b9346d8dbf", "sighting_of_ref": "indicator--92a56e9c-20bf-40c4-9287-0baa10307562", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5778a1-c722-4eb6-80b9-c2b81ac66fe2", "sighting_of_ref": "indicator--7b7660a4-5cd6-4aa5-ac61-0e7748f01279", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca07431-b486-466d-858a-a91e4048d08a", "sighting_of_ref": "indicator--06b666c7-8b5c-4b5f-9066-5e7fcb68985a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a761a1-43a3-4adf-a498-e9a5a51a34da", "sighting_of_ref": "indicator--8991fc97-725d-46fe-9fe5-77da28de52b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e07147-9904-422b-8e51-18922cf04bc9", "sighting_of_ref": "indicator--8991fc97-725d-46fe-9fe5-77da28de52b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6402ef-e6b8-4625-9471-ed4ae075d282", "sighting_of_ref": "indicator--10eb7ea5-1907-43e9-86a7-c8ec95cdcc6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39377eb-a724-456e-bfb4-dcc035d2fe8d", "sighting_of_ref": "indicator--945903a3-61c7-4fc2-92ef-b5f9faed3288", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657c983a-8f03-43c2-b381-8107e0e722c6", "sighting_of_ref": "indicator--dd9a1bbd-60da-4fd5-a833-1cdf26b05d1a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c169d0-5a69-44c7-aabb-040a4270df7d", "sighting_of_ref": "indicator--6badbfb5-148f-42a3-969b-37776d1c7ee5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e25c233-53c2-4d34-9590-acbdf4066a63", "sighting_of_ref": "indicator--e78a7669-9b1f-4ec5-8736-1f51ce4e6013", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bd4670-2544-482d-b831-da151b4a6408", "sighting_of_ref": "indicator--1900771e-85b5-4895-8092-208538798024", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44a6ef1-750d-49a2-a495-b097f16a4c03", "sighting_of_ref": "indicator--04e7cfe8-f797-4dfa-8907-45cef78ec3e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76453ac0-b3ed-421e-9dd2-198c8f76d81c", "sighting_of_ref": "indicator--04e7cfe8-f797-4dfa-8907-45cef78ec3e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4719c30-dec6-4ed1-841e-cb7d1ad05d37", "sighting_of_ref": "indicator--477b5c98-fe29-4c14-a80c-f41a9faab4b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b837e0-3feb-443c-969e-a04cb69dc7a4", "sighting_of_ref": "indicator--24159a5b-80f4-4594-a355-f8b8d3c22898", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cc703a-6673-40a7-8d44-e94950531869", "sighting_of_ref": "indicator--61bede8b-1290-42b0-9e08-58ad48ea322a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1038e3-ae80-479a-a263-fcd076b1b2f3", "sighting_of_ref": "indicator--61bede8b-1290-42b0-9e08-58ad48ea322a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4438b5-1342-4320-b93c-0fc6f58e981e", "sighting_of_ref": "indicator--26ff6a83-cf42-4010-8579-5c9c414cf382", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed1926b-9a4e-4fa7-8afb-049b5cc765e9", "sighting_of_ref": "indicator--26ff6a83-cf42-4010-8579-5c9c414cf382", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb2e299-2aa0-4e89-90fb-518d1491e463", "sighting_of_ref": "indicator--07a2ba2c-d5d4-4379-a44d-627b87eabf28", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dafd772-520c-4167-a42b-7eb0777ff5d5", "sighting_of_ref": "indicator--a1d69b3f-dab5-4d91-868b-ab0ef77bc64c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6692535-1174-40a9-8c7f-ec373b682507", "sighting_of_ref": "indicator--b0e5822e-41db-4098-a5d9-fbcb1c6bf4c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a799d285-d117-4f09-a714-046faf45b431", "sighting_of_ref": "indicator--fdb767c4-3b86-47ac-83f6-057e4411be2d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1f8f25-91c9-4ad8-868b-438c455dea93", "sighting_of_ref": "indicator--5e04f26a-7ee1-4966-93c1-522b36d15323", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9110875-ca4d-44f2-b68a-3c280befdcc8", "sighting_of_ref": "indicator--7c656163-2f0a-449b-99b6-f3c603fdad35", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae71ae89-ac15-48e1-9fed-d78323cca01b", "sighting_of_ref": "indicator--86dd93a6-e59c-4d1f-8e5d-bb348f72847a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea4f63f-2057-4f82-be5c-bd28e7a5a603", "sighting_of_ref": "indicator--c81f070d-e2ed-4577-b593-0bd92ce6ce5f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cded80a-fa92-459d-a675-ad07ce0cd8bf", "sighting_of_ref": "indicator--bba322ef-d7de-4e69-a9f3-d2e50c49952e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d3c61d-9cd5-4559-8015-653d1a29e131", "sighting_of_ref": "indicator--b5669f7b-2549-4e9b-b6d2-d5857bd9475d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4bbbc4-a335-4ec9-aad4-d0b3efa6d03f", "sighting_of_ref": "indicator--1fc4944a-28b5-4068-9512-8f58ebc8977e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d28153-73e3-4011-acb5-a7170fe6726e", "sighting_of_ref": "indicator--2c2d9249-f074-4368-9eb6-c6d28a7431d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fc5532-6c1a-48be-a70b-17a1609d1ac5", "sighting_of_ref": "indicator--2c2d9249-f074-4368-9eb6-c6d28a7431d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5613d677-50b4-4cef-b9a1-1eae22c5c7a1", "sighting_of_ref": "indicator--be33edfc-f005-4d72-a9a3-d12014fa2f69", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200d4d21-fa9c-4186-8062-bcca768b6827", "sighting_of_ref": "indicator--0e733a60-d2c9-4718-a4e1-82cd79da96a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c461d6-3fea-4a4b-9d7e-d0af51683c9a", "sighting_of_ref": "indicator--91c9255d-16b1-4977-8cfa-bf2b1e454947", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f0dfe7-dfab-4fa6-aca0-2445a449d086", "sighting_of_ref": "indicator--2e813240-f5a9-42ef-ae92-46920ce4a0d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069680a7-17a1-4718-aaa3-9e63125dce7f", "sighting_of_ref": "indicator--4deea210-44f7-4eec-bd1c-128114551d18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bf8008-203c-4f44-8eda-ae74c033f208", "sighting_of_ref": "indicator--06465c5b-772b-496e-bdd8-d0d7cbfb736c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91eb5d1-6956-42c1-bd03-7f5ae49c439a", "sighting_of_ref": "indicator--19e2e8b3-f31a-4677-bfd2-3b28274994d5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03d86c7-a851-48e4-97a6-2260dca2345e", "sighting_of_ref": "indicator--19e2e8b3-f31a-4677-bfd2-3b28274994d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a5d852-2811-40d3-aad6-ff4c1bc5f164", "sighting_of_ref": "indicator--40f2c1ad-add9-4d28-8107-708c357a694d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6359ea90-d202-42ed-a491-6ac032c735b8", "sighting_of_ref": "indicator--ce02ca4f-e3b2-4ede-950d-cdc69d5b8ffd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433dc628-efe6-44e1-8b1b-704ee52ff6f4", "sighting_of_ref": "indicator--2bb4ff69-24eb-4f93-a5d1-3c09b8b0f1e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133a90be-1734-4573-a239-ac4b74518586", "sighting_of_ref": "indicator--2bb4ff69-24eb-4f93-a5d1-3c09b8b0f1e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de326251-5385-44fe-b887-22892b279c8d", "sighting_of_ref": "indicator--93ce60f4-df70-4c98-9272-c3347ae19bfb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cab5f58-5f0d-4ec7-b59b-9a917e37ec41", "sighting_of_ref": "indicator--5be6cb5a-c3d1-4585-8463-6a954e19b249", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa21202d-d6f7-4e0b-9920-49a88a89888b", "sighting_of_ref": "indicator--40bf58dd-991e-441e-9dfc-b4dcfc1e56fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bea400-2dc1-4b9d-8f8e-9c448027257f", "sighting_of_ref": "indicator--22ad1653-ff33-4764-a84c-138bbd1c7d8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21029f95-5df9-4d14-a65d-47b1bab44023", "sighting_of_ref": "indicator--1abf418b-6982-4589-9fc4-523378553d49", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32be510b-3db3-4aea-bf7c-19991797f02f", "sighting_of_ref": "indicator--47ad290b-d68d-44a7-84aa-a52de47bf7c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5872aa3d-a10c-4080-a215-d392d49847be", "sighting_of_ref": "indicator--95f2e4c5-2dca-4638-86ff-0323abc0d11a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3ae8be-fcea-449f-bd29-1a33e4c99659", "sighting_of_ref": "indicator--b691d8dc-b19a-4842-bc1b-9de8f1f34779", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf5c822-7300-419e-affa-97951ef85db0", "sighting_of_ref": "indicator--0c2f8c33-eae5-4d2b-bc47-8309984a26df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af5363d-85c5-4bf2-8430-a88ba11a0fce", "sighting_of_ref": "indicator--6840e7e7-e27c-4208-baa3-c4cbf8773713", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd195e20-1625-4591-982a-507c2f9a6e88", "sighting_of_ref": "indicator--a164324d-021c-4ff7-b8b6-3a2f20bffad9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4035b662-d3de-4764-af23-f2f6e765d571", "sighting_of_ref": "indicator--a164324d-021c-4ff7-b8b6-3a2f20bffad9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75119183-fde4-4a7a-be15-dd42922c4ea2", "sighting_of_ref": "indicator--a844a4eb-19d7-4298-a1c6-be3f179936b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b606b5-1d34-495f-8391-5e23eb8f9d53", "sighting_of_ref": "indicator--a844a4eb-19d7-4298-a1c6-be3f179936b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdeb75e-df65-4c28-8086-1d5605a77090", "sighting_of_ref": "indicator--803b5ef3-2805-4447-ae2b-33ebbbb609bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f710a5a6-4244-48e6-8a67-33a5cf5f8393", "sighting_of_ref": "indicator--2b05c533-cf6d-4ac2-8db0-258c71204663", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a216fffb-4d79-4a84-bd5b-8cb1b2ba4011", "sighting_of_ref": "indicator--02b65e89-b8fe-45e2-8b8b-e24721c9ac42", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae039246-f1d9-4c3c-96eb-05b233fe11bb", "sighting_of_ref": "indicator--d7d570b3-ca90-4114-a7b8-1edc1658b423", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbefc94a-d849-4c7b-8078-10bec14265e4", "sighting_of_ref": "indicator--d4041b24-6ae5-48a2-b0eb-75f9e2167663", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f74cb55-40cb-4ce2-a3ed-162815a06570", "sighting_of_ref": "indicator--d4041b24-6ae5-48a2-b0eb-75f9e2167663", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe26baa8-6ba5-4744-81fe-9156bb6d2dfe", "sighting_of_ref": "indicator--5ad190f3-5417-4bff-a118-e21c625ee6f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417885a1-2645-400e-ad03-304020615058", "sighting_of_ref": "indicator--d687b576-187d-4143-b522-96f9b43b32de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2118994e-09c3-472a-ba43-1c66e97ce93d", "sighting_of_ref": "indicator--d3fc4ae0-f5a9-4976-b86f-79b003a1ff13", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b681912-3a0b-4e98-a9fa-af324c640fec", "sighting_of_ref": "indicator--bdb72024-1a8e-49c8-a4f9-10c8bbe49257", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0430dfaa-8b69-4c4f-8749-d44d6790721c", "sighting_of_ref": "indicator--bdb72024-1a8e-49c8-a4f9-10c8bbe49257", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbf95bc-029b-4e07-81ee-04e57881a5ae", "sighting_of_ref": "indicator--293ae04e-68e4-425d-8466-a1e4fae241fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e0bb04-50d3-4c71-94a1-d87809569f0b", "sighting_of_ref": "indicator--293ae04e-68e4-425d-8466-a1e4fae241fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2bb273-257d-4a74-a381-4c0aa156da38", "sighting_of_ref": "indicator--7b0ec91d-0bdb-4b5a-a525-b6ff855102d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8702d1-9a43-49e3-b704-505b46031684", "sighting_of_ref": "indicator--7dd85936-a2af-45f1-a7f2-11d74b52482d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e67018c-9a96-4ff3-b128-de760ceac068", "sighting_of_ref": "indicator--8024827f-5387-451f-93f2-82d75b472215", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ba9e96-d369-41dc-a607-af1530de7f41", "sighting_of_ref": "indicator--70642626-4e52-468f-93d3-268cd0d396c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf908634-7bf4-49b6-acf8-cad80f8e444a", "sighting_of_ref": "indicator--c4aa41a0-d730-4629-b362-f63330f3d329", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7ec801-7aff-4864-bcd7-5df43e27a92b", "sighting_of_ref": "indicator--5b8eb4c6-58b3-4341-ba22-ac2388af03cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c146cbb8-fba3-48ca-95a7-56cc2c5d6b56", "sighting_of_ref": "indicator--4f26fe89-2d79-4de3-882a-3f4dfc85fa42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56487e9-10b2-4311-8191-7c9f13b1a0fa", "sighting_of_ref": "indicator--db3d1f01-1f53-43da-918e-fd735e3af227", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4832ae57-3f9e-4105-9928-e04ae43cd054", "sighting_of_ref": "indicator--bc0bc086-dee0-451e-902e-69430c0a72c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b4627a-168d-463f-a3a1-172a02e34084", "sighting_of_ref": "indicator--7c46c2a2-8b4e-4b2e-874a-65c64cf7d9f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1e6438-b0e0-4a6c-92aa-7b01be3c82e0", "sighting_of_ref": "indicator--7f6bb013-5f56-4d5b-b2ce-8a7d7a14a67e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9b4977-32db-4ee1-bddd-294f743f1579", "sighting_of_ref": "indicator--ed1d40de-13de-4313-b069-1abcc4818fb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e8c589-20a1-42b5-86f5-12fb0b789d2f", "sighting_of_ref": "indicator--ca69ce61-03aa-441e-bdc6-d39cef27d9ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcbdd3c-e552-45b3-abbd-ea9d7582331d", "sighting_of_ref": "indicator--d64c08f6-a208-4dd6-afa5-9902d1ac5bec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c74232-f399-421c-baeb-b00e96fde18d", "sighting_of_ref": "indicator--5b49e527-d257-4342-8b2f-788407cb1d41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab78752-c1d9-4176-8225-3797906a7aba", "sighting_of_ref": "indicator--813c424b-33f1-4b0c-9475-5ab000d94905", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a03c6e-1c22-47de-a700-9cfdf91a6df6", "sighting_of_ref": "indicator--813c424b-33f1-4b0c-9475-5ab000d94905", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87eaf8d9-5fe1-4604-988d-5ab6df4af2d3", "sighting_of_ref": "indicator--6372a46f-a8d9-4814-bc88-204d5ba02252", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46e65a7-ff40-4eb8-b675-8b3257eebb92", "sighting_of_ref": "indicator--cf260aee-8605-4d86-bc93-22f2f198ea6a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282dea17-cd83-4637-9c29-4c3ccdf679f9", "sighting_of_ref": "indicator--18e50421-8af0-4c11-ba47-c5ee6e4f75f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04de8959-64c9-4bb0-aa01-07df5f94e192", "sighting_of_ref": "indicator--18e50421-8af0-4c11-ba47-c5ee6e4f75f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776c0f93-d77f-4882-9829-f3ccfcd72ee7", "sighting_of_ref": "indicator--3c16173c-df8f-42cc-8d0d-170b11ba8f28", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f73b9f-f1fb-4e93-9b2a-db8969d05a07", "sighting_of_ref": "indicator--3c16173c-df8f-42cc-8d0d-170b11ba8f28", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7636535-52c2-4fd3-8768-34514a317aa7", "sighting_of_ref": "indicator--d49d6a26-956f-46a2-9c38-ce3727858863", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16cbd0c-eaf0-4a4d-8d9e-909062ad1ec7", "sighting_of_ref": "indicator--9e9f5880-d8c9-428c-9d52-320424eb48cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045ae133-5dad-4916-a13b-cf16b5a65b45", "sighting_of_ref": "indicator--9e9f5880-d8c9-428c-9d52-320424eb48cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec98a9de-b23a-4aca-b4d9-63a9d8300903", "sighting_of_ref": "indicator--3259c7c1-c5c0-40dd-a61c-c42558d2d06d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201cc719-c5e3-471e-87cd-73ef74f9df83", "sighting_of_ref": "indicator--4ab5dcfc-66cd-48ad-ace9-7b99a90757c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c4bd19-7eed-48fa-b2fa-837e4650b9c3", "sighting_of_ref": "indicator--3ba8e618-88c1-4d4f-9801-4939dce0ed8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22842dae-b2ff-4c29-bcb1-5c7ad35e88d7", "sighting_of_ref": "indicator--3ba8e618-88c1-4d4f-9801-4939dce0ed8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255bd4f5-b7fb-4224-a2ae-930434573f61", "sighting_of_ref": "indicator--3bbf988c-d12d-448b-9a09-adf0cdff2cb3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b691bc26-22f9-4b5d-b47c-80c9233adc84", "sighting_of_ref": "indicator--d5d37e7d-6f62-4842-ab98-5b45dc9b3bfc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cabe5b-44e4-4295-a92d-29c635610101", "sighting_of_ref": "indicator--5fc7ea06-1f76-4c80-8544-99007e18a564", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34559762-3270-450d-8504-39f279de1b6c", "sighting_of_ref": "indicator--5fc7ea06-1f76-4c80-8544-99007e18a564", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec8efe4-855b-4172-9afc-92948fc3c815", "sighting_of_ref": "indicator--34ec292b-09bb-4b8a-a346-b69acd2bf44a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab26927-8c3e-4ce5-872e-6007a354390e", "sighting_of_ref": "indicator--295f5872-8090-4b94-8902-76b701894738", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70e3a8d-97e2-4142-8b1e-ddd159943ff9", "sighting_of_ref": "indicator--adc28da9-205c-4267-9ec5-aca6077a9fd9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e2a1da-883d-4ac9-89b3-397960565031", "sighting_of_ref": "indicator--685efdff-0488-4efa-a41c-38b3c4765e2a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c332e9-493d-47e9-9f5a-0610da58fe6a", "sighting_of_ref": "indicator--52a696d3-50ea-41ec-b8cd-136f86376840", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905caefc-aacb-42ae-b85d-fbae2dd9e356", "sighting_of_ref": "indicator--a8535db7-81dc-4814-8183-bb8558f98da3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec63ca8b-0e39-45ab-9883-2c02fd49828e", "sighting_of_ref": "indicator--c4aa6d50-1fab-43c1-8279-df484b7fead0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c6d6a5-e0d2-44fc-9884-5aac0b949fa4", "sighting_of_ref": "indicator--d82b1cb1-94c4-44ae-bf8d-a32dd4ce7516", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01db1fb-63c1-4b3e-93da-2e5541ece8e5", "sighting_of_ref": "indicator--d82b1cb1-94c4-44ae-bf8d-a32dd4ce7516", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37731b1e-fa10-49cf-8b62-3bf86ab2140e", "sighting_of_ref": "indicator--af6a8de1-6819-47c3-a414-48ef9cf60ab3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b700817-647b-4c8a-8933-0f95d010fbab", "sighting_of_ref": "indicator--31cb05f3-eb02-4f96-9263-9c6ea6b9c056", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4598b6-958e-4267-adf5-20f1832bb4ac", "sighting_of_ref": "indicator--cc251db1-6e90-4283-b6e1-b60a177d1a8f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e7ec1a-8986-45ee-ad25-9ce4d8f9d400", "sighting_of_ref": "indicator--da20cf3c-9fe0-41cd-910d-694aaec30389", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba0875a-6380-4a9d-a200-ef4bbc8e6a92", "sighting_of_ref": "indicator--da20cf3c-9fe0-41cd-910d-694aaec30389", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce837822-d55e-4022-9d45-af98e9250d1d", "sighting_of_ref": "indicator--73697ee7-6168-4050-8e76-b4e5ae3f2927", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f367c9-3fd1-48e8-b1d6-fda041d11c2e", "sighting_of_ref": "indicator--73697ee7-6168-4050-8e76-b4e5ae3f2927", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649a05be-7f8e-4459-adea-b3a509957d04", "sighting_of_ref": "indicator--475b9400-725a-419b-ae88-0cbf1b8cb7c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2918b92-9aa3-429d-95ba-cafad793f4bf", "sighting_of_ref": "indicator--8e333102-9beb-423a-99de-cc365861c445", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1955f131-5238-4474-8785-3f066a7a76c9", "sighting_of_ref": "indicator--ecaaa9b2-2988-4b23-9e47-07ae3c8ac352", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c607cb-6f8a-41bf-ae95-e144ee785228", "sighting_of_ref": "indicator--0a3d9a37-526d-497c-be5d-cd73e86ceade", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7c44f2-ab93-44d2-a577-f5e1e99ec995", "sighting_of_ref": "indicator--8626bab1-d205-46e3-88ef-4f18f2158391", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c5fb88-6a10-4668-b587-c1e198902b7b", "sighting_of_ref": "indicator--76ee289d-90d7-49f4-a072-ad0564f81ae6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ed90c9-4bcc-4a15-b9d2-76decf22387c", "sighting_of_ref": "indicator--f4a5488b-d7f7-4e26-b1ad-09344392f9ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0eac10-c99a-471d-9daf-9f6c7f6e8305", "sighting_of_ref": "indicator--f60ffee3-8d3c-42a2-9133-dfb2cda2325e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c938e32-324c-4f6c-8707-93761fd2fd43", "sighting_of_ref": "indicator--5217323e-9389-41e3-9e7a-7222d4623cde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7537e6ed-c410-4909-be45-90ff726c0fe2", "sighting_of_ref": "indicator--202c937f-9127-4942-b1ca-05604bbeb3db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85711232-ff02-41fe-b0cd-4e9164c1edd6", "sighting_of_ref": "indicator--6ba60619-c4ab-42a7-821d-3bf6fb71559a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5630992-3931-44d1-816d-ee944f2a7f6d", "sighting_of_ref": "indicator--693a2efe-cf6b-4715-a073-9e8ca3f45b42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e35acf-4bd9-4f39-9715-1b2e3c32d392", "sighting_of_ref": "indicator--bd5a7f8b-b721-4187-811a-a28e31812d63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e423a1c9-e721-4603-8976-c2ee94a52a17", "sighting_of_ref": "indicator--00ec01ca-26ee-4d37-9187-72af1a6d2b99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b67cc32-e735-4a15-8405-81c469a911c1", "sighting_of_ref": "indicator--dc1e7d18-cc77-4e9c-b7e0-ba04113cddab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae08f799-7b6d-494e-9268-c115e4cc6232", "sighting_of_ref": "indicator--ab7ab243-7476-4676-b97e-d41c352262a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04dd8e3-022d-4149-af1b-fa44f9e543cc", "sighting_of_ref": "indicator--e1c3127c-7e96-44d5-b251-db2f43499d18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a674feb-ce02-4cc2-b735-a03e18ea97a1", "sighting_of_ref": "indicator--7bfad025-6ec3-48a4-9ffc-362f6b864909", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c98e47-9af7-4a35-9c12-e954795fcb5c", "sighting_of_ref": "indicator--7de3e7d1-e70b-4692-ad8f-e3b076964f9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4165e5-c570-4cab-8268-9591c92c5f8e", "sighting_of_ref": "indicator--0127d90e-85bd-4b79-97ef-166c0d3b8abd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ccd73a-2bcc-4bb7-af95-e703bdeb1274", "sighting_of_ref": "indicator--b9752ce0-817e-4a26-bb15-16c09c3d9b0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a31a82-1f16-4084-90c9-96eedd652d76", "sighting_of_ref": "indicator--b1d169fd-7ff4-4632-aaf9-1708811e6ba2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a449a975-67e6-439a-b41d-ea19f9d224dc", "sighting_of_ref": "indicator--84e94976-1010-4497-b3f9-ed538094996d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cb5f0a-9810-47eb-b2a9-0ea83e89f3e0", "sighting_of_ref": "indicator--41b8ed50-f84a-400d-be06-3bae1dcdcfae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e68d79-d638-453d-8208-4d81721fd7e9", "sighting_of_ref": "indicator--15d2da9c-a72d-455d-a97e-d3ba2d488d5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980fe57b-f46b-4e25-9170-b39a10823715", "sighting_of_ref": "indicator--defd78a7-d206-4a7c-a005-62023cb26736", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1b52b2-d713-4694-9340-2b6a4bba5007", "sighting_of_ref": "indicator--96a58215-236b-490e-8659-261081c78df1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d2de2c-2de2-4dbc-a9c3-679654610b6a", "sighting_of_ref": "indicator--bdf3f421-438c-499e-896a-4054f99d32b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c4265d-385b-4171-b86e-9cb2952704df", "sighting_of_ref": "indicator--d0f9fb6b-9bbf-4031-b14f-19798023ecea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeb8253-bbb6-4890-ab63-c3d30f180e37", "sighting_of_ref": "indicator--235413f4-f166-4b8a-8da0-1770b7987146", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7637067d-9120-45e2-ab77-0b5f0e92f6b4", "sighting_of_ref": "indicator--cbaa63dc-2226-4f56-86db-e094a99de04f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdbba9f-86b4-4406-8568-7f0d78bfcec4", "sighting_of_ref": "indicator--169550c1-3417-4818-92af-b7d9c8185081", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad3b379-b4ff-4906-ab3d-dd0e274e40ad", "sighting_of_ref": "indicator--5ee1bbde-9e6e-4ddd-bcc0-0eb74e8ce4bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f3c2f0-bcb7-42c3-ae05-7c2532db1744", "sighting_of_ref": "indicator--2f477b71-26af-4ff8-9826-ceaee06938ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acc78cc-19a7-4675-89c3-eefe37e5734f", "sighting_of_ref": "indicator--48a8e0b3-a94c-4f91-a411-fcaa9e08af01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad97c8d-1678-4094-9297-5bb1b5dea382", "sighting_of_ref": "indicator--5c97c5e7-09c8-4b10-a333-fd6902dacc40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbaf8a49-669a-4778-a595-b4965a41ec86", "sighting_of_ref": "indicator--964e423d-2245-4653-b7aa-a174f9bdbf74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b66d1fa-8734-4b43-a164-798fd82852fa", "sighting_of_ref": "indicator--e035183b-5e46-4e11-a3ec-2074159f1c49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d04e59-35b3-4051-9f84-2a7337de1af2", "sighting_of_ref": "indicator--0f202f1b-17fe-45d8-b806-0cef6dec9860", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89049f8c-ab96-49cc-8bca-7f041111c35d", "sighting_of_ref": "indicator--99691b68-196a-48fa-9ea3-4cc2096de591", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf34e8e-11d8-4696-a517-318634b3df13", "sighting_of_ref": "indicator--2022baf1-7f0c-4322-b7cc-c7ba7754d7ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68040138-aba5-4bb3-aa0d-d5e22d3c45b6", "sighting_of_ref": "indicator--6e907d79-a046-46eb-b33e-9a9a185d2e1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d2a0cf-a134-4da3-941f-ddd6d7ab31e3", "sighting_of_ref": "indicator--ab5348a1-c545-480d-8ba9-753918aad474", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b911b1a8-6acf-47a6-80b4-d64a928adf04", "sighting_of_ref": "indicator--d766f07f-b493-41fd-80e0-09218ac8c3e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0da8e1d-872b-4fef-81d6-c26015764f8d", "sighting_of_ref": "indicator--5e576c66-579b-4920-9f88-8db979c91c8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5640ffe-c883-4f02-bc4e-1faaed66c937", "sighting_of_ref": "indicator--29989aa9-7619-4fe2-8eec-45f93dcdc865", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc8dc6a-4d7a-4a15-bec5-d79e54de7380", "sighting_of_ref": "indicator--307a031b-c5a3-4fe4-8a06-30abe4658d0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e88964-07b4-44db-aa18-d5afec993790", "sighting_of_ref": "indicator--82c817bc-6ef4-4692-abf1-51ed7392c46b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930b4d10-53e3-4e60-b035-f3ae737b6e6e", "sighting_of_ref": "indicator--1f7779fb-ebd4-4ed5-b692-4b29646b68ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdddab6-309b-40d8-9030-f6d4dc7a07da", "sighting_of_ref": "indicator--da435027-3237-49b4-99f4-518faf6a075b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd05d38-6db8-4069-8016-e67bb40f2a37", "sighting_of_ref": "indicator--7587645f-b915-4a75-b39c-a56c0bcc546e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2940fd-440d-4cf1-ad2b-8af18641936a", "sighting_of_ref": "indicator--ec894ea3-1247-4658-8661-b05486aa1a2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de492770-a193-47b4-87b0-cec3983f4373", "sighting_of_ref": "indicator--4dcb9ea5-d5e9-443a-b7c1-c20df12513f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e62a015-ff5c-4792-9ae8-86a8a91082e7", "sighting_of_ref": "indicator--99be9232-6eb8-4b11-8543-b927ae5f266d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87fa074-1b49-4702-9eb2-457c08254275", "sighting_of_ref": "indicator--79574328-a806-44cd-a361-8827fc0ea3f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa0bb41-aac5-4a53-98a2-551f829481ba", "sighting_of_ref": "indicator--ee96547c-1bf4-41c8-8cd6-6b4fa849bad0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b33302-0c48-4112-b046-ad1d34b59545", "sighting_of_ref": "indicator--f22b7b65-f2cd-467d-a938-e14897b0225e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afd563f-1d3b-4ca4-aebf-3308f9b0748b", "sighting_of_ref": "indicator--122a3555-6580-4236-8fc2-95a06c146cb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0daa0622-4bfe-4008-97e8-b185da64f470", "sighting_of_ref": "indicator--49d29fdc-8e92-4df0-8e84-2b886c7185a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d65bceb-557f-40f0-9555-85e25eb30cb8", "sighting_of_ref": "indicator--87c027c8-a79c-4d48-b628-cf08f6ba5193", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371766e0-7c45-4434-bb39-ade77102a914", "sighting_of_ref": "indicator--18e3c24f-f27c-4a5a-930d-055912c4a0eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42f1e6b-7b8c-4929-9ae2-ed03a83c544c", "sighting_of_ref": "indicator--336cfc7d-20be-44bb-a9e6-68b99fb4a333", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae903f38-3e54-4020-8b20-a44aeb71a111", "sighting_of_ref": "indicator--69f4291f-5156-4177-8583-f336aa209fa1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79441fd-f013-4729-ac78-488720b2f808", "sighting_of_ref": "indicator--68447c5d-25d7-4d4d-9266-9f1721fc4fcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9004ccd4-31ef-4f3b-bc4c-62856632f376", "sighting_of_ref": "indicator--401491d8-79bf-41f6-aea2-fa6994649ff0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b13eaa-3406-4e2b-9e2c-740a720e550e", "sighting_of_ref": "indicator--13d8e789-d16d-4de8-9161-5877db1dca53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47c746d-5c14-4ff0-ab73-93d81adcbdf4", "sighting_of_ref": "indicator--9109684b-b9a3-4135-8d89-1838de09ccd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece44599-1c34-402f-817e-904ff56c3313", "sighting_of_ref": "indicator--3c9eec19-3d24-4578-ad80-1b4edd7a5b71", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69666cda-98cb-4194-a43c-34d59a846311", "sighting_of_ref": "indicator--e7c6a8c5-f514-4195-a650-601494b2a31e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62a20d9-5d9b-4dab-9f37-5cd6e3278ad6", "sighting_of_ref": "indicator--e6a7d8e7-715f-4e55-a63d-e3f403ecfac2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c631e5f-77aa-4b60-af81-de1f5430f31c", "sighting_of_ref": "indicator--e6a7d8e7-715f-4e55-a63d-e3f403ecfac2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4eb8a3d-d334-4b2c-a6dd-dd68a76f9a1d", "sighting_of_ref": "indicator--6e8f32a6-2ed1-4bd1-a20c-9baf6b029d3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b462268a-46ab-4f5a-8442-71598f0be5ff", "sighting_of_ref": "indicator--487ade0f-d5df-470b-8a7d-8279c2bf9002", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbca413f-92e6-4f77-adcf-ea0f875fd9da", "sighting_of_ref": "indicator--b145c311-60d9-4551-b66b-902b31915a1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c91d478-004d-4dd8-9769-7a7d83e6decf", "sighting_of_ref": "indicator--ead583a0-3696-4cf1-89f9-8e6b68d0c408", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb03abe-c385-4693-bc64-4a7e14fae2e3", "sighting_of_ref": "indicator--7e26d431-901e-40ad-9516-d8e417898199", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e243591e-cdf6-491c-abf4-6933c55e1cca", "sighting_of_ref": "indicator--7e26d431-901e-40ad-9516-d8e417898199", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cdbd0b-28a4-4c4a-ad12-f3cc6fed0306", "sighting_of_ref": "indicator--6e88c969-0833-4386-9a8b-1448a22fbc8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046eaa9b-6530-482e-92eb-b80ba679937b", "sighting_of_ref": "indicator--68de64eb-8b11-4005-8829-77e7d50765d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1848bd7-b733-4c08-9c34-856398ecc069", "sighting_of_ref": "indicator--68de64eb-8b11-4005-8829-77e7d50765d0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19300ad1-1d12-4fd9-b0e9-607010cc2e46", "sighting_of_ref": "indicator--bab02a3c-5b03-40c4-971f-54c8733501bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a136a0c7-9afb-43d6-99a1-cbade63572e5", "sighting_of_ref": "indicator--bab02a3c-5b03-40c4-971f-54c8733501bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8c3784-bef6-4971-864d-7878c097ac98", "sighting_of_ref": "indicator--57e7f5aa-c716-488e-bdef-d30c4857fbec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5533fd7-c8c4-4fbc-ab77-068ebadb288e", "sighting_of_ref": "indicator--825df335-42df-4c79-8abb-413719eade01", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d63d73-a233-4327-8860-7f4c70468656", "sighting_of_ref": "indicator--81015cb6-5c6a-4566-aeb5-263f8ef4d8a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696b59a2-627b-4b32-8fb5-e038461fee1a", "sighting_of_ref": "indicator--81015cb6-5c6a-4566-aeb5-263f8ef4d8a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a00ccc4-ec83-472c-954b-30c927a1f9cd", "sighting_of_ref": "indicator--f5684e32-93aa-4469-a651-80b94971bb11", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091e398a-724d-4989-b6a9-f985041765c7", "sighting_of_ref": "indicator--77b30ec6-56d6-42da-8b5b-20dfa882f68c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444e9bbd-103b-48c8-a4e2-fad67dfe5fce", "sighting_of_ref": "indicator--77b30ec6-56d6-42da-8b5b-20dfa882f68c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536c3537-a2e6-45d3-bc2c-cb690934b13c", "sighting_of_ref": "indicator--f855f050-c960-4843-9037-964f57f9192c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7f1c27-08b6-49e2-abd0-2f02614660b2", "sighting_of_ref": "indicator--f855f050-c960-4843-9037-964f57f9192c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddad526-ce83-4591-8bbc-a6242f09e98a", "sighting_of_ref": "indicator--724ad0df-db1b-4ac4-a08b-93f96c001746", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eb184d-3a68-4628-91fc-34b2afb8c435", "sighting_of_ref": "indicator--724ad0df-db1b-4ac4-a08b-93f96c001746", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbff939-fd7f-4193-8281-c1561e5d153f", "sighting_of_ref": "indicator--42d7817d-8a52-43f2-b6e5-3f33d8c1f6f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad3b1b0-292e-4b5f-8551-71533fa497e2", "sighting_of_ref": "indicator--f38b56af-874b-4ba3-a273-2889d7cc30ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7923cd4b-827e-44ac-aa22-3abceff4deb1", "sighting_of_ref": "indicator--9b2b74bf-79d3-44ee-aedc-0d598d844e6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f90aae7-5d22-4914-9e94-32c0cca5416f", "sighting_of_ref": "indicator--a7820ea5-eb12-47ee-b00b-19a24ded3a5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7044c14-76cc-4880-9d37-46ea930131be", "sighting_of_ref": "indicator--a7e6597a-f011-43a2-906d-cb2fa28628a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4aeb56-1adb-4619-8639-26d71d5ec02a", "sighting_of_ref": "indicator--a7e6597a-f011-43a2-906d-cb2fa28628a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6547b6-3ff9-430e-991c-a138da034072", "sighting_of_ref": "indicator--4f78fb8c-679e-432c-846a-55a17aa105cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7192df5-a364-4216-88e3-5b96fe2278b3", "sighting_of_ref": "indicator--47738cdc-e1ae-4dc7-9a53-8dccd03ac7e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ae4020-12fd-4083-a1a6-8d2d114dc971", "sighting_of_ref": "indicator--ef47c746-7538-4e1a-b335-133e14a38343", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f5cb51-72e2-4b6e-8c19-76bc03ac8076", "sighting_of_ref": "indicator--ef47c746-7538-4e1a-b335-133e14a38343", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9926934e-1f1a-493d-95c8-fa765eb0fbd5", "sighting_of_ref": "indicator--b0848cf3-917d-444c-83eb-2ff3babec646", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d788ef3-2002-423e-9d08-1a09c6fe43ad", "sighting_of_ref": "indicator--c79d7acd-795a-427b-b40a-0a923b075d23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae2f671-c286-4d3a-8e5e-83298164cd53", "sighting_of_ref": "indicator--c79d7acd-795a-427b-b40a-0a923b075d23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a36854-1db9-4198-8aef-4a426526f3ee", "sighting_of_ref": "indicator--7e6c6f69-d1f5-4710-8bff-89f82d6aa7da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c44f53e-2dd2-4091-9dd3-ced1f8962c88", "sighting_of_ref": "indicator--d8e8f7f3-4abb-4043-8d74-6936b9b3176b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa42afe-1ac8-4c70-9cb6-f97d72c2e9a9", "sighting_of_ref": "indicator--dc774e17-b506-4b7e-a6a6-f444d4a1bb51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7f1280-3991-497a-8bb7-10f80a8d25e5", "sighting_of_ref": "indicator--dc774e17-b506-4b7e-a6a6-f444d4a1bb51", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16da09e7-9619-4420-a8f7-27a7736f0a8e", "sighting_of_ref": "indicator--3f2cbaeb-ffaf-43f2-be32-6f215de04605", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b8db5f-d849-4375-842f-6c2b0946ca8b", "sighting_of_ref": "indicator--3f2cbaeb-ffaf-43f2-be32-6f215de04605", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a356f7d-1166-443e-a95f-1e68d3e3a706", "sighting_of_ref": "indicator--2add1ba3-0202-4051-9bde-78f18a491817", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a0a802-9b91-4c49-ac20-76a8193bd107", "sighting_of_ref": "indicator--2add1ba3-0202-4051-9bde-78f18a491817", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f069a2e-04d7-4c15-952e-37eccf463a76", "sighting_of_ref": "indicator--f4d2a181-7776-4cf7-b36f-6c57d8ab5bab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d9b2bf-f541-4e2c-9e2a-996a27aacdae", "sighting_of_ref": "indicator--f4d2a181-7776-4cf7-b36f-6c57d8ab5bab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52da054-4dfb-4541-868e-3dd268f677c5", "sighting_of_ref": "indicator--f4b9a701-79b8-495e-b63e-49c4c825a9cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba19367-016f-4ad5-99ad-5df20cabae8a", "sighting_of_ref": "indicator--94a53796-7c84-4903-b31f-0ab12b5c38f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd760b5-51bc-47c8-b616-206c598984ee", "sighting_of_ref": "indicator--94a53796-7c84-4903-b31f-0ab12b5c38f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4ab54a-7f7b-41fe-9463-0cbeba9ac951", "sighting_of_ref": "indicator--75bdb75e-cd2a-4ea0-a053-4bd6e7622708", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65e3514-10a0-4875-b2f4-dfaaff58b6ad", "sighting_of_ref": "indicator--75bdb75e-cd2a-4ea0-a053-4bd6e7622708", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f14e92f-3d0c-4df4-a994-772158e4a9b8", "sighting_of_ref": "indicator--5d739121-3be1-4eca-96f6-b1371fb65cb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cf9dc0-ee80-41d4-9394-8d439367c705", "sighting_of_ref": "indicator--4e2b8f9b-a841-4eb7-9b99-b9de641f85e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccab34b-d608-4897-90ca-a1ed82a00448", "sighting_of_ref": "indicator--3df75c95-6e57-4552-9009-a66b67f5e5bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4db1ce0-1b5b-470d-9804-d4a8c0322689", "sighting_of_ref": "indicator--3df75c95-6e57-4552-9009-a66b67f5e5bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19fe233-6685-4ed4-8914-2874d20ef9b4", "sighting_of_ref": "indicator--e8c98173-6c10-4267-b51c-3de2b23db820", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ec1d7b-4d58-4e30-8cf1-797f48e66358", "sighting_of_ref": "indicator--e8c98173-6c10-4267-b51c-3de2b23db820", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a3dd78-dda2-441d-9fce-e8283d7bdf3b", "sighting_of_ref": "indicator--f9c77dd7-2e44-415e-a127-1bf2ac859d81", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e490c5-e197-446e-b97e-0367e4cf039f", "sighting_of_ref": "indicator--f35038b0-e185-4684-a893-c3d53f4f8e6b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e6c6a9-c86e-40e0-9d64-b90f5b99e361", "sighting_of_ref": "indicator--f35038b0-e185-4684-a893-c3d53f4f8e6b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dc8229-bbb4-4f82-8d10-2efe2f5cba3f", "sighting_of_ref": "indicator--7f65b790-0d76-4aca-9b9b-9379518e87aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a3e965-0180-4d0f-868f-07d946124001", "sighting_of_ref": "indicator--153f233c-0b79-4c22-b07a-31a353085e9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca27c94b-2307-41d8-a06f-9f13b5267848", "sighting_of_ref": "indicator--bd56ea59-42ef-4c9e-bfe5-70e2b69fa3f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9a5325-4b24-477e-88cc-9d92cf5a8a1a", "sighting_of_ref": "indicator--57e72291-9a75-469b-9cec-40b15752d302", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a05e50a-f5e0-4964-b2ba-41853725b297", "sighting_of_ref": "indicator--9ce41b99-2810-4caa-9b27-3a22a35bc3d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0615683-10c9-4d3e-b82c-e55989462642", "sighting_of_ref": "indicator--9ce41b99-2810-4caa-9b27-3a22a35bc3d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbfacf7-0d46-40ad-abd3-ff9dfc662bc1", "sighting_of_ref": "indicator--c0ab71c7-82c8-464b-8ec6-5f42c30809a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75038652-c21e-4e6d-9653-8d757867940b", "sighting_of_ref": "indicator--c8098c49-6f50-4487-9191-f457ccca6a81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4766e76e-2cfb-4fac-b8fd-7dc1f31d3529", "sighting_of_ref": "indicator--c883f97e-e6ee-452c-b6b8-d339d049f42a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b51a26-c642-4eb3-a995-ebfe7255157d", "sighting_of_ref": "indicator--f91f07de-dbcb-4d75-833e-0deb13ea5652", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dd513c-761a-45f9-bb99-3a8404dad8f0", "sighting_of_ref": "indicator--f91f07de-dbcb-4d75-833e-0deb13ea5652", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfccbda2-fbc2-4956-96a9-2f9edaca2763", "sighting_of_ref": "indicator--34d42b14-0521-489d-8a76-5b69132fc2c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d326070c-5046-43cb-80c5-42ec42e84ab4", "sighting_of_ref": "indicator--f9545e11-4e04-4bae-960e-0a4d55c2c5a4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98c0763-2fe0-46b3-830f-30a75e22d0b6", "sighting_of_ref": "indicator--ad7458b5-83f8-4291-9f12-07f8c8722d24", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444c6446-9d6b-412b-ac79-d0057644a264", "sighting_of_ref": "indicator--423a6627-de9b-4da9-aeb8-80a316022cb3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a962d324-2756-454f-b4e9-db037809d8d6", "sighting_of_ref": "indicator--096d1301-b00b-4472-9df4-ab52ef49c9b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6735c455-463b-4366-ab1d-126f293877fc", "sighting_of_ref": "indicator--096d1301-b00b-4472-9df4-ab52ef49c9b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20c295f-e350-4c09-a025-73ffcd4cd05b", "sighting_of_ref": "indicator--db34d9b6-9fed-4680-853d-0d1dcc991a0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a0bc38-1458-41e4-9840-779d8de2cb72", "sighting_of_ref": "indicator--3dc7856e-376e-49e4-9b8b-ead0e232380e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db333797-5622-44da-b5f5-5dbbf0423809", "sighting_of_ref": "indicator--3dc7856e-376e-49e4-9b8b-ead0e232380e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7261d656-1ee1-44d4-bff8-3fe3ec052784", "sighting_of_ref": "indicator--98f258b6-d263-4135-a763-a1744ec7cb3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37b9f15-8e28-41fb-88a7-34ec00755f93", "sighting_of_ref": "indicator--dfab066d-0cf2-49f3-a152-20373ed4d736", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfffb4f9-491a-4e01-bc03-a50df8c16267", "sighting_of_ref": "indicator--804f3522-f1ce-417a-8f72-184d7b6fe63f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acff6575-60f5-4073-9998-4fbb207159b6", "sighting_of_ref": "indicator--804f3522-f1ce-417a-8f72-184d7b6fe63f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cd1c1e-3bfa-4dd1-be6f-e460aa606920", "sighting_of_ref": "indicator--999c5f68-6873-4221-9f92-2c1690fdbd3f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3593fc3b-2d71-4c89-9779-b6f6436f3b6b", "sighting_of_ref": "indicator--b7e7bc31-6933-4563-94ca-835a1224aef6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67746e0a-2d3b-4076-9277-2a25f2eb6b8a", "sighting_of_ref": "indicator--568afabc-f719-4531-8220-9eda6d0af123", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3846c06-1f74-45b0-a6ac-2c96e18db05a", "sighting_of_ref": "indicator--568afabc-f719-4531-8220-9eda6d0af123", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be74648c-1943-42ee-ba3f-57921903bea2", "sighting_of_ref": "indicator--ca1c7df6-4114-42aa-9f85-fade15250c2a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92533f71-90f5-4a3b-9cba-437cbe6edbd0", "sighting_of_ref": "indicator--5c572b0e-d5a2-4062-8735-b22e9f2aed2f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac02db7-cd0a-46fd-9e96-b3436678e672", "sighting_of_ref": "indicator--5c572b0e-d5a2-4062-8735-b22e9f2aed2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6b6966-6318-4b48-bad2-b4213b760590", "sighting_of_ref": "indicator--3a1e75f4-f7b8-4bba-8af7-6406cfd8102a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb4bd35-bb22-4a33-b1ef-7d77a84f7544", "sighting_of_ref": "indicator--cd678ca6-46f1-4683-937c-ce64a6b4e5b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df36b271-0c0b-4ff5-aa0e-30d8dadcd9e3", "sighting_of_ref": "indicator--cd678ca6-46f1-4683-937c-ce64a6b4e5b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711c0b03-30b9-4cce-8c7f-eb371b3f9c6a", "sighting_of_ref": "indicator--fa95ea57-95d2-41eb-ace7-2c2f64975ee9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3739ab44-ceea-48d4-87d6-9fcdffba8143", "sighting_of_ref": "indicator--e3b8e546-c46c-4f60-93b8-9f5a899947a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67026025-d12b-4772-8a2a-c1fcf29fb77b", "sighting_of_ref": "indicator--07332537-fc62-40b4-8e78-0e682ba8211d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da18a2b-fcdc-4aa5-bb3e-ccea8020f94f", "sighting_of_ref": "indicator--ec0d8210-2299-42f0-b8b7-68a08280139e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97d9370-9926-4d38-8759-fb2a5d3f7e12", "sighting_of_ref": "indicator--5d6aab91-f672-43d6-b671-440239bc815c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff2f39a-1dd4-4edb-a290-4b8b034209ef", "sighting_of_ref": "indicator--96132513-bfab-477d-8d13-d2f96bbfaa66", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cc608a-d01d-4be8-bd11-c53b6ceb22de", "sighting_of_ref": "indicator--52cad6f1-b693-4455-9d9a-f288d659f577", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586ecdd2-0e39-41c3-8868-57e44808ed4c", "sighting_of_ref": "indicator--52cad6f1-b693-4455-9d9a-f288d659f577", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773d4943-8174-4ada-90b3-055611eaf635", "sighting_of_ref": "indicator--2ce161f9-d4a8-4074-8fe7-8d61c1df0683", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15d25a1-f2ff-4ad6-a5b4-3db0b7918588", "sighting_of_ref": "indicator--dfc787a0-85c2-40e3-8622-a2e357e20d36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e500150a-b200-4f97-8df2-d329044d4e3e", "sighting_of_ref": "indicator--734542cb-fcdf-4a12-8a43-6701c1d79831", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba430fc8-50c7-4f53-89ed-ceadd38928e6", "sighting_of_ref": "indicator--79d73e5a-1cb3-4cb8-a7f8-4a3137925448", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2530b1c9-7789-46e5-a8e2-3b4d968c334f", "sighting_of_ref": "indicator--904168a8-dc2b-44b2-9ec7-4a12e4319982", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a9310f-7072-41fe-a868-0165e929130a", "sighting_of_ref": "indicator--ccd792b0-d5b8-4fb2-a460-a99664efa640", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc592f3-4e68-4081-ad97-8c7ddee40bfe", "sighting_of_ref": "indicator--b209d62b-bfaf-4634-952c-b8376c63fbc6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0464e2-8155-40c0-b538-cf1ee0cb6a0f", "sighting_of_ref": "indicator--188d1e4f-2fdb-4f7d-be51-ddab97f5d99b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66329d10-fca7-40fa-b753-3a579231363b", "sighting_of_ref": "indicator--188d1e4f-2fdb-4f7d-be51-ddab97f5d99b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33133409-7dd8-4425-904b-182a940aa276", "sighting_of_ref": "indicator--852a5eed-f4e8-4d55-8d05-3e9fa1560991", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e7444e-f5c3-419c-a0e0-f7c5c763d524", "sighting_of_ref": "indicator--852a5eed-f4e8-4d55-8d05-3e9fa1560991", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77df43d-f835-4ce8-b9fb-ae6379e0a97b", "sighting_of_ref": "indicator--4e68724d-3918-45a6-a1f3-6907517584d4", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64fef03-d7b5-4a4c-b78d-8c0a246ac00a", "sighting_of_ref": "indicator--5393a05f-62be-474d-b935-1d8c4a69de68", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8fc33b-15e0-4aae-87ec-804dfad290d2", "sighting_of_ref": "indicator--5393a05f-62be-474d-b935-1d8c4a69de68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce3fa1e-bd7f-4a6e-aabd-62784e2c58e6", "sighting_of_ref": "indicator--879ee032-541b-47f6-92b0-68003ee54879", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39eca978-39d7-4ea2-84cf-ca14f7d2a057", "sighting_of_ref": "indicator--18140aa0-92e0-488e-9b3d-25450c0b5e1f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371cdb85-c13b-4c94-b249-48c2fea7ea13", "sighting_of_ref": "indicator--f482dd43-9cfe-487a-a408-8c68151fa4aa", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3532a7a4-ce2c-42a3-b67b-8cc8fb906399", "sighting_of_ref": "indicator--c1e387ea-6021-4f2e-af8e-233588c8df06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e867a5be-a48f-4028-8715-54803e3c1b89", "sighting_of_ref": "indicator--9c6a90f2-bb31-4281-bbd5-ec97001d1c92", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d8ea10-ab08-4425-a3f9-0d96645cc17e", "sighting_of_ref": "indicator--f8351727-9fe2-4d2b-aeb4-9e4c26198442", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c231f1-4a4e-4669-a45d-e4af6f602c91", "sighting_of_ref": "indicator--1a7cb809-c006-4a65-8dcc-1f0044b89ed5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d87a2a-9381-421b-a263-2a392d0f3943", "sighting_of_ref": "indicator--435f4b5f-095e-4135-81a5-c9bfc958f8fd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5ecc77-2b6a-41c3-b177-27c7b1181753", "sighting_of_ref": "indicator--96d5058f-9772-4b83-8ec5-c1cbb2927a96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcab893-f340-4f8b-9133-88705ef78455", "sighting_of_ref": "indicator--96d5058f-9772-4b83-8ec5-c1cbb2927a96", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d276c360-530d-42d3-af63-e7d5d6e68653", "sighting_of_ref": "indicator--daf6296c-49d5-4b82-ba1c-8e961f2a69d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26fd565-afc1-44f7-ab5f-5a3c33d27238", "sighting_of_ref": "indicator--5aea644f-a604-475b-9ae0-c5036ce5a666", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477ce9d6-5c06-43d7-802c-e082a4523dab", "sighting_of_ref": "indicator--090ee22b-0e54-49a3-a32c-647325b349cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c147eb-a6d3-47f1-956f-1861707c54fe", "sighting_of_ref": "indicator--9f17353a-b8ab-4409-beec-8125e02a1cc7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc283a7b-35f2-45fd-8a59-029807272a24", "sighting_of_ref": "indicator--bf871dd7-4e05-4ee0-9030-caeca6672873", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba1aa37-5678-44ce-ad26-a79031f6931f", "sighting_of_ref": "indicator--bf871dd7-4e05-4ee0-9030-caeca6672873", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce85813-a34c-4b07-bca2-f3a3ed815d68", "sighting_of_ref": "indicator--602cef69-86a3-4905-9143-af35283bf89f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36390bcd-b46e-4cff-abf1-513c533b73a8", "sighting_of_ref": "indicator--602cef69-86a3-4905-9143-af35283bf89f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45acb5fc-6714-4757-ad8d-6faf6b80c2ee", "sighting_of_ref": "indicator--ef6681cc-8b48-40f6-9a26-574e9c1edabf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8b4e84-655a-4d59-b1cb-378e1a61a82f", "sighting_of_ref": "indicator--642240c0-a547-48a5-bd50-66297663b112", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b7783c-2a60-4130-9f3e-a48738425f88", "sighting_of_ref": "indicator--642240c0-a547-48a5-bd50-66297663b112", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a85693-6bb3-4623-91e3-647bcc2da779", "sighting_of_ref": "indicator--9db691c9-b37e-45d3-a19c-0ec51a094410", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7379b3-67a4-48ad-b2a6-ede38e48d9b0", "sighting_of_ref": "indicator--9db691c9-b37e-45d3-a19c-0ec51a094410", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369fc860-4da7-467d-82ad-fc24b63d4631", "sighting_of_ref": "indicator--8e368d0e-4fb4-419b-a457-a94ce93c8d22", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aee3be2-4bb4-497e-bffa-174e126e3eac", "sighting_of_ref": "indicator--184dd30a-8b41-4908-96cf-e691e60496db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7924f83-94cb-4f1a-8bd5-444016f38538", "sighting_of_ref": "indicator--54e56c93-3c12-4dfc-b25a-2c48f6627f41", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1d69de-4a5a-45df-9531-e38fde89fa37", "sighting_of_ref": "indicator--63d30ad2-91d2-44e5-94c2-0bbaad104477", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d153da-9e60-4e6a-a3dd-8f18d5d69400", "sighting_of_ref": "indicator--63d30ad2-91d2-44e5-94c2-0bbaad104477", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa0df68-7949-4da1-9c86-bbc633716c39", "sighting_of_ref": "indicator--91f09d48-64f8-42ff-91a3-bdd0f0f85ced", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9b8b9c-daf7-40fb-8de6-9f271b78141b", "sighting_of_ref": "indicator--91f09d48-64f8-42ff-91a3-bdd0f0f85ced", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eef74b-36cb-4e6d-8e55-0ee469fd27d5", "sighting_of_ref": "indicator--3a52b005-d3dc-4424-beec-dfbb7da33106", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cddb1ab-d5fe-47ae-853b-1e52a7e39530", "sighting_of_ref": "indicator--e17e06f5-458b-44bf-b044-1ca28a9eaa39", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbde244-0d89-4ad9-9469-084356c254eb", "sighting_of_ref": "indicator--2bfe5e03-6527-4204-9277-4a69af523db9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c004df-b0fc-4637-b55f-8b6a7cb9c1f5", "sighting_of_ref": "indicator--643a2cf9-cac6-4a6d-a97c-7e7567e31155", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8b403d-3a15-41c8-bda6-2968cb4492d0", "sighting_of_ref": "indicator--dbe8e934-77ba-4484-9551-1e34f922fe35", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991dfa61-badb-4390-b60a-09c993a51dde", "sighting_of_ref": "indicator--dbe8e934-77ba-4484-9551-1e34f922fe35", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762a6e37-b5fd-47fc-bb83-cbec34da07ce", "sighting_of_ref": "indicator--7a45df9e-06a4-46f6-9781-a47424a5a6c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23dd9acf-2559-4e93-aba0-23564f696ce9", "sighting_of_ref": "indicator--7a45df9e-06a4-46f6-9781-a47424a5a6c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67188e52-6259-46f7-ad96-3d39fb2da945", "sighting_of_ref": "indicator--766c2c7c-05c3-4b0d-85eb-403438c38b08", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef515840-d921-45a9-8ef2-6dca81ecbec9", "sighting_of_ref": "indicator--766c2c7c-05c3-4b0d-85eb-403438c38b08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a020481-60cc-4510-b427-6372ac0df9cf", "sighting_of_ref": "indicator--e20f8059-f3bc-4c2d-9753-0307c869cfb8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a214908-e1e7-48f4-adf6-eff14864d6aa", "sighting_of_ref": "indicator--5ccc2aee-8793-4cb8-af16-82d0354fa448", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b31ce2-84f8-4f67-a78b-9f608cfbdc82", "sighting_of_ref": "indicator--a31eca1b-49a5-4129-bf16-1be7badf1749", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eac7ff2-c8bf-485a-80bb-c540d009c4e6", "sighting_of_ref": "indicator--44a227e4-cda0-40b8-a9b0-1dde44fbc8f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd334f0f-6a77-416e-8083-884dc90d5720", "sighting_of_ref": "indicator--8231cfa7-7de8-4c09-899d-816e8fb233ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928bf0b0-1d66-441b-a0ca-47fab315b116", "sighting_of_ref": "indicator--98669d4c-2d25-4bcd-baaa-6801f4da7458", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a0adea-eb71-455f-9ff3-e79fe85557f9", "sighting_of_ref": "indicator--db2cba6a-45ff-43a2-81d1-113414a83a47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ead4dbd-9683-4186-8cb8-be57b3e46c20", "sighting_of_ref": "indicator--a949365a-e1f9-474e-b229-617ea83abd0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc4b934-d075-457a-a649-297bd40ab723", "sighting_of_ref": "indicator--a949365a-e1f9-474e-b229-617ea83abd0d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de6b9ad-dad5-475a-9588-03a92ebacef9", "sighting_of_ref": "indicator--6bfe63a1-8906-4e3b-b44f-f969407c6856", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35484a0e-1912-4949-816c-98d2368b23c1", "sighting_of_ref": "indicator--33b2db6c-50bc-42cf-9d2c-0bbfa5a6d503", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037b3943-7ef0-4b2e-b225-53e91ee0dd16", "sighting_of_ref": "indicator--33b2db6c-50bc-42cf-9d2c-0bbfa5a6d503", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad82ba9-3ab4-4a31-8bbc-57f07a75ad08", "sighting_of_ref": "indicator--45e6a7cc-0505-4ab7-8c67-e8ea1618723e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e53739-b261-4478-8683-8a64bd2c5efa", "sighting_of_ref": "indicator--c92ad632-6269-449d-8644-76ccbaeb3804", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b5dc82-ea52-49c1-b942-5b8ceb6cb890", "sighting_of_ref": "indicator--9bf29530-ac4e-4306-9a69-e2af2c5bb169", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc566f0-8d6b-43b5-9eaa-0884c595e0d6", "sighting_of_ref": "indicator--b2ca0e69-71b8-4fb3-a61c-35fd2f42fc7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04758697-1507-4a3a-8f06-286ae236c10a", "sighting_of_ref": "indicator--b2ca0e69-71b8-4fb3-a61c-35fd2f42fc7d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5b9cb4-9bbd-4154-9f92-65abd1af996c", "sighting_of_ref": "indicator--4da8d7f2-213b-4cd0-99a3-69368ce20e10", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fc1738-400c-422c-bef9-7c239ab3d967", "sighting_of_ref": "indicator--4da8d7f2-213b-4cd0-99a3-69368ce20e10", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1933053c-b612-48b7-b67d-53a01c11ba5c", "sighting_of_ref": "indicator--1d670786-fce8-4fe4-b15e-dcd5f3a23727", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462ccfdd-b102-4559-bfb3-7269191857de", "sighting_of_ref": "indicator--f94f0ce9-f4f4-42ce-b171-3277dee8464d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f4e359-a571-4a96-9c4a-f5c7d95a1890", "sighting_of_ref": "indicator--cb7a533d-213d-4331-b9f8-a1ccc69cea75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b14287-77ac-4373-bf46-5c4001fa23fb", "sighting_of_ref": "indicator--cb7a533d-213d-4331-b9f8-a1ccc69cea75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122ef98a-f003-4da4-b370-362cf4f6ff53", "sighting_of_ref": "indicator--f2bde505-893e-4b59-9eb7-b2d3ac10ea8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7c519e-c9af-4a5e-8a94-96ad61c10d52", "sighting_of_ref": "indicator--ee88950a-4483-4c20-ac6e-cfe78c7aa0aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928022c0-cf4e-40c6-9557-8aa4f977133e", "sighting_of_ref": "indicator--ccc739d2-2a58-4546-a3a3-4a297d41e061", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9315a5f-b23a-47b3-b94c-5aefcec76826", "sighting_of_ref": "indicator--d4b67f2e-475c-4fec-ad84-05042d5c3d9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ccfe37-db9b-4dd7-b565-3f3b25880fbf", "sighting_of_ref": "indicator--eefe20e3-4fc5-4331-a1ac-b4aeda125508", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a645394-c558-427e-a9f0-c63d518716ac", "sighting_of_ref": "indicator--58e57f15-79ca-4396-8c76-bbd49f08b6fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a8fb55-3360-4bb3-bada-0e0cfaaaafb2", "sighting_of_ref": "indicator--b3584f75-aae1-42dc-8ebd-94838197303f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6a5764-1d68-4a77-a71b-5ca685c7c56c", "sighting_of_ref": "indicator--1c2418af-f153-4c3c-80aa-e1ad7b6f1cb0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007b93f5-d6cc-4793-922d-298de1d0dee5", "sighting_of_ref": "indicator--1c2418af-f153-4c3c-80aa-e1ad7b6f1cb0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9f1902-6633-4ebb-8ad2-80ffddbdc998", "sighting_of_ref": "indicator--155d1d51-91a7-4640-ba00-e807dc621cd7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db509cae-48fa-4d49-9b02-c5573069b842", "sighting_of_ref": "indicator--155d1d51-91a7-4640-ba00-e807dc621cd7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a3e8a5-e2a8-4068-a0f1-a61f0227be8d", "sighting_of_ref": "indicator--44448980-768d-4783-ac47-4b15627ffc0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7985b462-d579-4cbe-9691-1843a4adb949", "sighting_of_ref": "indicator--44448980-768d-4783-ac47-4b15627ffc0d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5832d6e2-f846-4b9d-b58a-f5a2ea8851a9", "sighting_of_ref": "indicator--3e41eb59-6731-46d6-8286-dc790a30fabd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdec2559-0db3-44fb-ade5-47520680ac19", "sighting_of_ref": "indicator--96c2dffe-2f87-4d5b-ab96-bf4b529439f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d219362b-dbea-4131-a71c-e133550520be", "sighting_of_ref": "indicator--c8e1fdea-3141-4876-8030-fe83ddc14c27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b39b08e-a2b7-45ac-a166-242176f1e7ed", "sighting_of_ref": "indicator--4b147a78-fd88-42fe-9cd7-e1393211eeb0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf73dab6-db14-4187-a092-353650e7dd7f", "sighting_of_ref": "indicator--d4c22a65-d79b-4bd1-b296-0317be253793", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4328129-16a3-4ece-af71-fbfe2c2a3d8b", "sighting_of_ref": "indicator--d4c22a65-d79b-4bd1-b296-0317be253793", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6906f0a3-1559-4714-ba31-c9eab5163c06", "sighting_of_ref": "indicator--4c027d3e-a04f-41fc-bc3b-fd6301fffcb6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bcc4b1-8f27-4757-9ec3-1793d10c7f9d", "sighting_of_ref": "indicator--cf10a9af-b677-4a79-a802-f4e5af5d9a82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a422474-f488-43e8-b980-cbb0370b9f9f", "sighting_of_ref": "indicator--209b980b-20a0-40b7-9c3d-02d33774ca80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d1a22f-7db7-45ca-804c-4a61e4379e6c", "sighting_of_ref": "indicator--209b980b-20a0-40b7-9c3d-02d33774ca80", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20049c83-fac4-41c6-9d29-151c0fcbda04", "sighting_of_ref": "indicator--5f140b95-6cdb-47ec-8199-fa33acd709b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b650d8e8-bf81-48a5-9ec8-ffb8d65698c4", "sighting_of_ref": "indicator--5f140b95-6cdb-47ec-8199-fa33acd709b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b8d165-39b1-4768-a876-9d84f784cb08", "sighting_of_ref": "indicator--d59b288d-d848-48e4-9992-b462fe1ff9d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e886835c-9256-47f7-ab10-6cf97a6da81e", "sighting_of_ref": "indicator--d59b288d-d848-48e4-9992-b462fe1ff9d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7527ce61-e298-4d65-bf59-12ee04811c68", "sighting_of_ref": "indicator--18b269e4-bffd-45ef-9268-897f0220b311", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a68ecd-da1f-4481-9c76-efa138ab9a50", "sighting_of_ref": "indicator--18b269e4-bffd-45ef-9268-897f0220b311", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887e9ea2-8298-4de8-ba84-5bb519b96ab6", "sighting_of_ref": "indicator--bfc36777-bafa-4ab0-8dd7-e79c9ddbb5c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f50d72-166d-4cd7-96aa-65836f70e10e", "sighting_of_ref": "indicator--cf4c0364-680c-4209-b61a-61d6589ec2b0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8026c3-36b7-40ac-af81-dd71864adb36", "sighting_of_ref": "indicator--3efba8d9-23ad-4aaf-b28b-e7df179b8010", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3705cda-47fb-4437-957e-8b8a6ca39814", "sighting_of_ref": "indicator--93826aff-66ca-4d0c-a974-afc8c5257501", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6611f370-ea8f-47ac-b16e-8bcbaa24017e", "sighting_of_ref": "indicator--93826aff-66ca-4d0c-a974-afc8c5257501", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a0b9bc-b21c-403f-958a-36a114d70728", "sighting_of_ref": "indicator--6752f46a-b67e-4192-afd5-e570a2ed23dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d8f5c7-88ff-477e-a864-09d01c274cea", "sighting_of_ref": "indicator--6752f46a-b67e-4192-afd5-e570a2ed23dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79558ac-4c72-47fb-bfe0-927a0b403593", "sighting_of_ref": "indicator--2606912e-20ca-4863-b7b0-fee23660f725", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f545b48-197a-466e-ac0b-0b59fc7b0af9", "sighting_of_ref": "indicator--9b79c191-d7a9-40a2-98c7-cd78e0f6a0cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e89877-030a-405e-852a-939e298805ab", "sighting_of_ref": "indicator--d92943d8-b154-4209-9118-ffc2ba0c88c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aeb253-561a-4afb-b9c5-990b0ac76213", "sighting_of_ref": "indicator--2fa56e49-986e-40c9-bcb4-cba52eb73e72", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52e2cd6-6fe3-46d4-933f-13116c0091d4", "sighting_of_ref": "indicator--2fa56e49-986e-40c9-bcb4-cba52eb73e72", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe35c26-df4a-40dd-bf9f-cc5fdbb1df24", "sighting_of_ref": "indicator--5b0744e9-91d9-43af-b9b3-67329a81b00a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb89bd8b-8323-4fc1-b69a-47fabd92971c", "sighting_of_ref": "indicator--5b0744e9-91d9-43af-b9b3-67329a81b00a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557a0025-4789-4212-8713-81e1931f760e", "sighting_of_ref": "indicator--ea3e243a-5870-42ce-a56f-30eacc3f7c0b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ebad48-1393-430e-a12f-868ff3bfd72c", "sighting_of_ref": "indicator--ecf4a378-19f3-4983-8669-e29fcced553a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79201dd7-d6dd-4e64-8760-6ce6b702d8ca", "sighting_of_ref": "indicator--64a07ae0-0e47-4330-b8fd-5e3851109ce9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559df5ac-9406-4a95-a086-bc4da096a645", "sighting_of_ref": "indicator--b4e64aaa-bac4-4e3e-a49f-837979e86ba9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b2c296-adfe-455e-8583-01bf3eae8089", "sighting_of_ref": "indicator--a3a2755d-e7d2-4e34-98c3-aabc089949ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a2c340-b305-4406-8461-5a38a673e859", "sighting_of_ref": "indicator--2611c0d4-074b-498b-838d-3c976d7fcb56", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0919d50-7e6c-4f64-9161-30b876fcd545", "sighting_of_ref": "indicator--326f3e01-fd06-4908-9b62-d921df9599ba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f4ff91-e7a8-464d-969d-4b01a027fbc4", "sighting_of_ref": "indicator--6177ee39-58bc-4386-9fab-2b1dc7b5b700", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eade5047-6f36-465d-8ac6-f5e02f576789", "sighting_of_ref": "indicator--411c9a3a-d8df-467e-8d42-5feb8fdee6e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064ea1dd-32a2-4b46-ad88-a4975b27cc13", "sighting_of_ref": "indicator--411c9a3a-d8df-467e-8d42-5feb8fdee6e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7e6e33-1990-4aec-b2c2-0be6dad169e4", "sighting_of_ref": "indicator--8faad233-a3a3-4fad-9d73-d232ebc13e3f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d803d7-4bb5-44e7-ad82-d59b80596a31", "sighting_of_ref": "indicator--8faad233-a3a3-4fad-9d73-d232ebc13e3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051d769c-c686-4de9-8367-b071badc62d3", "sighting_of_ref": "indicator--b0226295-be5e-4df3-95bd-bc35daf400f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dac233-41f8-4684-b2e7-1c7d44254ebe", "sighting_of_ref": "indicator--b0226295-be5e-4df3-95bd-bc35daf400f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23110498-959e-4986-9323-237156b51580", "sighting_of_ref": "indicator--dbeceea7-c286-45ba-bc72-0f831709c7a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fafb48-71f9-4029-9e1f-dda35281e60b", "sighting_of_ref": "indicator--dbeceea7-c286-45ba-bc72-0f831709c7a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df12580a-1598-4181-8ef4-1fc6aae1ab26", "sighting_of_ref": "indicator--75d9dd5c-14cb-4347-9564-daf098f77e12", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fdb2ac-fad6-4e89-be5a-06394f0fb8e2", "sighting_of_ref": "indicator--75d9dd5c-14cb-4347-9564-daf098f77e12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1d35c4-2587-4425-9822-ed3b04d52b2f", "sighting_of_ref": "indicator--6597381d-ab46-4c16-a6dd-605eb2829362", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad4cb0c-0811-4e37-a6bb-49aea15d8b70", "sighting_of_ref": "indicator--6597381d-ab46-4c16-a6dd-605eb2829362", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef452e8-fb3e-42a7-ba4d-83e3081c98e0", "sighting_of_ref": "indicator--9167cd93-cb85-46bb-80c8-cc7edfe3e1e9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7bdd18-89a3-407a-8a7d-1d1327396b3f", "sighting_of_ref": "indicator--9167cd93-cb85-46bb-80c8-cc7edfe3e1e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5edc507-d5f0-443b-a5fa-02b1b501939f", "sighting_of_ref": "indicator--8d854002-c3a7-43ee-a2a7-532c2921446c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9b4691-94d4-485e-b2d7-b1969f0b2a08", "sighting_of_ref": "indicator--8d854002-c3a7-43ee-a2a7-532c2921446c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760fe870-a20a-4cb4-b7bb-cabfdc2e1dfd", "sighting_of_ref": "indicator--83bd7aad-7de0-482d-83a3-b5d45870bc80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9c7b83-9974-4d8e-8ef0-e6853a1d4f42", "sighting_of_ref": "indicator--bcb68fdd-7f02-4aa4-8f22-989caf8f8f05", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcaa4a5c-ce39-4b3d-9171-f57cd407e9d9", "sighting_of_ref": "indicator--bcb68fdd-7f02-4aa4-8f22-989caf8f8f05", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b6281a-a844-42a0-b0f9-4a8e76190993", "sighting_of_ref": "indicator--33cb6f50-3f63-44c4-8c25-c57dbc3f327b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a8d3ce-4b11-4b9c-a684-3f3b3d76cd2c", "sighting_of_ref": "indicator--e7eba10b-cdd1-444f-8896-61f1207e862f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65919776-bdc6-4e4a-afb9-3541fb8643ae", "sighting_of_ref": "indicator--65770326-1ade-4392-9a29-f8ef5c2aeb02", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccbdc90-5063-48a1-86e5-2c8f746d47f9", "sighting_of_ref": "indicator--65770326-1ade-4392-9a29-f8ef5c2aeb02", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3167805d-f53b-4224-9bef-03e767c5736b", "sighting_of_ref": "indicator--b247b9a0-a537-402a-92af-dfafbab56e4f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c456a509-202f-4b72-8855-411036232959", "sighting_of_ref": "indicator--bf45b8f6-5885-4d3b-b19f-c9a188717d35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3073076a-e0ff-4f25-ae3e-43d501a4bea7", "sighting_of_ref": "indicator--5f420b1e-d911-4f2c-bc4d-569aaf06de58", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d667422e-2c61-49fe-8d06-5167d93a6da4", "sighting_of_ref": "indicator--54e17da4-9330-47a0-9e05-5b1debd100e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac07f00-c9d7-4cfd-b8cf-6e31094bff74", "sighting_of_ref": "indicator--74509833-19e1-4830-ae93-c6754f023c9a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca44ce4a-96ec-442e-8dd5-b0a25e19b2a9", "sighting_of_ref": "indicator--c8c9874c-46c6-4f39-b2b3-d26c878ed03d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35930955-42ba-41ef-827e-af0df087bd94", "sighting_of_ref": "indicator--53faf937-c212-4d2c-ac76-efb4d7cb5c3e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8421b4f-fd41-47be-8a8b-b4dd1923f9a2", "sighting_of_ref": "indicator--bc6b3a76-a1e4-4c21-aa66-0efca0249caf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f12357-83ec-4612-9477-f3d24a971517", "sighting_of_ref": "indicator--6a68368a-7649-45fb-8fac-b56c893f3b79", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77de118-4162-4e10-8e84-e1fa98f2d35f", "sighting_of_ref": "indicator--62139661-d512-461a-a309-4bf8314da69b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e615ae4-707f-4055-9598-e8ef07bb820c", "sighting_of_ref": "indicator--6d378092-de79-455c-80ec-36a3ad36aaa9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e93c50-8e54-41bb-a2bc-11a9cabc3355", "sighting_of_ref": "indicator--5ce4c824-ddd0-4295-8369-1288a307fc9c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ea4c4c-6cf8-47af-bfa4-585635ef1f89", "sighting_of_ref": "indicator--43154942-8dc2-4bb4-b652-878c50b2ebb6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2648e937-caf9-4080-bf8e-43178548a998", "sighting_of_ref": "indicator--707f7150-e9b3-4099-b795-6957c57dcfae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdff4a29-4247-44f7-a8cc-ceb38df1a07a", "sighting_of_ref": "indicator--19e51658-e8a9-4ce6-83c4-07c1dfbf0c5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f1cfa4-288e-4100-b4bb-ee66c9ce1a08", "sighting_of_ref": "indicator--8372cab8-ed70-4267-a084-1e4804633cce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21674ba3-dfea-4f8f-894c-31f52d744914", "sighting_of_ref": "indicator--36b14cef-bb92-4c09-9db4-5919dfa1d797", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e699c5-5040-4c79-b0d4-e6644036df28", "sighting_of_ref": "indicator--36b14cef-bb92-4c09-9db4-5919dfa1d797", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df04590-8fbb-4907-a728-4315aaace43b", "sighting_of_ref": "indicator--8cd198c3-229b-414f-8235-e8eb6c3c61bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279a3252-5043-473c-b099-ef3b3e637f45", "sighting_of_ref": "indicator--b3e02791-7b5c-4781-98d6-4baa567c33b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172e7b41-03a9-4d74-a6a7-d04e9b398168", "sighting_of_ref": "indicator--29603c1b-31f7-4605-bdd8-76b7618428cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca0d949-bc01-4ec0-ae79-4708035e75b2", "sighting_of_ref": "indicator--9910560e-6a94-49e6-88ab-7887c9800e0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc6c52e-8d83-4abb-9cae-3aec47ab4b67", "sighting_of_ref": "indicator--41cd7445-e8f9-4ccf-af08-825efee47940", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a17667-0c53-41cb-a5b0-f42b21f2c9fa", "sighting_of_ref": "indicator--d7397b8e-30a0-4854-aff8-e7b5ba73a6c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093f61ef-0e03-4de0-9b66-337704535eb7", "sighting_of_ref": "indicator--6df308df-d985-4bf2-975c-6d2f3f5c64c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf2e0b4-3962-45a1-b77e-8ebf5f736a35", "sighting_of_ref": "indicator--ccf07b9c-4cbc-4ef7-b7ba-ae5711c7eea2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c938ad8b-3fbc-4224-bda6-f5715e89bc9a", "sighting_of_ref": "indicator--6757cd75-0507-4f64-ac60-1f8deae0e7f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d711a8dd-59c9-405d-a1a4-b52367227558", "sighting_of_ref": "indicator--93bc6164-f4c4-4cd8-86c6-f8315ac6b8e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c76f98-b591-4ef2-91d9-1d63d75fdf2e", "sighting_of_ref": "indicator--2872e994-2d70-4a7f-b4d5-d849b0f7a98d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e80d0c4-38e6-4351-af1d-59bf71025e82", "sighting_of_ref": "indicator--43253a6d-012b-4ad9-ba3a-3dfe29c437f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec6a7a4-be2f-416a-b413-8e679c2d2e30", "sighting_of_ref": "indicator--8bdb62fc-94f3-4c5b-b37b-59743d9ecd66", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff10e25-4a74-404a-8efb-2de6054c1004", "sighting_of_ref": "indicator--984ebc88-704a-4e9e-8604-c2ad3505f6ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18db0e3c-9ccc-444b-bab1-9359338024ba", "sighting_of_ref": "indicator--6525090b-5674-4847-8156-b4cd4cee3501", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7ba20c-0f33-4d90-98d4-3fd1b443db63", "sighting_of_ref": "indicator--951ad228-0dfa-4340-9913-22558a36d4f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afddc89e-5a8f-4f60-a181-697d5a5e06c1", "sighting_of_ref": "indicator--1c90e957-81b3-4ca2-b62d-7715928e1ba5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d5e28d-59e9-4cbb-8606-9902e9b0de75", "sighting_of_ref": "indicator--269f52c9-3a5a-4316-8590-f06b9458df00", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe85637b-c882-4897-81b6-6c4ae80927d3", "sighting_of_ref": "indicator--f9f60add-2772-40dd-a719-81c2c59c9f75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153ef4ec-5e73-48a6-b725-096fc2843928", "sighting_of_ref": "indicator--9404d834-e962-4178-b68e-008b56680f09", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65bc790-d6c1-4d94-a0d3-34eb4c9eeee0", "sighting_of_ref": "indicator--3305cd69-2723-4059-bcb2-3a05e3adc3ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a356646a-79eb-45d3-986d-ea5a5d6baf83", "sighting_of_ref": "indicator--98afff46-b877-4961-8589-c16c617183e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c108f2-72d4-4b6f-b8fb-4aa7993b5c3e", "sighting_of_ref": "indicator--b920f78d-bad4-40c1-a9f9-71a3e33d6e0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca1e9d6-419e-46bb-9e96-5cc1fe5516a8", "sighting_of_ref": "indicator--dd9644c3-f7c9-4615-8ead-5f74ce10c605", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e759f585-ebf4-4eb3-80fa-3975afd58396", "sighting_of_ref": "indicator--177d594e-ee06-4745-b73d-ff70caaa8a4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d2023e-b81d-423c-a436-2482123ceeb8", "sighting_of_ref": "indicator--145348de-da9e-4eed-927d-59c272e0eb95", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616fc553-8e12-4ce9-86df-6d91cbeb73cf", "sighting_of_ref": "indicator--bad5f399-564e-44f5-bda0-69e3d922a47e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5afe9d4-13c1-4dcc-a91b-f5a1340777a4", "sighting_of_ref": "indicator--bba25ab8-d4b9-4069-b33e-79f6476a0832", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcd448d-e47a-46e1-b4a0-fab80970ded2", "sighting_of_ref": "indicator--26ac03f3-ef37-41ed-8be4-a128e67f0683", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cf89e1-bbc2-4b77-8d1e-ce573f37caac", "sighting_of_ref": "indicator--d91d5acb-f456-4620-8f55-4a0bbaea17b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bc8d4f-72d7-46ee-a0d6-29e845281ed0", "sighting_of_ref": "indicator--d91d5acb-f456-4620-8f55-4a0bbaea17b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c55b38d-6d51-49fd-8128-61578cec97f9", "sighting_of_ref": "indicator--dbb51f30-b087-4882-b09b-6aee410cf711", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03f5f2a-883e-4041-9962-642dcf5f1ef0", "sighting_of_ref": "indicator--2e5f3888-22aa-459a-8feb-15d9dbcd7979", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629daaa9-8a7b-47c0-a430-4aaed1fd13f8", "sighting_of_ref": "indicator--5819c928-f06c-40ff-8182-24dcf69a65dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8f0192-ff2d-408a-abf0-e26bf8f0b1c2", "sighting_of_ref": "indicator--0820f33b-c89d-4d2a-ba6a-2d7a2b5f4e19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949c2992-f6bb-4c59-87a2-0f4831faed69", "sighting_of_ref": "indicator--32b66319-eb9c-4733-ac9c-589b7f2d03b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fa153e-42f9-48e6-a1ef-743209f245b1", "sighting_of_ref": "indicator--32b66319-eb9c-4733-ac9c-589b7f2d03b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203062ca-0dcd-4cbb-9142-2bf75d28526b", "sighting_of_ref": "indicator--87f39e18-08f2-474d-b5ce-02d88fde8961", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ae11cf-87c9-4cf9-9568-dc2bf352f861", "sighting_of_ref": "indicator--87f39e18-08f2-474d-b5ce-02d88fde8961", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68a4780-c29f-4344-860b-5f5e2a128a93", "sighting_of_ref": "indicator--1389be8c-fc8c-47d0-9ae7-90d89d96ed59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2350126-3417-4730-b914-359a98845320", "sighting_of_ref": "indicator--1389be8c-fc8c-47d0-9ae7-90d89d96ed59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7319e75-d195-4930-b3fb-fdac9bec6c37", "sighting_of_ref": "indicator--6e77e489-54ba-4d98-8e90-9193b7d708df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f0f6fe-0806-4284-85e6-d467c188704b", "sighting_of_ref": "indicator--6e77e489-54ba-4d98-8e90-9193b7d708df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c321ab-3976-4b3b-86fa-7db37c0a385b", "sighting_of_ref": "indicator--4125fce5-8361-4bb0-b49b-e33afc90ec39", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35bd0c3-3599-46c1-b707-6de7dea1f0fc", "sighting_of_ref": "indicator--4125fce5-8361-4bb0-b49b-e33afc90ec39", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c797b5-39e9-4332-a4d5-244866a33ea5", "sighting_of_ref": "indicator--e22a0815-e9a2-48aa-9eb0-2f158d4f0a54", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8220d24c-ffbe-4de1-a0ab-df29d3522866", "sighting_of_ref": "indicator--f29948f9-e7dc-47ca-8f62-0580e60d82b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb9bf7a-0677-4ba3-9939-4f261932c82f", "sighting_of_ref": "indicator--f29948f9-e7dc-47ca-8f62-0580e60d82b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5be713a-5d2b-4156-af00-3b6c9753766e", "sighting_of_ref": "indicator--7116c019-f16a-46b7-9533-bf392f566d4e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0e7c10-9ad1-47ed-8827-6007028b00f1", "sighting_of_ref": "indicator--3d76d137-801e-4f2b-820f-cc46501c5f61", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de101db-c782-442e-94b5-d76f476956df", "sighting_of_ref": "indicator--3d76d137-801e-4f2b-820f-cc46501c5f61", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b6fb13-f084-48c9-8a31-3fc30f5845ce", "sighting_of_ref": "indicator--9b546727-80bb-4ba2-bc7d-a9f0aecf5fe3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20924843-dff1-4bf7-b301-aef154dcaac0", "sighting_of_ref": "indicator--2f1c965e-18e5-4d0c-91d1-4a70d20d44d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902a9edd-b6b1-43f1-acdd-467bd5a6e4d0", "sighting_of_ref": "indicator--17c10a7f-d893-4f43-9510-2631fef983ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1608af1e-f763-43cd-9130-fc64db4133ee", "sighting_of_ref": "indicator--e67878bf-80c6-4d20-9df3-827261df9ae4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ef1ec0-4687-4d90-a88d-ccf7c04610a7", "sighting_of_ref": "indicator--aa1e7ccd-23fe-452c-a05a-62ff08ec1886", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a8224d-622b-4acb-b363-8783a88d892f", "sighting_of_ref": "indicator--650c0212-eb93-4f0e-b981-7cd25817efb8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca255a93-a59e-4f34-90f7-a4000a85b4b3", "sighting_of_ref": "indicator--bea9de17-516d-4e16-888b-4ff7fab7b3db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc44204-c373-4a54-a7e7-b468371cc6a3", "sighting_of_ref": "indicator--bea9de17-516d-4e16-888b-4ff7fab7b3db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3799b07-9fdc-4803-a589-05b2ae2e5596", "sighting_of_ref": "indicator--229b39ca-28c7-4d18-87d8-9f34d87a5ef0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9195294a-dbbb-4bbf-801e-9b2a1fb32620", "sighting_of_ref": "indicator--229b39ca-28c7-4d18-87d8-9f34d87a5ef0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3c9221-fbd8-4a05-b8c1-1c0b0389c1c4", "sighting_of_ref": "indicator--f759461d-6123-4e96-9637-50f194a8635d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719f9e69-9df2-4ef3-bc37-dfed82e382fb", "sighting_of_ref": "indicator--f759461d-6123-4e96-9637-50f194a8635d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ba5beb-da24-4894-a497-1d68e1f6a90a", "sighting_of_ref": "indicator--f02a6dd6-1603-4bd9-ab34-11f1709dd318", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1f13b1-942d-4a6f-9856-9e0779d900cb", "sighting_of_ref": "indicator--f02a6dd6-1603-4bd9-ab34-11f1709dd318", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415eff5d-d336-48ea-80c1-8fea4d144658", "sighting_of_ref": "indicator--a4bc0f79-5a2a-4d53-91d2-57e849def0ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618d4f64-890e-43c4-8d70-05d0c0647142", "sighting_of_ref": "indicator--46765742-754e-44bb-ac90-d26894a9edd1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0026e9be-3e25-4f50-9ddb-1d4ed8538254", "sighting_of_ref": "indicator--a33ce941-e951-42eb-a37d-a7d30c2dcef9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94030202-00dd-4c65-92e2-5ac46f834eb0", "sighting_of_ref": "indicator--45e8bd45-f954-44fa-a704-d7706ca76652", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c766f58-eed9-4875-8bfe-cf8f18a19cb4", "sighting_of_ref": "indicator--2c4d7f40-2f7a-487f-99c7-4887591de60d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af71df0-e04a-414e-9a2c-6f4c1ef089c1", "sighting_of_ref": "indicator--925b1d96-a21d-4f1b-800c-1d5fdf63327a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ba0e09-8a3a-4f69-8327-1a45444c1f10", "sighting_of_ref": "indicator--701de086-01dd-441c-86e7-2684bd85e4b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35962bd7-b9d9-44c6-abf1-62f0a9c51d80", "sighting_of_ref": "indicator--701de086-01dd-441c-86e7-2684bd85e4b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad95a192-9b0b-45db-9303-76b5c1e03efa", "sighting_of_ref": "indicator--cc82db52-e728-487f-b8db-63898c2ce979", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738ee5bb-8714-4929-bb5a-b27132fd68a6", "sighting_of_ref": "indicator--24afd5c4-3f2c-4b03-9977-15035b4e6d6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7beafb50-c9b1-4dd7-831c-e9e7d99d9c47", "sighting_of_ref": "indicator--ba36c4de-6320-4f63-a174-984c1e0aa1fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8b4c6f-f3b2-4712-a2e9-65d107d2f439", "sighting_of_ref": "indicator--fa01c3ab-7bae-4b9d-a77f-2a7275615680", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02f7f95-6f93-43d9-8ad9-4d8a4faee3a9", "sighting_of_ref": "indicator--e4b2ab5b-3805-44d6-9ba8-a71c51973175", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498eefe2-1c1d-46d9-910c-d8d5a53247e5", "sighting_of_ref": "indicator--b9882b67-1e51-4508-ad5d-f907efeeb732", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7e591f-a8cd-4681-ba0c-de95e3aa9284", "sighting_of_ref": "indicator--b9882b67-1e51-4508-ad5d-f907efeeb732", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f617b36-7e2f-4e09-8205-28a85e7abaed", "sighting_of_ref": "indicator--3dfcd485-8022-4c58-a2ed-075c512afa0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2fa8e5-40f8-454c-9100-f43a549f9426", "sighting_of_ref": "indicator--5b5973b8-5389-4dff-89c5-9df4259aecdd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cbb4cf-2acd-47fc-af6b-edc06e9103b1", "sighting_of_ref": "indicator--5b5973b8-5389-4dff-89c5-9df4259aecdd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8397d6d7-09ea-4bbd-8930-798377ebecd6", "sighting_of_ref": "indicator--56a25245-ca5e-43fd-9118-61b751ad4d24", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037172ea-d739-47d1-82f9-e44887314271", "sighting_of_ref": "indicator--b488e954-9d72-4449-9454-7afacfc73cc8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1052858b-34a6-4f6f-b047-275100d3b2a4", "sighting_of_ref": "indicator--25bdb87a-f42c-4ab0-9ec5-067d28eae5a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498a43fc-4fbe-4b45-9067-a68c650647d8", "sighting_of_ref": "indicator--25bdb87a-f42c-4ab0-9ec5-067d28eae5a4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92052c5-aaa4-42b5-8f5f-d73da2558063", "sighting_of_ref": "indicator--5c594c86-3e7b-4f52-ae48-46da6c11fc1d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9005b90a-c1c7-4421-90d4-a5ded31a9ef0", "sighting_of_ref": "indicator--36843a3b-0208-4017-b7c3-4629a934c4ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f39dd3c-2ab5-4f74-9783-d43cdc6f1ee2", "sighting_of_ref": "indicator--53fef725-e75d-4dfa-baf8-27736f26eb8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48289534-4b2a-4383-9712-99b788e98cdd", "sighting_of_ref": "indicator--53fef725-e75d-4dfa-baf8-27736f26eb8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be604c32-d158-44a2-bf7e-3a35c04686c6", "sighting_of_ref": "indicator--3f89d416-bbe6-4e90-9bcb-645e2f0ec650", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3297e099-040a-40de-a2e2-4bba301c07b1", "sighting_of_ref": "indicator--3f5219db-9e82-4423-9549-8de5163337e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291c2d50-7d5b-4d7c-b325-fbb3ea48d950", "sighting_of_ref": "indicator--6f3b1bd2-cce1-4d07-8d49-28f1e2f38fa1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2e290a-8275-4d88-8902-e088d76a0f5a", "sighting_of_ref": "indicator--5e95df74-6e6e-482b-9ca2-42d45770b514", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd04579-4506-4996-9842-415671a2e00b", "sighting_of_ref": "indicator--aba1d493-52c3-40aa-a6c6-317578f30c9a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b80d5e-1ea9-4d19-8cb6-70921187ebcf", "sighting_of_ref": "indicator--8f0f6e9e-8a90-4f74-854c-330d89b6574b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d615688-5534-49a5-9ea6-effe8d7a1330", "sighting_of_ref": "indicator--eac0d95e-6479-4e62-bc4e-f48e7c924025", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b204241-f487-41d2-abde-55dcc884c107", "sighting_of_ref": "indicator--ea4fb81d-d2fc-4bd3-8bde-ddba9673dcb9", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92c57a8-50a6-43b0-a2c5-7f3e7af08dcf", "sighting_of_ref": "indicator--ca631f38-c6e7-4a93-bcfe-f0b9d46269c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71b14d4-5fc9-457e-a7c0-6029a3591f3f", "sighting_of_ref": "indicator--2cedb25b-210c-4902-b688-f0c1cbaa1019", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98bd432-a12f-4131-96e2-fe59017ec259", "sighting_of_ref": "indicator--3d99531b-daa1-4846-968e-8dfbc206771a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c513fafe-73e9-418d-9b55-fbe0b2b07a04", "sighting_of_ref": "indicator--b9207a63-16f3-4974-b52f-e2f28d3aa26c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff985f9-ad0e-4e9e-9276-dce774ce844e", "sighting_of_ref": "indicator--b9207a63-16f3-4974-b52f-e2f28d3aa26c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121bd70e-50fb-40fa-a3b3-8196be4a69ec", "sighting_of_ref": "indicator--abb32303-443d-4481-9e86-e8f63afc7930", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb67310-4afa-43e5-9c34-c30247cc86d2", "sighting_of_ref": "indicator--abb32303-443d-4481-9e86-e8f63afc7930", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5b0f73-0a7f-4838-aaf3-2fce7cc48da0", "sighting_of_ref": "indicator--288c29a3-c56e-4c9a-bd3a-b5fd94fdea42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a197261e-0853-4b8a-aca4-945aac622b3d", "sighting_of_ref": "indicator--6f744835-12db-418b-aef0-1f9f065fd5a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a904c3af-cd47-4d13-bb85-6f2d2b4bcad2", "sighting_of_ref": "indicator--a384a12c-9e0a-4d2c-8552-de372ea269a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65b1add-df6e-46a2-8261-eac8e782e2f1", "sighting_of_ref": "indicator--72e19b79-8d2e-4a6e-9714-0250e038d717", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a30c3a-515b-41c5-9063-3afdf18d4fde", "sighting_of_ref": "indicator--cf647ed7-bf66-4b90-8cd8-93675e9402c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc2600f-2ce4-4ee5-a659-bf7eccc90996", "sighting_of_ref": "indicator--cf647ed7-bf66-4b90-8cd8-93675e9402c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abe137a-c246-4490-9774-d81b976ddcb6", "sighting_of_ref": "indicator--c616dd0d-bb35-4fc4-93e6-1dafbf266f2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08566897-4234-49f1-956a-9c63b5d08e60", "sighting_of_ref": "indicator--673c8105-366a-4241-bdf6-1225da76a8fd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72eb5a28-a8f3-473c-813b-b59e37697319", "sighting_of_ref": "indicator--f8139177-55a9-48a7-934c-bdd93f35272e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d2a107-dbd3-4bbd-b5d5-6f7e320a4379", "sighting_of_ref": "indicator--f8139177-55a9-48a7-934c-bdd93f35272e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d6e76d-fab2-497f-b425-f4557c4e5f82", "sighting_of_ref": "indicator--4b1685c7-d3de-446d-b2df-293e0c6637a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc524bfb-1520-4fde-a79f-f80b7065c3e8", "sighting_of_ref": "indicator--5e9e977e-516e-4758-a02f-c4df0b45cb79", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e409c1-b8dc-4680-b7a1-f2e730803c73", "sighting_of_ref": "indicator--9e351d29-d5ca-4bea-a1f1-3bdfdcdc3b3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df29a7f0-859f-4be5-beff-4ce8ecf9b033", "sighting_of_ref": "indicator--21d29f08-1491-4eb6-ad8e-7697f66c9a02", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6d9c4d-eb3c-4c3d-ba00-cffb7ead9b1a", "sighting_of_ref": "indicator--8942f91c-2a17-4917-b5c7-49e2b14c40f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d93e14-b52b-443a-ae91-9699de9f40bd", "sighting_of_ref": "indicator--8942f91c-2a17-4917-b5c7-49e2b14c40f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a35a860-1b06-49b1-aa52-a521377f6c6b", "sighting_of_ref": "indicator--bfed646c-a98c-48de-87db-96091d987117", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdf0158-c9e9-407d-9635-752e1cab1b69", "sighting_of_ref": "indicator--6cde665c-e765-43c0-bf97-7f9e61f965fd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc26d859-b419-4bfe-9975-9fec2aa70ce3", "sighting_of_ref": "indicator--5d0c4791-4bb8-4cfa-9bfa-1f06a82ac2ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d1975d-94cc-48c3-b2ac-720618658aa1", "sighting_of_ref": "indicator--7764bc42-df07-48b3-8f38-32a9438ae0dd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590a9710-f8d3-46e0-b97d-078cc22c1c82", "sighting_of_ref": "indicator--ef03804f-e371-4f51-bf14-8fa3cce3d2f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5f57c3-c501-4bee-be9e-e35546823ca6", "sighting_of_ref": "indicator--4a5297ae-9fcf-4d19-87a2-b56f56724f78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ff8152-44b5-4870-80ba-2d5014553b96", "sighting_of_ref": "indicator--12a6b244-ebe4-4adf-9d1a-fb2b15bbdbc4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a38d21d-570e-4a94-a45e-d3c014684360", "sighting_of_ref": "indicator--3d62c37f-f8e8-4bfa-ae99-07cf0607701f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d384b3c-9c02-4e06-8c2f-22f4a434a01c", "sighting_of_ref": "indicator--b9ee808a-efa5-4433-9f1a-cbd1a798e86a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4778c9f7-6a23-4aa0-a3e3-f663b7263620", "sighting_of_ref": "indicator--77745e56-23cd-4b8e-a8b1-c80f8d4c7bee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66ce736-31fb-4c9d-9cd6-eccdf36874cf", "sighting_of_ref": "indicator--77745e56-23cd-4b8e-a8b1-c80f8d4c7bee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109556ad-1b86-4622-8ecf-cb175c83ac44", "sighting_of_ref": "indicator--3cc2fb33-6c34-4d77-8966-285135314eed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a73904-c138-47c5-b135-b15185e8a7fb", "sighting_of_ref": "indicator--97995017-cadd-4985-8b2d-c4f0b65e6421", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f0f39e-53c1-4ec5-906c-602c33d97a8e", "sighting_of_ref": "indicator--b8d98d8e-27e4-4db8-9a34-dd35f638e05e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8cb3c5-87b1-4171-b36e-20b9eddd08d4", "sighting_of_ref": "indicator--90f70094-ce36-45c1-8f23-3ee96e262d32", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7936d0-f157-490a-8031-24be06620ecf", "sighting_of_ref": "indicator--cfcb7039-cad6-4ceb-9041-e28348350545", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08271f5-0a7c-45ef-95dc-fce33fc25a54", "sighting_of_ref": "indicator--cfcb7039-cad6-4ceb-9041-e28348350545", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c12a32-95f9-4f1d-8f63-d4701207fbe3", "sighting_of_ref": "indicator--b5abb31d-a795-428e-855f-8cc7b8889370", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb66031-d74f-4312-9dcd-082e309e826d", "sighting_of_ref": "indicator--b5abb31d-a795-428e-855f-8cc7b8889370", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c50413-9d56-4ab3-93f4-847991f1499b", "sighting_of_ref": "indicator--86af4c07-c70e-4c2d-9b74-446d00ec1810", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc24faf-b81d-4440-a0ab-34c18eef14a6", "sighting_of_ref": "indicator--4a3588b9-fd2d-494b-82f8-d3ce96317739", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd8952a-24f4-43e3-a1ef-1a1b8ab3b015", "sighting_of_ref": "indicator--ced8cd96-3e12-4d7a-8045-8303529d3617", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef385e6-f7f6-4696-954a-98c67592d36f", "sighting_of_ref": "indicator--ced8cd96-3e12-4d7a-8045-8303529d3617", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae7eb5e-3d6a-4cbe-92e9-e43b922bc4d7", "sighting_of_ref": "indicator--9a3b2b72-d3b1-4e8e-947e-cb450be89f14", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fff163-08ca-419e-a2ba-121719723432", "sighting_of_ref": "indicator--6a851e53-ed23-4566-8fc7-bc2df94fd426", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaa4bd6-5eb1-4027-aa86-c57cd5e8f39b", "sighting_of_ref": "indicator--6a851e53-ed23-4566-8fc7-bc2df94fd426", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5b7876-2aef-422f-a7f7-0f210e67c95c", "sighting_of_ref": "indicator--47f13a56-e610-436e-8d6d-8cfe0409efe0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de5e794-df1d-45e4-9996-b20cd2cc269c", "sighting_of_ref": "indicator--47f13a56-e610-436e-8d6d-8cfe0409efe0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549b9ab4-ccd2-438b-9966-b8e3923e4144", "sighting_of_ref": "indicator--7a7ca909-407c-44d0-9481-5b8c0b20e1b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde3a70a-fb64-4a27-8377-1e89249e267b", "sighting_of_ref": "indicator--7e6d6d5e-c388-451d-8ea7-0aa9c2cade4e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7dc018e-13d3-496d-9b82-cb556ee8dda9", "sighting_of_ref": "indicator--630bc830-4aac-4bd2-ac67-b4fdef5ca2b4", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41301ba-ded9-4f8b-8e44-dd272bea1946", "sighting_of_ref": "indicator--60cd406a-62e5-44b0-a693-d45a5b3239d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b812ca-0f64-42a9-8aab-a7c5f2631f8b", "sighting_of_ref": "indicator--27b789ca-ca9a-4ffc-aa5e-37886d7312a6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af21413b-39eb-473e-8d28-5fdabcf9033c", "sighting_of_ref": "indicator--e4e5026b-31a8-4b4b-98ed-cd0daf785085", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10853ea-f24e-4bb7-a820-7af7eb6af091", "sighting_of_ref": "indicator--2e12fe2a-cd43-4407-bf11-1359c8496e37", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53836b45-29d0-4b1d-9ac9-fd5c0f614771", "sighting_of_ref": "indicator--33739fe9-c472-4d5d-ab32-86082df16f20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465124da-906e-480b-ad47-57576250d1cf", "sighting_of_ref": "indicator--33739fe9-c472-4d5d-ab32-86082df16f20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc7caaa-9c70-427d-aaa8-a19fa3ae30b1", "sighting_of_ref": "indicator--4c09d3c1-acdb-4154-9ba2-58e688a261b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbf5191-8384-4c6b-a4f2-9197ad475383", "sighting_of_ref": "indicator--ca2b5e37-4ad9-4c65-8406-0e24a4074d8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8a6392-ebc1-4728-8ed9-afbffba2fe69", "sighting_of_ref": "indicator--c6978c34-ce27-4365-a4d3-5e01dc8d284b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d567c20c-8096-4808-90c3-fb1ff374fc6a", "sighting_of_ref": "indicator--4242adf2-6f61-42a3-85ba-2415102fef7e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920d25c9-82df-4fb7-b174-6eaccce4dad0", "sighting_of_ref": "indicator--d5e6def5-8545-4dde-a853-6d15a8825fac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dac79a-4718-4ba6-b6f3-c83cd4dd60aa", "sighting_of_ref": "indicator--90eaff61-0fbf-47c9-8808-352f713ea4fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b10755-4680-4528-953d-7e3a0a647cb5", "sighting_of_ref": "indicator--90eaff61-0fbf-47c9-8808-352f713ea4fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5e2f34-5dc8-4f0b-9bb1-50093bd46f80", "sighting_of_ref": "indicator--5d5e6567-2283-4622-86c4-9e6226ead4cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcb8672-8c47-4d37-bb4d-dae70bbd67d9", "sighting_of_ref": "indicator--5d5e6567-2283-4622-86c4-9e6226ead4cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fbac81-843e-4070-9680-116632373eb9", "sighting_of_ref": "indicator--cd1f6964-99ca-442e-b90e-c116a9fa0f6b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe55b04e-3885-4deb-87ef-c9fefd13361f", "sighting_of_ref": "indicator--cd1f6964-99ca-442e-b90e-c116a9fa0f6b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853572fe-1ce3-4a3d-ae85-4ff6dee333b1", "sighting_of_ref": "indicator--4a93c6da-1f92-4f5c-9c72-27daa73f6dca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756f11e8-7247-41b5-9c95-a10fde115c65", "sighting_of_ref": "indicator--0231e9a7-de31-48e7-aa6b-25c67b5008b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac6cbee-1dec-4c5f-bf07-e078f023fbbd", "sighting_of_ref": "indicator--0231e9a7-de31-48e7-aa6b-25c67b5008b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e796bd-43ca-441b-a998-41582d977fbd", "sighting_of_ref": "indicator--5d9969d8-26cb-4ad2-9de5-ad744417997c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0254c4fa-8d8f-4fe4-b645-e88d3e7f00ae", "sighting_of_ref": "indicator--a189e1ba-9fdb-4eda-b6e1-8bc82a9b104d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec03b75-2899-4434-b154-4d81153376e3", "sighting_of_ref": "indicator--e8d4da85-52d5-4e7f-ad07-7f2b329df25e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d35f60-bf28-4b41-a535-71fa12dbdc20", "sighting_of_ref": "indicator--250cc1e5-0e1d-445e-b699-93827bdc007d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40ef264-ee48-430b-858c-49a5ea39239a", "sighting_of_ref": "indicator--250cc1e5-0e1d-445e-b699-93827bdc007d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ed3d9a-80f0-421c-b572-b2584fb2bb2e", "sighting_of_ref": "indicator--efb0ee27-1882-4bba-85eb-f8712cbf4977", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a9677a-6896-4ee1-af36-ab94ec132b3e", "sighting_of_ref": "indicator--efb0ee27-1882-4bba-85eb-f8712cbf4977", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa1a654-cc0d-4ab9-97ff-8128513ae387", "sighting_of_ref": "indicator--ebac589e-89d3-4fba-a3d7-e544ec150444", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12eb59c2-f8d2-4d64-9bf2-ba4a34f1cd53", "sighting_of_ref": "indicator--0608c283-1ad3-4c4e-8fb7-014732492445", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1121ec1-5d2c-4164-bd80-be36435c17f0", "sighting_of_ref": "indicator--d6ee6d5c-7c79-40ea-a11f-040d1c8c9ebd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99030f8-631b-4b31-a504-3f1081339533", "sighting_of_ref": "indicator--b1d2f1b1-4880-40b7-b490-ddfb551272cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f987cfc-83bb-4879-9891-d2afafb8b24c", "sighting_of_ref": "indicator--bce9beda-eb7c-4dc8-86d1-4ef0a9b514b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199dcad8-429d-4a4b-abd4-f1cddefed9f3", "sighting_of_ref": "indicator--bce9beda-eb7c-4dc8-86d1-4ef0a9b514b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5102e126-4b0e-4189-bd77-2aab1931ed0d", "sighting_of_ref": "indicator--462ecc57-eb9a-4be5-a45a-3e96943c72ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15525550-e757-499c-b7bf-078c887f7bb1", "sighting_of_ref": "indicator--84e4a38d-4078-44f1-aabb-20ad659d3e5e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b5889f-e92a-42b3-9c37-1f72d6adbb38", "sighting_of_ref": "indicator--84e4a38d-4078-44f1-aabb-20ad659d3e5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127d1aaf-e46f-450a-bbc5-4901e9cbe08c", "sighting_of_ref": "indicator--df63bfe8-7bee-4e3c-b6c5-43c88f115bd3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab85bbd-b456-4ff9-b820-8e4ba0bf6b68", "sighting_of_ref": "indicator--0a66417d-6f30-4d2b-ab1a-b0c133e4f72b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1107ec0a-9dc2-4c13-a9b1-63eefb50c076", "sighting_of_ref": "indicator--0a66417d-6f30-4d2b-ab1a-b0c133e4f72b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2025fc20-ce7d-4bc5-8663-c1ea694b10a4", "sighting_of_ref": "indicator--39129987-8cbf-4139-9eeb-6ad4c7f0b96b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e544f6a-07f3-4c35-a8f4-ecd2de5b1205", "sighting_of_ref": "indicator--7ac882c4-82fe-4ed5-82a4-bcbce94fd0c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba69e7d-e5bf-43bf-9663-d821c90b3d54", "sighting_of_ref": "indicator--17d01782-e42f-4a1a-b4f4-6083f0215366", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caa1d0b-826a-4797-8eeb-90fd467096b8", "sighting_of_ref": "indicator--435ba034-bb89-48ee-89d2-1dbb0e38ad83", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a2522f-8aaf-4db6-91c9-38fcb05a5fcd", "sighting_of_ref": "indicator--e0162f48-d98d-4f1b-8487-3cca4fdadd0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baa1a56-0db9-4fa4-b759-a28c0dc017ad", "sighting_of_ref": "indicator--657a81c5-50cc-4cf9-af6d-7689bf64a065", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5a7a5c-b15a-4ed5-84dd-fa96726982b9", "sighting_of_ref": "indicator--657a81c5-50cc-4cf9-af6d-7689bf64a065", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d9e727-114a-4b7b-bf40-f99d5fc1c9f7", "sighting_of_ref": "indicator--301a479d-017b-4ba1-a472-ca30494e0ce7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f7457a-1ce6-41c9-9eec-4cbddd15734d", "sighting_of_ref": "indicator--301a479d-017b-4ba1-a472-ca30494e0ce7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd36b4e-34c9-47cd-8a45-4abaa2af16bc", "sighting_of_ref": "indicator--b807355d-ce70-4236-b8d2-b3d6d02c2d31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239e467b-e9f2-4cf0-a4df-d67883e99929", "sighting_of_ref": "indicator--bb7a4ceb-c140-4c53-a4e2-c674e6cef62b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d139dc05-bb94-4c58-ab30-8a1e09a7e7c2", "sighting_of_ref": "indicator--ae4ca050-7891-4df0-9631-4c1279e4f2c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf67d1c-4f23-40a3-ad0a-ab084da55383", "sighting_of_ref": "indicator--977c7a08-6c12-4571-9bae-4ff6136edffc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7765ae-6cc7-4abe-9e59-c40b5561fae9", "sighting_of_ref": "indicator--4d88b273-9ddb-4164-983c-1fb67d91676e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a947fa-7db1-4ac8-80cc-f2403a33655a", "sighting_of_ref": "indicator--9c9191e9-e805-45a5-acb4-61b48988e807", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c969988-3c9e-4c19-a8b6-d520f57f9200", "sighting_of_ref": "indicator--c3b0a3db-c9ec-4ea9-999f-424d12b07dac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3407311-8e75-4bb5-8319-566877835aa9", "sighting_of_ref": "indicator--bca3bd03-78bd-4df8-9178-3a8498582161", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bb9931-bf29-4413-b42e-af7fd87765f5", "sighting_of_ref": "indicator--3ca1aba2-dc94-4aa9-b6ea-90e182143e98", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653e6486-1d12-4cb5-beef-94e4cbb76622", "sighting_of_ref": "indicator--34285537-0472-4db0-9c84-a51278e4acea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f6e4e8-5475-4d55-babf-b88c10ee163f", "sighting_of_ref": "indicator--a58bf9fa-8745-47ed-b146-ef187cddbe95", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff82153-2376-406c-810f-79675ead6f2d", "sighting_of_ref": "indicator--8f3a8dfd-16d9-4b44-9fcd-9197924cbd7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5881708-35d8-4a21-b576-4502290e874f", "sighting_of_ref": "indicator--aa0a8c0d-87e8-4ed6-9ef7-707f73c85a34", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b3b0be-ab7b-4b9b-bfd2-addfc44e335f", "sighting_of_ref": "indicator--293ff384-2354-49f3-b307-4da367b39d17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27d2f49-39d0-4d9a-b43b-fd48f3a08cc6", "sighting_of_ref": "indicator--bcbfa88d-428c-44ca-9b15-cffc0f468282", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3d8969-58e2-4b57-80d2-977ddabbf7b2", "sighting_of_ref": "indicator--ae89b619-7775-4b2e-bd59-dfd1041cf34c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec870ccc-8229-4d15-9f26-6153b3a476e1", "sighting_of_ref": "indicator--3d17e36e-cc29-4f98-b41e-7d2238cabb72", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edd7f74-76eb-495f-9f8d-7c2ebd333da5", "sighting_of_ref": "indicator--be5c3ed8-1cad-4b46-b574-700317e65b7c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0060e435-7ab9-4e7b-9546-2713be75a258", "sighting_of_ref": "indicator--be5c3ed8-1cad-4b46-b574-700317e65b7c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3e6a9d-206e-451d-97b2-93cfd2fb3163", "sighting_of_ref": "indicator--a7bacd6f-4ae0-4d36-bd9c-563dfa2d4027", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb555f1e-038e-419b-92d0-2812be4c5446", "sighting_of_ref": "indicator--a7bacd6f-4ae0-4d36-bd9c-563dfa2d4027", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805e89be-92ef-40f7-92e6-aff574eeb974", "sighting_of_ref": "indicator--ee8ab112-62bf-412d-8afd-a4371fd48921", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecccd930-875b-43ac-8c59-bc90b9d93982", "sighting_of_ref": "indicator--586a9ebb-6deb-42a9-a585-b9b49f1c4b68", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61cc11c-4ea8-4dd7-b315-f13faba4c829", "sighting_of_ref": "indicator--d9ff7f1a-0e78-4039-910e-09c0e982b4cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e8cbd1-b4a5-436d-a6fb-0b823ec8f271", "sighting_of_ref": "indicator--d9ff7f1a-0e78-4039-910e-09c0e982b4cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336e8046-ae4c-45f0-966e-38114cd70a12", "sighting_of_ref": "indicator--72535d60-7e8c-4679-89d3-4ec2cebf4436", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7968ae8-6d96-49c4-b36f-9b4b996ce6ac", "sighting_of_ref": "indicator--e6c50e6e-863d-4bd3-a5e7-2f10957c4b63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fca516-3525-45a8-9c21-efd383e91d11", "sighting_of_ref": "indicator--39500cf8-54fe-4530-b82f-ee30b7161b04", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e2e9c8-b520-47ad-9b88-4894ed7b1268", "sighting_of_ref": "indicator--1e31336b-325e-4955-9f12-4771059505b0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31774fca-cc59-4add-9b1c-b08c414a95b8", "sighting_of_ref": "indicator--1e31336b-325e-4955-9f12-4771059505b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c289bd84-2ea6-4f88-ae5c-aa52bff87304", "sighting_of_ref": "indicator--d3ce8a71-3b71-43e5-9397-afb3f1262d4c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b234fbf-4be2-4b1a-ae9a-8ed85c6441e9", "sighting_of_ref": "indicator--d3ce8a71-3b71-43e5-9397-afb3f1262d4c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0253eb6f-d62b-4399-bb17-e58f345c92a6", "sighting_of_ref": "indicator--e3e19938-d72c-468c-b2d6-3758d39fe258", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ea4122-4d6a-4de8-9af6-f9cf999ba190", "sighting_of_ref": "indicator--e3e19938-d72c-468c-b2d6-3758d39fe258", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08af3d80-44f5-4014-a822-49f5fac8e013", "sighting_of_ref": "indicator--3fb4b708-a3b5-4e8f-ba8e-3184d1f59bf8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6523cd-fef7-49e0-b582-19fee4befb49", "sighting_of_ref": "indicator--867bdf4b-56c3-4762-b219-6523b9de56b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff93968-7f37-4a62-b9ae-1f6ffb7c15ec", "sighting_of_ref": "indicator--867bdf4b-56c3-4762-b219-6523b9de56b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869121f4-4c6b-4cd8-bb85-b8ff46727fa9", "sighting_of_ref": "indicator--762ee79d-2f56-41f1-883a-2754bb2d8e51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8359e032-d201-469b-bc18-b219707a7ec3", "sighting_of_ref": "indicator--6eb9f186-aafa-4152-baa5-84048c4197df", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4317d5-9d94-48a1-b5d6-3bdc70e1b383", "sighting_of_ref": "indicator--05093e99-ea25-4774-9c0b-ec0fa1934a13", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787519a1-ce94-4ac3-804a-fa1425b256ca", "sighting_of_ref": "indicator--18b6d796-77af-4af7-b3c1-78c251ec3b49", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51d2066-1c31-40c4-b0a4-44812165b07d", "sighting_of_ref": "indicator--978e6193-1ed2-42bb-8864-ee2fb82d49b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b1316a-f008-4f22-b632-44b08c31818d", "sighting_of_ref": "indicator--1d66bf39-e9a9-4867-9b6a-b222e1926520", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d34357-4b03-4ffd-ade8-c42525c5f16e", "sighting_of_ref": "indicator--26523eb3-51cb-4ddb-95b9-b426fb1296f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ffa378-8143-4ed2-8b55-11743d2c9879", "sighting_of_ref": "indicator--54a8a130-4f55-497a-87e6-57ff097528b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c60b62-aa03-452f-a384-0c13b7faf33b", "sighting_of_ref": "indicator--44b6e851-c834-4e34-ad5a-a66fe6b772ba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1530c02-206f-4f18-935f-a8b370bd41e8", "sighting_of_ref": "indicator--44b6e851-c834-4e34-ad5a-a66fe6b772ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1855b612-3ec0-47cf-afef-3b28242e0d64", "sighting_of_ref": "indicator--18addf1e-4f97-4e33-949d-c014c8202c8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207a141a-b3c2-4ad7-9e46-3f55a7c2de2e", "sighting_of_ref": "indicator--6d965721-dce5-4842-abad-b07bb14e3638", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62238a4-2af0-481a-827b-e553c156ad12", "sighting_of_ref": "indicator--17fb961a-a61b-4ba7-9945-7fa95f7f5aaf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d60cc5-bcbe-4e87-bf6b-3574a350b528", "sighting_of_ref": "indicator--6da06818-46f2-4c7d-b526-6a2a66007fe1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9329e1ac-41c8-4e61-8e78-7c5c8f19b756", "sighting_of_ref": "indicator--67d5dd00-e65d-4f11-b19e-47b8904229f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1323ae-bd1d-4255-9c8c-c8d05f88d4c3", "sighting_of_ref": "indicator--048a4b54-b0e9-45a6-bc98-5ca5ce5843a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6cdc85-9e50-440e-af63-34fbb72c6d96", "sighting_of_ref": "indicator--ab557a51-c97f-4426-836f-bd9b192bba25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50d89ea-5cde-4c32-93f5-0f0ad37a6268", "sighting_of_ref": "indicator--a4e64957-0f07-44a4-96e7-ac1d256e9953", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e7c82b-ca2a-48af-806e-fa52ac771a56", "sighting_of_ref": "indicator--bf5d0f18-abb8-4040-bd31-950dbeeda1d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca2676a-d814-4483-8f74-c44dfa597066", "sighting_of_ref": "indicator--f83da1e6-d59d-44d6-8f7a-2669ee094b47", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941d9805-4c1b-4c20-9082-ca9ca13cd8fe", "sighting_of_ref": "indicator--10d5a365-5f86-425a-a07b-99860b6f015b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea33e0d3-2a66-4197-899a-7362f735ed2d", "sighting_of_ref": "indicator--10d5a365-5f86-425a-a07b-99860b6f015b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34d8663-85f8-4b23-b354-7e465f8a44e3", "sighting_of_ref": "indicator--8467e7cc-2d47-49fc-8cec-ddbdd83a4f15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3b5398-dafd-406d-9323-e228cad7af16", "sighting_of_ref": "indicator--cd081c2b-38fd-4a5a-8cce-887f1fa82f80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66618f9-71e2-4878-a626-78249100ba99", "sighting_of_ref": "indicator--cd081c2b-38fd-4a5a-8cce-887f1fa82f80", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e87eb6-5f62-4859-aae0-bbe6be85ff4d", "sighting_of_ref": "indicator--c2a48f41-861b-4074-ab6a-9c9ce51572a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8124a32-e4bf-487e-b2f6-fcf78dac72bf", "sighting_of_ref": "indicator--7605b2e1-072c-481c-8d0d-881641991da1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49de9893-19a9-47aa-978e-cdd44212a1bb", "sighting_of_ref": "indicator--8b9c5ac6-d548-4beb-a22c-9a2d0c1c9313", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f94937-a293-408d-8ff4-b826f6b28b62", "sighting_of_ref": "indicator--8b9c5ac6-d548-4beb-a22c-9a2d0c1c9313", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45da5cc-26eb-4da0-a559-5dd23f03c095", "sighting_of_ref": "indicator--5b952b4a-0291-42ee-85dd-04e5adf4315a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a952fb-8863-4a79-8672-c13a5352aa01", "sighting_of_ref": "indicator--5b952b4a-0291-42ee-85dd-04e5adf4315a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f099bb-2170-41d9-ae3e-a06e05a96ab2", "sighting_of_ref": "indicator--5a95f2ab-e852-4bc1-9dfa-c034f460d89d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3c286f-a352-40e9-bbbb-2bd7b169e80d", "sighting_of_ref": "indicator--5a95f2ab-e852-4bc1-9dfa-c034f460d89d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a697f7b7-3281-4d96-8650-429e59d07995", "sighting_of_ref": "indicator--d6d744ee-8b3f-487f-9801-4708153dedb6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9dfdd41-55b1-4ad5-9bb8-05014a295e5c", "sighting_of_ref": "indicator--8915a236-779e-497d-b677-f44379809529", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9c6d64-5d0f-47f9-90e2-78b266a348c6", "sighting_of_ref": "indicator--994e03fd-cfb2-40c4-bde5-1b58fe756fa1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c547d0-531e-4167-93f8-44cb9f81ee12", "sighting_of_ref": "indicator--994e03fd-cfb2-40c4-bde5-1b58fe756fa1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c778cd2-8d6d-4a87-ba02-98ede342ffaa", "sighting_of_ref": "indicator--1e7dc693-128c-4d17-9483-70b9b471d190", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d94ad1f-7e97-42e9-9609-4dfb204c8378", "sighting_of_ref": "indicator--70c7bcf6-8a8c-4205-b707-a25e24c9e7c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff83751-22de-4f9d-a1b8-8ee9f96ce07f", "sighting_of_ref": "indicator--70c7bcf6-8a8c-4205-b707-a25e24c9e7c2", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4395f7-426b-4f41-8585-c880a8c09826", "sighting_of_ref": "indicator--5d56503b-0387-4ceb-a7b1-d825c00b64bc", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d5bdd5-fbd1-4000-82c7-bd5992d66b68", "sighting_of_ref": "indicator--220aa559-a34d-4b3c-9d4c-ad2656ea6f48", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64732bd7-0f44-4797-822e-0f4798722b08", "sighting_of_ref": "indicator--d58aa861-0f19-4aeb-bcf2-37f9365701cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57626bd2-2813-4dd0-b6be-31818c4132f7", "sighting_of_ref": "indicator--3febf430-4b2d-4080-868a-a679c6dd080c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b2a6de-6ab8-4379-927b-568b20959f92", "sighting_of_ref": "indicator--3febf430-4b2d-4080-868a-a679c6dd080c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb230c7-5a8f-4967-b47b-8c7cad1283ec", "sighting_of_ref": "indicator--69e04937-9a6a-4703-99d0-b823d02c566c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7d0c6d-5edb-435a-9060-e1ee6aba0c14", "sighting_of_ref": "indicator--7e965339-eead-4429-b941-c9bc7f2d8afa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b94073c-f873-4f8b-b394-d0abbdf5596a", "sighting_of_ref": "indicator--c31a5341-97be-48fb-99ca-87caf2ba1e40", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777fa971-1835-44d1-a6d7-b0016c790fdb", "sighting_of_ref": "indicator--fca1f579-c4f1-4700-9d0a-0be9c2616457", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0e9efd-6019-4022-a6f7-336f05866b11", "sighting_of_ref": "indicator--cff78254-a421-48e5-a2bc-293d65f7a8c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3511e1de-167b-452a-aeda-b02e74ac53e7", "sighting_of_ref": "indicator--ca89ef3b-1d74-4e77-bf6f-250263ed8ceb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c56d0f1-e3b7-4d4d-a158-b14408aa1d34", "sighting_of_ref": "indicator--8fbc63b1-ebab-4ff6-88b2-8085dab52ac9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80867e45-d93a-427e-acb2-12c2b985b32a", "sighting_of_ref": "indicator--937383f8-49b5-4f27-b258-a0775b306e6d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b91e517-e376-4b9a-b581-b078ea915a07", "sighting_of_ref": "indicator--09ba441d-52d5-4665-a3bf-13816e04c0a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737f3832-805b-466c-bc97-d8cf48b9c208", "sighting_of_ref": "indicator--09ba441d-52d5-4665-a3bf-13816e04c0a6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221d0b7d-3509-42a6-9043-a1cf3676dbfb", "sighting_of_ref": "indicator--4ff7e8b7-6372-4b04-a460-c3af5523a856", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73d256d-fe48-4264-a72f-0e676c4daeb8", "sighting_of_ref": "indicator--1389adc3-b7e1-4ced-9bbe-277a0e7ae3f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2f7c53-f8c2-4eed-8141-3a98085235a2", "sighting_of_ref": "indicator--56e1977e-20ef-496b-8d48-4f839d051e3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660f2a82-b4d5-44a4-8331-52e8a48430fe", "sighting_of_ref": "indicator--f04a0249-436b-4890-a3fa-9fffd8d0cf96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5245d926-b929-4050-b59f-c4fa48615b2c", "sighting_of_ref": "indicator--19e42ef2-63d3-4565-bf21-771897af975e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3483ae87-40b7-4dc2-98fb-c8f3d84bca2e", "sighting_of_ref": "indicator--8d43712a-d34f-4049-88d3-aa6482860844", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e515993-552d-4e31-a38f-87473e580e57", "sighting_of_ref": "indicator--3b3f7be4-e865-4748-9987-73e5b4604a97", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ee1829-a07e-4950-8df0-cb26b377832f", "sighting_of_ref": "indicator--3b3f7be4-e865-4748-9987-73e5b4604a97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf60ccc-b65c-4c51-ab0c-41cd127de42f", "sighting_of_ref": "indicator--64e4716a-881d-4024-9770-cf7e414b3cdf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc91646-f4df-4446-a30f-679a85bbfe26", "sighting_of_ref": "indicator--fb1ff9fb-d007-4a93-9a3c-66200681ccb7", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b055dd1-e2c3-49c1-b722-52947428c9d1", "sighting_of_ref": "indicator--87dca98c-8456-4844-bab1-28b2f76e05ab", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eec21fc-12b9-41e1-a0c7-49c52cc10e5e", "sighting_of_ref": "indicator--8c28ed14-7d12-46ac-912d-11b7074e6273", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0666de34-671d-4171-951e-e8be0c241f74", "sighting_of_ref": "indicator--d425b9b7-ba37-41d5-86f8-4f823a108597", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f5de81-03f4-44d5-aa43-482c1ad7c11d", "sighting_of_ref": "indicator--e519d738-023b-4143-ae37-f2c33274dc4a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f229e8b8-8848-42e8-9b99-e22732714790", "sighting_of_ref": "indicator--2626d5f4-8e88-4bed-85be-b75647d72dbf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fe3ccd-0b9e-470e-8a23-255b933dc91c", "sighting_of_ref": "indicator--84e5d0c1-3215-4777-8cf6-c9c2b19a17d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd8923c-a116-4876-85de-969fd2057050", "sighting_of_ref": "indicator--20bd6ca7-7420-4d94-af3e-6c425ed67582", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af97e5b7-0ca3-42c8-9e36-2958ad05e8ea", "sighting_of_ref": "indicator--a0216bc5-e162-4c29-a8d1-998d18a81cd5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7833e6-591c-4f24-b847-d1e7ee9b2f76", "sighting_of_ref": "indicator--be41c207-aa07-4e4d-ad9c-6cc3667bd039", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e248422-bb7f-4965-b439-311a031b2d07", "sighting_of_ref": "indicator--cfc39a2d-2aaa-480d-8ea0-01b364b880c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b121f54e-6928-4e24-b744-74dab7373305", "sighting_of_ref": "indicator--6c680fcb-4564-4ae7-9c88-87f77a420a93", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d766107-4acd-4731-8a0b-88e20c4a13e0", "sighting_of_ref": "indicator--f77c48f9-8675-4c1f-ad33-a1891c57ba27", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462a2138-c222-4623-8991-e2a467bd3f4b", "sighting_of_ref": "indicator--f77c48f9-8675-4c1f-ad33-a1891c57ba27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc76a0c-de79-42a3-b01c-80a34761058a", "sighting_of_ref": "indicator--94381864-4e24-4f98-bcb5-cfdb32606342", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fab5e3-8d50-44be-8bc3-3f3cf87f5ba7", "sighting_of_ref": "indicator--94381864-4e24-4f98-bcb5-cfdb32606342", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bacbf1c-634e-43d3-9431-90eac08a6b35", "sighting_of_ref": "indicator--f37b91b1-5b3b-4c19-ad44-b4e2423fa3e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c574ac-0405-42ba-bd5d-07acbbdceea0", "sighting_of_ref": "indicator--f37b91b1-5b3b-4c19-ad44-b4e2423fa3e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1455bd87-8894-4153-ab4c-0b4e85ed67b3", "sighting_of_ref": "indicator--490fab4b-c965-4f6d-87d5-306e103a59f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2417383-616e-44fe-be6e-be1d8b5d8476", "sighting_of_ref": "indicator--acce2a92-efc2-4617-b9a1-05d57bc59669", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811c0d14-57e0-4ff9-801a-aeffe139fec6", "sighting_of_ref": "indicator--acce2a92-efc2-4617-b9a1-05d57bc59669", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a70dff2-907a-436a-b7f6-88958089ba1c", "sighting_of_ref": "indicator--4467dddc-2608-4910-85ae-395d7630dbe9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4c4a23-de77-4c4c-ba15-5877f008fbca", "sighting_of_ref": "indicator--2a613014-a6fb-4457-b6e8-bb8f37d28f64", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc3c59a-c1b8-43c0-b671-9627e280de44", "sighting_of_ref": "indicator--b5c1c178-6ac6-4df9-8211-43a9da1fdd10", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4949cf95-d687-4ab4-a75a-f0cc565baab1", "sighting_of_ref": "indicator--e6cfd31e-4dcb-4130-8b22-9cf2e65d2a86", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ae3073-3f7f-4b67-b6fb-04b7aafce631", "sighting_of_ref": "indicator--243faffa-e615-4c47-a551-df952a9646a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8002619-48e9-4f65-8559-c2da9ecb03af", "sighting_of_ref": "indicator--243faffa-e615-4c47-a551-df952a9646a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2c7c24-8604-46ae-a7a6-c3602f94a8f6", "sighting_of_ref": "indicator--d64c1df9-c7b9-40ef-a2b5-fdf6d55a27b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c86bcd-55c1-4f91-bfe7-5fe14f33e3c1", "sighting_of_ref": "indicator--ecdc6fb7-4465-4c31-b33e-63e2d1f0c5a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8872d2-4aff-4d53-8b8c-7db14abd94e6", "sighting_of_ref": "indicator--26b63112-5055-474d-8cc1-2a7c46c854f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545f1aea-60a2-4d76-ae9e-50d850b7578c", "sighting_of_ref": "indicator--7a8517e4-2985-4ca9-a61f-b767b5647dca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc98fab5-9f73-4f93-a40a-c38a67c7a47e", "sighting_of_ref": "indicator--7a8517e4-2985-4ca9-a61f-b767b5647dca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aab6447-6406-4d9b-b880-a720ed4835c2", "sighting_of_ref": "indicator--ad984ab7-e119-4930-8082-2d1b7913b8cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc372954-dad6-4e1f-8cff-04beb6baf6a4", "sighting_of_ref": "indicator--425af3e7-1884-4e43-b644-364317040b65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd29062-2a3c-413e-92c8-501c16876fd1", "sighting_of_ref": "indicator--0c8f29f8-3e9f-44fc-9bca-ad279dc370c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8aac5d-2789-4968-ae32-dbfd8380517e", "sighting_of_ref": "indicator--5805ee61-ef77-4842-a774-d4695abfc112", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbd62e9-a446-48eb-83ff-6b63455fa7a0", "sighting_of_ref": "indicator--0da24849-30f6-4fbb-af9d-e6d767ff82b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655ef0cc-337f-4af3-87f0-09b78e3a24fe", "sighting_of_ref": "indicator--7d0042a1-f377-44b5-84ac-4e40f38bd99d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720c780d-f984-4333-915a-0b902efa610f", "sighting_of_ref": "indicator--0ead6f7c-88c6-4ca4-9ebd-72e540f72c25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bd51d1-4783-442d-8970-a5e27c444330", "sighting_of_ref": "indicator--00af7f3d-9b3b-4839-a8d1-6d7d9ad56d5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a422d27e-b706-469c-9248-465d5ceb2fd3", "sighting_of_ref": "indicator--170c2ebe-9a0b-48f9-b5d3-3e91b3809254", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa89bbd-1e49-4d45-bc5c-79ffc5a3ad1e", "sighting_of_ref": "indicator--6e1b5df7-8d16-40d3-82c2-32efb3c6e774", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d7edb8-1e15-4887-acf8-721cba51c778", "sighting_of_ref": "indicator--ce25a8a2-a3bf-4611-8ef1-adc1370bfb11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da76dfa5-125b-47a0-ba05-39bd33f6ba71", "sighting_of_ref": "indicator--1c7b23bc-fa5e-4a40-a756-bcd773e09286", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce850633-e86c-4fd1-b37a-5d0476721b4d", "sighting_of_ref": "indicator--647fda48-2f45-4b6c-9a57-201bb62e5d23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5329b3d-98c7-4d6e-893f-d11b4732da3e", "sighting_of_ref": "indicator--56ae76fb-83a6-4d39-963e-96695f4aa266", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2e01ff-9f09-4baf-92da-0af0e38f8551", "sighting_of_ref": "indicator--d543713a-dd87-4229-b06e-a8330ae1566b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f3f355-ed05-43d4-8890-2951a26ddea1", "sighting_of_ref": "indicator--aa71863e-cf8c-4427-b335-76f2e0d5a392", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dd7195-8095-44ff-909b-ca2e49a4f3e2", "sighting_of_ref": "indicator--d93e4c87-a6ea-461d-9046-39d1bde09f4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa676d40-57a5-4c35-ae4b-83438cbbd575", "sighting_of_ref": "indicator--85487c6d-7b6d-40a7-acf6-c58141613250", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882d6040-09ac-4c3e-a9f3-87cbf34c04a4", "sighting_of_ref": "indicator--67cf1a3e-b9e2-49f6-be61-b3db64beba84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2310f18-e7be-40b2-b3c7-7d6b55eeb934", "sighting_of_ref": "indicator--59521478-948a-4147-8aa0-b6304e5b3e4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d3a440-992f-497a-ba35-d80d3443e1d5", "sighting_of_ref": "indicator--568eedc1-1d80-4e3a-a538-c6f6c508c492", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277663d2-b939-4bf3-b618-b2f8f7ca9b82", "sighting_of_ref": "indicator--81e995ac-6f59-41e5-ae68-9cc6322d7726", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adcb10f-bb92-4a9c-8aa3-82959b4b15ed", "sighting_of_ref": "indicator--6a7bc10c-c0d5-4d74-8f92-b1997afe797e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc57e305-0165-4e1a-af8c-3770fd61cf06", "sighting_of_ref": "indicator--c0a010e4-debc-4918-b631-cc6e66575ad9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ce96b3-9297-4857-a768-48d111cc8458", "sighting_of_ref": "indicator--2b2467ed-21ff-477f-a9a6-1cf89901027d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c7af61-41c1-4f2e-8777-439e22c36c66", "sighting_of_ref": "indicator--917a5bec-717a-49dd-b95d-b16363af3f09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa45d8ed-eeb6-4da0-8231-fa7f7ba7c75c", "sighting_of_ref": "indicator--14c22559-4a43-408f-8647-8af01ee45e3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0690f9a5-6037-4118-8010-14a59e74f5f2", "sighting_of_ref": "indicator--3f33b622-3328-4ec2-9cfa-7d6631a737cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f4214a-44a3-4e3e-a6e8-c5fcd9461cdf", "sighting_of_ref": "indicator--fd81c8e3-13d0-412a-b536-f4b2e4368e9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b569492e-5135-4ffa-b1bd-aaffa671c54f", "sighting_of_ref": "indicator--86c27e04-10d3-4e42-a826-ba720d6290fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176c77c9-cec3-4bac-8dec-81d236a39e4a", "sighting_of_ref": "indicator--b006fb37-7311-42cd-9efd-b3987563252d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9e2f56-883a-46b8-9924-a19eba34f780", "sighting_of_ref": "indicator--3461aecd-49d2-41cb-a701-52f8e490a457", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c2defb-090c-443b-a3f7-cb4b828235a3", "sighting_of_ref": "indicator--37108016-d9a8-451a-90d6-5c2630d9b0c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef5c6a2-947b-4cb4-b063-328cfdea01f5", "sighting_of_ref": "indicator--32c7387c-6fe9-41db-9562-37e17006da9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2629a7c-3da8-4e13-9691-3bf071f8c5c4", "sighting_of_ref": "indicator--870e4a5e-e647-4102-8984-16e344e5e886", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4ea7af-6743-4dc6-9a71-9e901af5f38b", "sighting_of_ref": "indicator--c4f09878-b954-489a-b919-50043f36563c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b63e118-c384-4cd1-be72-457d388775e2", "sighting_of_ref": "indicator--578b9ccf-f078-4537-be80-49162f648a27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c7fbea-206b-4392-bb9f-fe04f7d3749e", "sighting_of_ref": "indicator--9670b70b-221b-4c35-9ee8-1c465480b786", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55f3a2b-4ed9-4049-89da-5078a1445991", "sighting_of_ref": "indicator--038260c5-a465-4953-a5bd-7b272654314c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a12944-d7e8-4e5c-a8ae-e76de1086f6d", "sighting_of_ref": "indicator--7d92b209-60ef-49d3-b6d7-83e127afe93f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d226ad0a-242d-4bb1-a99d-d443a8012754", "sighting_of_ref": "indicator--d5b8e8ff-b2c3-4c37-95ca-bb62ca259ac3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8039845-925b-45f8-9015-15c210fe6454", "sighting_of_ref": "indicator--bc9a6028-650e-4b1c-87c3-e3029b616121", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a715d66-0333-4bee-9382-8eca232b4025", "sighting_of_ref": "indicator--53a2e330-578a-4e37-8d6b-27dde2743c69", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41293aa1-8385-492d-aeab-b2735ec5c173", "sighting_of_ref": "indicator--4fea5404-a1f8-4c63-9703-ebe946c78abc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c687b707-2383-4c18-9b59-e1ac55b11e44", "sighting_of_ref": "indicator--39c53af5-1d02-4878-a29a-4f89a4aa4113", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1814cd-18c5-43af-89e1-62f32e3a2c0c", "sighting_of_ref": "indicator--3e6cd865-be9a-4346-beeb-4ef4c3e54c75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98026b98-af5c-4b39-8b69-102698ed8d28", "sighting_of_ref": "indicator--3e6cd865-be9a-4346-beeb-4ef4c3e54c75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd9e764-f9fe-438c-b31b-5fbd7116e403", "sighting_of_ref": "indicator--c7c98dab-0bd8-4981-8e1e-c9bc68b130c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8df5255-dcb2-4332-ab93-8302a9804c72", "sighting_of_ref": "indicator--2b19333f-c3aa-4176-a183-eda6f30b4eb9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6b17f6-fafd-499d-b18a-6c6fce4cd6c9", "sighting_of_ref": "indicator--b2d214e2-fd0d-43dc-bc15-651901884133", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d143d99f-e1bc-4d60-8349-061285b9bd85", "sighting_of_ref": "indicator--5fbadc37-ccb6-42c5-89d4-12f0ed0a49a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f1eaf2-441e-4698-a933-119220a1eedc", "sighting_of_ref": "indicator--5fbadc37-ccb6-42c5-89d4-12f0ed0a49a4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd803119-4976-492e-ae5c-96a5ee8a2613", "sighting_of_ref": "indicator--53b13a7e-9dfd-4fa8-bd68-b4069b50b329", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a016405-34f6-4a76-80bb-18e4e2f0e359", "sighting_of_ref": "indicator--9d021760-2cfa-42cf-bacb-d3703e21c7b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7a9794-f117-4fc1-b1ba-dbd780393715", "sighting_of_ref": "indicator--fcfc5a45-5141-4881-a55d-8cd38a1ecef3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd446a01-8b86-4370-b9e7-2f4e1c0a4ee4", "sighting_of_ref": "indicator--85680908-cc24-434e-9eaa-0d75cde32097", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552b9672-3d06-48c9-a494-214ad62f77c8", "sighting_of_ref": "indicator--d3bcd5ea-e35c-4ce7-a280-6fc72244ffef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca83103-8d37-437c-8005-0fafb8da65e4", "sighting_of_ref": "indicator--e447964a-b9a5-4c24-9e8e-e6769bb6b7f7", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b5d241-a48e-46a9-bbd5-e2b5457b22ed", "sighting_of_ref": "indicator--eade624e-ff70-4940-9845-06d2b09cdc8f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2266f92a-43da-4696-a144-03750060c47e", "sighting_of_ref": "indicator--71055427-b56c-46b6-9b45-6145c7bf85ca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec53c6c-aa72-46a5-8bcc-9c330487f8d1", "sighting_of_ref": "indicator--02ac4d89-f1c1-4822-9951-08720620f48d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3507893-1863-4dc4-b59b-11b982100a41", "sighting_of_ref": "indicator--eef0dab0-da67-499c-a901-cadab764bb06", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e7750a-d479-4890-bc84-bb3ded1cebc3", "sighting_of_ref": "indicator--5514ce8f-2f9c-4787-8258-de9937fab537", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e35322-561b-44e1-9e83-ebe2fe1338db", "sighting_of_ref": "indicator--e347438a-7ee3-4290-ba2d-5d8a77cdec1c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029fc188-8796-4617-bf1d-fa57645dbd75", "sighting_of_ref": "indicator--0c15e0cd-d8e2-41b1-9e6f-8905c95982d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac86186c-83bd-4f0b-8f61-68b2e20dd0c8", "sighting_of_ref": "indicator--1b3613de-c2b0-4620-90d4-9ee4d4f79710", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4841cf47-1d16-4d8d-9f85-e32735e6b8cc", "sighting_of_ref": "indicator--eb44d3cc-02b2-4aaf-a5d0-2498690832b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a714d80d-5844-4ad5-bc0b-d486153703ec", "sighting_of_ref": "indicator--1fa463b1-f1be-43a5-832c-e121a4146db1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995e0cdb-ab3c-4c91-ad10-182bb61831c4", "sighting_of_ref": "indicator--22d9f2f8-5d79-43a7-8bf8-57c120b053e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c1f460-08c8-49f5-869e-57376637a6df", "sighting_of_ref": "indicator--865b235d-6df6-4681-944f-027bd3d10d02", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c909e0b0-6380-4764-9969-9d13eb707abb", "sighting_of_ref": "indicator--fc9b566b-4933-4468-8f4f-05c7abc68ec2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d15c28c-6da4-4e9a-97bc-3da2f960e73d", "sighting_of_ref": "indicator--c5cf374a-8c4b-47dd-9156-fd94e7680659", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0915b2-b7c7-44ed-b6df-4aec858d2544", "sighting_of_ref": "indicator--20f74834-38a3-40e6-928c-723630f70fc7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff25601-79c1-48d3-ae8e-12a6b0274ee0", "sighting_of_ref": "indicator--83223fee-7e34-4cd6-b62b-ef5d718d164f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351b4f43-7edb-483d-bfaa-1dd46549d89c", "sighting_of_ref": "indicator--cbfc1860-ba23-4a96-8355-0d80ace26768", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b280a152-cbfa-4197-9b5f-2d15e413c499", "sighting_of_ref": "indicator--cbfc1860-ba23-4a96-8355-0d80ace26768", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e5c423-6071-4e9f-a8c0-dd2bd11276b0", "sighting_of_ref": "indicator--76905a78-cc58-4df7-bb18-0d3f49f3c6f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9255eb98-78b3-4118-af9c-952738c5742a", "sighting_of_ref": "indicator--f98e64e4-4404-4a7d-9773-876828278ca8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5da4061-59f0-4757-99ed-a3aba111e863", "sighting_of_ref": "indicator--f98e64e4-4404-4a7d-9773-876828278ca8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4007b78e-40ae-4ce9-a3dc-c20730726967", "sighting_of_ref": "indicator--8a292b79-7879-4183-9e0e-75f04e58e255", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d69fbd5-b18a-4d7b-932b-96f0ff21774b", "sighting_of_ref": "indicator--f2e673c1-cda4-475d-ad18-3a0ca927e815", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2930560a-ebe9-4162-b3ed-abec104d490e", "sighting_of_ref": "indicator--84446743-ecd4-4b49-8043-0ba2aadcc320", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a0755f-50e0-43ef-8b2d-33568284a31b", "sighting_of_ref": "indicator--46c229aa-1e3f-457e-a662-2cba4b7b83fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb7894b-fda6-451b-bf0f-d706866f0743", "sighting_of_ref": "indicator--861ab8b8-1a58-468e-8498-e8609024ff6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f900fc3-25f4-4129-a812-a62dbb7bcf21", "sighting_of_ref": "indicator--e2978f79-0c91-4d0c-912a-1e5ce2546ac0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180f0250-600d-4fde-a4c6-ea30ff3dd19a", "sighting_of_ref": "indicator--d940c770-2312-403d-9f5c-adce01f0a6d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245a363d-88e1-4462-b847-e88d2cc44250", "sighting_of_ref": "indicator--fbe085bc-50be-4bbc-bc0b-1f46576331b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bd1b79-064c-4c50-a4b5-cdac80e597a7", "sighting_of_ref": "indicator--f404a86f-7b86-4c2a-a866-09658d97e609", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da2a9a5-d573-45e9-845a-bf520c83c352", "sighting_of_ref": "indicator--f404a86f-7b86-4c2a-a866-09658d97e609", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce58299-08fd-49f4-aba0-6b659352658b", "sighting_of_ref": "indicator--4944c156-9f3f-44f0-90ef-67623bd4c2fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50be4b8f-3709-4649-9d97-5242cdf2370b", "sighting_of_ref": "indicator--f770d774-a325-4f7c-898c-9c5519952df3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2562bc6a-8fca-4aaf-9647-8125f130d78a", "sighting_of_ref": "indicator--f8050e0a-2d71-4b76-a11f-f5d81de9d54c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4f540d-9e63-4f84-9043-b71d86fb4c06", "sighting_of_ref": "indicator--ba527213-6d09-4965-a15a-5199b749b50e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00df37ed-438e-4cc3-ab08-c3093998f360", "sighting_of_ref": "indicator--ba527213-6d09-4965-a15a-5199b749b50e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae31db8-2069-400a-bcd0-2d061ecc50f4", "sighting_of_ref": "indicator--c382801d-7fe9-44b3-9a6b-e6d2c9101ab3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48546cd3-d719-44c9-b6aa-da8329ce3020", "sighting_of_ref": "indicator--602c0943-9540-473b-8804-c851505640d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5e3fb5-3b85-403d-882a-c7be6076dbeb", "sighting_of_ref": "indicator--96b63f6a-7b7b-457c-86ad-8778061aa42b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08540936-1e57-4b78-8527-98b7267efd5c", "sighting_of_ref": "indicator--96b63f6a-7b7b-457c-86ad-8778061aa42b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64265a2-2e16-4dfd-9ace-7dd6b9f2c561", "sighting_of_ref": "indicator--02288e77-fc48-4177-a2c0-cccc4c5b5be4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed1858f-6c1e-4e28-ad33-d04a38d02c4b", "sighting_of_ref": "indicator--e7e8a5c2-0e84-4c2a-b8cf-ca754fe8621a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07564dba-dbc2-4c74-8010-826319f079e2", "sighting_of_ref": "indicator--fb1224af-a7bb-4b42-9b4a-12bd0da3b7f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b4927a-ab3b-42c8-9e5d-78e73a42a1cd", "sighting_of_ref": "indicator--fb1224af-a7bb-4b42-9b4a-12bd0da3b7f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbc4619-7409-4e7e-9f87-b2f9f6fcc45c", "sighting_of_ref": "indicator--8b6345a9-5e69-454b-9d42-4f3c4955e5bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080d7791-cd9a-417d-a7ea-32dd6e157c3a", "sighting_of_ref": "indicator--f5ae9155-a471-4b12-bf61-d45f2fb16094", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf5bc38-b66e-4049-bc82-3c84f895544a", "sighting_of_ref": "indicator--6cf660c4-fbaf-42c4-950d-49d13fd04f38", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3faa94-ff4c-46ee-b7c4-20fee16e4769", "sighting_of_ref": "indicator--6cf660c4-fbaf-42c4-950d-49d13fd04f38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5891b75-8292-42c7-b8c8-b6043bcb9768", "sighting_of_ref": "indicator--1d0f2b6d-aa2b-4c92-9d79-1ae424e2e950", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101f7ecd-c63b-4334-adfc-951ac172c6fd", "sighting_of_ref": "indicator--1d0f2b6d-aa2b-4c92-9d79-1ae424e2e950", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84509f7-d57e-420f-9c23-ab35b90b2182", "sighting_of_ref": "indicator--7f8bb519-093e-4c5e-944b-2d70a9964827", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f1951d-ce3b-4189-bfc9-5d7a609fbbc4", "sighting_of_ref": "indicator--b64a1baf-671a-4136-a9ed-6002b7658fea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6c2f8f-04c6-4e61-9653-a97fbcadccd1", "sighting_of_ref": "indicator--baedaab2-e77c-4584-a9bf-6e7b5694013a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb58340f-f8e9-450b-8f01-84b47e40a004", "sighting_of_ref": "indicator--a0130b77-c5c0-4c51-8036-f048f42a719a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e2c5d7-9986-41e9-87d1-ba71dc39bb52", "sighting_of_ref": "indicator--92c74c81-f4e3-49f6-aeaa-3827655e2aa7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b636423c-3e28-480b-8fec-56248799ef44", "sighting_of_ref": "indicator--4af7cf3f-309a-45a0-8fa9-e3df72a244ef", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf616c0f-f8a0-406f-8f3f-82ce9c151a19", "sighting_of_ref": "indicator--df305df1-94c7-4e2e-ab97-856e85aa5e31", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5e3fcd-e6cf-4927-a3cc-4185577dc93d", "sighting_of_ref": "indicator--df305df1-94c7-4e2e-ab97-856e85aa5e31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40356350-571d-4e24-a375-f5c63904bf43", "sighting_of_ref": "indicator--1689e92e-6cfb-4e21-bc21-7c248bc2d737", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e084442-93a4-4a8f-b046-07f9d40634e5", "sighting_of_ref": "indicator--54eea2b3-7d27-4c5f-bd37-a939e259aeb1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120b9899-b644-4e99-bd50-89ec0dfd1634", "sighting_of_ref": "indicator--8e553326-24d9-4992-8223-b17dc451f76e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b68ae2-008d-40fc-90dd-8f31f11fa422", "sighting_of_ref": "indicator--9e3a8217-ccb5-4c5f-b31c-670cd500f4d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb78297-5631-4bce-8282-7a5fed145166", "sighting_of_ref": "indicator--9e3a8217-ccb5-4c5f-b31c-670cd500f4d2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4641b910-8215-4ee0-93b4-b3715eaa9f9f", "sighting_of_ref": "indicator--e321af9e-bc6b-4b3d-a272-a374cc2c9215", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcd7b13-e219-46ef-abf6-40a16bad1e57", "sighting_of_ref": "indicator--77496079-2d41-412c-b9fd-50855dd55463", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ef3680-438f-4012-a293-6cd17c312df0", "sighting_of_ref": "indicator--77496079-2d41-412c-b9fd-50855dd55463", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7108aa4-6531-46ac-9377-24565b9c0971", "sighting_of_ref": "indicator--9854a85e-624c-4275-a62f-87fdaea16bac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ce09c7-a2af-4b0d-be5a-a96879205f3d", "sighting_of_ref": "indicator--9854a85e-624c-4275-a62f-87fdaea16bac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829f2f5b-5ddb-4ca9-b553-f639c26c0197", "sighting_of_ref": "indicator--c9a363fb-ec0b-4c89-aa88-a78729b6b4fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c006fc-055a-45e0-9cc1-d377aeab1f02", "sighting_of_ref": "indicator--b5e3a5ad-15ac-4e0b-91fa-9eb3796fd2c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0a8c58-6d5a-405c-9dd1-ab65b6dab5b9", "sighting_of_ref": "indicator--c87b8952-c76f-41fa-af09-126529a797ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c502804d-b458-4220-8ba0-c5801fd52c08", "sighting_of_ref": "indicator--164d10b8-7ae0-4fa0-bfc9-8281264f9d22", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7db2f61-3550-4ce9-a746-fae930141860", "sighting_of_ref": "indicator--164d10b8-7ae0-4fa0-bfc9-8281264f9d22", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aede5d5-6bc6-4f07-a155-8bd3481e39a4", "sighting_of_ref": "indicator--b6422b58-bdec-4037-ab41-89f72f6ffd4d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c67b152-e433-47e8-9fc8-35e07097d9bd", "sighting_of_ref": "indicator--b6422b58-bdec-4037-ab41-89f72f6ffd4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e5de9a-e05a-4faa-9989-43fdb601ad92", "sighting_of_ref": "indicator--f7e5b52a-2615-40cc-af93-a638df948c35", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5b8937-86dd-4153-9889-330fcab2463b", "sighting_of_ref": "indicator--84e3ae8d-4812-4c87-84dd-04eb7b2516a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e26f9b-24b0-4047-a1db-04fe183531a6", "sighting_of_ref": "indicator--47f61100-76a1-4c65-a679-9ebe0a648dc7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335100df-8dd6-4c27-9389-edd372f81d44", "sighting_of_ref": "indicator--47f61100-76a1-4c65-a679-9ebe0a648dc7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2daa5e-0ebc-4d54-892e-53df2fe5ce34", "sighting_of_ref": "indicator--91a434ff-ecf5-4095-94ed-bf0ad7e717f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd329336-3b6e-4362-a6cf-40e7d0c168eb", "sighting_of_ref": "indicator--91a434ff-ecf5-4095-94ed-bf0ad7e717f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bbaa1b-d5cb-46e2-b32b-e5efc79dfede", "sighting_of_ref": "indicator--30ee8f28-ccc8-46e5-8515-0157763c97fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110197c4-a178-4e56-872d-43fed90d4adf", "sighting_of_ref": "indicator--e1265c43-b251-4119-ba81-2e9c13231c0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d879e21-5c71-4500-8341-2da44d9e1a22", "sighting_of_ref": "indicator--19d1f463-7ec0-452a-9a06-a904f04fc809", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d1ed1f-51f4-4b53-9c7a-a3983fc0c3d8", "sighting_of_ref": "indicator--19d1f463-7ec0-452a-9a06-a904f04fc809", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a7fc6f-d14d-4f3b-8533-bce285c0dc18", "sighting_of_ref": "indicator--42b7fbe3-8bf6-4d78-a1d8-195e3e6da7fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f6bd67-503e-4085-a471-5c478ae7aad9", "sighting_of_ref": "indicator--caeb13fd-4972-4be1-ac1e-dd6fada1be6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d665e2d5-2bb8-4ab6-a2d4-fc9578f4097b", "sighting_of_ref": "indicator--51e7b108-fea9-4905-a7cb-fd21364998f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1561a60-8908-430f-bada-850df3c779c7", "sighting_of_ref": "indicator--05e98049-2602-49f2-8c67-a0389cfe159d", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bcb919-25b0-4eb5-91a9-3d4410cbb62f", "sighting_of_ref": "indicator--1c709d9d-bb67-4349-9f4c-34a873f14a60", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992753b5-ff2c-4e6a-a694-d439ceb9bf74", "sighting_of_ref": "indicator--1c709d9d-bb67-4349-9f4c-34a873f14a60", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6903c7-ea68-4c45-9ad7-600085b849f5", "sighting_of_ref": "indicator--13a4745d-20f0-40ff-9c1b-991710ba5a38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7e3579-7494-46f8-84bd-0704aaf58f7e", "sighting_of_ref": "indicator--652af95e-4104-45aa-93e5-a9880aa60cc8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7343ddc-813f-4fcb-a17f-430f76a83879", "sighting_of_ref": "indicator--7cf84ee8-cea9-4098-834e-fca3b2edc8e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099784ef-b56e-461f-a3c6-ece84f298848", "sighting_of_ref": "indicator--5d12939d-a239-4e35-a20e-817293435823", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe75869d-29a5-41e4-a7c9-336497fa5276", "sighting_of_ref": "indicator--f139b9d6-b6df-4079-b6bd-664d5efa6910", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab595363-3e5d-4b9f-bd6f-07d6e71d4602", "sighting_of_ref": "indicator--af8877ec-86b1-4634-b47c-fc6ec3663dca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fac4bf8-4132-4c55-b778-c0b595efe58d", "sighting_of_ref": "indicator--af8877ec-86b1-4634-b47c-fc6ec3663dca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7c8bc2-b1ca-47a1-ae0d-73bec4cb4b3e", "sighting_of_ref": "indicator--1800f39d-7025-4034-a6fe-d2a34ee6ab0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d944b40-99f2-4093-be3e-71c85449b841", "sighting_of_ref": "indicator--cf29ecff-de9d-47f6-9714-3463586b1f23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5761014d-5aa5-4758-b39d-b2db27ef768b", "sighting_of_ref": "indicator--cf29ecff-de9d-47f6-9714-3463586b1f23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c14456-7b20-4c51-a451-f2dc9318e2a9", "sighting_of_ref": "indicator--5ea9b389-603a-4f93-9188-369de17d7164", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c89d0d-63b3-4033-84a8-46ad52e112fa", "sighting_of_ref": "indicator--5ea9b389-603a-4f93-9188-369de17d7164", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f4edd9-b6b3-4992-9600-f00633686b80", "sighting_of_ref": "indicator--2e599f04-ee96-4351-b2a3-80343fa66ad2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573306e8-09ff-4173-be4b-20096d06f008", "sighting_of_ref": "indicator--2e599f04-ee96-4351-b2a3-80343fa66ad2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bb7b5a-ce87-4bc9-b672-4699a5aeb257", "sighting_of_ref": "indicator--dafb6021-4016-4a9c-b6cf-28da5dd3d128", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1d2ff5-a2e8-49dd-bbbe-b5518bcf5a63", "sighting_of_ref": "indicator--baeab37e-a4ff-4dea-b79a-39f2ce300bd3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778c946b-ae85-46d8-bc58-ad53672c8850", "sighting_of_ref": "indicator--ab395e07-e13c-4c16-ad1d-caee1483587a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd84218-b4b3-4478-bf14-6cdbf80e309f", "sighting_of_ref": "indicator--c2602eb6-fdc1-446d-a3cf-105cfc574cb7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f278084-6aae-4838-8c24-909172df9ba3", "sighting_of_ref": "indicator--c2602eb6-fdc1-446d-a3cf-105cfc574cb7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7de47a9-6d6c-44ec-aa5f-f9a9cba5e860", "sighting_of_ref": "indicator--4bcb8ab5-6ece-4ae0-bc49-9a0e10732463", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0b618b-0ed7-4750-b870-96d9d4e69feb", "sighting_of_ref": "indicator--26e3ae20-3cd8-417a-9827-345bd98a2e50", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4025a75a-04fd-4106-9fde-ae874d6c2fd2", "sighting_of_ref": "indicator--26e3ae20-3cd8-417a-9827-345bd98a2e50", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdb1d2f-a5e0-4436-a687-3d02dca2d989", "sighting_of_ref": "indicator--5e2306f8-5219-4165-9caa-9a78b7776ac0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548e4099-28f7-4911-94aa-803df78fdfd7", "sighting_of_ref": "indicator--5e2306f8-5219-4165-9caa-9a78b7776ac0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95644dd5-85da-4856-87fe-79fe16bf525a", "sighting_of_ref": "indicator--5eca4d1e-aa70-49d5-887c-b3c5a8492f8d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231c3b17-16c5-4e02-9a9e-df9f9006c582", "sighting_of_ref": "indicator--7a32a600-e09b-4aee-9141-31fad0f83074", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131cdaf8-50b0-4f6e-afd4-86c8bcb877fb", "sighting_of_ref": "indicator--a61642eb-d1b6-4a92-985a-6e847d3ef1df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9df0cf1-3cc2-4c84-9b29-2bbe8c83e0f2", "sighting_of_ref": "indicator--a61642eb-d1b6-4a92-985a-6e847d3ef1df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6777094b-5d91-4b53-96a0-16038da1ea13", "sighting_of_ref": "indicator--9919e758-d256-4a9a-b0c1-c039ba7cc179", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5750776-8c98-4891-9e53-d522e624399c", "sighting_of_ref": "indicator--9919e758-d256-4a9a-b0c1-c039ba7cc179", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35236f7d-f768-4fec-b81c-092e604125f9", "sighting_of_ref": "indicator--3bf0d0b6-5bf9-4775-b340-1e7aa145fd93", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c252a8c-e0ab-4c10-86d5-44cc751d3bd7", "sighting_of_ref": "indicator--3bf0d0b6-5bf9-4775-b340-1e7aa145fd93", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13c6fe7-6ef0-411e-affb-dbf75927db3c", "sighting_of_ref": "indicator--d9fe5ef2-3fd7-48e8-a138-4a794f92aad3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192c431b-ad4f-4594-95c1-28f0cdf314d2", "sighting_of_ref": "indicator--4c509f08-4876-4c9a-b179-aa87a5c4b612", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f1dc16-958f-41b4-9525-7980a591e3d0", "sighting_of_ref": "indicator--e7b0c320-703a-4b08-be5b-9f293982a930", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77de9083-9dc3-49db-82c3-c585d0779dc4", "sighting_of_ref": "indicator--84722ad0-a870-4bca-97f0-630ca26545e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dac9f7-5463-4d0f-8edd-760e4044e5b5", "sighting_of_ref": "indicator--84722ad0-a870-4bca-97f0-630ca26545e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d22034-d250-4158-ac40-7f22a73580bd", "sighting_of_ref": "indicator--ca0c0ef3-b1af-418f-b4da-e30b3af1069a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399d1844-a395-475e-8f65-38936b4c7cb2", "sighting_of_ref": "indicator--52d48582-3a07-4406-9f34-4a74b4c41cdb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f6c8d1-9841-407f-a05e-51ee32b814a3", "sighting_of_ref": "indicator--7ed463d8-3c80-46f8-8bda-189091c4e925", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34dd0d4-dafb-4b65-98fc-1692b65066e9", "sighting_of_ref": "indicator--ef4471ab-1334-43cb-bdcb-9ca3071238a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d6bc12-9123-440a-9811-f77cc65dd0d3", "sighting_of_ref": "indicator--3bbc389a-9f89-4c70-aaf4-0c0766a56519", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6c8268-0aea-4373-ae0c-379375307ea1", "sighting_of_ref": "indicator--3a046444-dfcc-42a5-addd-6c85363fdc13", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1851e1-c70a-4608-8c1c-a8e44904353a", "sighting_of_ref": "indicator--7968ee72-329f-47e5-9032-9be96028f4eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367aec7c-ec35-49f2-84af-e670614da888", "sighting_of_ref": "indicator--b6a49308-c917-4774-85ac-349e2b51306b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4a9d63-7354-4d98-9859-808809c8808d", "sighting_of_ref": "indicator--12370704-7788-4b6d-98a3-fbf7c8c13967", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0298582-11ea-44cf-acaf-cc8933d9e73e", "sighting_of_ref": "indicator--12370704-7788-4b6d-98a3-fbf7c8c13967", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b537d3-04f3-48d3-96f9-f5902bb349cf", "sighting_of_ref": "indicator--49fd94f4-6c68-4f5e-98b7-6d507c173025", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb59b7c-6ff7-46ff-a6cf-f309bc374dec", "sighting_of_ref": "indicator--bd448c27-6a76-4efc-b142-59c415d13e1c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cf021f-a563-4fb6-ac53-07b4dbdb657e", "sighting_of_ref": "indicator--bd448c27-6a76-4efc-b142-59c415d13e1c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b539f8-8002-4b00-9053-1cc133aae429", "sighting_of_ref": "indicator--72f336d3-780c-42be-b1c0-40c3fbe706c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a902bd6-a281-435c-85a9-9eb3f1a66bb5", "sighting_of_ref": "indicator--b929390e-b59b-4f1e-b868-a474be00f7b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69c675f-0a39-4273-b87e-e4d0bd51170e", "sighting_of_ref": "indicator--50ccaf04-28d4-49c6-b55d-024e0a634ab1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6d49e3-c5a0-4bbb-bf5e-d571cf8dad1a", "sighting_of_ref": "indicator--a996ad91-6a59-40ef-867e-c8487ac61bf3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e46ff87-28ea-497b-b0ee-fb41437c0404", "sighting_of_ref": "indicator--00b37807-2547-4d4d-ae12-fa493e0c1cfc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ffe726-07b3-4586-895b-b44672989730", "sighting_of_ref": "indicator--00b37807-2547-4d4d-ae12-fa493e0c1cfc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bbe716-4344-4a27-9781-507e73a17aa8", "sighting_of_ref": "indicator--acb96be1-11fc-4364-8224-9ef228e9faa5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fa49f6-910b-4089-8b1b-16f6bf51f7a3", "sighting_of_ref": "indicator--acb96be1-11fc-4364-8224-9ef228e9faa5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1654de9-ec9a-4be2-a894-3c3f02f70704", "sighting_of_ref": "indicator--2c5269c2-c692-4131-b2b7-313f0bb1ddc9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34999cee-05d6-41f4-ba1b-08bdfac6c52e", "sighting_of_ref": "indicator--2c5269c2-c692-4131-b2b7-313f0bb1ddc9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b379c7-5259-4e4b-aa42-867084de5c15", "sighting_of_ref": "indicator--10d9430a-08fe-42f9-bed6-63d4debd8784", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f9c64c-5eb3-47cd-923a-f53ab82a07b1", "sighting_of_ref": "indicator--10d9430a-08fe-42f9-bed6-63d4debd8784", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b979d70-de82-4688-9040-7820f0907fca", "sighting_of_ref": "indicator--cf3e8b99-b5a7-4e64-afe9-6383dd5c56ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3391ed89-199f-4020-a602-9059f36e11ea", "sighting_of_ref": "indicator--cf3e8b99-b5a7-4e64-afe9-6383dd5c56ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdf1251-5966-407a-aa7b-c27cbea5d649", "sighting_of_ref": "indicator--21bfbc4f-fada-40ec-98f2-18f65509c9bc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccb86ca-de86-4f13-b84a-95badc3a18bf", "sighting_of_ref": "indicator--21bfbc4f-fada-40ec-98f2-18f65509c9bc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91d1c83-fe1a-4e8f-949a-1f193668d6c7", "sighting_of_ref": "indicator--fe472a48-c960-4867-8f21-7c2686d618e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc0677f-6c0d-4fc3-922b-b762e5521c49", "sighting_of_ref": "indicator--280be3be-9f3b-46d7-ae3d-20b65879d707", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1660fa-623a-408d-b4fa-d4d00eff184d", "sighting_of_ref": "indicator--280be3be-9f3b-46d7-ae3d-20b65879d707", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62596e51-4e3c-4a18-9ce4-fd2b1d460513", "sighting_of_ref": "indicator--38ef5c3f-7e75-45da-b39b-ae23aef8ee65", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5094ba-7591-47b7-95ab-c5f35d2b4ee8", "sighting_of_ref": "indicator--71fab6fc-8e6e-4b73-8ca4-32dfbcb3ec41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0035e9fc-d118-4c0f-b879-d1a530949c7a", "sighting_of_ref": "indicator--113ffeaf-7c38-43e4-9c85-db19028d8acf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5396be-958e-4d76-96b9-969fbf745bcd", "sighting_of_ref": "indicator--81c48cd6-5114-4473-88cc-f3844a07d26d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4985baed-9c70-45f5-9e0e-8912a5229e3d", "sighting_of_ref": "indicator--81c48cd6-5114-4473-88cc-f3844a07d26d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35758c71-94ff-42e5-9bfd-87b07bf5ab8f", "sighting_of_ref": "indicator--52680336-ab5f-4730-81c8-bc46faaa2012", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63e7122-b86b-4be0-addf-dc1cc7cbfc59", "sighting_of_ref": "indicator--d3c43d64-a717-4338-aaef-8e831692af82", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96eac649-d13b-40c0-b8f0-cbae9dcb55b1", "sighting_of_ref": "indicator--e786f136-0e37-426a-a4eb-0b0f1ccd479c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919d3ed9-57f3-439d-90d9-826c80a17e70", "sighting_of_ref": "indicator--cb3fbc17-4cf5-456a-832a-de216266468f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9f693c-1bf8-4e1b-91d4-995023db4145", "sighting_of_ref": "indicator--afe75a44-7cf4-4e60-be03-7e8fc218407f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420550c3-0cfd-4d9d-939d-6fa4e61bc0ea", "sighting_of_ref": "indicator--b75cabf2-687d-42a5-8592-f26bf66f77c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dba0c63-7573-4fa9-b96f-0a9729f67e1f", "sighting_of_ref": "indicator--f3945f18-1dcc-4e8a-857b-00f4d761de44", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed22fac5-de31-4dea-a705-4509c53f48e8", "sighting_of_ref": "indicator--0f18251e-1cc3-40ba-8d59-391502958e57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35f1e65-cf86-4760-8ac7-38c454172da9", "sighting_of_ref": "indicator--7d767da8-892c-4526-adc4-2dbb87bfbd86", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047c5217-f6dd-4a6c-a401-08105f8d7b92", "sighting_of_ref": "indicator--1c026036-3edd-4dad-9da4-f4fb779d57c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd147bd-c4dc-453b-a30f-14a82922cb28", "sighting_of_ref": "indicator--387d7c4e-610e-4c17-aa69-6142033c6c3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba2ce24-d250-4ddf-878d-013c030474bc", "sighting_of_ref": "indicator--6c3c73df-c5f8-4aa4-9da6-3af851f1ca2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0528f84d-e67b-4ba5-a54c-dbd494dab386", "sighting_of_ref": "indicator--8e220456-7e8f-4347-97ba-943bf447098b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e21f559-160d-4b80-ae62-cd9eda4f2714", "sighting_of_ref": "indicator--15850999-7458-4fb7-9ef4-e9153604887d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b9b923-0aee-4c92-8f1d-8b86f98f02f5", "sighting_of_ref": "indicator--b8de45e0-354b-4a1d-9b37-19ff92fc53a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b77ba7-56c6-41ab-948d-74f1db971a77", "sighting_of_ref": "indicator--18ad509b-2d99-4ceb-80b0-8ff9791c51e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad4d615-d633-4493-ada4-dbf60dbb80db", "sighting_of_ref": "indicator--69862309-5d75-4981-a5b2-8866e0d4eed4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b95d7d-7f68-4ab4-951d-3effad7f1eda", "sighting_of_ref": "indicator--78626842-0cda-423a-a45a-45dc924bc9d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5595205-56fa-4028-9ba0-c4b1682deef7", "sighting_of_ref": "indicator--4c6ac9ca-9b1d-4b49-9f8a-ecfad1a0b101", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b08bdf-e423-4152-9e95-dbe65a8e582f", "sighting_of_ref": "indicator--ae05a97f-9743-474e-b58d-d5bd43a4e751", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6488b13-9926-4dab-84c5-10a69a15bf8c", "sighting_of_ref": "indicator--10f32684-56b1-43a3-bcbc-63d63ea25130", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb20752-d6e5-465a-991f-88214c51a654", "sighting_of_ref": "indicator--66861cf1-c6ef-41c4-91f4-59e0d669a438", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da0a31f-68ee-41b3-b55b-974edefcbd5d", "sighting_of_ref": "indicator--66861cf1-c6ef-41c4-91f4-59e0d669a438", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9778951-6adb-4f68-9842-86c23b7cf48d", "sighting_of_ref": "indicator--8f85fa25-2c27-4497-a2c6-6598f6b3a290", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4aef927-9b5f-4f18-83c9-9866735f5241", "sighting_of_ref": "indicator--148b1990-c9df-4302-807e-b2078578639d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5a4615-119f-483a-9f7a-41e3c90e9f71", "sighting_of_ref": "indicator--148b1990-c9df-4302-807e-b2078578639d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2192e893-b555-4ae7-a267-914087feb179", "sighting_of_ref": "indicator--14037ebd-7b85-4115-befc-33de70bbeb7c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84795dc-47f8-40a1-af0d-53df26766d61", "sighting_of_ref": "indicator--3db0fbb9-70f1-42cf-be49-ea5d33456367", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83d5155-c10d-4acc-81cd-46c010427836", "sighting_of_ref": "indicator--99b882b5-48fe-4478-a2b7-6cbb954f5bf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e21efd4-bb1d-4cbd-83bf-8d94782739b4", "sighting_of_ref": "indicator--7e241a01-58be-44ae-8dff-3fbaa56ee251", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8d3abe-5e62-4c00-9292-d04f65374f3f", "sighting_of_ref": "indicator--77cd0ba9-56e0-4702-beef-dcc4b71564d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fe2f85-efe7-4e78-8eec-ace92bff5d89", "sighting_of_ref": "indicator--3feb5ec4-b68d-451e-8afa-d0bab6474c18", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b3b60e-8e3e-48fe-b55c-b9a989c2bc2d", "sighting_of_ref": "indicator--3feb5ec4-b68d-451e-8afa-d0bab6474c18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb999d28-7128-42b6-b8a4-fc40fc6f98fb", "sighting_of_ref": "indicator--f67eb424-7032-43b3-8a41-470a5c1875bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b151ce-0ef1-41e3-980f-0923ecb7a21f", "sighting_of_ref": "indicator--4fb41253-1992-4f0e-b52c-f491b2418d18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96975e82-6f42-4a28-a5b7-4bca29d860c2", "sighting_of_ref": "indicator--d51fb491-d5e6-439a-9640-1908cb09d79c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ee6ec8-14b2-44fa-8faf-015a0a2eee35", "sighting_of_ref": "indicator--d51fb491-d5e6-439a-9640-1908cb09d79c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02a26f1-22d8-4554-847e-93a55c6589c2", "sighting_of_ref": "indicator--ff99d8ff-c85e-4668-b157-8d6927bb15a5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90d15d5-247d-4653-a17f-9c1271a6ec26", "sighting_of_ref": "indicator--8c8facd1-1c95-4180-afa7-8679f8807988", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb11f255-9700-41df-ad4b-13f9c8bd2f95", "sighting_of_ref": "indicator--b44f68be-d97b-4474-9bb6-a3adb5ec9def", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae593c46-e057-4e62-8532-f57753abbc97", "sighting_of_ref": "indicator--624f7935-4315-4e6f-8ebc-2896243ddc23", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f74628-0a22-4600-bb64-6dcaafe8882f", "sighting_of_ref": "indicator--472319e0-bc6d-4eeb-9b20-41f732264e6f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64106449-91df-4221-9fad-afc2c1db2bdb", "sighting_of_ref": "indicator--472319e0-bc6d-4eeb-9b20-41f732264e6f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f7ab4c-d221-47e1-9cc2-eb9c4100c932", "sighting_of_ref": "indicator--20cd15e5-a315-4d28-9a7f-61a26a6599fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6f5c21-8564-40a8-9100-de1565f8b5b1", "sighting_of_ref": "indicator--20cd15e5-a315-4d28-9a7f-61a26a6599fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f2663f-e313-41a6-8c06-1fcb27db46ca", "sighting_of_ref": "indicator--917c4f99-2c28-4910-acdf-64383828a2df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921a643a-e371-4f55-85b7-17b0faed85e5", "sighting_of_ref": "indicator--93350abe-65ee-4239-a85b-79c02e57aac4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9ea8a9-4ad6-447e-8cef-2b1b8b8aaa49", "sighting_of_ref": "indicator--57b07e61-6c75-46a7-8b71-263966b32191", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b783e5-6fcd-43cf-9abf-5edf3794f1d8", "sighting_of_ref": "indicator--0da2f512-c7ff-4e5e-95f8-773e1170e69b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4208cd97-13fe-462f-8485-9f57f7a0677d", "sighting_of_ref": "indicator--e5cf7e2f-f9ae-47da-9267-f32bcaad5f2c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f49751-2b26-4cc8-a528-30cbc5a9ae6e", "sighting_of_ref": "indicator--846bb97f-5d9c-4fef-8cd0-1b3e5a1c42fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0beac9e-3c58-439f-8d0f-98e40feb96b8", "sighting_of_ref": "indicator--846bb97f-5d9c-4fef-8cd0-1b3e5a1c42fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39148466-7405-4169-b46a-6f78bc233ff8", "sighting_of_ref": "indicator--43609f57-2a07-482c-9591-96e63284a659", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fbc5b9-2b9f-4b4b-93f2-5ace2c3cea51", "sighting_of_ref": "indicator--43609f57-2a07-482c-9591-96e63284a659", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c27d7d-a20e-4dca-82d7-7ec3d9fb5dc3", "sighting_of_ref": "indicator--a9226ef0-465c-43b4-9bc5-e6ae79354cd8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452f807b-d55d-4e9b-9347-a4a803704270", "sighting_of_ref": "indicator--a9226ef0-465c-43b4-9bc5-e6ae79354cd8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b58bf6a-7b94-4400-9be1-4a5d9f77d956", "sighting_of_ref": "indicator--db57634c-1496-4fcb-bbae-a31eb9fccb20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95861900-fe84-4547-820e-b5b81af58231", "sighting_of_ref": "indicator--51f7a6cd-7e95-4fc4-a684-293ced00ca52", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3269df2b-e4fa-41e8-9f1c-3921ad91fb25", "sighting_of_ref": "indicator--db306e71-fc3e-423d-bb40-57cd5193fea4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28756dc3-b2f4-4fd9-acae-e1ca475edafd", "sighting_of_ref": "indicator--d815566e-db1d-4b37-b538-5f859609b860", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22adc150-9c20-4e61-8987-09f032572ec8", "sighting_of_ref": "indicator--2964f9c8-d141-4cc5-958d-4ae95c955e5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6a95da-2644-4004-b615-d905ff376a3d", "sighting_of_ref": "indicator--1658a93e-a244-401b-9e93-afbbfb9aa1aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08d9509-cfc4-4633-b4b0-66bc289e530f", "sighting_of_ref": "indicator--01fec881-a3b1-4e92-8cb4-1b182e4d338f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3c7135-9273-4cc9-8d9e-7dabfa64ee48", "sighting_of_ref": "indicator--f8225783-e572-4aba-ac3b-f3f7ccb85eb3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b23088-891f-4d5c-8668-fd5edc2c1e8d", "sighting_of_ref": "indicator--7451aeca-51d8-43bd-a0ee-bc6c993a0645", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc0fef1-b750-4348-8053-e2b23fe9cc2f", "sighting_of_ref": "indicator--c9b11bf3-9fc2-48d4-98e4-fb3170107eda", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381377fd-2b1d-4fab-9bec-37aaf230d726", "sighting_of_ref": "indicator--a4739ef5-2256-415c-a800-70ddb3a355b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405bde8d-8fdf-4fb1-8451-92b8d7e73740", "sighting_of_ref": "indicator--a4739ef5-2256-415c-a800-70ddb3a355b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa575c1-e737-4afe-87b6-36ce4193d3c0", "sighting_of_ref": "indicator--4bee4454-1155-4fce-a793-a56aadc3a668", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52172961-dd8c-402e-86c5-3e0bd20e13ab", "sighting_of_ref": "indicator--91cb3172-4395-4e42-8e9b-12bf4c57a584", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ae7566-2c0b-4f74-89a3-afbac6ef4002", "sighting_of_ref": "indicator--7500fdca-0669-4028-a5cb-5cb0c7290ce6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e504d06c-d193-4e4b-9c42-0cf65b60384a", "sighting_of_ref": "indicator--c0775aa4-ee3e-4808-8118-c744926a78db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4826f137-201f-4a9f-8b9c-441c1b9f297f", "sighting_of_ref": "indicator--c0775aa4-ee3e-4808-8118-c744926a78db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4745d5f0-115e-4c2e-ab4c-b5ec8d023a9a", "sighting_of_ref": "indicator--b0896699-5336-46e2-b640-f63734bcfba9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1750029d-c9a6-4265-b938-1456be0880a9", "sighting_of_ref": "indicator--8a5a08ec-ab5e-4208-acc0-d266b40e271d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01243237-bf2c-4fb0-845a-84449b95cdf7", "sighting_of_ref": "indicator--99c20b90-4c08-4e2a-b2a6-b58929b72d79", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e362605e-1a37-487c-9394-99902de833b0", "sighting_of_ref": "indicator--0a18b396-a414-4bd9-9c6e-64193122bda5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b235b8-bd61-43e6-8600-407b4b1300bf", "sighting_of_ref": "indicator--53475710-84be-4f9f-896c-960a220c2ecd", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75be2ca-1963-43b5-b9cc-daffdd40d827", "sighting_of_ref": "indicator--e088566a-50bf-4514-ad87-cbb531773220", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a257ebd-fa49-41d5-bcb3-f67060038a5a", "sighting_of_ref": "indicator--6aad194f-eea8-493e-989b-6e4bbd0244ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d81c186-f23b-4562-b089-4b8c122317f9", "sighting_of_ref": "indicator--19693d50-85b6-4cbf-aad5-937d737b22f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96625da-fb6a-4734-b9cc-24f761cd48d2", "sighting_of_ref": "indicator--4cc97586-0d93-41dc-86e6-1567a8563079", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6023739a-4c83-46f7-9bf8-6c7510cf3df7", "sighting_of_ref": "indicator--cee4a72f-7ecb-4c95-8abb-5bd16a7155fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f5b286-c317-4a50-853d-b0da0a7f78f9", "sighting_of_ref": "indicator--cee4a72f-7ecb-4c95-8abb-5bd16a7155fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11b1b71-3bae-41e5-a960-0651d20ba26e", "sighting_of_ref": "indicator--1065b721-e5fc-45bd-8f96-68433ab5d0a3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624f4755-da37-4438-af6a-aeceddcb298d", "sighting_of_ref": "indicator--2419616b-aada-412d-8aba-b5a820f01440", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b456e5fd-9108-4e61-b4f6-98d5d7624141", "sighting_of_ref": "indicator--ca20d25c-8c0d-41ad-af67-a9fbceced7a4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13e95a1-7818-4639-a285-626b1264d253", "sighting_of_ref": "indicator--7a828924-64a7-422d-98d5-5b244f2e71d0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6423304f-cc99-48cb-991d-75e41385838a", "sighting_of_ref": "indicator--25c1a1cf-e169-4c92-8611-952fe48907da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c8f54f-b9ca-44b6-8434-d25fc8fbb7ca", "sighting_of_ref": "indicator--01851917-414a-4c75-af92-3efa1b627d29", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed4a46c-4d2b-49c8-af08-ff52d9755d38", "sighting_of_ref": "indicator--e77b6429-e23f-4229-8e5f-abd4dc988bd9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267002b0-11ba-49cb-a701-b7f64d1920e9", "sighting_of_ref": "indicator--e77b6429-e23f-4229-8e5f-abd4dc988bd9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65c02e6-474b-4815-92ee-ce24c88a66e1", "sighting_of_ref": "indicator--1549e515-01a6-42da-a19d-179651a886f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf479eeb-0aec-4932-a22a-29d256010826", "sighting_of_ref": "indicator--2017362b-b28e-4b88-956a-ebdc6ee98924", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21fcb3c-76f6-4fd6-892e-f0650c542ea8", "sighting_of_ref": "indicator--7bdfd1da-633f-4e0d-93e7-7339814e4759", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba87cbea-d820-4f8a-99f9-8db88f6f9555", "sighting_of_ref": "indicator--c97fd373-7e10-46b7-99e2-13c5ed8a09c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf80e14e-ce4a-4707-b594-769787157418", "sighting_of_ref": "indicator--2560a121-7261-4322-836f-9eddf5a65176", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531e8e77-0052-4f71-92a0-5b4a7cbbff4d", "sighting_of_ref": "indicator--920ff422-9b99-433e-8a65-546e33f371bc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fe18f3-948a-48d7-8079-1f3726cabfb6", "sighting_of_ref": "indicator--585089ed-0cc7-42bd-83f9-fb748fdce688", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7b70ff-8f75-49d1-a122-b3f02b3cea2f", "sighting_of_ref": "indicator--585089ed-0cc7-42bd-83f9-fb748fdce688", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fadb01-9cbe-4e77-94cf-06fd877cb599", "sighting_of_ref": "indicator--9e3732d3-1f76-4757-976f-9212f733951f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b50fc41-6625-4760-9e00-75464b5e1964", "sighting_of_ref": "indicator--fd709cf9-6083-4457-a5ac-ff202ca62a37", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01a16cb-2b80-4fa8-aa0a-316cbafd8101", "sighting_of_ref": "indicator--7b5182aa-d1ab-4293-b953-219e85e3c900", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c4ce8d-5016-4ec6-92d8-ca72dab2be3b", "sighting_of_ref": "indicator--c583e987-a19c-4f83-adb7-1c3f17726ed1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4128b7-3443-4720-a52e-045508c3d684", "sighting_of_ref": "indicator--f560ba02-d147-4148-850f-cdeab891e2e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c803103-0e00-4110-b713-f990ee1dfa5f", "sighting_of_ref": "indicator--d4927396-2cf5-4176-9938-53e4386169a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab33745c-4be6-4c16-9868-feac4a0149e8", "sighting_of_ref": "indicator--722b3386-ed8a-4603-99ee-5c55b8b66640", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623b293c-53d5-4f83-b882-3020a78dc9bc", "sighting_of_ref": "indicator--a8dea0c4-967d-4020-8b2e-39c5cd0e49f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4898f908-20ef-4712-9c2d-3863a6dfbef2", "sighting_of_ref": "indicator--a8dea0c4-967d-4020-8b2e-39c5cd0e49f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f7b4c6-9d43-4518-99c2-be5247c7410a", "sighting_of_ref": "indicator--001917b9-61cc-4093-a9e0-8073c514d002", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e751250f-8a31-40fb-a966-157ea9692897", "sighting_of_ref": "indicator--001917b9-61cc-4093-a9e0-8073c514d002", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a733cff-fef0-4a5f-ab41-19b549331f96", "sighting_of_ref": "indicator--1be0dbfa-e5a9-4a3e-b7f1-9618ead82aca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc4f6a1-2a3e-4c4e-a533-97b1e10c9f42", "sighting_of_ref": "indicator--65ab54ce-e0c8-4e02-b061-b99fda481fb8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b824287-74a4-45d9-af78-4b8a97bd5c82", "sighting_of_ref": "indicator--65ab54ce-e0c8-4e02-b061-b99fda481fb8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fab93c7-1b2b-4085-85a2-dd32db013102", "sighting_of_ref": "indicator--d14a0921-cfa5-4c64-9405-159fd9e1156b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4917d8a8-68f3-4dc7-b46a-8a8c9a2c0661", "sighting_of_ref": "indicator--6482d10d-a52f-4f88-959c-bfd085efaa0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2393a53d-781b-4570-bb41-2cffc8e94902", "sighting_of_ref": "indicator--6482d10d-a52f-4f88-959c-bfd085efaa0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb535e8-7a82-47e6-ade6-541bb193c595", "sighting_of_ref": "indicator--d7f2647d-0365-4612-bfde-3b40f6bdacb6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a348500f-d257-4994-bc75-fa84fc712d00", "sighting_of_ref": "indicator--c7e2bcec-0a1a-41cb-aac4-6772b4729be8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041b660e-c379-40d3-8e9f-07c571b437ae", "sighting_of_ref": "indicator--743ee89d-fa4d-42d8-a51d-acd44bab07ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a07f2c3-eeac-4328-9240-b353b5f4a036", "sighting_of_ref": "indicator--4387f1f4-7314-49e5-b97d-0b817f2f385b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c834a1f-ff98-4a9a-9a85-75026b90ae98", "sighting_of_ref": "indicator--7253e2d5-3683-4c85-b817-0f9ed4bedae3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395d30f9-d1d1-4cd0-ade4-9d787ff1a131", "sighting_of_ref": "indicator--7253e2d5-3683-4c85-b817-0f9ed4bedae3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51485075-99ee-4789-802e-9586e65baffb", "sighting_of_ref": "indicator--6c3ab145-39ed-458a-9bb9-f2973443c6b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ec7d1a-9dfb-4be9-b2cd-d2b0d522f10f", "sighting_of_ref": "indicator--f05ff4e3-5318-49f0-a532-8f5c9705e00b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909c2485-988d-4539-99bd-a36c18a3004e", "sighting_of_ref": "indicator--1120f756-ac67-4d34-9d1c-5cf945d00259", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c9b0b3-de45-40ab-8112-280b52f387da", "sighting_of_ref": "indicator--3a06adc5-731e-4b87-bbf6-279341a7a3b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c00d829-46ad-4734-8927-136f5c04c208", "sighting_of_ref": "indicator--86a96c9b-84c4-4ec7-812e-08d22973f6c9", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429bd547-cde8-4305-a117-0fa6ca672d30", "sighting_of_ref": "indicator--b1a487a6-03c4-4711-873e-20186b9da814", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607ed24c-39f7-43bc-854d-a61df41b094e", "sighting_of_ref": "indicator--b0b5769c-ae36-44ee-ab32-4eb88613bcd4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32065ed-ac1e-4b61-a3f8-b31c65d6c462", "sighting_of_ref": "indicator--dc2af1be-d1e0-4fd0-9935-edda154e06d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac415b3-9689-44ab-91fc-742298d4702e", "sighting_of_ref": "indicator--7f59b731-74ae-4cce-b9f1-47207c722217", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b8dd0f-2185-4057-8df0-5a64419062ac", "sighting_of_ref": "indicator--78c79047-d59d-4450-8828-e58ba29a98d7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba6b47f-de1a-4c71-bbf9-8910c9c785e4", "sighting_of_ref": "indicator--464919e4-ce86-484d-b80f-f142787f357b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bf1b11-c9be-4eae-931c-6fa766975b31", "sighting_of_ref": "indicator--59b79d80-80c9-493b-9ccd-065cf4790be0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e012ab-d5db-468a-a675-dde615d5e0e3", "sighting_of_ref": "indicator--a323b3a9-04d5-444f-bbea-8c9ef6d9c3b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cb6db5-b71c-4d30-90e0-c4940509e1fb", "sighting_of_ref": "indicator--1ca01f50-a857-4b2b-879c-4aa381707087", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44851d23-6b3b-41b0-ae7e-bee948ac25fa", "sighting_of_ref": "indicator--2fbf0418-8821-49ea-b5ec-f6e35560fe3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3deb4cb-be44-4757-9bf0-2f0831ddb373", "sighting_of_ref": "indicator--08c781ab-122a-4cee-be60-c3207cf57f61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74506c4-25f5-422a-88c5-2002026f8f7b", "sighting_of_ref": "indicator--9a321b99-c925-46a1-be0d-c2d2e1c6aeef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12103070-f32d-4c5d-a9f0-ff5666dd407a", "sighting_of_ref": "indicator--3369cc90-554e-4a5d-af61-726775bcdb62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa29bc2-2aa5-47ee-b9bb-fbc0c8b1124e", "sighting_of_ref": "indicator--a48d481b-bb64-4f1f-8de5-9cc0f9869a64", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eee2a74-02e2-4ae2-9867-791712baa7e2", "sighting_of_ref": "indicator--6340815d-a788-451a-a645-a071e6acc3a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7847b804-00b2-4dda-a5ec-7d052d1bfccb", "sighting_of_ref": "indicator--62cc0806-9785-4c1f-ad22-75968a4dc89c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7314c5c-96a5-4019-b415-d94e0f90ee16", "sighting_of_ref": "indicator--91207c93-7181-4fe7-a1cd-3dc82f59d0f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcba9f7-60e1-470f-9294-6d76b95f2828", "sighting_of_ref": "indicator--91207c93-7181-4fe7-a1cd-3dc82f59d0f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3d0147-2f8b-439c-92da-54468a6d2e0a", "sighting_of_ref": "indicator--04c9d2ae-33d9-48b2-833e-0746b3a9fb2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15b5699-a417-418e-90d4-10ae9dae9a9a", "sighting_of_ref": "indicator--efb22b82-5df3-4abe-8d63-d2d618fbbc15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc211bdc-c972-4c22-a3ec-e9d8a82f7f0e", "sighting_of_ref": "indicator--81e87ecd-f59e-4498-86ce-27d9ab66551e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadaa0d2-d674-45a1-843b-9e8fa2c3fe05", "sighting_of_ref": "indicator--4171d50d-95ca-4b64-a0de-bbc149ec9ea0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d82ce74-73d5-44ec-8d9c-f60b1791cce8", "sighting_of_ref": "indicator--4171d50d-95ca-4b64-a0de-bbc149ec9ea0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0257bff-edcb-4056-81bf-e9ffbccff692", "sighting_of_ref": "indicator--455cc23b-62e6-4eb7-884e-09d8d42af1f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a030e5ae-1823-4664-aee5-21cdca7f5013", "sighting_of_ref": "indicator--455cc23b-62e6-4eb7-884e-09d8d42af1f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da56f4f1-6247-4a5b-b98a-82ce59622f93", "sighting_of_ref": "indicator--8e252f7e-eea7-415d-8556-013725e7cad9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ccfb57-701a-4763-8941-e5e870388d7f", "sighting_of_ref": "indicator--e67aed2c-1be2-4c73-9da3-0f5e1045ff37", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fcd263-2866-4b7e-858d-e93443ed5690", "sighting_of_ref": "indicator--2879183f-7bd8-4b3b-9928-821aa05b6f3c", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258cb510-5359-4dac-9f5a-4bdcca14d9fc", "sighting_of_ref": "indicator--ea9abe8b-b0b5-49f5-b910-0bf7f9e5a017", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd252aac-2c5c-47fd-af3e-8996057ffeaf", "sighting_of_ref": "indicator--ea9abe8b-b0b5-49f5-b910-0bf7f9e5a017", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755906cd-6d5c-48db-b230-cabc55312de8", "sighting_of_ref": "indicator--0cc7a730-f9e9-4a4f-9d19-801b84b0e08b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5702025-a39a-472c-9b01-b1812ecabe0e", "sighting_of_ref": "indicator--e7e56165-e757-47de-813b-f8a89cfac4a5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8b9965-feda-4437-9d8a-080b88db67f2", "sighting_of_ref": "indicator--76a3afba-5872-4da3-ad73-9523c9f3041b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109df48a-48de-4807-858c-8b262d6f981b", "sighting_of_ref": "indicator--9443c11f-907b-4944-a5a1-68d10ed0360a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5efd4a7-e271-4063-b69a-4d2bc11f95a1", "sighting_of_ref": "indicator--5ce18ab2-c4f1-4025-aaf2-9277331c7afc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468ad5fe-c500-41fb-877b-3ce2b9a8ca5a", "sighting_of_ref": "indicator--fe7f3d58-cfaf-44a4-9ba4-a887521c60f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366f006b-1a19-4357-8f84-29f9402a3f2d", "sighting_of_ref": "indicator--fe7f3d58-cfaf-44a4-9ba4-a887521c60f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9ab3a0-387e-4b8c-8829-f32aaa04876d", "sighting_of_ref": "indicator--f9980410-2306-4d9a-b799-5acad236024e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cd5e9a-acde-4713-8fc5-21290349edbd", "sighting_of_ref": "indicator--1f517d28-5ca5-415c-8cb6-4f826e7817ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a0ffd0-1a79-44cb-9eda-b80af0f7e57f", "sighting_of_ref": "indicator--514ae947-18c1-47e3-9a2e-83d7122cf676", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d95aea4-c41a-4b1d-a3da-f8b3367c7513", "sighting_of_ref": "indicator--514ae947-18c1-47e3-9a2e-83d7122cf676", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa96b695-55d7-4731-a857-50aca8c1767f", "sighting_of_ref": "indicator--c86b2385-e585-4ce3-ae32-615d6bf34f23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dac5aee-d1d0-4923-a33d-ea8a1cfd0f55", "sighting_of_ref": "indicator--6aa1d04d-21b9-4c95-988c-ba393e6cc636", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbb8ac4-d0ff-49b9-bd5f-0a005362e658", "sighting_of_ref": "indicator--fe820440-87aa-41a4-b86d-ec87aa9d46c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aa8bbd-401a-4c74-bcb1-a51aaa2f56c8", "sighting_of_ref": "indicator--fe820440-87aa-41a4-b86d-ec87aa9d46c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59bed59-c0dd-4a42-b52b-0fe243f34306", "sighting_of_ref": "indicator--130ae10e-9e0c-4357-b6de-8f2f447a1599", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa537fc5-fbd4-41fc-b070-e957e09e1ed8", "sighting_of_ref": "indicator--130ae10e-9e0c-4357-b6de-8f2f447a1599", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a533492a-1051-4e58-a2da-7d0a7981bdc4", "sighting_of_ref": "indicator--ee79c6a7-d440-41db-bd05-34536f5d1965", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653cce0e-6739-448d-9620-9fc5f17514d9", "sighting_of_ref": "indicator--ee79c6a7-d440-41db-bd05-34536f5d1965", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8069c91-d082-49de-a947-e6762f161c2f", "sighting_of_ref": "indicator--3ce4ef98-4523-445c-8e8f-55f98df036f3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9530ef-9afa-4b7c-afc6-e5b63aea9e81", "sighting_of_ref": "indicator--5ebcc22e-36b9-4ca1-b6dd-2497ea111c1b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc34fff-61d3-466c-83b4-e6682a3a1ba0", "sighting_of_ref": "indicator--2b7c5acf-565c-4298-8caf-a1b2c2a48d3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbfa366-9ecf-4e39-9153-32ff7f049461", "sighting_of_ref": "indicator--f30943c2-97d2-4b85-b801-6e6d710f408f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ccc4d2-2ed2-44b6-a3dc-29d844505e1e", "sighting_of_ref": "indicator--37306310-a10c-4f5c-ae26-70e188992189", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976d1713-9889-41cb-ad54-fb04c72262c4", "sighting_of_ref": "indicator--c21388b2-4aeb-4dd2-8e88-28757415ec4d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbeb4fa-b6f5-42df-a4b8-ccf1520980d5", "sighting_of_ref": "indicator--51f5ab0f-8c8b-4f89-9def-7842d0562ce5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2084b542-90c4-4d14-ad2f-3e90bca61d0d", "sighting_of_ref": "indicator--51f5ab0f-8c8b-4f89-9def-7842d0562ce5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8699cf28-0d77-46ec-87e6-a381b3c6429a", "sighting_of_ref": "indicator--fb8037ec-0553-44f0-8db5-18a64c0ffdb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3950039-3834-4ad7-bb87-07d2fdeda4e7", "sighting_of_ref": "indicator--551038a9-191f-461d-8bbd-7d3f3e8337a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7b5b79-9509-48b9-bd14-c232aeca23f7", "sighting_of_ref": "indicator--a8ff9b62-cecf-469c-9faa-7a118816ebb3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c5aa8f-9a99-4d8c-88d4-d30a27d3fa71", "sighting_of_ref": "indicator--a8ff9b62-cecf-469c-9faa-7a118816ebb3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cdcc47-2bd2-44cb-bb62-c0d68ca7f40d", "sighting_of_ref": "indicator--feb99ded-6170-4b54-912d-d0d19aefaef5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c52667-2b9c-4501-b272-5ac4aae785b5", "sighting_of_ref": "indicator--8d78c7ce-208b-4754-a798-4348b2701edd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cb4d14-f400-4849-b97a-fea7fd7550c8", "sighting_of_ref": "indicator--625396d1-9c94-4e47-bf9b-45e8b42deccf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7229c25-13cd-4cf4-917f-caa66a3cdd89", "sighting_of_ref": "indicator--625396d1-9c94-4e47-bf9b-45e8b42deccf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9457dc99-9bb4-4cc5-ab4f-e2dff18155c0", "sighting_of_ref": "indicator--77075092-1f47-44f5-9879-8f481d28adb4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b630099c-24dc-49e8-bf89-bdda28a19ee1", "sighting_of_ref": "indicator--77075092-1f47-44f5-9879-8f481d28adb4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31f1ab2-1bd8-431e-8ebd-ea7c8f299344", "sighting_of_ref": "indicator--18c7ee52-1afe-4d87-bf75-da4fecf2f5b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d2bc2c-4661-4307-ad0c-76907c7ae3a1", "sighting_of_ref": "indicator--18c7ee52-1afe-4d87-bf75-da4fecf2f5b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbeb565c-c7d9-421b-9e15-f0866bf1cbbe", "sighting_of_ref": "indicator--d3498055-df29-4b9b-8747-462288bcd801", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66db8600-5c0b-4e2d-99bc-3ff27a238ef4", "sighting_of_ref": "indicator--d3498055-df29-4b9b-8747-462288bcd801", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc26eca-da06-4af2-aa57-4df38e25efd7", "sighting_of_ref": "indicator--501e3681-86ca-4105-b0bd-db3a99a2035d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a88242-28f9-4862-9902-ed0466042a7f", "sighting_of_ref": "indicator--aad67e5c-8f16-4b5c-96ec-d6fb58485948", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29beffb-eb5f-4fef-816f-7fb779be37cc", "sighting_of_ref": "indicator--a2dfe2ce-b1cd-4e8d-98d0-e182a7b4a955", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82230d35-dd36-4e8a-802f-94229addcd58", "sighting_of_ref": "indicator--a2dfe2ce-b1cd-4e8d-98d0-e182a7b4a955", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c46ee2-11e4-4639-a01d-70241b1e36b1", "sighting_of_ref": "indicator--cab2091e-f1e4-47f2-bbee-57c651b243fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83128683-bc1c-4684-98a1-8e853a87dabb", "sighting_of_ref": "indicator--12c24d88-9e94-4c9d-bd6e-58486f665d44", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1283adfc-4945-4579-abb3-1e2e4ffe5313", "sighting_of_ref": "indicator--12c24d88-9e94-4c9d-bd6e-58486f665d44", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfd3430-4ae6-45e4-a186-eab96ba02164", "sighting_of_ref": "indicator--eddee56e-f5da-4554-9d6b-8857e55243f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35aec4cb-905f-4960-82a4-474a9a780733", "sighting_of_ref": "indicator--780150c5-349a-4e8d-97a4-1923bb437d43", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692af9fc-c409-41c7-95e1-40cced5c2fa2", "sighting_of_ref": "indicator--7c1f60f6-6f6c-4ab8-973a-64ed5acfc0b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1640447e-e48c-4ae8-81fc-8433dd1bfb4d", "sighting_of_ref": "indicator--5f44fb29-d120-457b-abea-27214a0b36f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13bb2a3-532b-4696-b8d7-2ab3a525f000", "sighting_of_ref": "indicator--5f44fb29-d120-457b-abea-27214a0b36f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41237f65-1f49-4686-ba7c-1fdda038dddd", "sighting_of_ref": "indicator--61e08667-90c4-4e4b-a3f5-3d87ce8a1a55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577d5130-f591-4e77-9449-27e0193d1219", "sighting_of_ref": "indicator--76e0fe2b-695d-4fd3-b4f9-90dbcb874e4f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb73605-88fa-4862-892d-94f149bf2b23", "sighting_of_ref": "indicator--fb64600d-7585-4f36-83e4-814aeb28107a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa06a95-5ac9-4c11-b3ca-c9a94e43ec61", "sighting_of_ref": "indicator--e8079f4c-88fb-4d59-b083-e5f3032a493c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6c206e-d755-4d20-9ad3-13fd7cb203b7", "sighting_of_ref": "indicator--87300f12-a62a-4eb3-922a-efb3e15a26c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6328b0b6-0d1f-4f18-83f6-e673c167be08", "sighting_of_ref": "indicator--8f488f31-fe23-4f8d-ac46-1877bd9dbb5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e78d58-94b2-4541-a32a-d1b2b2e6cb3b", "sighting_of_ref": "indicator--5b446400-5d93-49e9-9248-bebfd0f254ad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6498c1-a8b8-41e4-a243-0bd60601c87e", "sighting_of_ref": "indicator--1586a66d-aa1f-435a-a0ee-6b548f074704", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdd3ca9-ad42-4771-9cb3-7e924f75c076", "sighting_of_ref": "indicator--157ef8c6-633e-4fbb-a401-996d6e568f2d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac637f31-52cd-4bef-bf22-e03d321ac7dc", "sighting_of_ref": "indicator--157ef8c6-633e-4fbb-a401-996d6e568f2d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b8bdbe-5892-48e8-8e69-d310fd16fc85", "sighting_of_ref": "indicator--70c138ea-f957-409e-ae2f-417c4569fcd2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c1a720-2f96-428b-a3b1-654b4d449791", "sighting_of_ref": "indicator--34812116-1622-4b3f-82cb-5236bb0077b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e58c0c-bcf2-4a73-8e65-bceaec1f6cbd", "sighting_of_ref": "indicator--34812116-1622-4b3f-82cb-5236bb0077b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c40f5b-fae1-4aaf-8bb0-12b363556839", "sighting_of_ref": "indicator--b8488ee1-43e7-4d88-962a-85d1759a1cd0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a7721f-df7b-4696-bd9d-d0083d1dd5e5", "sighting_of_ref": "indicator--0540e31f-29ce-4022-8af2-237a4dd763f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7571c62-6cd7-4197-917e-105efe7b4f9e", "sighting_of_ref": "indicator--57a98941-5259-4eb3-a8a2-a7615504ce00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffb4d0e-c8fd-46a4-9b9b-883400ce4b23", "sighting_of_ref": "indicator--a42b3e8d-6e6e-4453-a92f-e541e9e5eb77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7795ec2-0274-49fb-b4ba-b12a91ae5114", "sighting_of_ref": "indicator--090d9c71-9ac2-4a4d-b8d4-226bade25067", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cbb941-a8f2-4366-bde6-a4431fbf30aa", "sighting_of_ref": "indicator--6e05e1d3-0163-4523-8c11-eb3224aeafa0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29378811-babd-4523-840a-c6a896a35eea", "sighting_of_ref": "indicator--31681f1d-a939-434d-bbbd-1ea9af36337c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13493d4-a662-474a-b0d1-f5826b4578d0", "sighting_of_ref": "indicator--31f03371-c732-44c9-9540-d657acac2d4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cfc70b-5452-466d-98fb-48f771eb75bf", "sighting_of_ref": "indicator--e16d909e-ee90-4daf-b5ff-1ae9feecc978", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3fd2de-6f5d-412f-8f57-0656506eb9b5", "sighting_of_ref": "indicator--01ff5651-4416-4965-b854-08848a3d29cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3879f0-30b2-47de-a2fb-d07ae676264b", "sighting_of_ref": "indicator--939f7af3-10a7-4f62-8f13-ab16317d8d75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570ee082-8391-4b2a-8575-6892998f2764", "sighting_of_ref": "indicator--63243d7b-1e9a-46cc-81e3-bfc5b06f8ebc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0ea918-7e34-4870-bfb5-497b2d89bec9", "sighting_of_ref": "indicator--0ba665e6-d289-4ac2-9aec-56d79f99531f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47698243-670c-430f-99a2-49313bee62fd", "sighting_of_ref": "indicator--6a0de1af-dd04-42c8-bbbf-d79e1a43d5a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68449425-b73e-4b1e-8a2d-1646e0500ed7", "sighting_of_ref": "indicator--753e4166-5602-494d-bfb1-4027132f82cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2b0ad3-2bad-4caa-af5b-59624230acee", "sighting_of_ref": "indicator--71a60ee0-160f-45a2-91ed-89aade276dfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd30641d-0bcc-45a7-bbd1-675914be9636", "sighting_of_ref": "indicator--afcbdc33-0fbe-44bb-9ff3-e2f8cdaa731f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377bb469-a825-4252-86ec-251e975bb3fe", "sighting_of_ref": "indicator--8338c301-eb86-4bbf-8128-fb15a7c1a48b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b497106-db0a-494d-80a0-2df412070bf7", "sighting_of_ref": "indicator--13cb3302-4633-42b1-9511-97aa27333752", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a30b39-79ad-4d96-985c-556baff299e5", "sighting_of_ref": "indicator--587d45a1-bfe2-40da-9625-b8edd7a4051d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6b4f5e-b888-47c9-9d75-d8c98e59520f", "sighting_of_ref": "indicator--30c39b83-1943-47ed-be4f-c91bef17645d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32b6f3a-da71-41b1-8ff2-cd46d5b1a54f", "sighting_of_ref": "indicator--241bb535-af8a-41ea-97fa-7b4127073de8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915c57be-c626-4fcb-a87c-7808188f89a8", "sighting_of_ref": "indicator--98f82509-6ee7-45dc-89b1-fa117f281544", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147c79a5-3386-4c57-8e74-4a4c5e269dd6", "sighting_of_ref": "indicator--07f3d33c-b1cc-49bf-a972-9ab0a9b6e099", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10ef04c-bdc6-464c-aaf8-def7af66a58e", "sighting_of_ref": "indicator--51b87ea4-457a-4075-8cf6-d7b04783b06b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c5f8d8-2047-4f00-b294-9a534a434328", "sighting_of_ref": "indicator--1f4665b5-4330-4d9a-a865-e0e680490160", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbbb816-b5fa-4ca8-bf09-571b7dcfe8e5", "sighting_of_ref": "indicator--8ff4b3b1-00b9-45c4-9996-ec8a2ba8f4ef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b2467c-cfac-48fa-b603-e5996dd7d616", "sighting_of_ref": "indicator--eb41ee00-794b-4506-a324-45f179fb64fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db458755-b97e-4d0c-a95c-e5be118bf9b0", "sighting_of_ref": "indicator--cfd6c032-ead7-4de2-992f-ffd6d7644140", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61406a8-b8f4-4bff-bf49-532ea9c8ff05", "sighting_of_ref": "indicator--c7aa49e7-7775-446e-8c40-0dc98ea9e0bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ee6f1a-4ce9-457d-80ea-27313444876b", "sighting_of_ref": "indicator--78b82314-84ae-46d6-9823-a71f92d11728", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8f8dcb-b331-402e-b1fe-ad3a4fd053ab", "sighting_of_ref": "indicator--e40d1a0b-a671-498f-a6eb-0210e29414d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00aa4041-2c72-4add-9ed0-bbcb8ab989e7", "sighting_of_ref": "indicator--e04bcb54-4928-4b46-ade2-ca2314038784", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b834ccc-bd33-4050-ad3e-5593bce63710", "sighting_of_ref": "indicator--ef2cc3d5-9cb6-4092-9a65-d49369f18b83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fcb144-f09b-4954-a20b-1f3b3763ed7c", "sighting_of_ref": "indicator--067a9930-02e5-4d5f-b342-1491c886edce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0831365e-cc8e-4532-b597-1c7f8a1262bd", "sighting_of_ref": "indicator--067a9930-02e5-4d5f-b342-1491c886edce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2a7b07-f643-4b4c-b738-f25f997778c9", "sighting_of_ref": "indicator--06d4a6a3-d05e-4e51-9903-addb6de915e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e677abd2-5d96-42d8-baf1-85a7d1800c92", "sighting_of_ref": "indicator--06d4a6a3-d05e-4e51-9903-addb6de915e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9b9f02-fb80-4656-ac7c-53bfbe32f3bc", "sighting_of_ref": "indicator--dec364d6-1456-4d24-b668-dc1087dfd32a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ec64bf-4267-44db-b01a-539375f87a27", "sighting_of_ref": "indicator--dec364d6-1456-4d24-b668-dc1087dfd32a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fe7d5c-60fa-4078-a136-8d6737e3b765", "sighting_of_ref": "indicator--685de849-104b-4b09-b72e-db1f7c63563c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a713ce-9259-4bec-9633-c2a11aee272c", "sighting_of_ref": "indicator--685de849-104b-4b09-b72e-db1f7c63563c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce1c202-12d6-4392-962d-d824aff150e5", "sighting_of_ref": "indicator--4e9727fe-33f8-4e2d-971c-de78cb92691a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e515a9f9-a92a-4cb1-b6ac-0dc5d5670279", "sighting_of_ref": "indicator--50117fb7-2a4f-44ff-8931-5a909d4a045a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882285c5-3c92-46b1-9e39-7c61237a413f", "sighting_of_ref": "indicator--6399c371-199d-45c4-9e04-c96d6ff2cc6b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d8c819-9cc6-4c89-84fe-5a4a21d15e69", "sighting_of_ref": "indicator--6e09391e-2171-45a4-a5be-bc8abc7dd3a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b427260d-806c-4745-9732-11a4915766d5", "sighting_of_ref": "indicator--a4124ff1-569a-4433-a040-5035eca1c533", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affb7b41-7c7e-485d-abe2-53fbde750cd6", "sighting_of_ref": "indicator--d012a722-5b0a-44c5-8157-3ff4eb66146e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de76338-51b0-4eca-8a20-859e99d4a3ff", "sighting_of_ref": "indicator--6c4580d8-1b26-4a37-846b-642f32cee1e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085d2232-9943-4fce-8bc3-97f2aaecec85", "sighting_of_ref": "indicator--ddf044d4-ff32-49ef-93f3-a1034ede6278", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545e73b1-91c7-4eff-ad4f-5ba89e8dda71", "sighting_of_ref": "indicator--ec12af65-9a33-42f0-96aa-712b4ce0782e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330c5708-62a3-4cfd-aca6-1949a94793b1", "sighting_of_ref": "indicator--114346a2-63cf-405b-a42a-fd5f4849f609", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e082029-5eb2-4561-81ce-64d55409e263", "sighting_of_ref": "indicator--f8a2543d-ed4c-4841-908a-f7489f751ddb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4c41e5-5cc7-4791-a217-1dc855a1e571", "sighting_of_ref": "indicator--f8a2543d-ed4c-4841-908a-f7489f751ddb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c1cd49-a97c-4e1b-9e4d-94dcb44683cb", "sighting_of_ref": "indicator--a7b95f04-a10d-4b88-a728-9dff0b731f9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e5920c-830f-4bc8-9abd-61fdc1125dce", "sighting_of_ref": "indicator--d462ed51-aceb-4f58-a2cc-8613cd75fafc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac31d23-9361-433e-bd04-d3d7a4bed1a2", "sighting_of_ref": "indicator--83bc5681-0294-4906-9d31-770ca77d9b3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e37bc7d-63cd-4d4e-ba4d-299a4b71a9ac", "sighting_of_ref": "indicator--45115e58-9e01-4e4a-8041-f2ec19c4d7fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9ec752-de87-462f-998b-33f4d667ffaf", "sighting_of_ref": "indicator--09a7d604-dcc3-4392-9934-5dad67a862bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36eba06-fa99-4add-98b0-562092e6ce99", "sighting_of_ref": "indicator--3b733bb0-c326-46ad-b088-f7a1bd954b1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb955fa1-eb34-4ec5-9796-9c7ae2b88089", "sighting_of_ref": "indicator--b2dec644-bfa8-4d29-8aa3-581404b993cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9c21b2-c89d-49ec-a2b5-20a79d8ea5dd", "sighting_of_ref": "indicator--b2dec644-bfa8-4d29-8aa3-581404b993cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9666a4-1051-4b4b-9361-05c372e24002", "sighting_of_ref": "indicator--8113f581-15f5-43a3-b5c0-34f0c61a757e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5e3f8e-885c-4712-bf7d-2829b773b5ec", "sighting_of_ref": "indicator--8113f581-15f5-43a3-b5c0-34f0c61a757e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd4dc98-b5ce-49de-a388-0c7fbddb1077", "sighting_of_ref": "indicator--60cac950-2de6-4811-a446-feaa204fe759", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3f76fd-8f06-4322-b8a4-a3135cd117fa", "sighting_of_ref": "indicator--60cac950-2de6-4811-a446-feaa204fe759", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890edfbb-953b-4fa9-9f3a-c9713a119105", "sighting_of_ref": "indicator--7da538c2-d551-4f9d-811b-99dc3519dd7b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d463c2-2433-4b10-a4c8-0efb1062fd5f", "sighting_of_ref": "indicator--df4017a2-f6b5-4433-99fe-c0cbe7db419c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38eee2b4-5b28-4e32-b329-6af59e75e831", "sighting_of_ref": "indicator--b33db274-f923-4175-93d0-2c078b90e718", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5330d2dd-063b-4e79-bda6-27607650dfca", "sighting_of_ref": "indicator--30af90df-0ab7-4f9f-a4e0-bb4876434d2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781a0d7d-57c6-4506-bcf9-57a5926f92b0", "sighting_of_ref": "indicator--ea046d33-5519-44c9-9de3-8e9624bbe64e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48a3f34-f433-4762-be51-b9d5d32c657d", "sighting_of_ref": "indicator--7c02bfd9-c811-421b-b5e5-ae762fe32bd4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fa03af-5f0f-4df9-b3c5-65d2e4d3d587", "sighting_of_ref": "indicator--7c02bfd9-c811-421b-b5e5-ae762fe32bd4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae52102-76d6-49b9-9f2d-3517154f3c9a", "sighting_of_ref": "indicator--6f3aece6-41df-4322-9d22-5ca074afdc1c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce2ac1c-5cda-4be7-8ee7-190a6b89dbdc", "sighting_of_ref": "indicator--af825312-5064-4aea-a626-82678178bd43", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5957f7de-ecf2-4fc4-b0b0-47bf6d644bcd", "sighting_of_ref": "indicator--34714ac3-723b-4d9c-a524-c1c479545bcf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e565fc66-21e8-4ff8-b0a5-5a1b08935f18", "sighting_of_ref": "indicator--0324d9e3-8a27-494b-8c5b-e1b07fc4907a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eeba72b-ee4b-4670-9c5b-25423f5cd833", "sighting_of_ref": "indicator--08f6b14b-3221-4ac4-8eeb-0f0acf1fdb19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57df14b-b2b5-45d5-b355-6268f7fe45f1", "sighting_of_ref": "indicator--de2c7153-654b-4799-a94e-e22f21de8111", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd4f371-9a3d-4967-9a74-a267e46eb82e", "sighting_of_ref": "indicator--1e6ffd15-81da-430a-b4cf-e6c30bc45240", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1c172b-3b08-4ae2-a74f-659e77f06083", "sighting_of_ref": "indicator--fc81dec6-699c-454c-bb8b-52c6618c5fff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3437c9c7-d64e-4f0d-8c6b-7a54a715b45f", "sighting_of_ref": "indicator--fc81dec6-699c-454c-bb8b-52c6618c5fff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93ff305-0127-4a32-9735-95e1b964b0d8", "sighting_of_ref": "indicator--22edb879-b3e1-42c2-ac6a-18b967d1219c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d362c69-7f32-4061-9e4d-5122daf07e85", "sighting_of_ref": "indicator--8dbbdcc6-87ce-4e49-9d33-56bfc67a444a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73224ef5-74b0-400d-886e-0150f096b922", "sighting_of_ref": "indicator--6c9f290e-f83e-42b0-b3b8-36069087dac9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e820ef-2bef-43a3-81d0-f11171ada1a9", "sighting_of_ref": "indicator--6c9f290e-f83e-42b0-b3b8-36069087dac9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43b7522-524f-483f-b5ea-d4771640c1c1", "sighting_of_ref": "indicator--927a2da6-65be-45ab-8825-c5540130fd8d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca37f7d-0f13-44cd-86a7-b6b8660fcaaf", "sighting_of_ref": "indicator--8df9dfd6-e77e-45b2-b2bb-d239c449202b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97642902-7a63-48cd-928f-b2ea6aa9445e", "sighting_of_ref": "indicator--7ee41359-9b0b-43ef-9f27-a151fc209841", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba647c4a-3821-4dbf-8a45-57c47a00cde1", "sighting_of_ref": "indicator--91356cbb-a0d6-4d9e-a736-27d4e39d5002", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d82030-5a93-4b82-a39e-db0b142d083d", "sighting_of_ref": "indicator--91356cbb-a0d6-4d9e-a736-27d4e39d5002", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0953ce-997a-45de-befe-d5317d20eb22", "sighting_of_ref": "indicator--d896634c-268c-4f79-8a74-cf347cd8a6ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f15066-3d07-4fb7-a134-f97fc05c8b5b", "sighting_of_ref": "indicator--40177893-dafa-4a0f-9d7b-cd9c8cd68ade", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d12925-e857-42ec-825a-afaf3b516c5e", "sighting_of_ref": "indicator--4eade8a2-a570-47d7-a1a6-11efcb27393a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df74d419-6334-48d1-8c37-4e7788d8c073", "sighting_of_ref": "indicator--83c45118-8280-435d-a1a0-e9fdf273ceb2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b72aae-03b7-4e10-94da-0d91d9dcd64a", "sighting_of_ref": "indicator--83c45118-8280-435d-a1a0-e9fdf273ceb2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6af836-86a3-4620-a289-dad84b2693a4", "sighting_of_ref": "indicator--86f6508d-0c44-4dc2-b942-fad6e849656c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49659a2-3996-48f5-88a4-b5d7976b10ae", "sighting_of_ref": "indicator--bbbc9fb5-978e-4a9e-9b53-b3a3ff877c84", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d7e904-d77d-40b1-beeb-9a252d52cbf8", "sighting_of_ref": "indicator--cc0f56db-3e08-4f96-9455-bb4ea5e46f55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d122e3e-2b9f-471a-b2ab-d26b1859c094", "sighting_of_ref": "indicator--72c7e041-8288-4051-a19e-9d205c78ad76", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20efe4a0-084f-48d1-888d-418d4ef7113b", "sighting_of_ref": "indicator--3e7d0138-b20a-41be-900e-e2df14314cbd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba9475c-237b-4af9-80bd-ac3bd4f841ef", "sighting_of_ref": "indicator--23fea568-8e11-4e56-8bbc-1f3d3f40e684", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caa622d-e622-4071-bf4b-6366eff80725", "sighting_of_ref": "indicator--223dfe92-c791-415c-bbbd-610d2211717e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e5cff9-12c7-49a9-a020-987986eda57f", "sighting_of_ref": "indicator--7ff288e2-916e-460b-8f8c-7d7ab60c6ac5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c5b4fd-0c4c-4576-a294-49aa96341b55", "sighting_of_ref": "indicator--8af66ad8-191c-4f2b-b92d-6d3543b9c90b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131a8949-6929-4b84-b991-daa0eb0a153e", "sighting_of_ref": "indicator--db431fb4-2f1e-4e17-9f67-70641cb0ab5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77927ba-8b24-4fed-a0bb-4c3f37ecadbd", "sighting_of_ref": "indicator--848fad81-b3ed-4965-88eb-96eeee783363", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0e9c8b-5332-4fd7-ba2d-84ca0daaaa27", "sighting_of_ref": "indicator--848fad81-b3ed-4965-88eb-96eeee783363", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cf7fd6-d7c3-4542-a349-d7833f07eef0", "sighting_of_ref": "indicator--7a5e3be7-a97e-4178-859c-5bd46ca5298c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e58cc35-748d-42ac-9654-e51f6ceadb1a", "sighting_of_ref": "indicator--31f4eec9-e005-4678-aabb-9431f701e0c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c890291-f85d-4695-a145-15a464cabbc9", "sighting_of_ref": "indicator--2b4003e3-2e57-400a-a08e-e7398f4eee33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9d0ff3-b733-4d33-b678-985bc6e4ab03", "sighting_of_ref": "indicator--2b4003e3-2e57-400a-a08e-e7398f4eee33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54295b0-7488-4de9-bf50-9c2bb947e59a", "sighting_of_ref": "indicator--02c925b7-dddd-4eab-8e1b-c58570491bf4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6254b6-8d8b-42ba-aabf-1d7cd57bb98c", "sighting_of_ref": "indicator--49e781b7-fb73-48ef-935a-428504bb6af4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9c118f-eee2-419e-aa38-0cc7c5e82b04", "sighting_of_ref": "indicator--10e108c7-1786-4fa2-9097-6275ff73b829", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9f236f-fe66-4e63-990b-e0201bdbe7bd", "sighting_of_ref": "indicator--5b496ade-823b-4f86-9f24-12db2da66a14", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718097ea-0a87-4496-aa81-e5b0b3007c57", "sighting_of_ref": "indicator--41a4b6bb-3345-4436-84a1-a8705c4b5196", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca60922-e5a8-4aaf-92ae-9d150004e2f8", "sighting_of_ref": "indicator--9f2b0b27-5ab4-49f7-ab68-334d24f54581", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ddd146-ef86-4765-a231-d4d049586d13", "sighting_of_ref": "indicator--52f76a95-d136-487f-8f0a-407a814cd566", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6be8af-3153-4878-9a2d-6d004b92f27a", "sighting_of_ref": "indicator--636d267b-38d4-49cb-893c-61aeb730eb04", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e7fc39-1c6a-4753-82e4-a44f8cd2f8ce", "sighting_of_ref": "indicator--270cdbc7-da99-4f30-ab23-8ad3b51eb8a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f272ae38-e354-4a2a-ba58-545fd23fa4e8", "sighting_of_ref": "indicator--5ed6ceb9-db2b-4b43-8b3b-0666e22fd49c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a1b29a-86a0-43e8-b1aa-9506aab3cbef", "sighting_of_ref": "indicator--5ed6ceb9-db2b-4b43-8b3b-0666e22fd49c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd54f6f-e64c-4ecc-b6e3-b5889ac1d3bb", "sighting_of_ref": "indicator--bf261ffa-257d-4830-89f3-304229a0fd2a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e6ac47-d396-4e1a-96eb-1354311bae4e", "sighting_of_ref": "indicator--bf261ffa-257d-4830-89f3-304229a0fd2a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685c208c-c0da-429b-8b52-2abdd5e0d566", "sighting_of_ref": "indicator--036c646d-2dca-4bca-9fbc-209fcd95eeac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5fa670-9add-4838-8ac4-228950de20c5", "sighting_of_ref": "indicator--036c646d-2dca-4bca-9fbc-209fcd95eeac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f71371-7156-48b5-aaa2-ddfca9820d87", "sighting_of_ref": "indicator--1b0a6f5a-301b-497f-b09c-e4a794867afb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ff4f75-4f1c-409f-823a-9314ff802f63", "sighting_of_ref": "indicator--1b0a6f5a-301b-497f-b09c-e4a794867afb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ca50c5-d453-4b7f-b149-c585e152691b", "sighting_of_ref": "indicator--c2c61b06-ebc5-4c1a-b9d7-430cc99e87dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7766afda-1c1f-4a43-bee5-a8625a307673", "sighting_of_ref": "indicator--a1efc551-f2e8-47d2-8cff-93efaa84b681", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aac86b-8766-4936-9ac2-ef2336a02a72", "sighting_of_ref": "indicator--92818e2d-02e3-4442-99b9-d85c7c5aa929", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a416537c-b245-4ebe-a518-99d89301a5e9", "sighting_of_ref": "indicator--e1e88cbc-08b2-4ad5-913c-77cd01275bbd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc7f895-ae21-44a4-8129-7421841e6c8d", "sighting_of_ref": "indicator--f6e74150-e5e8-4293-a671-9dd0d5efec19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e55943a-db72-4dc0-91dd-3641298e907a", "sighting_of_ref": "indicator--0c6cf659-a1bc-44cd-a494-05235940c7d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ac10fe-3858-4b0a-a1c0-dc164a8b2bde", "sighting_of_ref": "indicator--c5277925-df4a-4fb6-8214-fdd1e2fbac09", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f5b6f4-9d7c-49ad-984c-4023e2c2d61f", "sighting_of_ref": "indicator--e6ebdde3-db64-4368-8ef4-21e85f884d28", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92e612d-033f-44d9-a119-0a62cd5bf3c9", "sighting_of_ref": "indicator--5344c799-7663-4f02-b919-1e604fd0ef76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477f7991-d305-4a3b-a75f-02bf2c24da5e", "sighting_of_ref": "indicator--28012148-3d4f-4053-a3ef-b47d4db93b05", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ea1430-a54f-43ea-9c12-005cc491364e", "sighting_of_ref": "indicator--f2f7e5c9-e912-473b-aa4a-5839e52fdb11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea37ab9-b433-431c-89da-e7b9d41777ce", "sighting_of_ref": "indicator--f7f9eaf3-d81b-4e4d-bddb-0f8c4f3ab3d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b129d5c7-2385-429a-b435-b2ccbdbe5b3b", "sighting_of_ref": "indicator--693e4a5c-f54b-40db-8f2b-16135e59a966", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a958e12e-e6c6-45a4-9861-a00a0569d924", "sighting_of_ref": "indicator--d54cacc8-4088-4d9f-9856-ddd3d78ad839", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a97332-c0a6-4dcb-935c-7f5d0b615b8d", "sighting_of_ref": "indicator--ec9c59a9-632e-4311-98f8-4e9afcdf97a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f03182-e430-43f5-891b-4deda7f2ab8f", "sighting_of_ref": "indicator--0da155bd-5407-4867-86e9-b1bca244bbfe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3260e8-8fb1-493c-aa8d-ce7a3aa4f60c", "sighting_of_ref": "indicator--38c32c85-9c1e-4004-af8a-9d5cb426eb8a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5037f587-9753-4d2b-b2cd-26b3be10c068", "sighting_of_ref": "indicator--69e09a40-0c8c-4324-b385-bb6946ce45eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558f86a0-a160-4ef8-b748-488c2356161d", "sighting_of_ref": "indicator--42ae3ac8-6e3e-4c18-8015-f2a01cca6b6b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6025905-b660-4a42-b373-4964beb0b111", "sighting_of_ref": "indicator--010b16ff-61fd-4c18-9c39-7b9ca7685440", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6740e301-668d-4b0d-9409-6f45c685b049", "sighting_of_ref": "indicator--0d2c52e7-6294-4c23-8385-2f6c2c56c22f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eac3cf4-1000-4502-a703-51dbf43b1dce", "sighting_of_ref": "indicator--2f9cd76f-58ab-4272-ac46-a491f4a57494", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087ca8b2-3eb0-4a64-bfa8-30450ba5ec6e", "sighting_of_ref": "indicator--a7176559-dec3-42ea-906c-54d5f257d83d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8517bc-5d70-4a08-a8e7-72e643de0dce", "sighting_of_ref": "indicator--e8350fe6-212c-43cc-9b54-c4d7d7456f28", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa41d39-c9f7-44c2-9f27-9431e3d37bd3", "sighting_of_ref": "indicator--4f9d0280-086f-4cf8-a64f-1725ee9f309b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0287d84d-79d8-421b-8cc8-ee36d318d4e8", "sighting_of_ref": "indicator--2fcd5630-6751-4527-b37e-04c4936bc5b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b34b442-231c-4eaf-8df9-bdd54324ce57", "sighting_of_ref": "indicator--942b563a-7653-4391-a72a-06f60fbe07fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa05a30a-58a3-400b-a907-88d9642f723c", "sighting_of_ref": "indicator--e84ebb86-cbed-42e1-9f18-7171a0382e3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf26e816-973a-48cd-b074-90c5d52b10e4", "sighting_of_ref": "indicator--a689d9d0-010b-4d25-915d-41bc664ca555", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f169c9bf-c776-4aa3-827d-acc5ffc76a4c", "sighting_of_ref": "indicator--255aa4e7-30f0-4e01-98e6-a64d0418c829", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e706e48-4be5-44ea-bbf7-3ee5efecdde9", "sighting_of_ref": "indicator--05022666-1feb-437e-aaed-2af7b7abbca1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170c7171-b6f2-4550-b750-0505e644f518", "sighting_of_ref": "indicator--05022666-1feb-437e-aaed-2af7b7abbca1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355dea01-62ac-4962-b5cb-339808f7c479", "sighting_of_ref": "indicator--55b95d22-d94b-4c1c-96a1-cc222c574cc2", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5a99bf-bfb6-41c3-92b8-9ec809cba25e", "sighting_of_ref": "indicator--c4fc4fae-4b0e-41a7-86ac-f68bf6e2a648", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa921e17-f263-4a0b-a7fe-057ed8f666b7", "sighting_of_ref": "indicator--32ca11a9-31bd-45a4-8aad-d94d24594fb2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683b390f-3d63-4991-abf2-37b723ac3f2b", "sighting_of_ref": "indicator--22e13c48-3986-493d-b503-920ebabc0f32", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b45b38-f4e5-4dd4-b6a9-242e7bc357bb", "sighting_of_ref": "indicator--53ee2c80-97f9-49af-be3c-a5162643a8e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98ce2ca-b6d6-4164-9019-6f96b685b8b7", "sighting_of_ref": "indicator--6bb2c275-85e1-4064-835e-20135e189685", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4d0ac6-e249-4a0a-ab72-2d8bd2186cbd", "sighting_of_ref": "indicator--721a4892-cd91-4318-a921-d386a2905b81", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597b631e-bb14-4c4d-8db1-72a54e670823", "sighting_of_ref": "indicator--721a4892-cd91-4318-a921-d386a2905b81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34874da-1210-4bc1-9fd5-4f82cfbb2823", "sighting_of_ref": "indicator--9f895e2f-ff86-47b2-a7bb-df87467d17c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f598dbcf-e082-4452-bd71-1710142226d2", "sighting_of_ref": "indicator--2be61e06-6d1c-4f71-bee2-b7b7fd6c5d3c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f10543a-2d80-41b4-a095-7d14c0f8ad7c", "sighting_of_ref": "indicator--7d1844cb-53d9-46a4-917e-7d606c23e3c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335c2e44-fd6e-49ed-9b18-c5c1932471fc", "sighting_of_ref": "indicator--187fdbdd-928c-4b18-9317-70d8c84ca49d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0973a954-ad5a-4e70-93a1-39d0b7e6c4ac", "sighting_of_ref": "indicator--3609bc6d-e0f9-4826-bd37-0d7b869d1e6c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7daf46-cd5a-49c7-a872-b3ebae4c5531", "sighting_of_ref": "indicator--3c46f79d-f540-4d28-a3a2-590bac8a566e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7accaf84-1f95-4721-8776-a06af205be17", "sighting_of_ref": "indicator--81447352-13ba-4244-85dd-fb5cfbc83495", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a0948a-2529-402c-b5a9-de854644b5c0", "sighting_of_ref": "indicator--22ea7b6f-a627-46da-90f7-f29e03978dc8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d78f49-b59f-4fed-b43b-5924b6e66d15", "sighting_of_ref": "indicator--4e7395ba-2467-4c6f-bf9e-82d26a0425e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461f9bfc-d1ab-4262-8e8b-a6c1c5d4ba79", "sighting_of_ref": "indicator--4d060f2b-f75c-46c6-9f99-24c0e3cb5668", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7759d530-0965-49bb-a36d-d66369f953ae", "sighting_of_ref": "indicator--6b527810-1be1-4069-b486-a12313cb82fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dac8403-4c35-4ac9-a51a-c3f6690ff500", "sighting_of_ref": "indicator--d6152b62-9c05-4d91-9992-afd8e6970d54", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281171f7-456a-4c67-8f87-359c4a5d4195", "sighting_of_ref": "indicator--aedabb3b-6174-4641-a609-dcfecd74a950", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2737a5d-1795-42ad-822a-a7a5ba0e85ca", "sighting_of_ref": "indicator--e800bef3-9aad-4ee7-a178-43491c4e2316", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10515e24-1da1-42ae-b6fd-5d5332bd7353", "sighting_of_ref": "indicator--9494404c-77a7-41a9-9349-8d6ee92fb82c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7a3e91-ce95-4348-8039-e4e7a6539f8a", "sighting_of_ref": "indicator--047939f9-1e50-403d-836e-77a8b6cbc810", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff909cd9-1c43-4911-8d2a-ca5c70095312", "sighting_of_ref": "indicator--321cddd7-5f95-41d6-91a1-0c4bea470438", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4f74b0-c8ea-467c-8ede-7d1b6e919665", "sighting_of_ref": "indicator--d9d0d6b1-aa07-4ff5-b9b6-45c959b9133a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4885915-796e-47ef-afa1-6096065965e7", "sighting_of_ref": "indicator--d9d0d6b1-aa07-4ff5-b9b6-45c959b9133a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d660dae6-5791-49f9-ba84-85100e2d7c0c", "sighting_of_ref": "indicator--23cad4d5-0b0e-408c-9b41-0d162245587a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d009ff72-a03f-4775-ac42-da6785dfb4fb", "sighting_of_ref": "indicator--3647d9b8-3fde-49a1-a847-76d6b792c364", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb9d52a-7800-4080-aaba-25460a9c629d", "sighting_of_ref": "indicator--19a237d4-80dd-4f24-8efe-a22793775e56", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cf1aaa-32c0-4959-8ba9-ed8fc2b321df", "sighting_of_ref": "indicator--69848d3a-49a6-4595-a565-9c97a9c5aa98", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60df89c-4689-41b2-9380-69d7447f90ca", "sighting_of_ref": "indicator--9740c4a7-9446-474e-a732-990cae314e1e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fa1b85-bac6-4ad4-805f-a0e749fc1add", "sighting_of_ref": "indicator--ce7df18c-91b9-4fcc-9949-b4dfa7cd6d69", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32299d05-c293-4021-8483-3a74b7853c3d", "sighting_of_ref": "indicator--ce7df18c-91b9-4fcc-9949-b4dfa7cd6d69", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b8978e-2426-4f6c-89d8-5fb60d6918d3", "sighting_of_ref": "indicator--b1a0f54e-d95d-4825-a9e6-4ceb4207edc1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b642f613-8cb9-4bdf-b73f-f5bca66ceac2", "sighting_of_ref": "indicator--46955d94-f592-4fa0-a7b6-760d6bb68eb9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ada46d-0e69-4624-92d7-20c5e90f9873", "sighting_of_ref": "indicator--e4918e79-3723-45a0-a581-7fd28a85b0c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68762719-135b-4db0-9fd6-2c89ed4754d8", "sighting_of_ref": "indicator--054b5c4b-f6d9-48d7-9939-4217a117530b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457530c4-b84f-4b71-b127-a7222244a124", "sighting_of_ref": "indicator--4721888c-139a-4f30-b27c-cf28ddf68c1e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc9cf94-75d2-4b0d-a52a-868a26469655", "sighting_of_ref": "indicator--4721888c-139a-4f30-b27c-cf28ddf68c1e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6e3f67-5471-4b4d-80f1-9bc94eadcbed", "sighting_of_ref": "indicator--9951e255-7459-48d4-87fa-fa0e68a632eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933e8640-6148-4ed5-a4b5-e5631d45bcec", "sighting_of_ref": "indicator--fe3e6e8f-d74c-4854-acef-dee1ac4ca9ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc3f73a-7899-4a12-8460-5fd5c5c7bd7e", "sighting_of_ref": "indicator--a3751801-f4c8-4781-b790-ed2bae32b3cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b41932-3cd3-48b6-87c1-3e453ecf48bf", "sighting_of_ref": "indicator--a3751801-f4c8-4781-b790-ed2bae32b3cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21853f7d-9217-486f-8900-1b8a95903ed6", "sighting_of_ref": "indicator--a7283119-dfc4-4104-951b-f65303c70752", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22aa910d-c34f-41c5-890c-dcf8764ed7db", "sighting_of_ref": "indicator--a7283119-dfc4-4104-951b-f65303c70752", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c2f5c0-01f2-4566-8d29-76a0357539f4", "sighting_of_ref": "indicator--708ef1eb-7a33-4e81-aa99-49ab8ff02371", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b2658a-961e-4d6e-8770-78b1e75c5b97", "sighting_of_ref": "indicator--0086f13f-951b-428e-b46b-9718251663fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d43b78-d2ca-48fb-87a2-5c273d881523", "sighting_of_ref": "indicator--0086f13f-951b-428e-b46b-9718251663fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3cd839-644e-48bc-9d7c-7a5725345ac4", "sighting_of_ref": "indicator--caa91f22-e048-4ab5-a565-13a4ef7ba0b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b25d425-774c-404b-bb4e-1be1d88c5b91", "sighting_of_ref": "indicator--caa91f22-e048-4ab5-a565-13a4ef7ba0b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea833dfd-689a-48fe-a518-85d923cb4390", "sighting_of_ref": "indicator--cf9c64a2-675b-4298-b662-5dcaea453eed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e449765-afa6-4ac6-86cd-edfa023760f1", "sighting_of_ref": "indicator--e4ffc8b3-e2d8-4f73-b6c1-8697c61affaa", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb146c3-5670-4867-b5d0-49f3c6d67f90", "sighting_of_ref": "indicator--6ba9067a-03c2-4895-b96d-8f1445f54303", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847191ba-2c30-400c-9014-1b03107fd26c", "sighting_of_ref": "indicator--6ba9067a-03c2-4895-b96d-8f1445f54303", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fe1bbf-8604-4a81-a154-ccbd6889214a", "sighting_of_ref": "indicator--729d7e7b-0d38-4092-8d4b-781081dc8c74", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d138445e-ff1e-4c82-9e7b-b81a89e1b905", "sighting_of_ref": "indicator--f62949ce-ab7a-4ccb-a330-26061f2f687a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaf8bf9-d123-4bfa-b8aa-ea101154b528", "sighting_of_ref": "indicator--f62949ce-ab7a-4ccb-a330-26061f2f687a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1d0762-31f0-4ec4-a019-8f3c800585c5", "sighting_of_ref": "indicator--fa1e8a1e-efa1-4b97-b9b8-bfc68e856b59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a70cf0d-e2a4-4010-a3f7-16bc7e260b21", "sighting_of_ref": "indicator--fa1e8a1e-efa1-4b97-b9b8-bfc68e856b59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfbb93f-2559-487e-8a19-6047a9e1b46f", "sighting_of_ref": "indicator--f77c0163-d1d3-4b87-ae16-cdb4db9e5e64", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545d40b3-fabb-4f13-a545-1ea1f5b47fb7", "sighting_of_ref": "indicator--f77c0163-d1d3-4b87-ae16-cdb4db9e5e64", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bf4071-6cbc-4450-91d9-956cae93d22a", "sighting_of_ref": "indicator--ffacafbc-4020-4541-ad79-35ce1489d558", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6fe26b-a894-4038-87c0-e37027ca3324", "sighting_of_ref": "indicator--fb9a7cda-364c-497c-9c0c-46a8506e98a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761c61b0-5898-4d9b-b111-872d619dd4af", "sighting_of_ref": "indicator--72f069d6-ad82-4ff4-873c-ded54330c124", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cadd219-d418-4beb-b4cc-4f2a6b72bfa1", "sighting_of_ref": "indicator--72f069d6-ad82-4ff4-873c-ded54330c124", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71d4f26-677f-4e5d-9c96-e64fd90e29b2", "sighting_of_ref": "indicator--88ff3eb1-c2bf-47d2-a1ce-1d781c8e239f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ee6933-7579-4f5f-b364-bc876ef798e1", "sighting_of_ref": "indicator--e6266174-52fa-4464-a9e4-ecb36f3c4db4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cd5c1b-30c3-4600-81a8-8af814f5f538", "sighting_of_ref": "indicator--6785ffe6-a3a5-4104-9841-8ea1e91352fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a6aa33-6318-46d7-8697-51bb7d827c4e", "sighting_of_ref": "indicator--828f42d5-50b0-4894-8a51-ada3116756db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff8fe02-3014-4be0-957c-f2a82652f9f5", "sighting_of_ref": "indicator--2ab44a94-3abb-40ff-aa9c-f8faf67d5d0b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adf9b55-7a7c-4f41-9f8a-58aefdf34e5b", "sighting_of_ref": "indicator--e3ff14b9-3589-4f7d-95d1-2547e71e8197", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a02469f-276d-423b-b899-3d989f7e8475", "sighting_of_ref": "indicator--e3ff14b9-3589-4f7d-95d1-2547e71e8197", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5f2eba-cb06-4749-8ac1-3d3a4266ff89", "sighting_of_ref": "indicator--c31d36e7-b767-484d-86eb-54bdf13de5b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaf5237-f5db-44b0-a713-dfa0872add47", "sighting_of_ref": "indicator--5b7392ac-29ca-4e99-80a0-af63f9cd3429", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f97202-60aa-4b2f-bc4d-d8dd0a7a8191", "sighting_of_ref": "indicator--28430d64-01a9-4ab2-a4b3-5202e7562753", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d40416-e43a-41f5-b9e7-14073184ee60", "sighting_of_ref": "indicator--28430d64-01a9-4ab2-a4b3-5202e7562753", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0b7cee-9f40-469b-b9c9-e3808dfca8d2", "sighting_of_ref": "indicator--05cf786e-352a-40df-9966-c72bb34a518c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d16678-c535-4352-8482-a69e4d498c34", "sighting_of_ref": "indicator--0cea1501-47f2-4c5f-80a6-44d4349c4569", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e41a687-e13a-4658-a843-e358ae79d249", "sighting_of_ref": "indicator--7f47b48f-cbc3-485a-9b4c-aa361fbc5c8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d86947b-bbbc-48ab-8586-fb1cc4c1ab0f", "sighting_of_ref": "indicator--f17af8b6-f310-40b0-af69-ead2e11a312e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf3fd03-a872-4c22-8ef8-1ee89609ff64", "sighting_of_ref": "indicator--694547d1-8765-4231-8835-8b25fa71aa06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9d0921-66dc-4949-a52f-ba0cd690ddf3", "sighting_of_ref": "indicator--f9339f29-367d-43a5-95f7-d582332b10b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81c183a-cfd4-48db-b16f-ed70064e5bc4", "sighting_of_ref": "indicator--7f8d84ed-2f24-414d-bb7e-ef34912115f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa006584-f609-485a-96f6-85be06cb283f", "sighting_of_ref": "indicator--2cc16411-e318-46c9-851d-ec505eaddc1f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69ed5da-9764-40df-b9ff-bc427e623ca1", "sighting_of_ref": "indicator--ebde2855-695d-428b-9e98-94141937c963", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18934f78-929c-491e-b668-f79e7da25cfa", "sighting_of_ref": "indicator--abab2009-823d-48d0-8abe-b7c546b99f10", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1699a44-923b-4141-8fcd-64ae770b4de5", "sighting_of_ref": "indicator--2da40406-0213-4750-a118-e8bba9c856f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23240c08-1c02-4359-8831-e69bd62156e1", "sighting_of_ref": "indicator--a7dd1c5c-1dce-49cc-867d-becde4ee3cff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3663e1e-a63d-45eb-b8d8-f99ed0248fa7", "sighting_of_ref": "indicator--09d4e453-83a4-4249-9317-b630151e9e47", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab64d9d3-cc8b-4ca2-b135-677328cedef5", "sighting_of_ref": "indicator--6884c0f9-74fb-4af8-b02a-95b3864f96df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef19c51-1440-44fa-b40f-f2f1b942751c", "sighting_of_ref": "indicator--fbf26973-6cf1-4a69-a9a9-9c0343773b1b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbba843-dbe0-4ac5-be53-df45ef5674cd", "sighting_of_ref": "indicator--54f7068b-2a2d-4776-aad1-c4e60cb1e4e9", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0cee12-8eda-4f5f-a3d1-11b73b2b5c88", "sighting_of_ref": "indicator--820265ab-4b56-40ec-89de-e744c4e212b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ab4111-761c-44f2-9377-e1a36a5d5a2f", "sighting_of_ref": "indicator--820265ab-4b56-40ec-89de-e744c4e212b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570c684d-a50d-455e-8fd0-af1b10c720ed", "sighting_of_ref": "indicator--0f317bb6-626a-4395-8829-b9db409d0242", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9806b9-29c8-40ab-ba8a-32ced2c06376", "sighting_of_ref": "indicator--0f317bb6-626a-4395-8829-b9db409d0242", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e13e45-00bb-4016-a732-ef8046c08139", "sighting_of_ref": "indicator--b6da6004-ad13-40b8-92e6-3ea69fffb7b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7694bc26-3d99-4e69-b6f0-bb583bea05e5", "sighting_of_ref": "indicator--b6da6004-ad13-40b8-92e6-3ea69fffb7b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b60404-a0d2-4866-87e3-21fdbee82483", "sighting_of_ref": "indicator--b61930d1-7062-42ef-a691-bdba9b2e3204", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4788d1-8987-4443-a904-057b752af031", "sighting_of_ref": "indicator--b61930d1-7062-42ef-a691-bdba9b2e3204", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7288478d-e9e9-4d5b-afec-4d1ecb089ca0", "sighting_of_ref": "indicator--b4975f81-4ba2-452e-82e5-6022323b9d6a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627935b7-e2c0-40ed-8cd3-0659d9d2c457", "sighting_of_ref": "indicator--72885488-9047-49fc-9ca8-7940da9b4eb0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e309d9d0-5bb4-45ad-a391-c7f872e33ff5", "sighting_of_ref": "indicator--2541c3bb-027d-4a9a-b14f-fcf37046e787", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606471a4-8e91-4552-81ce-48b25fa50245", "sighting_of_ref": "indicator--5171a84b-8ec4-41d9-80a8-3b3a8f107649", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9bacd1-ff33-4875-82d3-cae46b53b2a0", "sighting_of_ref": "indicator--5171a84b-8ec4-41d9-80a8-3b3a8f107649", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26c3bc1-ca71-439a-948b-bcf4761e35fd", "sighting_of_ref": "indicator--5cdfda84-7240-460b-a751-c0dbda7e06d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78ce961-67ba-49d4-a873-1b0bf26422b2", "sighting_of_ref": "indicator--5cdfda84-7240-460b-a751-c0dbda7e06d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a4f4df-34d9-4246-889d-f0fc8f36db33", "sighting_of_ref": "indicator--ad3d1178-b7f0-4fbc-bce1-43b24a08fa3c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19d3cde-daca-40f1-9d8b-86c9df2477cc", "sighting_of_ref": "indicator--ad3d1178-b7f0-4fbc-bce1-43b24a08fa3c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9d9027-2ff3-4dfe-a315-5997de8feea6", "sighting_of_ref": "indicator--8473953d-307a-436f-8dec-890bf245f44d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da139b1-5d65-444a-94b7-18659756f836", "sighting_of_ref": "indicator--8473953d-307a-436f-8dec-890bf245f44d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dfa213-6c2f-48b3-866d-d37db7a2dae5", "sighting_of_ref": "indicator--15e1d1a6-293b-4416-b5b9-68bca4dcf5d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204b9f9f-1610-4b21-8f7a-256db6b93129", "sighting_of_ref": "indicator--15e1d1a6-293b-4416-b5b9-68bca4dcf5d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9651cc3b-13fe-475a-9ae6-48b56a2bfa0a", "sighting_of_ref": "indicator--9d84376a-4697-4754-aa36-0ef125e5da0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88293fab-32c3-4758-a4c0-2a6fb5860776", "sighting_of_ref": "indicator--bf017feb-52e8-4a72-b2bb-66b96e700159", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698dbd6a-6a10-4817-a411-226889422cd6", "sighting_of_ref": "indicator--828e921e-fb2e-4e35-9ac7-c5451b148e53", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1116a46-cebf-4df5-bb3b-888db4bd2677", "sighting_of_ref": "indicator--61ac2247-9cdd-42a9-a624-11e99712e0d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fbbd51-6828-4236-8935-49e4714bc423", "sighting_of_ref": "indicator--2a745d32-7af6-4355-b66f-905ccfa9c625", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04763827-c15c-4c80-87ad-fa1383ed753e", "sighting_of_ref": "indicator--995f915e-9963-4f41-bf1d-f69bbc8a4335", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0f567f-2774-43c1-855d-9096ae665a0d", "sighting_of_ref": "indicator--82ea1bc7-0d23-4cfb-99dc-b2cf83418112", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2c04de-2858-4816-83b7-e56a8bb0fbac", "sighting_of_ref": "indicator--82ea1bc7-0d23-4cfb-99dc-b2cf83418112", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ba072a-ac6d-485f-8517-3d4db40daeaf", "sighting_of_ref": "indicator--f64022e9-9050-4dc8-858e-82bfccaed6b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e81433-2b97-4f04-8e91-74d580539f6b", "sighting_of_ref": "indicator--5ec99224-d0cb-4e3b-a9fd-fff3ff5eed19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5e740a-af67-4529-8b41-befbefcc9508", "sighting_of_ref": "indicator--5ec99224-d0cb-4e3b-a9fd-fff3ff5eed19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f51ce6-f0c1-4250-a0f9-cedb44742b1b", "sighting_of_ref": "indicator--5eaa706d-7d21-4eab-a18c-5670ceeef764", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249e123c-b0d2-4194-8d62-a5752a659489", "sighting_of_ref": "indicator--9a323244-c4df-4539-af72-8375e80d9471", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c5c395-706d-413b-bcb3-4256bdce8afc", "sighting_of_ref": "indicator--9a323244-c4df-4539-af72-8375e80d9471", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e1b589-5b86-4c6e-a6f8-705e2090da16", "sighting_of_ref": "indicator--da792908-79b6-4013-a56a-05016c93671f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1a3076-a46b-40cb-9de4-d1583a581c83", "sighting_of_ref": "indicator--da792908-79b6-4013-a56a-05016c93671f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d64d2f-043d-4b1f-8a97-aa216b05e20d", "sighting_of_ref": "indicator--75783e23-3bb8-4330-b913-e1f41b83bd4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec12b90-c2df-4bb2-828a-c3e3610e3d5e", "sighting_of_ref": "indicator--75783e23-3bb8-4330-b913-e1f41b83bd4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a92f21-ae0f-4b16-bfa0-1ad3cb293fd7", "sighting_of_ref": "indicator--a4f0ba18-b43d-4a1d-bcd4-3c082bb17547", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30660b9-6d21-41e2-aa2f-c22297c7a55f", "sighting_of_ref": "indicator--f06f7e9d-5cc1-44fa-b17c-87393a8a5ddb", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263c72ad-1f4c-4263-a373-f9eca08299ba", "sighting_of_ref": "indicator--dce5b4ac-62b1-49d6-8ed7-c9ab1c87660b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ca699f-1652-40ec-9d57-2a1961b27546", "sighting_of_ref": "indicator--06717ce1-e3e5-4673-bc66-5f309e44e6d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6272507-d5ac-4d05-b1b0-f51794dafd9e", "sighting_of_ref": "indicator--9967f502-f03e-49b4-86f2-329b6bcf2376", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdf9f45-821a-4df7-87e5-bebae54efa78", "sighting_of_ref": "indicator--feaebbda-c079-42ff-bc11-2fc65078b9a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcee38b-a900-4ea1-85f1-351bfe1e4717", "sighting_of_ref": "indicator--ecc175fc-df63-4503-87a0-dbbabc73a3c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faef614-3f6a-4b3e-ae0e-ad5b38a97c80", "sighting_of_ref": "indicator--3ce3e54a-ee32-493f-a4ea-b985860e77c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf59b5d9-3edd-4e3f-9237-56e7690700ef", "sighting_of_ref": "indicator--3ce3e54a-ee32-493f-a4ea-b985860e77c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae652d0-4518-46f3-af60-03fd48b3c179", "sighting_of_ref": "indicator--8a837d12-20ad-413e-90ce-f95c949aa28f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75adfc9-c2ef-40a6-8ab0-321ec12bc3f7", "sighting_of_ref": "indicator--3a205887-7bad-416a-a456-2c4ccc7790b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058d4fbc-fe07-4811-9e33-48b0d175ee89", "sighting_of_ref": "indicator--3a205887-7bad-416a-a456-2c4ccc7790b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f300a87-fe00-412d-a363-c308acdefa73", "sighting_of_ref": "indicator--7e94a105-56c7-47f2-adca-21a2611e20e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57eb5b19-1a89-41e8-bd58-b0701eddd3a0", "sighting_of_ref": "indicator--f1b2fee6-5a94-4e7b-9298-66a566914687", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1a9887-e3e5-4e1e-a832-6dfa1f048495", "sighting_of_ref": "indicator--017d5054-e29b-4e9a-8450-1ca5a9b0b27d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60969b7b-e56f-407c-8123-fa399af61cb7", "sighting_of_ref": "indicator--6bad9638-622e-4fc9-ad3a-ec7ab11e5784", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349430f1-2b65-4089-ab4f-f9bd9d71bdcb", "sighting_of_ref": "indicator--6bad9638-622e-4fc9-ad3a-ec7ab11e5784", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7520df58-e1a9-42ab-bc3f-07e21caae1c6", "sighting_of_ref": "indicator--c682e250-f480-4af7-a91a-6090dd517061", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbe15c0-acdc-4c34-9038-feeeceb16481", "sighting_of_ref": "indicator--58d3577d-151b-4399-8982-a01f0d1763ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fab3301-516c-4166-a94e-4b5a8b29ace2", "sighting_of_ref": "indicator--58d3577d-151b-4399-8982-a01f0d1763ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4872e9d-40e2-46b9-9857-11f2ff5cbb26", "sighting_of_ref": "indicator--70629a21-f2a4-41fc-b2c1-8e55211388fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89cf30f-704f-4620-868c-aca0b9e6fe06", "sighting_of_ref": "indicator--f870eff6-3e90-4e21-89c3-0b0626792d99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3270feb-7579-40b2-b516-a1c2f64f9ab0", "sighting_of_ref": "indicator--36717eb5-0619-40f7-8864-98d662e0d22d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791ad950-49d0-4279-8a77-25877599e9b2", "sighting_of_ref": "indicator--c0bce917-c0f2-4df2-a171-a6daa9568cbb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35586dbc-1502-4446-bea8-ac79839967ea", "sighting_of_ref": "indicator--5f60e85e-d257-49b2-a26a-2692e7a43b2c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a2f6a2-8728-43cd-9fd2-42241a21963f", "sighting_of_ref": "indicator--fd49b6e9-1f9f-4d6b-af7b-928fc572f584", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7765aab-3240-414c-a3bd-d122514b4341", "sighting_of_ref": "indicator--273cf137-b0da-4cfb-be47-03e32dd29dcf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aec21c-02a3-449d-899e-82c21541e736", "sighting_of_ref": "indicator--e09ec64e-19df-4a0e-b792-3ed4bc5ae11e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bb4308-fd41-490f-a708-3a1626f096ba", "sighting_of_ref": "indicator--c3df89f8-4eed-4515-a1b0-24ccab3c1a11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becf2548-1768-4b47-8be6-8c47e76581cb", "sighting_of_ref": "indicator--191e1610-dd08-4a22-8d12-bc794ab60a6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39371d28-0701-43e1-b03e-9ce651396793", "sighting_of_ref": "indicator--9ea932f7-7ee4-4618-9f98-c1ba1fada920", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46ee78c-90af-4630-aa63-3084f23c534d", "sighting_of_ref": "indicator--9ea932f7-7ee4-4618-9f98-c1ba1fada920", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3f18f4-b1f4-482a-8b1d-5a5d3e7065d5", "sighting_of_ref": "indicator--a279c927-b614-435b-8c9f-b91d7ae64b3d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b1345a-3cb7-4b91-9e5f-f7f00b2e7918", "sighting_of_ref": "indicator--42d92956-5aef-4e93-8443-50d7ba78bf18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b39d040-f9f0-4d38-9935-04c92900eec2", "sighting_of_ref": "indicator--93ec5e4a-675c-4066-9f59-1d1fb63a6bc1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c0d945-10d1-49df-ab23-17a124038b01", "sighting_of_ref": "indicator--cc44a093-eaa2-4304-b40b-0a6b06bc3114", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fea775-9bc4-446c-afa7-1f9ce2883d4f", "sighting_of_ref": "indicator--cc44a093-eaa2-4304-b40b-0a6b06bc3114", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a32ddc-9245-42b5-a5a4-bca7dd4e4946", "sighting_of_ref": "indicator--874e2635-3281-4474-a022-83e58b1ba691", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe0787c-89a0-48e0-987c-8fdc976196ea", "sighting_of_ref": "indicator--874e2635-3281-4474-a022-83e58b1ba691", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be7ef7b-b601-4101-b667-64bcbaa51c5b", "sighting_of_ref": "indicator--311121b5-45fb-4f3f-890f-68224098eaf0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad410fd-27e3-487d-87d8-6d977dad04da", "sighting_of_ref": "indicator--311121b5-45fb-4f3f-890f-68224098eaf0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1309bd57-63df-4276-a3ed-a9d7607d0d49", "sighting_of_ref": "indicator--1d1b4ff5-092c-42d8-b363-828a8d828f75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df41f594-6dc7-4aac-a6d8-c96989327511", "sighting_of_ref": "indicator--1d1b4ff5-092c-42d8-b363-828a8d828f75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fced5eb-8d11-4205-a40a-dd525b04aa0a", "sighting_of_ref": "indicator--f88a1b81-15f2-4c50-9a34-e1e4d3edb5a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40f51af-b411-4bae-9517-030c7435688b", "sighting_of_ref": "indicator--f88a1b81-15f2-4c50-9a34-e1e4d3edb5a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8aa9b8-6c71-4280-aca9-56133f4fb09d", "sighting_of_ref": "indicator--21aef5e3-edea-45a6-9014-5e926da3fabb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a9132e-e9bf-458c-a452-560aa280d342", "sighting_of_ref": "indicator--21aef5e3-edea-45a6-9014-5e926da3fabb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f4b566-6850-461a-9ef6-2b13cf1bfb2e", "sighting_of_ref": "indicator--07ce64d9-2820-4129-b677-b70eba90c15d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5970cdf6-0e8a-4668-b049-b4e244eb04a0", "sighting_of_ref": "indicator--07ce64d9-2820-4129-b677-b70eba90c15d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a2f50f-37ac-4ff2-9fe4-704bd725e719", "sighting_of_ref": "indicator--55e7cb32-1ad9-483e-8949-3fb53613b551", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6057bcb1-3a65-4543-a3a0-1c89d255841d", "sighting_of_ref": "indicator--55e7cb32-1ad9-483e-8949-3fb53613b551", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad86895-ccc8-4df8-8863-21fbbb812a01", "sighting_of_ref": "indicator--ad5edef7-9b88-439e-b30e-14279f716029", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cc9bba-941c-4aa7-9632-32748684fba3", "sighting_of_ref": "indicator--ad5edef7-9b88-439e-b30e-14279f716029", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e36d747-480b-4166-878f-72572f7c27c6", "sighting_of_ref": "indicator--27089c51-5ffd-4360-a2e7-43208d05e4a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536750ee-2d4b-45c7-ae79-1bca3a2f9caf", "sighting_of_ref": "indicator--27089c51-5ffd-4360-a2e7-43208d05e4a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9970f46-bb33-4edb-8f51-a82a9d136e4a", "sighting_of_ref": "indicator--259371e5-0ffb-4ce9-ac73-a47d82dc9d25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c027b0a-fbee-483c-b9ec-24fbef034d71", "sighting_of_ref": "indicator--259371e5-0ffb-4ce9-ac73-a47d82dc9d25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce7ee8c-89da-408b-a38b-fa4ddbeee9c1", "sighting_of_ref": "indicator--c5b044f2-b193-4da3-b7ad-193a76a43325", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8af6109-d61d-4b1d-8042-6c13197500f3", "sighting_of_ref": "indicator--c5b044f2-b193-4da3-b7ad-193a76a43325", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02972242-7cd4-4375-a787-b8e407d77905", "sighting_of_ref": "indicator--b4380dad-6b3e-4e3e-b2be-64b9184547ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8792d658-86af-4dea-8ad8-da65c4416d13", "sighting_of_ref": "indicator--b4380dad-6b3e-4e3e-b2be-64b9184547ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b797c3-d73a-4801-ab00-043879f77b1e", "sighting_of_ref": "indicator--8a0cd660-badf-4f8b-b5d7-8d6a578494fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b82006-4fa9-4038-abef-1f5cd9978949", "sighting_of_ref": "indicator--8a0cd660-badf-4f8b-b5d7-8d6a578494fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356f401d-de23-49e8-b646-02546b645571", "sighting_of_ref": "indicator--b4a081e6-35bd-4463-b7a2-c1c01c69fe6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15c1cc2-99a2-4eaf-a662-c3f138c26ba6", "sighting_of_ref": "indicator--b4a081e6-35bd-4463-b7a2-c1c01c69fe6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae142323-c65f-4479-9083-ca62989c24d9", "sighting_of_ref": "indicator--dbd9f5c0-16ca-4302-aa7c-652433c836c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0272afcf-7258-476c-b091-12099a8510bc", "sighting_of_ref": "indicator--dbd9f5c0-16ca-4302-aa7c-652433c836c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b66126-f840-42ba-8a49-c846942d2514", "sighting_of_ref": "indicator--a06b5b0a-37ac-4550-8833-09786f4da00f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf9cc52-63ca-4bbc-b5fc-26c43e896454", "sighting_of_ref": "indicator--a06b5b0a-37ac-4550-8833-09786f4da00f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5223e8-8e7e-4b03-a104-c6fa18aba428", "sighting_of_ref": "indicator--c0f09bae-9226-40df-97e2-cf22d3d51451", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efbd044-88e3-49a9-8eb7-eca1eec99ab4", "sighting_of_ref": "indicator--c0f09bae-9226-40df-97e2-cf22d3d51451", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7db94a-6124-40ee-86ac-017ecdf84740", "sighting_of_ref": "indicator--1ae61aee-3f20-4e92-b273-20ca20c9923a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0565e65c-d429-42fd-978c-8532c868841e", "sighting_of_ref": "indicator--1ae61aee-3f20-4e92-b273-20ca20c9923a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46070ee2-371a-48a3-a1e7-0adef5957fd7", "sighting_of_ref": "indicator--7de5e9ec-2de6-4bf3-9f2a-3baa87adfc8e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb60d515-47cf-400b-8ef4-34d9070487c2", "sighting_of_ref": "indicator--7de5e9ec-2de6-4bf3-9f2a-3baa87adfc8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d67a55-94a9-4172-b18d-e78cb3b15216", "sighting_of_ref": "indicator--7886e0ee-0662-441e-815a-eb934de7b481", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac58ace3-2e93-4327-b19d-af4f54c7fd70", "sighting_of_ref": "indicator--7886e0ee-0662-441e-815a-eb934de7b481", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba585e3b-4e8e-4b05-8dd5-56f940e06065", "sighting_of_ref": "indicator--20589619-973b-4d41-814e-8f624ba59ed2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd9845e-3839-4e80-9ee4-66e0d76531bd", "sighting_of_ref": "indicator--c041f6ab-32e0-40a7-81a2-89119323cc77", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48c376d-f15c-423e-9bc7-790f0c04a60b", "sighting_of_ref": "indicator--c041f6ab-32e0-40a7-81a2-89119323cc77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4198573-c104-485f-b1b7-343349827833", "sighting_of_ref": "indicator--c85fd728-d2ca-49cd-bc81-595fec21cb79", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44044e77-6e1c-4b33-bed7-8ed8154c84a8", "sighting_of_ref": "indicator--9a6a8c19-41fd-491c-82be-b83be8ad72bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c88a95-78e1-467a-98cd-b83b2abe4ff7", "sighting_of_ref": "indicator--d05fe264-9add-4e58-b093-68082d363ce1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb254ec-228b-4eea-b613-9aa2201e85b5", "sighting_of_ref": "indicator--4d2e1f53-1266-4833-bdcd-cf546c05aecd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb733f2d-cb7d-4e19-954a-50e17444883c", "sighting_of_ref": "indicator--4d2e1f53-1266-4833-bdcd-cf546c05aecd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dd8177-e743-40f7-9cca-096d5e9b199a", "sighting_of_ref": "indicator--51476a8b-b2ec-441c-b2e2-2ba08a7721c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2a0855-82a3-4f45-8990-81b2f047f67f", "sighting_of_ref": "indicator--51476a8b-b2ec-441c-b2e2-2ba08a7721c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec5f5ee-8645-43eb-8b4f-ecd8aff3839a", "sighting_of_ref": "indicator--37c493c8-c77a-46a5-869e-d6b1423f425e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37d99b2-10c3-44f7-953a-4ed20a13f506", "sighting_of_ref": "indicator--07f89a44-22fd-4617-ac8a-19eaa171d30f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d6ab47-2bd8-4600-8168-98b9a1603eef", "sighting_of_ref": "indicator--5d489e3f-cec4-4fa9-ad16-2ebbfaa1ac8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3b15dc-d45a-473a-8d33-b8347c328dd6", "sighting_of_ref": "indicator--92785c45-a4cf-4540-a69d-e58d5270a66f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d34acb-b4ce-4a52-b97c-72bf783280db", "sighting_of_ref": "indicator--adaf1992-74b0-41d5-a211-23978591a656", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c5e686-b6d4-4416-a1ca-1e837c91c849", "sighting_of_ref": "indicator--adaf1992-74b0-41d5-a211-23978591a656", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f0c2e6-237e-462d-9e24-ae202365794f", "sighting_of_ref": "indicator--1f080c1b-8f90-4d55-b419-f713e60c3f29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323d556e-6c56-42c1-929c-92668bdf8a89", "sighting_of_ref": "indicator--f5ac417c-24db-40b0-8ae3-e1f76878bcfd", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c021f03c-e102-40ef-94fc-21a2ef037440", "sighting_of_ref": "indicator--6c234bbb-1809-40b6-86cf-09047df7b9b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e347b412-568c-49b5-8710-aff20e404d78", "sighting_of_ref": "indicator--934d5738-ecc7-4550-9b7e-2b1c4852235f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48540ae5-c02a-4764-b157-654587139d1c", "sighting_of_ref": "indicator--81c9b70e-5535-4fe5-8029-cf2971665fcf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec2eab0-fa6f-4893-8540-44f9dccb5961", "sighting_of_ref": "indicator--81c9b70e-5535-4fe5-8029-cf2971665fcf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3eda75-4e29-4ec6-bed8-6ee9ea47fecb", "sighting_of_ref": "indicator--cfdc30a2-1170-43e2-8cd6-6ded40fda6fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3324b7e6-cf48-42e6-9d17-20ea336fe98d", "sighting_of_ref": "indicator--5109fe5d-bffe-422e-8f18-e62d204f5f9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e81b4b9-81b4-4056-b064-764ffaabe17b", "sighting_of_ref": "indicator--5109fe5d-bffe-422e-8f18-e62d204f5f9a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a24e23-2ca6-4ac4-907d-93847b620339", "sighting_of_ref": "indicator--f2f8d813-12cd-4998-a20c-2a41843d4cc8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86041d83-d877-4fc9-8424-92315fcb82fc", "sighting_of_ref": "indicator--f2f8d813-12cd-4998-a20c-2a41843d4cc8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ea67ca-7939-476f-abdf-41d25ebd4a89", "sighting_of_ref": "indicator--bb900cae-753b-43ad-9eb7-625940776285", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb44fa4-a2a5-4667-ab3b-27c0bcc8cef9", "sighting_of_ref": "indicator--0c03a960-cbe1-41dd-8b6c-3af2fe85f4fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049db47d-4c9e-4510-a976-c481e1c51328", "sighting_of_ref": "indicator--0c03a960-cbe1-41dd-8b6c-3af2fe85f4fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6363f73-0482-404c-b4bb-3c4cb7d0fbf5", "sighting_of_ref": "indicator--1c4b6a17-6ea1-474e-9b11-684d7bde85f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9b0d24-1128-4047-b201-d9a53e14b9c0", "sighting_of_ref": "indicator--1c4b6a17-6ea1-474e-9b11-684d7bde85f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa4d188-0ce2-4e7c-a283-aa65ca80b7ca", "sighting_of_ref": "indicator--586ec922-e795-4e32-b111-4d85e020ce9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3963e4e2-b6ab-41cf-b677-4fe546070b1f", "sighting_of_ref": "indicator--586ec922-e795-4e32-b111-4d85e020ce9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1868ee61-1eee-429f-8439-fea0405f0c4e", "sighting_of_ref": "indicator--68c19c81-0c36-4967-9cb8-8cad651ca558", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2245dd88-28ed-4f49-85e9-66574ebaea95", "sighting_of_ref": "indicator--68c19c81-0c36-4967-9cb8-8cad651ca558", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43fd9ca-a11c-47f2-85c1-731e36db47b1", "sighting_of_ref": "indicator--02de80a5-7df1-4e26-b02c-d0135451d1f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d251ca1-e843-4b11-9e30-1aec504f9e7e", "sighting_of_ref": "indicator--02de80a5-7df1-4e26-b02c-d0135451d1f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe65b146-4ce9-472f-9e21-1c4ffb4d2eed", "sighting_of_ref": "indicator--5b1b4ee4-7586-41d5-a969-4c3acd29877e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb65d6b-d1b6-4135-aa8c-7692bb992df5", "sighting_of_ref": "indicator--70e0ba30-b8f5-4601-9853-98b52f502b9b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d02f5e7-1ba8-4120-872f-59be2ae28112", "sighting_of_ref": "indicator--64c4b1c8-18c9-4286-8149-e2f1e1346a57", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c0f7d5-746a-405b-a12c-e827ec4dcf3c", "sighting_of_ref": "indicator--64c4b1c8-18c9-4286-8149-e2f1e1346a57", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83295597-b837-4b79-82b2-6361865bc150", "sighting_of_ref": "indicator--07205e75-0400-4899-b94c-514528172b73", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af1e157-f60d-4582-ad8a-bdebf578850c", "sighting_of_ref": "indicator--07205e75-0400-4899-b94c-514528172b73", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614e8bbf-e93f-4325-b7be-8756e80fc3e9", "sighting_of_ref": "indicator--cfdc14bf-1d8b-4096-9131-54daaa875b42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec24a172-40ab-4926-9a49-f337840cc6a7", "sighting_of_ref": "indicator--cfdc14bf-1d8b-4096-9131-54daaa875b42", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efe6b73-bc82-40cb-96d7-97b8ce175732", "sighting_of_ref": "indicator--a5a73128-30c2-4c30-bcde-0d14cbc9d48d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1d2d7b-6939-4d9e-88cf-8235e3a0ac3b", "sighting_of_ref": "indicator--a5a73128-30c2-4c30-bcde-0d14cbc9d48d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f90b4c0-9f2a-44af-ac10-bc54d81dfd80", "sighting_of_ref": "indicator--2cba2237-6250-4690-8899-a4bc00370275", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a87e502-8e9d-4bf0-b4a2-a0bf985086f4", "sighting_of_ref": "indicator--80d9a466-77fe-432f-9d47-36bfb277e1ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b860580-b750-489c-9a34-c6aabcefb5b4", "sighting_of_ref": "indicator--80d9a466-77fe-432f-9d47-36bfb277e1ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a08b93-b05e-4219-a650-771ec999eb99", "sighting_of_ref": "indicator--517abe62-3b39-4a32-9722-53c18489d678", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e19cbf-2e0e-471d-b677-97601c9a4cb0", "sighting_of_ref": "indicator--517abe62-3b39-4a32-9722-53c18489d678", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b0760a-86be-4d09-a00f-974ee187733b", "sighting_of_ref": "indicator--76c62369-a490-4a3c-95a6-a0edc6a4ccba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b304083b-43b9-443d-9062-8ab0c7cf30fc", "sighting_of_ref": "indicator--76c62369-a490-4a3c-95a6-a0edc6a4ccba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36fdb35-4bf2-450e-bb3a-fa526786e84b", "sighting_of_ref": "indicator--024481ab-7097-43d7-9263-4b57730559f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f9dd47-5c8e-419c-a3d3-38a591bf969c", "sighting_of_ref": "indicator--024481ab-7097-43d7-9263-4b57730559f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78283d9-1bbc-4d4f-b3ef-95d05c3db4e2", "sighting_of_ref": "indicator--e5a42e20-f273-42cb-bb3d-61e8a8ddda1e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d737e61b-a751-4f97-aacb-2068d3355ccb", "sighting_of_ref": "indicator--e5a42e20-f273-42cb-bb3d-61e8a8ddda1e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac62fcfa-b6eb-408a-84de-9d957cb3a4d6", "sighting_of_ref": "indicator--1685cfb9-c377-4de0-845f-9c0b695e0054", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178f32ae-bca0-4c52-97bd-012dd727319c", "sighting_of_ref": "indicator--1685cfb9-c377-4de0-845f-9c0b695e0054", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93941136-5b42-46d9-8240-4a62dbe23118", "sighting_of_ref": "indicator--85063fd4-60f2-49cf-85b4-47599bd0a651", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f255de5-72a9-4b81-a25f-f19d10f49134", "sighting_of_ref": "indicator--472b89bb-e7b0-4b28-b964-9d350ad1c231", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a743ee6e-bece-4b01-ab2f-49d125e29f4e", "sighting_of_ref": "indicator--472b89bb-e7b0-4b28-b964-9d350ad1c231", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14aab28-b6d1-483d-a9a0-a1b9048cb5a4", "sighting_of_ref": "indicator--b286044e-244f-4ffa-b82d-738d37add39c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695e32c3-a803-4514-b745-e8703a28fc9c", "sighting_of_ref": "indicator--9ffcf78c-0012-48e3-a53f-174f4c762b0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc615aad-3b0c-46a2-bfbf-f220769af17e", "sighting_of_ref": "indicator--9ffcf78c-0012-48e3-a53f-174f4c762b0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bff7f75-fbf2-48ed-942c-4ac06c64ce43", "sighting_of_ref": "indicator--c8dedceb-a9f1-4bee-b84f-03e5fd087ec2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cd4b23-8b80-4106-9954-d8088fe02ece", "sighting_of_ref": "indicator--a19e3d1c-c459-4614-8e8d-9f970bc43104", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d651331a-abed-49bb-afc4-510d4b029898", "sighting_of_ref": "indicator--a19e3d1c-c459-4614-8e8d-9f970bc43104", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9aa20fc-4d48-4b85-bc2b-26e30757df47", "sighting_of_ref": "indicator--cdf148e0-e524-4e2f-94c6-471fe414557a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc858cc0-ddab-4e34-8563-3c6e01bf9b05", "sighting_of_ref": "indicator--eff450b4-0c4c-4f39-b446-d6586fe1ec38", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23a3375-bb01-49f9-9a2f-05a7b872d560", "sighting_of_ref": "indicator--eff450b4-0c4c-4f39-b446-d6586fe1ec38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82629c70-a7bd-447c-ba67-d3e172a53ffa", "sighting_of_ref": "indicator--a74618f7-3025-4ae1-b7c1-a0072eb3ebd1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24a8618-1066-4657-84e9-5663fd61936e", "sighting_of_ref": "indicator--dcdf7b81-3d49-4c10-8431-399b2dfedb88", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760b9438-1716-410f-b6b4-1d6af8329225", "sighting_of_ref": "indicator--58526c51-dd2d-4aa3-badf-43d7ff72ccd0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e898fd-6ffc-46f5-b990-0741f0e88c15", "sighting_of_ref": "indicator--05ed049a-bfac-4429-9ddf-dcb7b9fffccd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6f38ef-050a-4bbd-92f4-7593dc50beb7", "sighting_of_ref": "indicator--0d51774e-b684-4c77-8852-20b066b2c5c5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e3315f-b1f5-4c64-9849-72e8d3cebae8", "sighting_of_ref": "indicator--ec9e30fe-5787-470a-95d9-43e0d75a331c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dce8b6-8531-4b5a-b48d-4f1ca741406c", "sighting_of_ref": "indicator--78114004-46c4-4e56-b4fd-fbd886eac100", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18e3eb5-1907-4942-b9b8-b6281ee738d7", "sighting_of_ref": "indicator--78114004-46c4-4e56-b4fd-fbd886eac100", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d4a21c-a5fc-44aa-a575-7986885da2c5", "sighting_of_ref": "indicator--84c2c8ac-2bf4-42d2-8e17-a2b9f046af1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163294bf-64a7-4295-a159-a88f194b4cb4", "sighting_of_ref": "indicator--84c2c8ac-2bf4-42d2-8e17-a2b9f046af1f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093ffd3a-708e-4e04-aff9-1cf2986e5fdd", "sighting_of_ref": "indicator--3090c933-b212-4817-a1bd-ec7ac6448a0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2e1c5d-8941-456e-8ba3-ac90ea381abb", "sighting_of_ref": "indicator--3090c933-b212-4817-a1bd-ec7ac6448a0d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a30d0e-d6d0-46b5-b8eb-9f32d7d32b23", "sighting_of_ref": "indicator--c4eae85e-6c6a-4db0-9070-ce7d5ad50e0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0435ff56-c1ec-40de-a22c-ea17c152a3bd", "sighting_of_ref": "indicator--c4eae85e-6c6a-4db0-9070-ce7d5ad50e0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41052969-1186-4371-92bf-dec5aa54c8ed", "sighting_of_ref": "indicator--94c0053e-37fe-4d35-830c-7fb6356bc7af", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4859e56-601a-4843-8818-374a2c78c8d0", "sighting_of_ref": "indicator--94c0053e-37fe-4d35-830c-7fb6356bc7af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a17f3b-da89-4c92-9919-d27a42b302b3", "sighting_of_ref": "indicator--a6743821-9e94-4c17-9d71-135129663b0d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c55f43d-4def-43d7-826a-e5e12cb25c12", "sighting_of_ref": "indicator--fc124a06-0ae4-4751-a2a9-092be6a49fd4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958c291a-5f5a-4679-876b-8ba3be8611d7", "sighting_of_ref": "indicator--28a4948d-570f-4b10-b081-72f5b7c4be99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdee9bb-87ad-4b11-ac79-86cf6715faa9", "sighting_of_ref": "indicator--d84f4dcd-b49e-4c47-af85-4a70cb7567f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6fee67-3154-4079-98dc-829f0ef7c28c", "sighting_of_ref": "indicator--355ab068-3480-428a-b9b6-385effa85b9d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02b4422-cc1d-4184-9e63-45f62aecd80a", "sighting_of_ref": "indicator--2fd10331-b360-44fd-830c-72eda6a10319", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3b2a0e-7e53-4797-928a-5b05b1ab67fb", "sighting_of_ref": "indicator--2fd10331-b360-44fd-830c-72eda6a10319", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb3d3b9-ffe3-42bf-9bc4-f86d34055e9a", "sighting_of_ref": "indicator--c239ff05-033c-46d5-b20d-9f165cce23ba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e17aa8-1e09-41cf-b38f-0ac2e57d5d95", "sighting_of_ref": "indicator--c239ff05-033c-46d5-b20d-9f165cce23ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a8d7ad-9018-43c3-a9b2-0f2ae589bf8f", "sighting_of_ref": "indicator--77880ea0-8f1e-4db3-9eb1-31bb5fe61298", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90bb99f-fa42-4531-aac1-a230ac86bfba", "sighting_of_ref": "indicator--77880ea0-8f1e-4db3-9eb1-31bb5fe61298", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e76ae0-d787-4258-8663-347c26ba64c9", "sighting_of_ref": "indicator--4c385dc2-94fd-448c-a1cd-d52c309059ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d29065-46eb-47cb-a366-c499435eaeb3", "sighting_of_ref": "indicator--58c2c202-a505-4bc5-9a68-534f4d4d73dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8b7302-f2ea-421f-8aea-69d6846a5665", "sighting_of_ref": "indicator--686475f8-11a6-44dc-9fc4-fdd5e9931064", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae47cd2-4d34-45d1-a53c-6dfad7db9f4c", "sighting_of_ref": "indicator--686475f8-11a6-44dc-9fc4-fdd5e9931064", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bf0f90-cf9c-462c-af20-4800909845c1", "sighting_of_ref": "indicator--768318ad-ffc3-45e6-be8a-7c32bacb1ef0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bdeb6c-1cdc-45b0-a548-d3da2dc33457", "sighting_of_ref": "indicator--c3fd6d33-8d2a-49f4-a0bf-dfae52c33a94", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d814655-b3c6-4685-8d75-4e5e66196c30", "sighting_of_ref": "indicator--c3fd6d33-8d2a-49f4-a0bf-dfae52c33a94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0b6873-a718-4f38-a3f0-03cb0074e391", "sighting_of_ref": "indicator--0d0e382d-e002-4f2a-8d87-7c11dd0f1b2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848f5fcf-909a-47e2-bda0-532d6afd25c9", "sighting_of_ref": "indicator--0d0e382d-e002-4f2a-8d87-7c11dd0f1b2b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9752bb1c-1741-43c6-ad6a-972ebc9ae7c3", "sighting_of_ref": "indicator--2dd63f65-d4c8-460d-9da4-7c57d3f10577", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6d1b79-2246-4bd5-9422-96c455a11d7a", "sighting_of_ref": "indicator--2dd63f65-d4c8-460d-9da4-7c57d3f10577", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac010294-bc33-4917-bda9-468657d25acf", "sighting_of_ref": "indicator--1ff535e4-faf7-439a-843b-ee599b500649", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd664b46-9489-44f9-a7f2-04c749e36051", "sighting_of_ref": "indicator--1ff535e4-faf7-439a-843b-ee599b500649", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d18d49b-af5f-4ca9-bbe4-a65de1bf51b6", "sighting_of_ref": "indicator--a0d206d3-2af1-4e8f-801f-0adbe95e8754", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13a6a8f-c113-4c4c-91b5-bbe81ac25299", "sighting_of_ref": "indicator--a0d206d3-2af1-4e8f-801f-0adbe95e8754", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2fbc5c-789e-4ffe-835d-207916724958", "sighting_of_ref": "indicator--730effd8-e580-4175-9aa1-0571e8b582f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606fe5d4-bff6-4fe9-891a-566d3709e9f8", "sighting_of_ref": "indicator--730effd8-e580-4175-9aa1-0571e8b582f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4295afe7-999c-4b46-b478-f68b04c16260", "sighting_of_ref": "indicator--19f4a52f-f158-48aa-ba73-d2ad9af605e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb269fe-89f2-4e30-a6dc-35d750e63acb", "sighting_of_ref": "indicator--8ecf477d-aba7-44ee-8d3d-7e73a4b05f5a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a4f99a-bdb4-4225-b132-d1f59e8b407f", "sighting_of_ref": "indicator--8ecf477d-aba7-44ee-8d3d-7e73a4b05f5a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa37289-f6fc-4b4e-a633-ba59e617566a", "sighting_of_ref": "indicator--787f9b98-2b9f-4d9f-8590-2425b6a483f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bf878a-c2e7-401d-bc40-faba1e7e47b2", "sighting_of_ref": "indicator--787f9b98-2b9f-4d9f-8590-2425b6a483f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442f245d-79ae-4815-a7b1-ddbd86350166", "sighting_of_ref": "indicator--2fefb247-1459-4c12-b0d5-0df302488ed0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca16b412-5b9b-433b-bc85-69d7ba3cefcd", "sighting_of_ref": "indicator--2fefb247-1459-4c12-b0d5-0df302488ed0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be151e7-704c-4da4-a3e5-c6a9ccb708b2", "sighting_of_ref": "indicator--e89dc7a0-f751-48e8-aa74-29e8612484d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8af6d2-3fa3-4549-9006-98e2c63a8889", "sighting_of_ref": "indicator--e89dc7a0-f751-48e8-aa74-29e8612484d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38825a5-5836-4c55-9d83-d1523f8e0f05", "sighting_of_ref": "indicator--0ff810b3-4c94-4065-9edf-cd4e017f2990", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac64d98-3031-4a8a-8adf-5ef525c5f78e", "sighting_of_ref": "indicator--0ff810b3-4c94-4065-9edf-cd4e017f2990", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdd4c5a-85a1-4392-9d90-88c33163a3fa", "sighting_of_ref": "indicator--f107570a-a524-4864-9d35-a09eb969663e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0558d00f-fa59-43db-993a-d3c34aa70c07", "sighting_of_ref": "indicator--f107570a-a524-4864-9d35-a09eb969663e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a481f5a-1d5e-49d3-8eba-e20ebb2107ce", "sighting_of_ref": "indicator--2f89c7d6-3848-4602-8ee8-61e4733229b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e9ed37-8e59-400e-a8ab-f28657678171", "sighting_of_ref": "indicator--2f89c7d6-3848-4602-8ee8-61e4733229b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe7b4bd-6127-47f6-9d94-e408e3325ec6", "sighting_of_ref": "indicator--29c183e6-4e6e-4d71-b9fd-e51d81701e7f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be51de7-57f5-4c44-ac0d-4e6ecb0c5e9a", "sighting_of_ref": "indicator--29c183e6-4e6e-4d71-b9fd-e51d81701e7f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb465f1-a163-43c9-b643-be05049428b5", "sighting_of_ref": "indicator--bb9ec9c7-5c85-4d1f-a5ae-abe13db24140", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca886c8e-d60c-41af-8983-728b01ea03e6", "sighting_of_ref": "indicator--bb9ec9c7-5c85-4d1f-a5ae-abe13db24140", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60015e7-f820-46a7-a1ee-6fd0773cd06a", "sighting_of_ref": "indicator--f54f5e54-b62f-4a5d-84c0-655b40633239", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62c6c37-b8de-4752-b983-8a23fd591ca6", "sighting_of_ref": "indicator--04bd3e12-3e9b-4456-9202-11e12d5ec513", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36519cfc-8e6b-4f9a-b264-c64839944346", "sighting_of_ref": "indicator--04bd3e12-3e9b-4456-9202-11e12d5ec513", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b3f3d0-be07-4c87-8bb9-a0440f2c1b81", "sighting_of_ref": "indicator--3420052b-b30b-40ad-b0a7-617ffdd3499d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72a4871-9ee6-4c6a-952f-08992d154fcb", "sighting_of_ref": "indicator--3420052b-b30b-40ad-b0a7-617ffdd3499d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cd3246-dcae-4f66-814f-1ba91e1c7ab9", "sighting_of_ref": "indicator--34a9182c-be3b-496d-9364-0cff5d91c699", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe524164-59d7-41f6-b1f1-8e537d2fdef5", "sighting_of_ref": "indicator--21306d97-c17e-4e1c-9a4c-7a1feae20337", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5c81fc-2c68-4b6c-96d9-d1f329e4da3b", "sighting_of_ref": "indicator--21306d97-c17e-4e1c-9a4c-7a1feae20337", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f2e0f5-fffa-45d3-a0f5-8f385cdb545c", "sighting_of_ref": "indicator--5becd897-878e-4e45-890b-75cdd0702b72", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbdea9d-5581-45fe-a7b7-6cc18a982fd6", "sighting_of_ref": "indicator--c68d52bf-6ba0-48f1-bbc1-853d93e630eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c84214-3d20-421b-953f-3da2912fc691", "sighting_of_ref": "indicator--c68d52bf-6ba0-48f1-bbc1-853d93e630eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5ffb23-85c0-428f-9fda-5177c6ba9dbf", "sighting_of_ref": "indicator--02bdb317-d5a2-4d59-81e0-1a80aec0e317", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74539ea-ee73-441b-90bd-331509764ed6", "sighting_of_ref": "indicator--02bdb317-d5a2-4d59-81e0-1a80aec0e317", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e3ec82-c31f-430c-88b8-48c8a4db1765", "sighting_of_ref": "indicator--eb2ea0d7-b7c0-4b1b-b718-eb8fda03b6b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6091c4-6610-4173-a459-6c44bfb59a41", "sighting_of_ref": "indicator--eb2ea0d7-b7c0-4b1b-b718-eb8fda03b6b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c040d5-3dcb-40ad-88cd-679beb6ab9ee", "sighting_of_ref": "indicator--89a27a82-0ea1-4029-a384-ccfa63b2e4a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fa1855-6fcb-48b2-974c-0563bbd4d524", "sighting_of_ref": "indicator--89a27a82-0ea1-4029-a384-ccfa63b2e4a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2572dc7-cf56-4d77-b24c-2ff4a5a915d6", "sighting_of_ref": "indicator--932b1acc-403c-420d-96f1-6b94c5a94985", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f126e97-c2fd-4eeb-9b2f-83d0d8582dfb", "sighting_of_ref": "indicator--2dab50f7-c40f-456f-9993-e4751f6a058b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf52a96-958e-4d23-9468-8d4f942b2457", "sighting_of_ref": "indicator--2dab50f7-c40f-456f-9993-e4751f6a058b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec9a36b-ae16-4d7d-9512-7aae13a4ec32", "sighting_of_ref": "indicator--ebc3cc0f-44c9-41ab-9dec-ae7463a56938", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e696a307-8b7b-4c82-8989-9b94f2df1d9f", "sighting_of_ref": "indicator--4aa5c036-bfa3-4954-acdf-d3805420af22", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bca870-9252-4951-b1f1-f31e67f39d1e", "sighting_of_ref": "indicator--45d2dc76-e254-4487-8443-351d2659fe81", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b005c090-08f6-4f97-94a4-815bfe958b42", "sighting_of_ref": "indicator--45d2dc76-e254-4487-8443-351d2659fe81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafe9b55-2106-43b3-95e6-036f16e6aa51", "sighting_of_ref": "indicator--f9ed7af4-a943-4912-b395-ca4abf71075e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfb43d7-ee7e-4389-afa3-3b3571b4165c", "sighting_of_ref": "indicator--f9ed7af4-a943-4912-b395-ca4abf71075e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e92c39-a322-4e7a-a1df-e488a5c01e2a", "sighting_of_ref": "indicator--d2d97f2b-7e5d-4a6a-b43a-213610578b11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc6793e-fb45-4e3a-a830-b13fa9804cc5", "sighting_of_ref": "indicator--d2d97f2b-7e5d-4a6a-b43a-213610578b11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d984fbc-6a64-461e-8e95-2fdee184471d", "sighting_of_ref": "indicator--f58ed09e-fa3c-4d85-a955-d0820316cc0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1880f25-6606-4335-b415-811b1218550b", "sighting_of_ref": "indicator--73f1b1b0-60d3-479c-910c-58d5000e5726", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e50261-38c4-4bcb-b382-8f1dce969fd9", "sighting_of_ref": "indicator--73f1b1b0-60d3-479c-910c-58d5000e5726", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88497398-b483-4d3b-b41e-0c036e881a04", "sighting_of_ref": "indicator--e06bac7b-cef2-4d50-8836-f4b7e09f1f6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8962de-8b69-43a6-bdf0-c86024a23f13", "sighting_of_ref": "indicator--e06bac7b-cef2-4d50-8836-f4b7e09f1f6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea78b11-5123-4ecf-a614-df95017c9ccd", "sighting_of_ref": "indicator--4a0daeb4-9a34-4220-8d29-a0f7bc12960b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85344d8d-ff91-457e-9309-97aba52114c3", "sighting_of_ref": "indicator--4a0daeb4-9a34-4220-8d29-a0f7bc12960b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a66dcf3-406f-478e-94c6-81ef4c0ae2de", "sighting_of_ref": "indicator--0a05b726-6a5f-422e-9a10-72978e65e9c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91276f00-bb80-49db-9561-fd32b3c12dd7", "sighting_of_ref": "indicator--0a05b726-6a5f-422e-9a10-72978e65e9c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7268a4a6-bc57-407e-bc33-520c6e61234f", "sighting_of_ref": "indicator--84dec612-69a8-472a-8ff1-85b0bf3bda96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8651798-81bd-4bb1-aaa2-fd2ff78a5ec2", "sighting_of_ref": "indicator--84dec612-69a8-472a-8ff1-85b0bf3bda96", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b78602-3780-4358-8724-507cea53db16", "sighting_of_ref": "indicator--cbf5a65d-669a-4c1a-b197-1419f9f6cc79", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2824ba-f7ad-4ad4-8e43-f9872b3e1c7f", "sighting_of_ref": "indicator--49781210-72a0-4f51-b174-79cee5420b09", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef02d9e-1152-4174-b8f0-26bdf741a57f", "sighting_of_ref": "indicator--49781210-72a0-4f51-b174-79cee5420b09", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c455211-7443-43de-9e06-30c1255ee8e2", "sighting_of_ref": "indicator--ae02f1e1-30f2-40b0-bb72-c97f2ce34122", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6c1e78-e105-4f4d-ad92-084fc9a689af", "sighting_of_ref": "indicator--0116e970-22a2-4ff1-ad0b-2df2caccfcd9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66fb695-6d4d-4cfb-96fe-facae0748cf6", "sighting_of_ref": "indicator--3c804902-df84-44bb-8bcd-a5ebc9d3fa6d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44ac09d-0157-48d3-acd8-1ef141b8a1d2", "sighting_of_ref": "indicator--3c804902-df84-44bb-8bcd-a5ebc9d3fa6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb406ce-494a-4fa6-ac38-75ee09bad50a", "sighting_of_ref": "indicator--7c829708-52b5-49ab-a241-14054f1d496b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ee80ab-e136-4e56-8e0f-e934a7d065c7", "sighting_of_ref": "indicator--2c180f1b-8305-4949-b601-433b1c0437ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f617342-a5b3-43df-b8e7-f164ecdd946e", "sighting_of_ref": "indicator--2c180f1b-8305-4949-b601-433b1c0437ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da0af8a-c051-4787-8590-7ef27b598699", "sighting_of_ref": "indicator--557eca82-5a88-4f7f-ab77-e4b8e94a3ae0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30418098-0847-4d6c-bf40-5bcdcb20a282", "sighting_of_ref": "indicator--557eca82-5a88-4f7f-ab77-e4b8e94a3ae0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c15742-6e01-435d-a49a-78143668d496", "sighting_of_ref": "indicator--ea045d56-68b3-4a2e-9e40-78fcc882f40c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce022d75-47b7-435b-9f57-56e488077070", "sighting_of_ref": "indicator--f9cb7fc7-de17-421d-9d24-a0ee77e55ec7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ea6555-338a-4739-9760-7102cbc1aa73", "sighting_of_ref": "indicator--f9cb7fc7-de17-421d-9d24-a0ee77e55ec7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e918fc5-3308-40dd-bff1-4cb6fa7952be", "sighting_of_ref": "indicator--0f482e51-fe21-4bf5-818e-cd9a5642d7c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a36ffc-efea-43e5-ac91-72ff145bbc02", "sighting_of_ref": "indicator--0f482e51-fe21-4bf5-818e-cd9a5642d7c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2727806f-3e5e-4057-9d12-4520b954a386", "sighting_of_ref": "indicator--5642c762-ce60-45c5-84ef-ed8296800b29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135dc4e3-6fb9-4aba-a416-75a44dd3e6cc", "sighting_of_ref": "indicator--5642c762-ce60-45c5-84ef-ed8296800b29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255f429c-7a01-4a11-9f45-38f71d4f576c", "sighting_of_ref": "indicator--d0f65e86-27ca-4006-8a77-68b1fb4cf1f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317bf2f4-3eac-4f19-a326-bde627ec4d33", "sighting_of_ref": "indicator--d0f65e86-27ca-4006-8a77-68b1fb4cf1f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ced80a-828f-4f18-a346-64227fe78422", "sighting_of_ref": "indicator--9161b4f1-f69c-412b-ba9a-3e1c81a0b78d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd9c02-e3a1-4836-93be-fabbeab54b89", "sighting_of_ref": "indicator--9161b4f1-f69c-412b-ba9a-3e1c81a0b78d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36c14b9-a97b-411c-a8b4-402db8ac6b11", "sighting_of_ref": "indicator--bf92e2cc-c17c-4f60-80dd-08f90fb162b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a74a45e-7be9-4c3e-b6bb-73ebfa97820c", "sighting_of_ref": "indicator--bf92e2cc-c17c-4f60-80dd-08f90fb162b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed22bc26-ee5c-419b-968a-cd9524147b94", "sighting_of_ref": "indicator--d0671cbf-c3c1-48e8-b98f-6adfd78b8446", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58841a09-9f3d-4b17-8bca-ca5a9e96eb00", "sighting_of_ref": "indicator--d0671cbf-c3c1-48e8-b98f-6adfd78b8446", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fafa5c7-74b5-4a16-954f-c338ce50025e", "sighting_of_ref": "indicator--339f624e-65cf-49e7-b54c-b540f3c16395", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9468e1e3-5a2e-4667-9317-e843fade5670", "sighting_of_ref": "indicator--f63196d4-8244-41b9-82e8-909de22e9e0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751d2a16-7117-4ea3-9f10-40d8ec90e674", "sighting_of_ref": "indicator--f63196d4-8244-41b9-82e8-909de22e9e0d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca75dc72-1399-4fda-801d-cb3a1243d755", "sighting_of_ref": "indicator--0872f7ba-db95-4822-94d7-8a9f6d2cdee8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d41b519-8868-4d6d-be36-df8eff7083a3", "sighting_of_ref": "indicator--0872f7ba-db95-4822-94d7-8a9f6d2cdee8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a09ffc-4e5a-439c-9666-739c0514835e", "sighting_of_ref": "indicator--8a45f5c9-8003-4a70-8978-cd15d543ed2e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32575dc3-48fa-4ae4-ac2d-991c14ba8735", "sighting_of_ref": "indicator--8a45f5c9-8003-4a70-8978-cd15d543ed2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b6e04f-900b-4dc9-9feb-26f9b0437ded", "sighting_of_ref": "indicator--5fcc2c73-0edf-4a6e-b807-a63b32160b9b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcdfecf-0fc8-4d79-b571-1955814584da", "sighting_of_ref": "indicator--dd1c5f26-e4ae-493a-b7fb-51f279ca3c3e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7866bf0c-041f-4296-9ba2-61f19035c32c", "sighting_of_ref": "indicator--dd1c5f26-e4ae-493a-b7fb-51f279ca3c3e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f30c37-aa56-4818-b0f0-78b4bfac8fc3", "sighting_of_ref": "indicator--60ee2b85-7d26-45e3-9809-ec1acb8cabbe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf4688b-2f19-4c0e-a12e-6db71a874b07", "sighting_of_ref": "indicator--5737252c-d1c6-456a-85cd-b05e5ee67932", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105a7cd4-369c-4c43-b8b6-407f238fdd91", "sighting_of_ref": "indicator--0ea2fb8e-8f02-498a-a24f-a5265d8e5e83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ed1315-1b6d-4d43-9b9e-258baa4c00ef", "sighting_of_ref": "indicator--0ea2fb8e-8f02-498a-a24f-a5265d8e5e83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d2e58b-d7c8-429e-bf26-0ad65b8b09b5", "sighting_of_ref": "indicator--afd7160b-ab36-4d17-8e3d-b6ebc5e84c5b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5488024f-6bb5-4e67-a3cc-a807f629ee9a", "sighting_of_ref": "indicator--afd7160b-ab36-4d17-8e3d-b6ebc5e84c5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d39a54d-4771-4e5b-a5d4-642e79d8f8db", "sighting_of_ref": "indicator--32b70d39-3c57-48bf-a83f-9ff624af7e9e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5f1fe9-b2e7-44fb-a937-3eca7d9075fb", "sighting_of_ref": "indicator--32b70d39-3c57-48bf-a83f-9ff624af7e9e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed5baba-12fd-4dc5-97d0-fd5e29c5dad3", "sighting_of_ref": "indicator--a7391836-da7d-4718-964f-8bfbf66e58ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1347a1b2-8cee-4fcc-920f-47124b12b6ac", "sighting_of_ref": "indicator--1660e17c-b5b6-40cf-9644-649975adaa81", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbe070b-9a75-4628-97c4-5ba9ce78295a", "sighting_of_ref": "indicator--1660e17c-b5b6-40cf-9644-649975adaa81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38efb598-bc7a-4402-895d-6429b80212a7", "sighting_of_ref": "indicator--05b88cb7-d375-43c1-8ce8-a002d21ae846", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d470b8-8a31-4047-beab-c21e99d4b395", "sighting_of_ref": "indicator--05b88cb7-d375-43c1-8ce8-a002d21ae846", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3163d221-6cf9-4e7c-b864-78aea9db636a", "sighting_of_ref": "indicator--dbd44f32-f7a0-45ab-a781-d1e3700533ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b26318-7435-470f-85a3-8dc6057dd1dd", "sighting_of_ref": "indicator--dbd44f32-f7a0-45ab-a781-d1e3700533ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735fb883-cf71-4516-b875-ec01842c8c8f", "sighting_of_ref": "indicator--53ea983e-93c6-49dd-9121-a7601351a309", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2151c7-3802-436d-a221-61889f1a36d6", "sighting_of_ref": "indicator--53ea983e-93c6-49dd-9121-a7601351a309", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c74a528-e72e-488a-b4e1-5c60ea60867f", "sighting_of_ref": "indicator--b9689ce5-23aa-44fa-a5b5-9be0677c0ff1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f48caf-21e2-485c-aeb3-9aeb20669602", "sighting_of_ref": "indicator--b9689ce5-23aa-44fa-a5b5-9be0677c0ff1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d2ccdd-0c4c-4bf1-959c-be40d8b54a5c", "sighting_of_ref": "indicator--47c13749-8b5b-4db9-b741-fbf75fa4642f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dcb7ae-90fa-4fd2-a952-7ffd541b445d", "sighting_of_ref": "indicator--5a53560c-b898-4810-9a0c-4e258d5b2a49", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf95431-1539-4452-a45d-2c9a5533aad4", "sighting_of_ref": "indicator--5a53560c-b898-4810-9a0c-4e258d5b2a49", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a36327-1081-4754-a4d3-c8871fe70255", "sighting_of_ref": "indicator--6ed2da30-f68d-4634-9480-f9c3e8d04e5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a325fd-4ae0-4aa9-84ce-7efb38c165c0", "sighting_of_ref": "indicator--6ed2da30-f68d-4634-9480-f9c3e8d04e5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a632edf2-7ccf-4496-8632-768a4acc1fa7", "sighting_of_ref": "indicator--fb3bd450-0a67-4ae1-ad89-4067818ef4c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470b1339-f258-4a3b-95a9-96ca17fce0ab", "sighting_of_ref": "indicator--fb3bd450-0a67-4ae1-ad89-4067818ef4c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4624fe-f486-4751-a1b5-d10ee1ed4597", "sighting_of_ref": "indicator--7cbe9add-6244-438c-a948-8cab4a532e04", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59eff0e-2940-4c2c-806c-1db8d4db742c", "sighting_of_ref": "indicator--7cbe9add-6244-438c-a948-8cab4a532e04", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e191de48-fcd8-4ebd-99ba-d8acf66dc80c", "sighting_of_ref": "indicator--167e137d-3cd1-47d1-90fb-8fb723a4fbd4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed0eb23-5d1f-4746-80aa-87df82974fde", "sighting_of_ref": "indicator--167e137d-3cd1-47d1-90fb-8fb723a4fbd4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b262b885-351c-42dd-95b6-a06caf01aef8", "sighting_of_ref": "indicator--8f1a2a5c-bd78-41de-928c-e45709832fd0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa10dc8-9866-4d58-9a55-2f508fee95f5", "sighting_of_ref": "indicator--8f1a2a5c-bd78-41de-928c-e45709832fd0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0dcd390-98c7-4bba-af3a-7265890967d4", "sighting_of_ref": "indicator--235d3825-e3d9-4d60-80dd-2d6000d39cac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06347b66-aa58-4e8d-bf4e-ab0957bf32e8", "sighting_of_ref": "indicator--235d3825-e3d9-4d60-80dd-2d6000d39cac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c978947-3dc8-4eba-a2d5-c5f468090842", "sighting_of_ref": "indicator--b0478d67-6fe3-47f7-9225-086b8285641c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689995d7-e086-4ac7-8cc2-ed785a308fb5", "sighting_of_ref": "indicator--b0478d67-6fe3-47f7-9225-086b8285641c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05716ccb-839e-4c23-89a0-1fa623c6e31c", "sighting_of_ref": "indicator--e3c476d5-7caa-4f80-b289-316bbc7db115", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327f6118-9fda-458b-a9e1-98d9e160630d", "sighting_of_ref": "indicator--e3c476d5-7caa-4f80-b289-316bbc7db115", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9590b965-d24c-47aa-a6a5-397a4ab50bad", "sighting_of_ref": "indicator--7e91a5ee-f374-48e3-8964-45488ed57c67", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc14d5b-6977-4676-be91-faa4574cd47b", "sighting_of_ref": "indicator--7e91a5ee-f374-48e3-8964-45488ed57c67", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165362a8-98fe-496e-8ef5-8482ab65f5f4", "sighting_of_ref": "indicator--f8895471-94d5-4295-8611-54c187b83e28", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e413992b-1d5d-4ed9-add2-1eb13063216f", "sighting_of_ref": "indicator--f8895471-94d5-4295-8611-54c187b83e28", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77647dd4-ad81-4d8a-b7fe-dc11cc7962f6", "sighting_of_ref": "indicator--3bfa0a45-4567-4eef-9e1d-1060800999d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cdc499-383f-4f68-97df-0d3f11cd0078", "sighting_of_ref": "indicator--3bfa0a45-4567-4eef-9e1d-1060800999d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7147697-a06e-4d8f-a785-643a873e5af3", "sighting_of_ref": "indicator--9f175e7f-ce7f-4354-a9b8-e1a0e093e58b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cff12e-6c03-473c-8eda-168194addd68", "sighting_of_ref": "indicator--9f175e7f-ce7f-4354-a9b8-e1a0e093e58b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c179ea6-4dfc-4d6b-b899-35c903b23ef6", "sighting_of_ref": "indicator--ffcc1be3-e17a-42e4-8de7-6f9de52f5db1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ced8d4-cd14-45e2-a28e-d76d8229aec3", "sighting_of_ref": "indicator--ffcc1be3-e17a-42e4-8de7-6f9de52f5db1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e21550-14e9-431e-a5cc-19d788e161cb", "sighting_of_ref": "indicator--5a3b9ca9-c2e4-4067-8e40-ed7b089e79a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f849912d-a592-4be8-8182-361c0ec65bc7", "sighting_of_ref": "indicator--5a3b9ca9-c2e4-4067-8e40-ed7b089e79a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fbea70-a04d-4c7e-b9aa-f9da3194cd82", "sighting_of_ref": "indicator--59ef5ebc-a60b-490d-9978-32a619b59347", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344a58f8-7f4d-45a1-bf05-7f3d3ce2aac7", "sighting_of_ref": "indicator--59ef5ebc-a60b-490d-9978-32a619b59347", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f762edd-7d6b-4883-97dd-ebaefde17c4b", "sighting_of_ref": "indicator--a9104885-1650-4ffa-ab9a-221c0b4a76ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64c700b-b262-4919-8e88-80fc48c599bf", "sighting_of_ref": "indicator--a9104885-1650-4ffa-ab9a-221c0b4a76ce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3aa364-20a4-413b-8cf7-e3ac15daef6a", "sighting_of_ref": "indicator--1564e2f9-343e-4bbd-bd57-21b9d26d4bea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcdd110-a028-4119-9c0a-4e2082e5f18c", "sighting_of_ref": "indicator--1564e2f9-343e-4bbd-bd57-21b9d26d4bea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c39ac6-d43d-4033-a226-cbc5d1dcce19", "sighting_of_ref": "indicator--c1a96972-efa3-4b83-8c82-33bdff892e23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded434e1-f167-4462-99a8-36cf70c1465c", "sighting_of_ref": "indicator--c1a96972-efa3-4b83-8c82-33bdff892e23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebaa6fae-7b92-4094-b594-88a2c181b845", "sighting_of_ref": "indicator--c6bdf43e-4fed-47af-b767-86fab94a57e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7d6449-3ade-49fa-9788-e0cfdf5df94c", "sighting_of_ref": "indicator--a436d170-69e4-49e5-9bfa-b5de6660aa38", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d5a560-603c-4be4-821c-29f1bd205b34", "sighting_of_ref": "indicator--a436d170-69e4-49e5-9bfa-b5de6660aa38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66239051-a4b4-456a-9e67-e716fa295c8f", "sighting_of_ref": "indicator--ec137613-2243-4539-a11b-71c14ad80cc9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568c6350-df12-441b-b02a-77dd665d6e97", "sighting_of_ref": "indicator--ec137613-2243-4539-a11b-71c14ad80cc9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f49ba0-5dd2-4d8f-b694-4a010604ae9f", "sighting_of_ref": "indicator--edeb0607-caa8-4e05-ada9-231f6c7bfb4c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b997b154-cf0e-42a3-9d60-52ffacf47d63", "sighting_of_ref": "indicator--2e516292-6905-4cba-9078-ff80f075bade", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6430d9a-57c8-4e37-bcfc-fa705972d4e1", "sighting_of_ref": "indicator--342a2d61-1437-44ba-af06-4ae17404ddbd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7e60eb-f946-425b-9d5e-64fb6a8bac3c", "sighting_of_ref": "indicator--342a2d61-1437-44ba-af06-4ae17404ddbd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b4ca0c-2028-4270-beb5-af1efc682629", "sighting_of_ref": "indicator--5ca6415f-5f72-4ed0-9c8e-faea5bbde9e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b4b510-c632-4224-8624-a927c670e1fd", "sighting_of_ref": "indicator--5ca6415f-5f72-4ed0-9c8e-faea5bbde9e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f35a6a-6fbc-4dab-92fd-2327be4e1775", "sighting_of_ref": "indicator--5e748afc-d0c2-4b05-bdd9-dfd12b2772c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48fbfbb-3b3a-4c7d-8f42-018d9a4e212c", "sighting_of_ref": "indicator--5e748afc-d0c2-4b05-bdd9-dfd12b2772c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8622d1be-23c8-47d0-a882-6a9b384e5bf3", "sighting_of_ref": "indicator--1affc8fa-8396-48d6-aeec-5d4dc2b265d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0f9a71-a4c6-4764-afc9-334f4e5749e4", "sighting_of_ref": "indicator--1affc8fa-8396-48d6-aeec-5d4dc2b265d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db1b7a7-ec68-4936-94e6-07bd4847425b", "sighting_of_ref": "indicator--abcd2110-0f1e-45ae-a83d-f49d570d653e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17eada98-5d6a-48c2-9715-088323753bad", "sighting_of_ref": "indicator--abcd2110-0f1e-45ae-a83d-f49d570d653e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4bec23-b325-4327-afcc-f150766e7a16", "sighting_of_ref": "indicator--c3e766d8-e337-4fe9-8bc0-86fc5abe275e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e523143-d133-4117-adda-6adaf0279cf2", "sighting_of_ref": "indicator--c3e766d8-e337-4fe9-8bc0-86fc5abe275e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443ec56e-40d9-4b57-b385-24078ef66aed", "sighting_of_ref": "indicator--37b1b7c6-fa8c-49d5-9ac4-6f8e314d8c10", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501a21a9-01a2-42ed-b712-a6aeef7003ff", "sighting_of_ref": "indicator--37b1b7c6-fa8c-49d5-9ac4-6f8e314d8c10", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb28cce-fbfb-4dd9-8d8a-dd1d5226f424", "sighting_of_ref": "indicator--94781bc9-00ee-42c6-966c-a36ead9f08de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6396924a-7a63-4049-96b1-fdcd3066c452", "sighting_of_ref": "indicator--94781bc9-00ee-42c6-966c-a36ead9f08de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9e508b-3ac8-4090-887b-2373528cf5ec", "sighting_of_ref": "indicator--78b85702-0e2d-4ed8-b6d2-881d064d50dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d3a4be-3cec-4ef5-ae45-24023323bf59", "sighting_of_ref": "indicator--78b85702-0e2d-4ed8-b6d2-881d064d50dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82b0430-5bf6-4853-9ab7-d1cfc824ccfe", "sighting_of_ref": "indicator--687ee075-2d6d-4d69-a1ac-6050a29f8818", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09739e1b-fe20-4232-82f8-17e9e3ad4d9d", "sighting_of_ref": "indicator--a94e3a30-b21c-4619-9d6c-725ebf5af10d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94815db7-cee4-4324-9ce3-c9724539c8a1", "sighting_of_ref": "indicator--73679748-f881-42a0-9439-be1315904228", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fa1f5e-600e-410a-b1e9-21c7671f2326", "sighting_of_ref": "indicator--ecfe1984-7d68-4f3a-86c4-5a8f5c90ead5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d366ed-d134-49b8-bdea-6c85c33ffa50", "sighting_of_ref": "indicator--2b1103d1-dcc1-4dbd-82a3-b4a8ffa58632", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cd8ca7-472e-4faa-a95f-9982a2e34859", "sighting_of_ref": "indicator--06dd1ed1-283c-460b-8ac3-845f46506dc8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ccc185-046e-4ce0-afd4-4c8ecbe05f94", "sighting_of_ref": "indicator--06dd1ed1-283c-460b-8ac3-845f46506dc8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a39e18-35a6-4e02-a360-13cd4422cf28", "sighting_of_ref": "indicator--bf7a9349-82e8-42e5-9b8b-da9c9fd326ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2e53a4-f101-4d88-951f-478dd273af94", "sighting_of_ref": "indicator--bf7a9349-82e8-42e5-9b8b-da9c9fd326ea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd82ea5d-e4da-4ff8-9300-b50f285b31e2", "sighting_of_ref": "indicator--7b3997de-5f3f-44cb-a19c-5f23a02f98ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e144aaa9-bf76-4b9c-9c2b-a29c2c451a61", "sighting_of_ref": "indicator--bb47fd84-9fb9-4f32-97be-c44632824051", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e24b413-5fe4-42c8-a41c-507ba3611feb", "sighting_of_ref": "indicator--86b16aa9-5233-4ba1-91e1-b6ca46d53988", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8579c866-fcf5-42a1-ab70-49fa4ae52224", "sighting_of_ref": "indicator--92fc3f4e-7f03-420d-a853-050e229ba0b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b49c44a-a266-414c-8ef8-66c3b240bcf6", "sighting_of_ref": "indicator--92fc3f4e-7f03-420d-a853-050e229ba0b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dd2cf3-50b8-4de9-b216-38d5fb38746a", "sighting_of_ref": "indicator--b636a236-ed43-45c0-9d30-44677acdd8fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bf1cc3-74b6-412d-b5a0-102db0d556ef", "sighting_of_ref": "indicator--b636a236-ed43-45c0-9d30-44677acdd8fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7758bf6f-6f63-4d49-bb6d-e104dd1234a9", "sighting_of_ref": "indicator--5717e6d8-c0e3-4846-9077-55aa3acca01e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa56e221-6569-406a-8808-6dbf95706fab", "sighting_of_ref": "indicator--5717e6d8-c0e3-4846-9077-55aa3acca01e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200e9ef8-3942-435c-81d3-7a137461d0c8", "sighting_of_ref": "indicator--3762219b-855d-4c6e-97d9-bce0b146938f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f249c88-8789-417a-a46c-ed59187bd32b", "sighting_of_ref": "indicator--3762219b-855d-4c6e-97d9-bce0b146938f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf78963-27e0-4d39-9317-12699058337b", "sighting_of_ref": "indicator--0a86de7b-f80f-468e-97bd-3bca09905ec4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39579d82-205f-4414-9f70-95173a3f49f4", "sighting_of_ref": "indicator--0a86de7b-f80f-468e-97bd-3bca09905ec4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46f77e0-1244-45cb-912e-4de0f869b035", "sighting_of_ref": "indicator--dd9607b9-bb87-4f6e-91f0-4478d2c0beb0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980c776d-580a-423e-9d19-4a4ad0d1d5cf", "sighting_of_ref": "indicator--b7507e61-f2d7-4ce5-b49b-2a8fe6603014", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2b2c5a-34f3-4ba9-8fed-2d707d48119b", "sighting_of_ref": "indicator--b7507e61-f2d7-4ce5-b49b-2a8fe6603014", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdd3211-2ef6-49fb-9e90-e3c66cd7d7d4", "sighting_of_ref": "indicator--5ddeb2d5-f8ef-47c7-89b5-5b59c02fd365", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ee7154-548b-4679-ae54-7337297a806f", "sighting_of_ref": "indicator--5ddeb2d5-f8ef-47c7-89b5-5b59c02fd365", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f05ffa-fb95-484e-a58b-a7d45353a6a8", "sighting_of_ref": "indicator--3cb56e53-a760-4835-80e2-c49320cdf70a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cab6fc8-dac1-4767-8eae-f02f4792309d", "sighting_of_ref": "indicator--3cb56e53-a760-4835-80e2-c49320cdf70a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3d058b-9d80-4c6f-9023-83cb12339934", "sighting_of_ref": "indicator--67546a8c-ecd8-4c50-be9d-8ed90adece3a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd949d6b-2f1c-4537-89af-382f3a9d89da", "sighting_of_ref": "indicator--67546a8c-ecd8-4c50-be9d-8ed90adece3a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a699e9c-2856-47b5-a2bf-b238f01eb549", "sighting_of_ref": "indicator--02c266b1-b162-4636-ad67-75dc297c9ca0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344f60e8-47e9-43a8-bf42-082567e2cba4", "sighting_of_ref": "indicator--02c266b1-b162-4636-ad67-75dc297c9ca0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d6b899-7ab1-4fb6-9061-7dd0d8f0c7af", "sighting_of_ref": "indicator--0cbd715b-eb2a-419d-b769-a82da18dd3d5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04acae7d-2710-405a-a423-96ae0ecc6a81", "sighting_of_ref": "indicator--0cbd715b-eb2a-419d-b769-a82da18dd3d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4341bcc-299f-4fad-81b1-576766a696f4", "sighting_of_ref": "indicator--7a850c55-bfe8-4dab-b2f1-0c9d9dbccd32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ee15b5-be90-450e-a8ce-3eb1ea1a76e1", "sighting_of_ref": "indicator--7a850c55-bfe8-4dab-b2f1-0c9d9dbccd32", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f84586-c169-4a40-a1e3-254597aa350d", "sighting_of_ref": "indicator--664db4c9-238f-4607-ab3d-f3f8689c6c8d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daafbc4f-72ce-454e-a969-38c3f2afbff5", "sighting_of_ref": "indicator--664db4c9-238f-4607-ab3d-f3f8689c6c8d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d9ef43-4f60-4894-a4f8-d60a45cf97f7", "sighting_of_ref": "indicator--b7d8ffad-c849-458a-be49-f75410fbb499", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3d7e27-7276-4b44-914d-92a5b60fce00", "sighting_of_ref": "indicator--b7d8ffad-c849-458a-be49-f75410fbb499", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83e9e69-7685-467b-b6fd-228993f3e626", "sighting_of_ref": "indicator--c6f6beb5-45d9-4f75-b8e6-0cb02f5d703b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff8901c-2751-4156-b7a3-bb4387e06201", "sighting_of_ref": "indicator--5e1260f0-ae53-422a-8780-dd1eba81adbe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8421e4c2-1fa6-499e-a3f5-fc49ca18ae38", "sighting_of_ref": "indicator--98f1d274-d3fa-47cf-968e-5fd6645de492", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522be397-2775-4702-aa0b-342781c3a551", "sighting_of_ref": "indicator--98f1d274-d3fa-47cf-968e-5fd6645de492", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbeaecfc-7270-4b89-8166-6b77bd838eb0", "sighting_of_ref": "indicator--55acdd5a-547a-42aa-a625-2fc08a8bff01", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aca9748-16da-49b6-8fab-817375f7cbce", "sighting_of_ref": "indicator--44464356-efb2-4e51-bec4-6019cf0b7a32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3e0ffa-709f-49ec-b611-f7de589bb983", "sighting_of_ref": "indicator--44464356-efb2-4e51-bec4-6019cf0b7a32", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0706fe-359c-474a-bb00-19b872ca2cf3", "sighting_of_ref": "indicator--f29d54d4-351d-4135-968e-9477455239a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dc5c9f-f0e4-4419-a8bd-2dd7f64f9bd3", "sighting_of_ref": "indicator--f29d54d4-351d-4135-968e-9477455239a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34564b90-aaa1-4571-a141-704c89f8111d", "sighting_of_ref": "indicator--dd3b2d51-2563-4e18-908b-a80a9fc9030e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c12d2a-3e03-4bfa-8685-f80cb4090cba", "sighting_of_ref": "indicator--dd3b2d51-2563-4e18-908b-a80a9fc9030e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2bc08a-270c-47d6-9f31-04e41e74298c", "sighting_of_ref": "indicator--3d0c8e26-8203-4ace-8606-475fce366520", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd78cac8-5a81-4e0c-9543-2aaebd5ebd48", "sighting_of_ref": "indicator--3d0c8e26-8203-4ace-8606-475fce366520", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824c982b-f118-420d-929e-6e08ed00b3a8", "sighting_of_ref": "indicator--48f9c5ef-1a19-466e-9e11-7487773dfab5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2e891c-e561-4226-b1e0-036d7c9ba827", "sighting_of_ref": "indicator--0711d45f-c3cd-40ec-b733-977c5c316db3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff0cf6a-0ebc-4576-b4aa-74e373f0b9e6", "sighting_of_ref": "indicator--0711d45f-c3cd-40ec-b733-977c5c316db3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a7ef6b-8aa1-4766-a5ee-d50c0f32f00a", "sighting_of_ref": "indicator--d53b1241-9b16-4be4-bf17-e5a656cf66c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe4f9bd-1bc7-4856-b0e8-6fdccaecd402", "sighting_of_ref": "indicator--d53b1241-9b16-4be4-bf17-e5a656cf66c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740c341a-b937-4c98-a75e-55c97ef2865b", "sighting_of_ref": "indicator--e78a7848-4ea9-4520-b0df-50cebbd62927", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f00d38d-2145-4f3b-ab78-aa27fb34f483", "sighting_of_ref": "indicator--ed9d4980-559f-40ea-b4c9-af77330b791f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca7e888-b3d2-4c04-b82b-e0af0828edda", "sighting_of_ref": "indicator--e05e6329-1fe5-4de0-88e6-2f2df1acbb19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febeafc6-3330-43f9-81d0-be60120c73d8", "sighting_of_ref": "indicator--e05e6329-1fe5-4de0-88e6-2f2df1acbb19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cdb27e-8314-4f88-8b08-d17215daafeb", "sighting_of_ref": "indicator--aac27ffe-0573-4ce8-8f6b-e0ca14bb0b92", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0151ec-751f-4285-b3c4-4e172799f733", "sighting_of_ref": "indicator--aac27ffe-0573-4ce8-8f6b-e0ca14bb0b92", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986f1db1-6c86-48d5-bf22-37a5f4cd695d", "sighting_of_ref": "indicator--0776eb53-3711-4d99-8404-64dc03fd6a6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407c9030-beb2-48ed-b5bc-73776fb1268d", "sighting_of_ref": "indicator--0776eb53-3711-4d99-8404-64dc03fd6a6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01060afc-d2ea-4c65-9510-b487ddaf1e4b", "sighting_of_ref": "indicator--4fedc3ae-360a-42a3-b7ee-bf6322007232", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489b53d0-987e-4881-91df-0741c47fbdce", "sighting_of_ref": "indicator--4fedc3ae-360a-42a3-b7ee-bf6322007232", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53b4c67-e31f-4e74-a929-4c3a4cfcc0a7", "sighting_of_ref": "indicator--3259b204-095d-48dd-8782-a7107f92f509", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb776a85-1790-4ba7-9fa4-3539324be12a", "sighting_of_ref": "indicator--3259b204-095d-48dd-8782-a7107f92f509", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f5dc52-d33b-4869-94a5-5e3364e91500", "sighting_of_ref": "indicator--ad7faf89-396f-4928-a8fb-6590462ec14b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8db1ee2-8bb7-4dfe-8c2a-7407380eed74", "sighting_of_ref": "indicator--ad7faf89-396f-4928-a8fb-6590462ec14b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cc9fad-4598-4154-ab80-dee925b1267e", "sighting_of_ref": "indicator--104e7021-b150-46e1-bbf2-cf0b7a75c086", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de749cad-57c0-4315-a8b0-2ca6357a209f", "sighting_of_ref": "indicator--63da40f1-24b0-4267-bae1-44820745731c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467b0d14-a3a6-44b0-bb42-7af32871506d", "sighting_of_ref": "indicator--5800a618-1a8e-4811-815a-a25ea92c9198", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e253626-86ad-471f-89e5-7d8228fc1502", "sighting_of_ref": "indicator--db8659b6-e305-4ec5-8994-d8fca9997064", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c217c183-f583-4d73-a3ca-6770f9971d00", "sighting_of_ref": "indicator--e609c370-4d02-431b-83ec-84eca2f1742f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbcaa8e-86f7-4202-89f8-d5bc23a474f2", "sighting_of_ref": "indicator--e609c370-4d02-431b-83ec-84eca2f1742f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090e511b-3be4-4bf2-b6b6-38020dc55824", "sighting_of_ref": "indicator--dcaeee1b-6563-48f2-a9a3-b889cde36310", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1da80d6-eab3-4352-84b5-b6eb4d32b5ef", "sighting_of_ref": "indicator--a5c34902-4935-4349-b6fb-8c5e850eedad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e5351b-4147-4bec-b959-ae6fe81795b6", "sighting_of_ref": "indicator--a5c34902-4935-4349-b6fb-8c5e850eedad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1851b9bc-b117-456d-b698-36f995966fd9", "sighting_of_ref": "indicator--9768d6d8-e683-4dad-b8d3-eda759324e9d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d56a049-c0fd-4988-950e-6ee7308b21b7", "sighting_of_ref": "indicator--9768d6d8-e683-4dad-b8d3-eda759324e9d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d968cfc-67e7-4af9-9183-668e4f701c79", "sighting_of_ref": "indicator--95f74795-b824-4b26-a0f5-6b02ba116a09", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f5e25f-64c6-49be-afe7-133f15233be7", "sighting_of_ref": "indicator--95f74795-b824-4b26-a0f5-6b02ba116a09", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28085a0-fc12-482b-a3b6-69b442ad5c41", "sighting_of_ref": "indicator--5c6a8875-2d05-401e-bc5a-6c94a10643ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfeff56-f675-47da-9b4b-ffec19756993", "sighting_of_ref": "indicator--5c6a8875-2d05-401e-bc5a-6c94a10643ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c0651e-6f39-4b23-acb5-47f3df147037", "sighting_of_ref": "indicator--7dac4231-0203-4b80-94b2-da75cb5b022f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4107f7f-189d-4059-b598-55a5a76e101c", "sighting_of_ref": "indicator--7dac4231-0203-4b80-94b2-da75cb5b022f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9457718-283e-4cb8-91c3-d763e89728e0", "sighting_of_ref": "indicator--3ece29d0-da77-4746-820a-0cd96dec33b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ffc0d8-8fe0-4d1d-a97a-73ae74876206", "sighting_of_ref": "indicator--3ece29d0-da77-4746-820a-0cd96dec33b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d31b9a-25eb-4322-8ff8-fa82297d9b00", "sighting_of_ref": "indicator--5541ef00-5508-43ad-bc38-b6d62aab3a99", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab53e265-55eb-4124-b2d3-e92a5080c377", "sighting_of_ref": "indicator--11e1a6fb-eef8-4e2c-a1cd-8a8058e0affe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9418ad38-5239-4b3e-a0d0-0aedfdaad8ea", "sighting_of_ref": "indicator--3ad656e2-b888-4727-9c48-eebaba026aa9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e11462-15b3-4af6-9258-5d591409750a", "sighting_of_ref": "indicator--2c81df57-3a78-47b1-b502-47b10e911e8a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e438510c-a5a4-4416-86ee-f697bb2437b2", "sighting_of_ref": "indicator--2c81df57-3a78-47b1-b502-47b10e911e8a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc174e4-a0c6-406e-a343-2a7dd756bcc8", "sighting_of_ref": "indicator--777d14b1-518c-4a6b-a2e7-441a739d7ada", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fdf502-066a-4c49-99f5-f08359bc373d", "sighting_of_ref": "indicator--777d14b1-518c-4a6b-a2e7-441a739d7ada", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177ecb18-55f8-4fb9-a82e-5db7872cd2f2", "sighting_of_ref": "indicator--a9029957-fea8-4841-b135-05baedb4c861", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2525606a-2c81-49d0-9739-4582c6c46109", "sighting_of_ref": "indicator--a9029957-fea8-4841-b135-05baedb4c861", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5252d283-3a3e-4f26-9a4c-00477852ca22", "sighting_of_ref": "indicator--49eb3b24-a8cd-4ac5-a980-19b844847d04", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4715b6-e6cd-4082-b89f-ded129dec673", "sighting_of_ref": "indicator--49eb3b24-a8cd-4ac5-a980-19b844847d04", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8db9ff-bdc4-4767-a7b7-5e18ab83b4d3", "sighting_of_ref": "indicator--871ab1d3-ade7-4cda-869e-1a93b98bfd8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7880c8a5-25da-46c6-9c45-08060a8a8932", "sighting_of_ref": "indicator--54f908c1-bde7-43a7-81c7-c6ac72743465", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d11c30b-fab7-4a2d-b618-ed994d9c8cee", "sighting_of_ref": "indicator--54f908c1-bde7-43a7-81c7-c6ac72743465", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc5ffdb-1211-4611-a5f2-61f8394b0f56", "sighting_of_ref": "indicator--c1dffa20-3edd-4707-bec8-4da24c5e2ab7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723f1c8a-900d-4da8-a230-dc3e150477a2", "sighting_of_ref": "indicator--c1dffa20-3edd-4707-bec8-4da24c5e2ab7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9072374-78cf-4297-abef-609106a7638a", "sighting_of_ref": "indicator--05d149a5-4c14-486a-8403-34ba4cb66c51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e427fe9-b5d1-4a9a-a996-78ada4acfd86", "sighting_of_ref": "indicator--eb0aa2a7-bcff-4827-8da6-e35dc6717345", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401daa53-9d76-4332-8450-708deea4f539", "sighting_of_ref": "indicator--7217ad77-0a7b-4538-a000-043e96b85136", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6074881c-dfab-4ce4-bcf5-21c112961af7", "sighting_of_ref": "indicator--7217ad77-0a7b-4538-a000-043e96b85136", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354c02e7-c2d0-4f5a-811f-e21fe9bb2efb", "sighting_of_ref": "indicator--693fe8dc-0120-43f8-9585-eb585fc36117", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b92274-0512-4237-bd01-f8f0b968554e", "sighting_of_ref": "indicator--fd58bd54-c855-4834-9348-bf0a967ef8e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76266dee-7f40-4f80-bc76-fdf8d74c282a", "sighting_of_ref": "indicator--fd58bd54-c855-4834-9348-bf0a967ef8e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e9083e-e389-4989-b18e-d2ee7acc4b66", "sighting_of_ref": "indicator--05bef5ed-73ca-4a24-b9a6-ef6c7a2faaae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f3e5cf-5982-4d55-b571-ca722339d0a2", "sighting_of_ref": "indicator--05bef5ed-73ca-4a24-b9a6-ef6c7a2faaae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855bad1f-27b9-4448-b5dd-22fe0d9382ab", "sighting_of_ref": "indicator--b5f2397e-f5ab-405d-a237-1308aa8f046e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e145dfdb-9aa0-431f-8a6a-2a0e6c7c22cd", "sighting_of_ref": "indicator--8fe89aed-6342-47b3-a006-cf0eb5b34ace", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63b0aa3-c5c2-4eb5-9f32-469ffda1bbd6", "sighting_of_ref": "indicator--11023fb6-7669-4302-af51-a83d4ee5f7a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c78261-6ce6-45c2-b1ea-6bf21000f477", "sighting_of_ref": "indicator--9bb740e0-1ab1-437d-99ab-3c885b5f3017", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb399ab-a374-4458-a72f-3413b2796078", "sighting_of_ref": "indicator--9bb740e0-1ab1-437d-99ab-3c885b5f3017", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93a2ac7-e881-4448-9005-2270479fb7e7", "sighting_of_ref": "indicator--ebc835d7-a9d8-447d-b078-8c375499350b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9ddd5e-d264-40cb-9741-0074e971480b", "sighting_of_ref": "indicator--ebc835d7-a9d8-447d-b078-8c375499350b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79bbafd-5444-49a5-bd13-42cdcae732d0", "sighting_of_ref": "indicator--a46b0b6b-c5c2-4fac-8c54-c2a1100d774b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8228b872-6a79-45ef-862e-4b08a61c62ab", "sighting_of_ref": "indicator--822e99c9-e250-4cc5-8890-b7a6148fe37a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9a9a68-55cf-4cb0-b6f2-f83009d37636", "sighting_of_ref": "indicator--822e99c9-e250-4cc5-8890-b7a6148fe37a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dab5db2-c96c-4d10-9c9c-ddd515e9b574", "sighting_of_ref": "indicator--3a8700d0-b245-4dc1-8e14-62914055ab7a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb0d9ea-4095-48d2-a324-538ffd8791fa", "sighting_of_ref": "indicator--3a8700d0-b245-4dc1-8e14-62914055ab7a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a8ab73-9e3f-48d1-bdb8-6efb7ab03c5f", "sighting_of_ref": "indicator--d70fe2f1-b3fb-47ab-9fcd-2f90ad9d7cc7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c72fea-31d0-4e29-8fc6-98a7a7d9a8ca", "sighting_of_ref": "indicator--d70fe2f1-b3fb-47ab-9fcd-2f90ad9d7cc7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ee5824-5c22-436b-9ad5-9c4f89ff20ae", "sighting_of_ref": "indicator--197c1ed8-48c7-4709-8635-90915e4cf835", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a21d31-4bda-4efa-8e97-8d4a89615c75", "sighting_of_ref": "indicator--197c1ed8-48c7-4709-8635-90915e4cf835", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4823f396-ef89-4c56-ba47-12f06bdc0ae0", "sighting_of_ref": "indicator--60a35c8a-93c8-4a30-9681-0558cb1b2ee0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fa5b12-be81-4e77-8ff3-7d0a6fe21378", "sighting_of_ref": "indicator--60a35c8a-93c8-4a30-9681-0558cb1b2ee0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4eb9cbc-7715-4df2-aa0c-686caf886ef7", "sighting_of_ref": "indicator--55fd70a3-7024-4b22-8a0e-7cd715146b3a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae715203-dbb0-41f1-a685-4bcb72e2df6e", "sighting_of_ref": "indicator--55fd70a3-7024-4b22-8a0e-7cd715146b3a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac94259-7390-422f-bda1-7d4d148004c2", "sighting_of_ref": "indicator--b7baaf9c-e967-452a-b9ef-424f34ee256f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b76ac88-6b90-47e8-a3d8-c07150d1f950", "sighting_of_ref": "indicator--b7baaf9c-e967-452a-b9ef-424f34ee256f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a8a019-eb4b-406f-a674-ad1c70bcdcec", "sighting_of_ref": "indicator--b3efc31b-f81e-4eb6-ad94-ed6252ffc19f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df44659f-93e1-4a8e-a140-c00ddea9112d", "sighting_of_ref": "indicator--261a806c-0944-4e8e-854c-ba06aba8a38b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3040e0d-ade1-4221-9863-845a6491afdf", "sighting_of_ref": "indicator--261a806c-0944-4e8e-854c-ba06aba8a38b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccbdd22-e073-4985-91a7-108ad887d48d", "sighting_of_ref": "indicator--3527b0d5-969e-4cfa-b6f3-3de31fe74c34", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be374a9c-d570-4cd9-bef6-d759d5159e3e", "sighting_of_ref": "indicator--3527b0d5-969e-4cfa-b6f3-3de31fe74c34", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9e698a-2b5b-42dc-9c3f-8f5ce0356705", "sighting_of_ref": "indicator--6fe0a15c-8735-4e14-a3dc-149b2fd35ec9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fead8b-0ff7-4132-b58c-ca41dabd3517", "sighting_of_ref": "indicator--13946dbb-a2d5-435e-a299-2ed0bfcac9c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83250502-4329-4201-9681-1949f3ad0521", "sighting_of_ref": "indicator--13946dbb-a2d5-435e-a299-2ed0bfcac9c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd32d11-9eb1-41e6-9011-cabf3a5a0352", "sighting_of_ref": "indicator--22ad889e-f34e-46dc-9125-4a24f3e83534", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b74a53-fb75-4c93-9a79-69d584a3a22b", "sighting_of_ref": "indicator--22ad889e-f34e-46dc-9125-4a24f3e83534", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec17bb9-dc47-42c9-abcc-3c74cc7b7aef", "sighting_of_ref": "indicator--bc542196-63cb-4eda-b7e4-2c1ecd46b8eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7a70b6-17ce-4ab8-b171-fd45437df5b8", "sighting_of_ref": "indicator--e32cc1d4-c769-4ea9-95a8-a9406ded885a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6452ccaf-41ce-49f4-a93a-63733acd78c3", "sighting_of_ref": "indicator--e32cc1d4-c769-4ea9-95a8-a9406ded885a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ecb522-9510-4a31-88ac-2cb34e837410", "sighting_of_ref": "indicator--c384bdbe-bb30-4dd5-ab65-0ddb83c88b6d", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26f2f58-9d7d-4585-9cfd-abf39e0274a8", "sighting_of_ref": "indicator--2e18f3ce-118c-4034-82bd-2d03a2d21089", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfc5da8-dfd9-48b1-9a5c-05fe35ba6f17", "sighting_of_ref": "indicator--647e1500-b93b-42a8-8118-93c578090e1b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ae1547-ceb7-49e3-a86e-75526e5816e6", "sighting_of_ref": "indicator--bd829219-2678-4e26-a848-49a94462cdcf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18a7d81-2a4b-4e64-98e6-7c89992a95ce", "sighting_of_ref": "indicator--a045674f-7811-4318-a77a-38cd677f3b3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b958cf80-0246-4c4c-9df9-6cc292bb62f6", "sighting_of_ref": "indicator--a045674f-7811-4318-a77a-38cd677f3b3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b600ab9-4eab-4011-b8a4-4591f1948fcd", "sighting_of_ref": "indicator--ce18c4bb-9c77-4034-95ac-c49b44ffeb48", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec07c90a-b5b3-4521-bd95-31316667dd09", "sighting_of_ref": "indicator--ca5ec2bc-aed2-4ed6-88a1-6187d0faae86", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5ff7d7-8e8f-47b4-9645-e5b936b31f6b", "sighting_of_ref": "indicator--6f3687d1-a18b-4940-8e08-414064d6dedf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a3e55a-b97f-4f48-b696-ffc220f4d86f", "sighting_of_ref": "indicator--6c09f531-627f-476e-bb6c-361f6b1739ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44aefce-6312-40d9-b38c-0a42d55c82ed", "sighting_of_ref": "indicator--ae123dc5-cb0d-4265-8524-c3413e50da04", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cd0cd2-1eb8-4bb1-a11a-69a8f09b35a8", "sighting_of_ref": "indicator--bf33471a-9740-41ac-9ada-02e61b41b16b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62621677-957d-4a0d-96a3-862815003ec9", "sighting_of_ref": "indicator--bf33471a-9740-41ac-9ada-02e61b41b16b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b176e7a-50f6-4a2d-bcad-beb7795cec43", "sighting_of_ref": "indicator--e5ad5551-1b0f-4a74-ae64-e90836274720", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91372680-4ed1-476e-8e61-71e95fda001d", "sighting_of_ref": "indicator--101bc869-86d8-49f1-b154-5ae881475157", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274ece8c-e9c6-4bf3-80d6-559c90f82eb7", "sighting_of_ref": "indicator--101bc869-86d8-49f1-b154-5ae881475157", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e834a1cc-1233-44ee-89a5-c55ef528bde7", "sighting_of_ref": "indicator--355d6112-231f-47c9-80ca-5ebd7d492a33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06d8861-394e-4a30-937a-01a6d5a95f40", "sighting_of_ref": "indicator--14954541-b805-4176-823b-7776e47749fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48dea5f-0942-40e4-a9db-478bbfd96b3f", "sighting_of_ref": "indicator--89e32398-41ce-4253-a969-51ced5f89ed4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdfec94-8fbb-4be7-8645-aa830a089079", "sighting_of_ref": "indicator--f77073b5-3fe2-4ce6-92f7-6c9486e6c1fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad45b36-b4a2-4d26-93f9-a7cbb4065ba4", "sighting_of_ref": "indicator--749eedc2-1ba1-408b-b618-abc928589c18", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f69220f-87fe-4373-ae44-dadb41ee819d", "sighting_of_ref": "indicator--749eedc2-1ba1-408b-b618-abc928589c18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8453bc3-2e00-41ce-8ed7-d258448fe27f", "sighting_of_ref": "indicator--4b09dc63-9a3d-4885-801d-4bff3b162f31", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673608a2-e83c-4573-8683-16adc77303b7", "sighting_of_ref": "indicator--4b09dc63-9a3d-4885-801d-4bff3b162f31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b83b9b3-728e-4326-8777-e58d52a2c1cb", "sighting_of_ref": "indicator--a8b4d9f9-ba26-49e2-9ad2-ed7342beb42e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fbe43a-48c4-43d0-8ef3-806d6e4dfc5d", "sighting_of_ref": "indicator--a8b4d9f9-ba26-49e2-9ad2-ed7342beb42e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c4c16a-e762-48de-afeb-a9213a47e788", "sighting_of_ref": "indicator--85bdd820-483c-4cbd-8c8b-a1fd92afedad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f84eef-23a6-4dca-8fe3-c52e6e236f58", "sighting_of_ref": "indicator--9ba2d69b-563e-40ba-9fde-100317484fc6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0fc8b3-5778-4c22-bd13-e71921352cfb", "sighting_of_ref": "indicator--ca897c73-078d-4734-b41c-dec02660569f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded93e1a-dca4-4ec2-b09c-d06b25a777f4", "sighting_of_ref": "indicator--ca897c73-078d-4734-b41c-dec02660569f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47b7267-5caf-4792-b63f-ee3db81e1479", "sighting_of_ref": "indicator--e1db57c7-e3cd-4cf9-a812-7d90d0639d3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b241f00-e9d0-48dc-abc9-956f1e18cb53", "sighting_of_ref": "indicator--6d6ea859-7d82-4d6c-930a-399f246d225f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1146a123-8fbc-4433-a848-5e3431981bf7", "sighting_of_ref": "indicator--953f5a69-fe7e-4585-b7f1-809921e66963", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35539098-eb80-4a49-9d4b-792b38c90199", "sighting_of_ref": "indicator--94ebda9b-bf7a-46de-95bd-8bc581f3e4d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8031cb82-f3e7-488d-ab59-7cd34778824f", "sighting_of_ref": "indicator--eac6b784-90d3-4214-bc14-e46595f0722c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fedd1b-3053-4ed9-ac5a-73d3a34467d1", "sighting_of_ref": "indicator--11085c73-c600-4bd7-b15d-f490ec3a5441", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d674c6-802a-437d-8ba1-544666882936", "sighting_of_ref": "indicator--fc2c36c7-54e2-4a99-a7be-9dd57d52694c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06da3e12-c59c-42d3-b26b-0aa2e351e63b", "sighting_of_ref": "indicator--cf8e3f57-8864-48a2-95b7-00144ada4dac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff7175e-8490-4a3a-8978-f4697e7dcde5", "sighting_of_ref": "indicator--a31551b8-2b06-4cf5-8a23-34b7287e1978", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6f87dd-dacf-4e57-a234-d13fe9bc1312", "sighting_of_ref": "indicator--a43c5fb2-927f-4f21-bf9d-d2bb2bd402f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda781c3-1de6-467a-a599-838150a241e9", "sighting_of_ref": "indicator--6ff83890-3bce-48cf-be37-1814ea7e0015", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e951b80b-1863-403b-bac9-d44c308eae8c", "sighting_of_ref": "indicator--0088ba3e-9eb9-4c9d-a467-db31454467ea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936dd001-de97-4f22-b5ac-e9e8eb9d4bcd", "sighting_of_ref": "indicator--56a67ca2-2abb-495c-a9fd-ac1f1fd3d119", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba138349-8287-4798-8700-4c5f833e4773", "sighting_of_ref": "indicator--56a67ca2-2abb-495c-a9fd-ac1f1fd3d119", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1c42d4-b245-4608-ab70-f54abfde74ed", "sighting_of_ref": "indicator--6a33981f-7dae-4d27-a2b3-f0b59a8e1f8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76817a65-6ac7-4f11-9eeb-f15b8e6ff5f3", "sighting_of_ref": "indicator--6a33981f-7dae-4d27-a2b3-f0b59a8e1f8f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0e7b89-7525-46ef-914d-c8f500b5845f", "sighting_of_ref": "indicator--be0d913d-b4b6-429b-999e-8a8bf785a6e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600edd90-1285-4cf7-8e3b-400426952dfd", "sighting_of_ref": "indicator--be0d913d-b4b6-429b-999e-8a8bf785a6e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9e3766-f4f3-4f31-9ffb-6375abf8797d", "sighting_of_ref": "indicator--1ad967cd-9116-47c4-8ca8-c4753d778f88", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e3e7df-fe75-421d-9b09-f2e24d18f7dd", "sighting_of_ref": "indicator--7e54d4e0-70cd-4b3a-a4f5-ea4c94f12dc2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24fc84f-784b-4578-9381-e9d1407dc8c8", "sighting_of_ref": "indicator--43eac7d2-db55-410c-bb46-f25b175895e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6070682c-3c9d-4999-beea-fe83b2d346f6", "sighting_of_ref": "indicator--9c391a47-82c4-4280-8a3d-4b159adf41c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49a1e5e-0168-4fba-8810-3d15a75419db", "sighting_of_ref": "indicator--8c65c6af-4469-4813-8dd8-7d4d9b8b5a39", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01894fd-e31d-471b-b6d9-3f5ad0e05a24", "sighting_of_ref": "indicator--6ca91afa-5fe6-4d66-92e0-80200dec373c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165142c0-f24f-4352-a52d-4e4b7ae966ca", "sighting_of_ref": "indicator--2a6e4e45-070e-4767-897c-d4dd7a96d7c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d100ded-f135-484a-9cd1-b51f11d0b94b", "sighting_of_ref": "indicator--2a6e4e45-070e-4767-897c-d4dd7a96d7c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ff7673-9cac-425a-8ce2-7181ea7e4cc8", "sighting_of_ref": "indicator--ee9eb32d-ce21-4840-8222-22e8b3e72216", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06a62cf-e6d2-4a50-bb3a-0585598ef6c4", "sighting_of_ref": "indicator--ee9eb32d-ce21-4840-8222-22e8b3e72216", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc9ef7a-d882-4107-a0bc-c33d96460a7f", "sighting_of_ref": "indicator--341374fe-bab7-4740-8d84-62d364b69167", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72507618-826c-412d-98ab-26abeeae455e", "sighting_of_ref": "indicator--25606edd-ccca-4e3e-912c-5d785ac3f435", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb6db80-033c-4e44-b3a5-44e9230110c0", "sighting_of_ref": "indicator--5b13ce51-dc6e-4c4c-8e7a-8aa46dc21f89", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca2156b-a87d-4f73-8590-5c8d3047cb39", "sighting_of_ref": "indicator--5b13ce51-dc6e-4c4c-8e7a-8aa46dc21f89", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3212f82-d941-44fa-96f6-e691b1a7525a", "sighting_of_ref": "indicator--235ebf9d-9752-4fe0-917a-6be7fad03f10", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c23df2-219f-4146-9af1-ffdba8b706b6", "sighting_of_ref": "indicator--2379b880-eb35-4c00-bc7c-9d0f7001289b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d92f0e-9989-4d30-ad1b-f9ba77a91e78", "sighting_of_ref": "indicator--2379b880-eb35-4c00-bc7c-9d0f7001289b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04024230-eae9-4dc1-b0c0-1f54746bdc23", "sighting_of_ref": "indicator--1e9a7912-e2d1-4769-b7e0-cc51059cf6f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a335a9d9-0503-4025-8b74-b986496bfebb", "sighting_of_ref": "indicator--3ecd3dd8-59aa-400d-9d36-2a8674f117e5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470bf8ae-b760-48b6-b558-c96d7867cc28", "sighting_of_ref": "indicator--3ecd3dd8-59aa-400d-9d36-2a8674f117e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848dc882-1f27-4401-91c6-7c24e8780d0e", "sighting_of_ref": "indicator--99ea0f71-590f-4849-afbc-5e8530f514d7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04013ff5-186a-4e2a-8d54-2035abf381d8", "sighting_of_ref": "indicator--99ea0f71-590f-4849-afbc-5e8530f514d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62886c3b-5006-4177-b941-28ff45f693d5", "sighting_of_ref": "indicator--eed39265-fe7f-4906-b8ff-e15e271ebded", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6974b842-607d-4e29-85c5-5c812034ad10", "sighting_of_ref": "indicator--cbda03a8-99df-47cd-84fa-c87a1f0572d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dceb22-bc76-4648-a547-d317ae62a09a", "sighting_of_ref": "indicator--133c754a-49e7-4ff2-8350-51cd831db716", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d05ac0-36b8-4217-9626-8f6a09ebc22a", "sighting_of_ref": "indicator--133c754a-49e7-4ff2-8350-51cd831db716", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158b0148-e46d-4dcd-9dd6-6d46b6ef4843", "sighting_of_ref": "indicator--3dcf04ef-3bfc-4506-a44c-a012f9426bb7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986a598a-4566-4cb3-acae-84dbeb8017e4", "sighting_of_ref": "indicator--1030fdea-1603-4334-8517-48eeb608eafe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7d0340-1d2b-42d7-8a23-ea2030a4c05e", "sighting_of_ref": "indicator--1030fdea-1603-4334-8517-48eeb608eafe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a269723-fbe3-4b00-8cfe-ed429edede72", "sighting_of_ref": "indicator--70e6751f-a794-4ddf-8b76-5e02a35f9fcb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aba80c7-3092-4d0e-bd24-030c6ff01a7e", "sighting_of_ref": "indicator--71ae4352-b257-44c9-b436-754f8a28ee06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d9ec42-2edc-4c5d-9c2f-8e42d7673e23", "sighting_of_ref": "indicator--3efbb5d2-6304-4516-9452-8994da641861", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c605ff-3612-419a-a54a-80f46bec8d9a", "sighting_of_ref": "indicator--1dfae050-bc0d-4b39-a547-3432cd91293f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afba8fe-821b-4684-ac00-99995751f085", "sighting_of_ref": "indicator--454e9300-09de-47c8-81c3-b4b7b408a83a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b8dc37-7f7b-4c12-9ce2-37ac7329b526", "sighting_of_ref": "indicator--454e9300-09de-47c8-81c3-b4b7b408a83a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362827b5-e310-4fd2-a3b1-e7c54ca3dd32", "sighting_of_ref": "indicator--0ac22405-7651-4b4f-a9ad-9c6cf2aec7c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519848a4-1040-4a75-8700-e129a9a90fed", "sighting_of_ref": "indicator--6d2fecd0-6b3f-4baf-9e24-01c815f21faa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c305c6fa-4955-45fe-898f-1233023f97b0", "sighting_of_ref": "indicator--6d2fecd0-6b3f-4baf-9e24-01c815f21faa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b94ca0-14c2-4359-bae1-1fab8f32fd36", "sighting_of_ref": "indicator--b373c5ea-df6a-4ac1-b142-e8add5ee8f1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51869dc9-6b99-4006-89f4-3c7700ace9c5", "sighting_of_ref": "indicator--b35cbd00-4aed-4ba4-a7d3-5f654f515312", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2a93b7-bad8-4d8a-a8ff-66f4b9f0c662", "sighting_of_ref": "indicator--171f48bf-7b56-489d-898c-7947d2d37d7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a851d7b-ce6a-49e9-8fe7-92c348d4fa48", "sighting_of_ref": "indicator--e15723af-0cf8-41e3-bbc4-6a517a60264a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d399a1-b085-41dd-8aca-ba27357441c0", "sighting_of_ref": "indicator--e15723af-0cf8-41e3-bbc4-6a517a60264a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0096e59d-50bc-481c-b420-1502e2f958b2", "sighting_of_ref": "indicator--025ba600-cd8f-4934-a09e-b60a00a34fb8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1f7034-0cbc-43f3-9c64-57f162cf9920", "sighting_of_ref": "indicator--025ba600-cd8f-4934-a09e-b60a00a34fb8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837a8503-902d-4f55-abce-602c7f2a2ddc", "sighting_of_ref": "indicator--24ba9891-6a9b-4bfc-8a66-6c913361c754", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f06d31e-1e58-4cbb-9ab6-5f8d6973a24a", "sighting_of_ref": "indicator--24ba9891-6a9b-4bfc-8a66-6c913361c754", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edd0141-7177-4a62-ab4d-3e0e6d531a07", "sighting_of_ref": "indicator--cd4c930f-9c2d-4bca-ae8a-35b84dff90cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e06cf2-6439-4024-a067-6c58b86b3f6d", "sighting_of_ref": "indicator--02a48ad4-2fdf-4ea4-b48a-89559cefaa9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd968581-9554-4c17-8b3d-d006a5348108", "sighting_of_ref": "indicator--2ad4e56a-e19a-46b7-bff4-e69bd6e8ee59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b5f7b9-ae1e-49c1-8010-c92e93afed26", "sighting_of_ref": "indicator--286d3504-73df-44a4-b84d-1a5bda18588e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d05fd0-2ee5-4f39-8d5d-0151bea4d057", "sighting_of_ref": "indicator--286d3504-73df-44a4-b84d-1a5bda18588e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f28150-e7fb-4047-8a92-fd99465fe492", "sighting_of_ref": "indicator--670b8b03-678b-4e9f-a16b-25ea5fc578f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72378986-55f9-4b69-aabf-6afd5e43e2f2", "sighting_of_ref": "indicator--670b8b03-678b-4e9f-a16b-25ea5fc578f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87358bd2-982c-4604-8eb7-5a1540c1e312", "sighting_of_ref": "indicator--b274f93a-1910-47e2-8108-ab7ac9045bcc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6637de32-3f54-480a-9f79-8d358f24ee89", "sighting_of_ref": "indicator--44477274-7b7e-43a2-ad09-bf553719b57f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f220acbc-1bcd-4c5a-8d0a-f46af3c8f742", "sighting_of_ref": "indicator--a7e46cc6-dcb4-4107-928c-1b739f369694", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632ea18e-bf38-4140-9471-4128e124a36a", "sighting_of_ref": "indicator--a7e46cc6-dcb4-4107-928c-1b739f369694", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6b9fe8-bf0f-453a-9968-b914aca86f45", "sighting_of_ref": "indicator--3dd74af8-2560-471c-b0bf-64df8dc8fff0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e716c29-0b53-4716-8f26-daad03a8399c", "sighting_of_ref": "indicator--eef8ddfe-56b4-4211-b2ba-dc738030fc1d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fbfa41-00a2-4af5-9ea7-dca30b8a255b", "sighting_of_ref": "indicator--eef8ddfe-56b4-4211-b2ba-dc738030fc1d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18374780-f5d8-4c76-b8d7-f428f961255c", "sighting_of_ref": "indicator--61d2ca22-19d4-403a-9efc-85261e62d450", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318ffc89-240b-4c46-9e4b-a0f0d8de28a4", "sighting_of_ref": "indicator--e09bf3e0-7743-444a-853d-a7402b239456", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e8a353-c3a4-4c06-9543-c31ed64be22c", "sighting_of_ref": "indicator--20b58bfb-e587-4afe-852c-08d4ca47abff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8ca410-d83e-4cd6-87c4-8f479de90830", "sighting_of_ref": "indicator--b2a9d404-cc8c-4e00-bbe1-ab06cc8fa37c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de224f3-1bb6-42eb-bc60-deac21335aa6", "sighting_of_ref": "indicator--b2a9d404-cc8c-4e00-bbe1-ab06cc8fa37c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e722e6-7818-42e1-8603-e0d921e540c3", "sighting_of_ref": "indicator--a6d90dfa-99f9-4195-80ba-7b7838f87120", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82db972-f018-4041-adf7-72ac2f53474f", "sighting_of_ref": "indicator--a6d90dfa-99f9-4195-80ba-7b7838f87120", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75c7648-5e44-43d5-94e8-dbb84b92ce9b", "sighting_of_ref": "indicator--6bddc33f-add1-41e8-831d-93ff52e1574f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c2dea1-338e-40df-9d02-255b938afbf3", "sighting_of_ref": "indicator--618023f4-3a2f-44cc-a8c3-96e0b8816985", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded76507-786e-498c-b334-e98291a4704e", "sighting_of_ref": "indicator--202e5546-024b-49bd-8a82-c0f2f417d83c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec37e6b-0995-4b86-afe1-c08cf6437a6e", "sighting_of_ref": "indicator--1d90fb25-e1b5-4863-94ab-534915368124", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e9ffef-993d-4e9d-88c7-54240ca3183a", "sighting_of_ref": "indicator--934de7e8-6e0c-4519-9e27-0c8c70beed15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2c0a13-8835-462b-bd81-3dd92fafc409", "sighting_of_ref": "indicator--23d29dbe-6a28-4423-9b63-da3e06a4fb2c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c7e998-49ed-4707-9c4c-5f5d993d86f9", "sighting_of_ref": "indicator--8440a0f7-0694-4d28-9650-ca2e847f5f6c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d68f928-6b50-4a99-a67b-30c4125e51fd", "sighting_of_ref": "indicator--b356579c-8e79-4b9b-bddc-cb3a265234c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc3b220-cce2-49fa-a487-6791a39bf7b8", "sighting_of_ref": "indicator--d2db3a53-78a2-49eb-a505-cad6a7c6bee6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f533a67-8fd3-4116-bfef-585ddd92d7fd", "sighting_of_ref": "indicator--6ea6e835-fd65-4ab4-a3a7-624f22740c02", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a062ec7c-0cda-47ca-bb4e-1562ff054740", "sighting_of_ref": "indicator--6ea6e835-fd65-4ab4-a3a7-624f22740c02", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f161eedd-1f30-4dee-8124-b342de0805db", "sighting_of_ref": "indicator--88e56b98-603f-4cf5-93ce-7421d5cac75c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1852fad6-9132-46ea-aeee-4ce207d29653", "sighting_of_ref": "indicator--57be7ac0-8985-413a-aed9-ad6fb807167b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03f50d3-4eed-4116-acfd-dd05eca6c22c", "sighting_of_ref": "indicator--57be7ac0-8985-413a-aed9-ad6fb807167b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f476be-5926-4218-9a5d-6f020b77cda3", "sighting_of_ref": "indicator--6f01f06c-f722-4c32-aa5b-a72b64cb00a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e79937-5777-42e7-829c-a4c992678389", "sighting_of_ref": "indicator--e9da9d40-0881-4ceb-b692-fb1e38fab613", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a6965d-509c-4f36-a86e-a566ea953670", "sighting_of_ref": "indicator--3bd8140f-c129-48ab-86a1-95f2830ab318", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac04ac80-ce34-4e7a-a646-74b7a96b86e2", "sighting_of_ref": "indicator--7de74431-1822-48ea-889d-51ce174e61fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba6c964-06f0-4925-a361-10e19e4f9e08", "sighting_of_ref": "indicator--980a1305-edbc-47dc-8903-e09215d9c142", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ed3b3b-a307-4720-82cc-698d565bebcf", "sighting_of_ref": "indicator--980a1305-edbc-47dc-8903-e09215d9c142", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd932a1-1383-42e9-97b5-51f112b0340a", "sighting_of_ref": "indicator--8e668019-6775-4abf-8fec-bca0c8fd5095", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43bcecf-ecd4-42e1-9225-e044696897f8", "sighting_of_ref": "indicator--8e668019-6775-4abf-8fec-bca0c8fd5095", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8d1ab1-e590-4ac2-ab70-37e937a6882e", "sighting_of_ref": "indicator--986818f1-25fe-40be-9bbc-fc323d365517", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bad455-ab7e-43d6-a6c3-d91a466a1f72", "sighting_of_ref": "indicator--c4d2f5a0-72cd-4197-bccb-5e04fc496fc6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6102ab32-a1cf-42a6-920a-a7489a086b54", "sighting_of_ref": "indicator--3881b383-d131-4fcd-9d23-e5ebc02ff9b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6165d2-64b3-4e05-9972-14a95cb4b03f", "sighting_of_ref": "indicator--3881b383-d131-4fcd-9d23-e5ebc02ff9b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5708b17a-3589-4936-8dad-5af80ed390e2", "sighting_of_ref": "indicator--c9bea1c6-e921-4a43-8cb7-33bf36698ea6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6f834a-79e7-4e9e-9191-36687f798c9c", "sighting_of_ref": "indicator--0fcc492a-6f8f-44a7-9ee1-6559d1065791", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b1e4eb-2223-44b4-8f84-4116cbe94c29", "sighting_of_ref": "indicator--0fcc492a-6f8f-44a7-9ee1-6559d1065791", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269baf61-85d0-4833-9d30-6672735fa4b1", "sighting_of_ref": "indicator--9ae84199-af95-4efb-a747-f6207efc1f25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3199aecb-b5d9-4684-88ae-8b1e293d5fe5", "sighting_of_ref": "indicator--9ae84199-af95-4efb-a747-f6207efc1f25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31b02a9-6124-43ad-a270-ec30881987f6", "sighting_of_ref": "indicator--4d9a368c-9b1e-4319-8663-ffcb71d183ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ead827a-fd39-4d84-abce-a0f2d0fbf599", "sighting_of_ref": "indicator--b2e70d3e-b420-449f-9c6e-8b94c5e9878f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43e0553-de12-4f60-982b-a352218288d3", "sighting_of_ref": "indicator--b2e70d3e-b420-449f-9c6e-8b94c5e9878f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13eeb11a-fdca-4594-a27a-0355921373fd", "sighting_of_ref": "indicator--544c1419-5f8b-4f0a-81a9-a4387408a745", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadb0fff-6141-45a4-90d2-25538e189b5b", "sighting_of_ref": "indicator--ae93edac-3150-4b74-96c2-1fb0c103731d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6026d325-8ebf-4fbf-bd03-a818c9ecdec8", "sighting_of_ref": "indicator--ae93edac-3150-4b74-96c2-1fb0c103731d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6718976e-6033-4884-a28c-55bd824cbf6d", "sighting_of_ref": "indicator--1672f799-2f1e-4912-938a-c8bc746e695c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f481613-d19a-4311-96de-7badb14c705b", "sighting_of_ref": "indicator--1672f799-2f1e-4912-938a-c8bc746e695c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f15983d-2bc5-43ab-9a79-7d4e05290699", "sighting_of_ref": "indicator--9537a577-a6fd-4485-8e9a-f92f32c3c868", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64918b9e-38cf-41b4-a4be-e353405a3841", "sighting_of_ref": "indicator--9537a577-a6fd-4485-8e9a-f92f32c3c868", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b1748c-af07-464c-bef5-07c7d7be63fd", "sighting_of_ref": "indicator--c296785c-b8ab-4122-88b8-7d4d9c7d55e9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef617440-c2b8-4947-a4f9-450a0249eede", "sighting_of_ref": "indicator--183b3a0e-ae07-47dc-b8eb-b512589e1518", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c1006d-a1f1-4af6-b890-13d1c9702a5e", "sighting_of_ref": "indicator--c1018b34-9618-4a43-b0e5-d9e973fc2b9e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39000d9-8b4a-422b-9e30-5cfcfaa81eaa", "sighting_of_ref": "indicator--c1018b34-9618-4a43-b0e5-d9e973fc2b9e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03056491-bd2c-437e-9e3d-52b1143b0cbf", "sighting_of_ref": "indicator--b49ab6c4-756a-4f58-a82a-72fda3f8c891", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a965b0-a877-4695-816b-c2ad82a37f64", "sighting_of_ref": "indicator--fdb10531-00da-48ac-9edd-2511f1c98d04", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93811fa-4de6-492d-a411-236139a933fc", "sighting_of_ref": "indicator--d17dffce-1ca3-413d-9c0c-ece0f47e71db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09cfcad-4b8f-4082-ad0c-6166d3f7d345", "sighting_of_ref": "indicator--388b36c0-da2d-4d55-99a9-0ab17cd41c3e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4159c48-704c-46ee-b3f1-9953b8b80b76", "sighting_of_ref": "indicator--70ea575c-8a7a-4791-9772-16e1c50a0357", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaabc6d5-03ff-4515-86c5-6bfab8ba293e", "sighting_of_ref": "indicator--862ee70a-80c2-462e-a12f-6c179a22698c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5886d70e-acaa-42eb-a73c-2b0fb7995181", "sighting_of_ref": "indicator--862ee70a-80c2-462e-a12f-6c179a22698c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee00d77e-1375-4f46-b701-a6fd3eb42ccc", "sighting_of_ref": "indicator--815c2f04-5b32-4854-afb5-6ea00f5dc987", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b947f2b7-37e9-45bc-98bd-2955d4ec639d", "sighting_of_ref": "indicator--2359343f-92d7-4ca7-836d-1bfd947336fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bffb48-e923-4115-a1b8-c7e21ed45435", "sighting_of_ref": "indicator--276f6dfb-312d-4cf8-8f43-eb091005a9bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd4a2fc-d5cf-4b89-9d5e-d33e4c37e66d", "sighting_of_ref": "indicator--24369b20-df67-4abb-a97e-5a4bb4f79140", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c909b67-63ac-4557-a041-89d6a0b1085e", "sighting_of_ref": "indicator--c20617ed-32df-4025-803c-1fa0726fde8a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92b1c17-04df-43b0-9197-0720cd9e0666", "sighting_of_ref": "indicator--5e899968-7313-4c8b-9199-8e9f7b3d6776", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a190d92-523a-47bc-b046-bdd1e91bdb0e", "sighting_of_ref": "indicator--761d602c-1e52-4dfa-b0fd-606fc140e84f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1317f585-a30a-4be1-a06a-c2fed13f718b", "sighting_of_ref": "indicator--3af6a01a-94c4-4406-90cf-b77220e45dfa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd23cde-5e4a-48b8-bff4-92a54daeb6c0", "sighting_of_ref": "indicator--e5f1d9c6-93ec-4ca6-9456-4a3c14e71a0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9aab22-1ba2-482d-baba-d5eb39d2d747", "sighting_of_ref": "indicator--60c10050-b071-4613-9589-a6d4c620ba7b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6648c6-eda1-4199-a271-cb37edc16d08", "sighting_of_ref": "indicator--2ff54138-786b-451a-a8ce-8949653ae4e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d747a658-1fd3-447f-b1a9-6553391a7140", "sighting_of_ref": "indicator--2ff54138-786b-451a-a8ce-8949653ae4e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4c7849-58e6-4d6f-aea0-4113cb2f2663", "sighting_of_ref": "indicator--e6d2454e-c0b3-4b01-9ce9-23b1b381bad1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdd48ff-586b-406f-8bfb-95df266e6ce0", "sighting_of_ref": "indicator--a23b8902-5434-4dd3-83a7-4098e2709ebe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaf0586-fd59-4e7d-96b8-ec39336ed6ca", "sighting_of_ref": "indicator--2e43a6ab-b57e-465c-b429-190a2f9ba4b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5029e6-9284-4d14-a299-f5dd83ba009e", "sighting_of_ref": "indicator--63efd1d2-46ae-4a17-9928-1d5c01ef1d8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5bd1a4-63dc-4cec-bf99-f94c3942c34f", "sighting_of_ref": "indicator--63efd1d2-46ae-4a17-9928-1d5c01ef1d8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b037d65-e8ca-42d9-a4eb-6261a170a6cc", "sighting_of_ref": "indicator--830497f6-123e-4c83-a7c5-1f674f97ef0b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f719786a-9416-4c52-9199-a5ddbcd957ed", "sighting_of_ref": "indicator--4e07b6e5-376c-4f2c-a1d2-b4380e1276e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197cea92-c6cb-4233-a6c2-76661b6f3b50", "sighting_of_ref": "indicator--4e07b6e5-376c-4f2c-a1d2-b4380e1276e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407d1add-421a-45c8-8c07-96d2c502714b", "sighting_of_ref": "indicator--624ccb8a-658a-4bdc-9e8f-41bd0a466734", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937406e9-2966-47f2-a808-dbc4f44cf1ac", "sighting_of_ref": "indicator--98c78555-5538-4bae-9ce1-de2486e60d0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cdf635-390c-41ce-8681-165ecd3a698e", "sighting_of_ref": "indicator--98c78555-5538-4bae-9ce1-de2486e60d0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87b2b36-129d-4c88-a8d2-a0179290d46f", "sighting_of_ref": "indicator--b8a1ec3f-12c7-4f82-95dd-fcbc5a90d9a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d526fdc9-a5fc-4b9f-a093-a205cf7de729", "sighting_of_ref": "indicator--b8a1ec3f-12c7-4f82-95dd-fcbc5a90d9a6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4766a5f3-89a0-4670-9c1d-cb039250185f", "sighting_of_ref": "indicator--b65ea018-e145-41a1-a8b5-8b853f4b09c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86019cdd-1388-4214-a1e8-ec13ac3ea598", "sighting_of_ref": "indicator--c0bce013-b178-43bd-889f-54d7f58679b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54250fc-a73f-4548-8099-173feeb45e5a", "sighting_of_ref": "indicator--9fd3ae2b-b2e7-4437-81f0-fcc6f67e0238", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c446cbf-5e51-410a-b117-765daac22170", "sighting_of_ref": "indicator--7793de15-aa61-481b-a2e3-bf3e924e80f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189f812f-0e1e-4629-8951-11148a870c66", "sighting_of_ref": "indicator--7793de15-aa61-481b-a2e3-bf3e924e80f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9876b66-d8fa-4748-9000-97853ed77d1c", "sighting_of_ref": "indicator--8c3bafd1-90db-4757-8724-95d79fe15e80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1040f7a-f1f5-4433-867f-e900e090d3c5", "sighting_of_ref": "indicator--01fe0e19-bbf7-453e-afde-b9bb75c77e40", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5eb7403-d978-4542-b1df-1f2600c0bc66", "sighting_of_ref": "indicator--b880fe1d-c008-41b1-b93e-26526a30d04e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fad2561-6d90-45d0-997e-3d69c033a427", "sighting_of_ref": "indicator--b880fe1d-c008-41b1-b93e-26526a30d04e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0a610f-6138-4590-ae24-d11263066d6c", "sighting_of_ref": "indicator--52cb3b72-9b6d-4e72-a096-c703a809e392", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26412662-a2fa-4af1-8c70-93eb52464b4d", "sighting_of_ref": "indicator--d26d5965-6bd4-4faf-8906-af7681b2c03b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab60d4ad-b8c3-4aa4-89f3-98e9db785902", "sighting_of_ref": "indicator--2de82a7e-0329-415d-916d-1cd9f92aed97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fa6768-3a03-4fa4-b02e-12e519ddbacc", "sighting_of_ref": "indicator--b5cfe817-0f3b-4d24-a09c-78de8705b0fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13928c75-2675-49ed-8786-9783f6a0fe08", "sighting_of_ref": "indicator--e5effe0a-9d78-4937-ac5b-24a1403aac88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a063a18-d68c-4bdf-bae7-90e191eeec35", "sighting_of_ref": "indicator--f3e93c12-ebd4-48f5-a1c9-e6a7f1466906", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ac6a0f-97e1-454b-b5c2-fbcb04832f72", "sighting_of_ref": "indicator--ebc63b6b-3a4b-439b-a66a-051c3a99227c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6bec89-3c59-4c30-8943-907c455ff62d", "sighting_of_ref": "indicator--ebc63b6b-3a4b-439b-a66a-051c3a99227c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b6953e-afc5-443f-8d98-d458f6a45262", "sighting_of_ref": "indicator--8366bb06-32c7-472c-bf85-9f04c4b28a7f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0e3056-12ce-4bd3-8bb4-43979255a362", "sighting_of_ref": "indicator--3efe7e4b-0091-41bc-8cbf-a211ffca3703", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41037ba5-af7c-4f8e-a038-899bb8fb2948", "sighting_of_ref": "indicator--2396f527-f8e9-400c-9718-5e335b4449c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfd666a-e7ee-4796-9745-894bb587496b", "sighting_of_ref": "indicator--11a84ad4-33bc-43d6-adb8-bc24aa1e7881", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b203885-eadb-4af0-9df3-b35e7109c25d", "sighting_of_ref": "indicator--8c817cc0-7b53-4c7d-acc8-b878bee4fc50", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41248fb4-06fb-4c62-900a-7ef4dddfd124", "sighting_of_ref": "indicator--e540146a-e6b4-497b-87bd-83c6b740b546", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15a1be4-686e-4a4b-96b7-a320d6715285", "sighting_of_ref": "indicator--2ae403ae-1d75-4cb1-a27a-fe31c9db4814", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6caa7c7-3610-4386-9c40-bbc49771f5b8", "sighting_of_ref": "indicator--2ae403ae-1d75-4cb1-a27a-fe31c9db4814", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa17d27-41cb-4cc4-bbeb-3955e62685e7", "sighting_of_ref": "indicator--b74dbab8-66ba-4a39-aed8-d3a47bcd78eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28390d7f-03c8-4aa8-b8d1-b09f64dc4eef", "sighting_of_ref": "indicator--f63454b1-6259-4dff-8fe8-616f7f4b8bc5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b9bdca-74ec-4360-9de6-7a55b3df47c5", "sighting_of_ref": "indicator--4b4cd910-9832-4bea-90b2-3bef05891869", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32342964-9f9a-4a99-8884-860f2ecc9dad", "sighting_of_ref": "indicator--4b4cd910-9832-4bea-90b2-3bef05891869", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059c2e7c-4c67-4a81-8ecc-4a816f97a33b", "sighting_of_ref": "indicator--dac88dfc-3e56-4420-936a-8d909e38cbac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ab5ebf-7b6b-4991-b97a-37c5f148d1d7", "sighting_of_ref": "indicator--dac88dfc-3e56-4420-936a-8d909e38cbac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a849da71-5bd8-45d2-a1f2-a4e969433447", "sighting_of_ref": "indicator--29c7de00-d4b1-470a-956d-c709eacfaeca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cee99d-7ab6-4667-8f46-20e541fe9280", "sighting_of_ref": "indicator--a113bb0a-f978-4d1a-b343-ac34a664fc76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a02c8c-281f-43f1-8ac6-1d52576544ec", "sighting_of_ref": "indicator--b59a13fb-fceb-4dbb-ada9-7148ec60cb3a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9025c73-3111-4422-9bda-2424d3d43863", "sighting_of_ref": "indicator--b59a13fb-fceb-4dbb-ada9-7148ec60cb3a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967853b8-a211-42fa-9e2c-d1a72afa0c39", "sighting_of_ref": "indicator--650d3255-9a8e-41b3-beb6-fb1437b354a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f77a500-6fa7-473f-a5fb-dbdbcca05373", "sighting_of_ref": "indicator--cc42662f-f09a-40be-ad3d-4a057bd5a987", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69618f15-c0df-41bf-ae2b-e5e606c2f87d", "sighting_of_ref": "indicator--eb526a72-28d7-4851-a2a4-50d9f1284337", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67985f0-e00d-4091-840d-3d459e2be464", "sighting_of_ref": "indicator--eb526a72-28d7-4851-a2a4-50d9f1284337", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fb1987-1589-43f4-8691-1540d5bd4252", "sighting_of_ref": "indicator--a2de30d5-b576-4f5b-8436-0ad8d8c5c22d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4133de-b284-46b5-90c7-789c9a66c477", "sighting_of_ref": "indicator--c5819134-754e-4702-8379-2d7f84458e4d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4ffabb-ee08-40ae-a072-069684e7bd3f", "sighting_of_ref": "indicator--c5819134-754e-4702-8379-2d7f84458e4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04acc46f-1db3-41cd-816b-ef659c2714ed", "sighting_of_ref": "indicator--25619930-2bbc-4235-a7e3-1d4ca5805d8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c114df-28e6-4ecf-ae81-c18e3f94a0c9", "sighting_of_ref": "indicator--ecfa4c78-fd8c-4ba8-8656-86a05e37d470", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64167778-c230-4e99-85eb-da30d8de217b", "sighting_of_ref": "indicator--ecfa4c78-fd8c-4ba8-8656-86a05e37d470", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f07eed-c3b2-4615-b820-87a2e9c2845f", "sighting_of_ref": "indicator--c9e14a3f-e55c-4ffb-a03b-f1342361f7e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f90208-da65-4bf4-8031-d1e1634bac36", "sighting_of_ref": "indicator--9d0dce3f-34e6-4fe1-94f0-faf311a4f659", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c36c96-9df1-45c4-8f5c-a128806ab1e6", "sighting_of_ref": "indicator--9d0dce3f-34e6-4fe1-94f0-faf311a4f659", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5335a86-55cf-46a3-ad1a-6fd3d0e1c949", "sighting_of_ref": "indicator--30675dd9-7c93-411b-a348-4fd27997a082", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1e4657-f8f0-4cbc-bd5b-8ecb839a4fa1", "sighting_of_ref": "indicator--b89e2cec-63cb-436d-b36b-6095e8014ad8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f819caf4-e415-4cc4-8483-2ebf9563cc21", "sighting_of_ref": "indicator--b89e2cec-63cb-436d-b36b-6095e8014ad8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ac2f8f-0c1c-44cb-801e-575a33242cf2", "sighting_of_ref": "indicator--a53433dc-37ad-4381-a121-dc612540009a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d04665-933b-4e82-91b4-136a2a501de7", "sighting_of_ref": "indicator--a53433dc-37ad-4381-a121-dc612540009a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d91c93-fc4b-465b-9313-1ede90d251eb", "sighting_of_ref": "indicator--20f268f9-8740-4ac3-a6c0-ca1a7d69f1b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f513eef-9b2b-4643-ab78-44db1a3ab626", "sighting_of_ref": "indicator--57c5eb4f-0fdb-4fbd-9713-e1aebd651eb6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a1b2f3-2147-41b4-8887-c42121380b7c", "sighting_of_ref": "indicator--57c5eb4f-0fdb-4fbd-9713-e1aebd651eb6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a31c87-df35-4d3d-87dc-61d4326e3a0f", "sighting_of_ref": "indicator--9fcbb7f9-fb02-4516-9629-b49a0e6215b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a3d370-9193-4987-8044-8b9ff9798a7b", "sighting_of_ref": "indicator--f4944427-c62c-4ea5-a59c-dfb9c970a1fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c22d8f3-2004-410c-b956-d41204165614", "sighting_of_ref": "indicator--f4944427-c62c-4ea5-a59c-dfb9c970a1fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa34887-3b52-4aed-b8e0-7db514128491", "sighting_of_ref": "indicator--511f9f97-2bff-49de-8215-1b6cd03a518c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f31980-3d4f-4e50-a963-ad5fed1cbbce", "sighting_of_ref": "indicator--986a5212-d95a-484f-967c-0bb3c48bd4fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad5a5be-ac41-4607-8edd-c3bbf18818db", "sighting_of_ref": "indicator--67bc64e2-bd79-4634-848e-4021be52836f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315e69f6-a6b3-4f73-bf60-fd03df603391", "sighting_of_ref": "indicator--67bc64e2-bd79-4634-848e-4021be52836f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455899a3-36f9-45f6-9d06-cad51438b00c", "sighting_of_ref": "indicator--72a8c2b5-a9ea-47d7-946c-b2d683353e1c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b72b1b-4e92-4e92-8a30-a243f74001f5", "sighting_of_ref": "indicator--2eb814dd-564c-43a1-9c16-e518c9c799e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb5d679-4990-41ad-ab1f-e1c250b5d985", "sighting_of_ref": "indicator--de052210-2f68-484e-a60a-4666c899d1f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb3de22-e553-44a4-b941-edbc5b391da4", "sighting_of_ref": "indicator--6d0397b9-9260-493b-a44e-80c94f107ad7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9269c6b6-26db-4c71-a526-532104ab8eb0", "sighting_of_ref": "indicator--3273cb05-c785-42f7-9291-214a110f9dbe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d687717-0285-42a9-8b21-ac2b9504cf40", "sighting_of_ref": "indicator--4367560d-d54b-4dc7-a5bb-facad7d4717b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f60191-a373-4e38-b216-6e484a5781a7", "sighting_of_ref": "indicator--61e23415-2870-4be2-af5e-01ffb1938073", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1916ed44-294d-4b5a-9282-b7f2d6f644fc", "sighting_of_ref": "indicator--179f9c7c-f0be-47e1-a6fa-80a7a48b9588", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b17ba7e-93ec-4b19-8c90-3a9187f8439f", "sighting_of_ref": "indicator--7ca23be2-c156-4637-8d59-0dc5ffe77183", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42e1983-0ac3-4421-b5d3-28eee3e8b670", "sighting_of_ref": "indicator--55de9ccc-dc17-44dc-ac10-2a0b1844b5ea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340bb8c2-96c3-401c-94ae-6fa58be60731", "sighting_of_ref": "indicator--2827cd61-617e-41ab-8102-f07c92ca7401", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f47fe36-c866-4e88-aa10-e30a4a6ca742", "sighting_of_ref": "indicator--3b5c12c5-15d8-424b-8206-eccd57e90ed1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd23250b-8a62-4758-984d-f45fee397db1", "sighting_of_ref": "indicator--f7d5f522-8a46-4bbc-b2e7-dc3bea54361e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c8e9c0-cd8e-45de-8094-a8f6ef1e8c21", "sighting_of_ref": "indicator--f7d5f522-8a46-4bbc-b2e7-dc3bea54361e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b956c847-1846-4fb7-b92a-892eae0d3189", "sighting_of_ref": "indicator--911ff698-6c83-4842-be88-69135257e08d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d845767-c61c-4fac-aaf9-32351e066d1f", "sighting_of_ref": "indicator--278afa64-99e4-4085-87a0-62da5e4ce9a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cae4fb1-8749-405e-ad4d-dbde5d862692", "sighting_of_ref": "indicator--5e0e43dc-b2e2-4a48-8fd7-c295caad72cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769e406b-5213-474b-908c-8046164630f2", "sighting_of_ref": "indicator--adaf84e3-93c0-40af-84b3-9dc64031dbbf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8ca768-ec9c-4b39-bdcc-0eeaaae25344", "sighting_of_ref": "indicator--f09985d2-ca48-477b-9a3a-4f4924ac2fce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf802b01-9ed1-4db7-8664-2370f9052315", "sighting_of_ref": "indicator--f09985d2-ca48-477b-9a3a-4f4924ac2fce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d219c08d-b65d-43b0-b8c2-52285e854d46", "sighting_of_ref": "indicator--6a3051c1-b2ec-4b43-aaca-1b0a6559be40", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b4367a-a0c1-4bfa-9604-f268073ace89", "sighting_of_ref": "indicator--5cd5cec0-edf0-4396-ba7b-3ad645ddb67c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e01ef0-1714-45c7-ae4f-bbffd6373525", "sighting_of_ref": "indicator--17ff95b0-4957-43bb-8907-256664930313", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e59ce9f-0d87-4a91-86c8-893f3b352896", "sighting_of_ref": "indicator--45ad5333-2ddc-455f-8aed-ae703a7827a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f101ba7-80c2-4ef4-bcdb-3b2ede771ab7", "sighting_of_ref": "indicator--45ad5333-2ddc-455f-8aed-ae703a7827a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449a5184-1923-47d2-834b-f238078d0d63", "sighting_of_ref": "indicator--5f43b227-81c6-4fd6-8673-c74806a9f269", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4796064-8e07-424f-a7cb-9f021fc8d492", "sighting_of_ref": "indicator--41e08bce-9ba6-498e-9086-e1288e44ca5a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ce475d-7f09-4851-a016-1257ceac41f8", "sighting_of_ref": "indicator--41e08bce-9ba6-498e-9086-e1288e44ca5a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd645445-f08a-4cf9-9706-fc6ebd1e495e", "sighting_of_ref": "indicator--71031bfd-cc92-4e80-8cfe-a58c0b0f15e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a5f63a-785e-42da-81b3-431d9559873f", "sighting_of_ref": "indicator--248ec23c-c7eb-494a-8847-4037246adf12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa522e3d-784e-45c3-a496-0cbfc0f7e4ef", "sighting_of_ref": "indicator--eb311e0d-b91c-453f-a8a8-e3914e4a90ea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04880b93-8441-429e-8042-9e21e7ad107e", "sighting_of_ref": "indicator--6a00603a-b93d-4413-8d68-496b8277daf1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716c2708-c68c-46ce-861c-116a4f6e4812", "sighting_of_ref": "indicator--07b183b4-7674-46f5-852e-7c626525c786", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddd0c82-745f-4b48-afb1-394839f0a0d9", "sighting_of_ref": "indicator--1f129173-7507-422f-9a3b-303e76dc68d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f202f2-5f33-4738-be4b-36bbb2f5779c", "sighting_of_ref": "indicator--dbee9072-0c3e-4d65-9a3a-3180ea856c27", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8350476c-5e5b-454d-832b-4fe9c158a996", "sighting_of_ref": "indicator--e81e3d78-8151-486a-8dd3-dc08fc57d9b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33ccb10-9a47-49ce-b5d2-c425243af804", "sighting_of_ref": "indicator--f2a913b5-c4e0-456f-a5cc-7798f46879c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7ba265-9792-407c-ba61-164d3a812368", "sighting_of_ref": "indicator--c9204bb6-d067-4a75-afe2-6ac4410e0f06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119a1e4f-c2f4-45b0-bbdc-990744d01784", "sighting_of_ref": "indicator--2edc4ebf-2b41-42ec-bd5f-b62cc7897f50", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed67fd99-2ce9-415a-8c25-8a7efa0053f9", "sighting_of_ref": "indicator--01f85a5a-5236-4b70-9d60-0f72078c2544", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f26e85-5ac3-4f53-862c-43d4d0a1bf40", "sighting_of_ref": "indicator--01f85a5a-5236-4b70-9d60-0f72078c2544", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd5e353-9158-4e9b-976b-e8b7150ac4b5", "sighting_of_ref": "indicator--2321904a-7cba-4c4f-97c6-30b475c405bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1410c54-da00-4db8-bc16-75285e52947c", "sighting_of_ref": "indicator--2321904a-7cba-4c4f-97c6-30b475c405bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ec9bb2-756b-4d60-a2f1-15d74195552c", "sighting_of_ref": "indicator--af29eab4-9154-4d3b-8279-9ed9c23b319d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ee12ab-e75b-4c84-af83-98475c4e0326", "sighting_of_ref": "indicator--35a495c3-8d2b-4cca-a889-85d3af3a89b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984e3338-57c1-40e9-891b-eab57f2c71b9", "sighting_of_ref": "indicator--81c40605-d8f5-429e-a052-c4eec279e456", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df0fe20-9d76-44f9-88be-6c02adf8ac92", "sighting_of_ref": "indicator--81c40605-d8f5-429e-a052-c4eec279e456", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941092b6-6bcd-4da4-b3a3-a757dfb3bc5c", "sighting_of_ref": "indicator--bfeb623f-8c6f-49ac-a08f-8dc1878d7fc6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab035db1-c0dd-4b6d-b011-1c26a00a5af5", "sighting_of_ref": "indicator--a98e78e9-e1b4-4b87-a772-a2348ffbf76d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34136f3e-ba3c-4bac-9f49-2873174fc6c6", "sighting_of_ref": "indicator--a98e78e9-e1b4-4b87-a772-a2348ffbf76d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea17a4a8-523a-4f84-b70b-bc2afcd25b34", "sighting_of_ref": "indicator--1c54a91d-0abb-40cb-aafb-880b3d61fd64", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fba8d1f-0e47-427f-934e-31e65ce443e1", "sighting_of_ref": "indicator--4baea62c-4709-4e17-a0ff-dcf55f4d6651", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6c706d-f72e-4438-8995-0b40dad7c525", "sighting_of_ref": "indicator--4baea62c-4709-4e17-a0ff-dcf55f4d6651", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265f1a07-ba9d-4d3f-9ced-a6180cc9761a", "sighting_of_ref": "indicator--9e3ec7a8-23d3-49a8-990e-b093e07ce6f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c0c6d0-62f0-46a0-a788-e90d842a1b8b", "sighting_of_ref": "indicator--1b37a568-acf4-41ea-b2ec-7dd0a34a1c63", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd52e9c-aece-42e8-ba2c-8c3836c1a30d", "sighting_of_ref": "indicator--f11955f1-7b68-4a19-a90f-96f38e9ac439", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c538e690-5223-44dc-9501-75b73990182b", "sighting_of_ref": "indicator--f11955f1-7b68-4a19-a90f-96f38e9ac439", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293a1b10-dbf1-4681-b560-8b763d8e885c", "sighting_of_ref": "indicator--bb13f583-d1c8-46a9-b283-99a2548d831d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5036f7d-b0f3-4d13-8ae5-3ec6dc3a5a94", "sighting_of_ref": "indicator--4325bc03-4390-4123-a1fc-2b648d36a402", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e5ca10-5586-433c-aa8a-da64c643312b", "sighting_of_ref": "indicator--4325bc03-4390-4123-a1fc-2b648d36a402", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf876ee-a8b5-49a0-a0c6-dcad85ab9545", "sighting_of_ref": "indicator--df86ceee-dc43-474c-806a-a11ac81f5a3a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1081333-ff69-46cf-8f92-07c9dfcaf730", "sighting_of_ref": "indicator--df86ceee-dc43-474c-806a-a11ac81f5a3a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0b6553-9212-4e7f-b9ee-54e10ad575a1", "sighting_of_ref": "indicator--1090cbd6-010b-4a56-9f8f-63ced95afee8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ff5f6a-199f-4bf7-8ece-238a841893e6", "sighting_of_ref": "indicator--1090cbd6-010b-4a56-9f8f-63ced95afee8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243b6593-e020-4c76-80a6-681e59035dc9", "sighting_of_ref": "indicator--95c6548e-156e-4a32-827c-1fe3ddf2e622", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d51ac38-e4e9-4d9b-89a1-d43387a02f5e", "sighting_of_ref": "indicator--95c6548e-156e-4a32-827c-1fe3ddf2e622", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b919b0e-b2b5-4e25-ae06-d09d1c7f0121", "sighting_of_ref": "indicator--11a8a5be-04b0-47b6-bffc-20fc1ad0f740", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff5b0b4-099e-4b50-af61-795b7a7a9ee7", "sighting_of_ref": "indicator--d7208062-7f40-4ab9-a2a9-93a66d7271be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c200815-a4ad-4ec5-904a-0b379989f67c", "sighting_of_ref": "indicator--d7208062-7f40-4ab9-a2a9-93a66d7271be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c718a3-b9d4-480c-acec-edca0ad7dfcc", "sighting_of_ref": "indicator--0dced884-a737-4dea-9670-8a93c96065ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd09750-26f8-4f22-ba69-d89da0b92b12", "sighting_of_ref": "indicator--4c7f49fc-f069-456c-ab0c-50fbe3542784", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573c1989-8416-4bd0-9f10-0085c3b9fc4b", "sighting_of_ref": "indicator--289a1f9e-5d0d-4052-aea3-6e0fb71405cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a924b790-a7ae-4479-8b64-8a9a3d3a42c4", "sighting_of_ref": "indicator--1a8876e3-6366-4740-a2b1-27f263d0027a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc40b379-c0a5-4bde-a185-5f4c0987ca41", "sighting_of_ref": "indicator--1a8876e3-6366-4740-a2b1-27f263d0027a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3073e99f-7597-4e57-950a-a3c91d2470cf", "sighting_of_ref": "indicator--8e0f3551-b16e-4ba4-9529-9258e2ef65da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b682533-9a0d-49db-b7a1-87250fb356db", "sighting_of_ref": "indicator--8e0f3551-b16e-4ba4-9529-9258e2ef65da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d30ff5-483e-43c7-bd02-bd00f5c01504", "sighting_of_ref": "indicator--8c2a294d-92d5-4d71-a9ef-3759ec7d72ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d67e91d-8a5a-4ab0-859f-e74821f207d1", "sighting_of_ref": "indicator--8c2a294d-92d5-4d71-a9ef-3759ec7d72ca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abe98b0-27e0-4728-87ca-ad306318fdb3", "sighting_of_ref": "indicator--434201a0-730a-40fe-bc7d-75e6a10ac579", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbd78d5-8c19-4204-98ee-ae43c964893b", "sighting_of_ref": "indicator--456a7d7c-4663-41db-b11b-eb16b0566f49", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e4cc18-dfc0-4410-a5b7-1815f6580a44", "sighting_of_ref": "indicator--456a7d7c-4663-41db-b11b-eb16b0566f49", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cc9e65-38a7-4f1d-bd09-0771573a6a0c", "sighting_of_ref": "indicator--d25eb1d3-8fa8-4884-9dde-44183fa99218", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe18c5e-8dc0-4369-9552-3aa5b11cad32", "sighting_of_ref": "indicator--c7292c38-4755-4d92-90b8-450d26a1187f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefe81b1-10fa-4e92-9de4-b106c9434537", "sighting_of_ref": "indicator--ab930221-f401-4363-aa10-7cbf26820c51", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894a88a6-42df-4a1d-bc89-85927d2effc4", "sighting_of_ref": "indicator--0144e594-9c86-401b-ac48-122bbc9a3137", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4581f4-6e24-4ca6-8f9b-69b60b070bbe", "sighting_of_ref": "indicator--c71900b2-c40a-4fd3-a402-5696b8164e78", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd28b90b-3a6d-40bf-a883-2577249be3ee", "sighting_of_ref": "indicator--c71900b2-c40a-4fd3-a402-5696b8164e78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb088690-8353-4121-85cd-f310f6c6020c", "sighting_of_ref": "indicator--d75fcc32-3ec4-41c7-ba9b-e1f4f954ffd2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd736c9-39c2-4153-9804-4b9f68c29545", "sighting_of_ref": "indicator--d75fcc32-3ec4-41c7-ba9b-e1f4f954ffd2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f325cf06-6b02-4a16-96ce-d42f3b6e779e", "sighting_of_ref": "indicator--054ec9d9-5fd1-4ba3-9885-8457aa296b21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e143f90d-4ffa-4a0f-8ccf-fd7fa3c49e41", "sighting_of_ref": "indicator--054ec9d9-5fd1-4ba3-9885-8457aa296b21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c44c8bb-7a5e-47c0-a4cc-c02c33dd67d4", "sighting_of_ref": "indicator--d19a684b-31d1-453e-9ca9-8a35a8eed64e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a17ae7-bb98-4a5b-b5df-406408113a61", "sighting_of_ref": "indicator--d19a684b-31d1-453e-9ca9-8a35a8eed64e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c60857-e8a3-43c4-87a6-8430e19f23d3", "sighting_of_ref": "indicator--6929ca6d-1181-4aaa-a909-5362720f4ccd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc14f11-de85-41aa-b5db-46c0d63a5f60", "sighting_of_ref": "indicator--6929ca6d-1181-4aaa-a909-5362720f4ccd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32075c1f-375c-41d6-aed4-a940f7c06721", "sighting_of_ref": "indicator--797d6855-97f6-41f9-aa43-d08ad92a088f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54e9528-80ae-4d9c-b7ea-b149029838c3", "sighting_of_ref": "indicator--797d6855-97f6-41f9-aa43-d08ad92a088f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b437ed-1284-4e54-8205-3b02768fec2f", "sighting_of_ref": "indicator--19e4ff60-786c-4d82-8317-7766db1c4cb1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482eab15-9ed5-4dad-9dfd-3bd3a43e5c2b", "sighting_of_ref": "indicator--a1f7d648-e035-440a-aa41-2ee495a02bbf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa45046-0c68-469f-a0d6-e1fe21573898", "sighting_of_ref": "indicator--80ed70b1-d885-4294-ab8c-88950f621c05", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88ebe8e-9bad-4b12-b1f7-9f27dadd2457", "sighting_of_ref": "indicator--80ed70b1-d885-4294-ab8c-88950f621c05", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebbf1f6-e35d-42e9-bc69-bcec5e733e01", "sighting_of_ref": "indicator--687cb254-1451-4431-aa8d-06dd6f8d0275", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83d107d-902c-4468-98c1-0abea868a3c5", "sighting_of_ref": "indicator--ff13ed5b-0dc6-4193-9d3c-bc3ac8b8b67b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c406d4-19ab-40b0-b910-33b0ee957adb", "sighting_of_ref": "indicator--ff13ed5b-0dc6-4193-9d3c-bc3ac8b8b67b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84d8a02-65b3-4425-b294-7f7582eba307", "sighting_of_ref": "indicator--024c769f-fb36-4fb5-a70f-32ebd08d5ceb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc178e1d-4db1-4868-84f7-4f69a7d8a1ee", "sighting_of_ref": "indicator--024c769f-fb36-4fb5-a70f-32ebd08d5ceb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece2ed57-dfe4-499a-a9f8-2c852d9946cc", "sighting_of_ref": "indicator--15d16e20-43f2-4e3b-bea1-24219ee96ed6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bb472f-c5aa-4ae9-a8a6-aadd9dee4c14", "sighting_of_ref": "indicator--491c7190-ce59-4024-9fed-427c60a8a254", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ca2b39-2baa-4a59-ac3c-51dc24c5ccbe", "sighting_of_ref": "indicator--17106c57-6427-4c56-957b-0e9ea7bcb022", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8756003d-6c1a-48f7-bdb1-d65268fbb095", "sighting_of_ref": "indicator--d32fc2ee-f00a-43e7-a904-53124a2399c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812972ed-bdc4-4ba3-a128-e1bb59eb155e", "sighting_of_ref": "indicator--d32fc2ee-f00a-43e7-a904-53124a2399c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a52e53f-76af-444e-a5cf-35e0af0df6b9", "sighting_of_ref": "indicator--5ca02f6d-1be3-4f19-a975-3c3d27493abf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe33686-ef5e-4fdc-8400-6cab93b9953e", "sighting_of_ref": "indicator--5ca02f6d-1be3-4f19-a975-3c3d27493abf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47352a4-ee5c-4f8b-8d95-339557b566d8", "sighting_of_ref": "indicator--dcb5a750-6033-45d5-9b8e-5b2dee1a05b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590f554e-22c2-4f8e-869b-65d5b7823345", "sighting_of_ref": "indicator--9e628612-3033-4fb3-99ea-807d1e34d2b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90097340-7f52-46e4-a71f-f888b4e4b6d1", "sighting_of_ref": "indicator--cdd181ad-f3d1-4316-b59b-81fec04eb714", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d8e607-e98a-4d61-bce3-81d85be8e887", "sighting_of_ref": "indicator--cdd181ad-f3d1-4316-b59b-81fec04eb714", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e484568-0e06-4843-9eb0-076a7e00920b", "sighting_of_ref": "indicator--2da66cf2-aac1-4df3-8ae0-0ac21e17075b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ece3bf-aa40-4025-8edd-ae9e21f5858d", "sighting_of_ref": "indicator--fb899409-9234-488b-b0b2-ad922e1bf3c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5285b980-9a7f-4705-a8e1-1e2765986658", "sighting_of_ref": "indicator--0e38c3ef-3c81-4754-91ab-512dfb486f37", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe457a1d-1cf6-4ade-b896-e3acf454ed4f", "sighting_of_ref": "indicator--69bbf0d6-fd72-45b7-9bfd-63bea795ea19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b5f944-bcf6-4651-baea-ad4c183b5dd7", "sighting_of_ref": "indicator--20e847b5-07ba-4b0c-b406-4ad33404d800", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9176585-965d-4581-8fa6-990ffb0699a9", "sighting_of_ref": "indicator--20e847b5-07ba-4b0c-b406-4ad33404d800", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0309cf5-ac0a-46e0-94ef-b6377d5377f7", "sighting_of_ref": "indicator--2749a81e-7db0-40a0-aa19-6f7dd72856a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8a3df5-5344-40b5-a381-989fb159a05d", "sighting_of_ref": "indicator--317d0e4a-99d8-4300-8f23-32abeecef525", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f3ce8a-0e3f-4b2c-bcc8-2eaf58b46ea8", "sighting_of_ref": "indicator--317d0e4a-99d8-4300-8f23-32abeecef525", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec333079-1254-4479-9cd9-e87b59a3fa26", "sighting_of_ref": "indicator--c47ec4c2-e5c5-4ee0-87e9-2095148b57a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6b3310-64f7-4f80-8053-6ff608643fa7", "sighting_of_ref": "indicator--c47ec4c2-e5c5-4ee0-87e9-2095148b57a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb7f9fc-15fe-4bd8-9aeb-3c43ab9d31c1", "sighting_of_ref": "indicator--d9686acc-92a4-4fbf-ad91-c85c5ed80580", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db01010f-e394-4be6-b255-62d77a3a50d5", "sighting_of_ref": "indicator--7676883b-886e-4178-aa0d-7779bd788ca4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a35bcc-686e-4ecd-96f6-e71ec15dd484", "sighting_of_ref": "indicator--7676883b-886e-4178-aa0d-7779bd788ca4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de1710b-71f2-4369-b6b9-0f17d5ebad27", "sighting_of_ref": "indicator--28c5023b-52e9-417e-81a6-11a916b6cb4e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba06a2ad-7e07-470f-b66e-8c788453e75a", "sighting_of_ref": "indicator--98d6f3b8-7108-48b1-aeb2-714f79f3faff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7e6bbb-7910-4cfe-a6b7-a4927d787b95", "sighting_of_ref": "indicator--b52cc4ba-e3fc-4ffa-9852-2c7c07fc644c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e3a21d-258a-416a-9f14-92e880bd7d43", "sighting_of_ref": "indicator--785724ed-bd2a-4269-b636-61773afa2094", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa87036-00dc-4204-898f-2a201973b057", "sighting_of_ref": "indicator--785724ed-bd2a-4269-b636-61773afa2094", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0843ceb5-9c82-4e43-8bda-7a572a712345", "sighting_of_ref": "indicator--182844d6-2192-4264-a6e7-8d1aa674ce5f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4966a9-08a3-45fc-9769-f7162249edbc", "sighting_of_ref": "indicator--3b654063-47c7-4215-9d6c-f3907980c779", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac5bc84-95fd-4a9e-92ef-6255a9d464fa", "sighting_of_ref": "indicator--7cf688d3-8586-4076-a9af-34ad08247954", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4118bb1-a684-482f-bb4c-95200fd9c261", "sighting_of_ref": "indicator--7cf688d3-8586-4076-a9af-34ad08247954", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bafb96-2498-457c-8b5b-0014c78595de", "sighting_of_ref": "indicator--48f924ac-71ad-40e2-b5d7-59b2a31e0a7f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d0c53b-1fe2-4cd8-8512-18eda9b1b114", "sighting_of_ref": "indicator--48f924ac-71ad-40e2-b5d7-59b2a31e0a7f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fe4224-3d0d-4d71-a13d-16d2d0d294c5", "sighting_of_ref": "indicator--15eae697-5933-4a64-bff5-4f1d8fcd5743", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9910f835-e161-4c9d-ac83-fd90abf31632", "sighting_of_ref": "indicator--15eae697-5933-4a64-bff5-4f1d8fcd5743", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e24e48-bcca-4493-827f-49b97b63d9a0", "sighting_of_ref": "indicator--21b532fe-07ae-4cd4-ad70-be53e50fa921", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d20265-472c-416a-98ce-ad9d0da981e2", "sighting_of_ref": "indicator--21b532fe-07ae-4cd4-ad70-be53e50fa921", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56230369-b618-40ab-8bc6-5a4fb1dfedc6", "sighting_of_ref": "indicator--b11b1caf-b910-4304-8c02-76d527811586", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f0b49f-a834-4a05-86d6-8417ff80f680", "sighting_of_ref": "indicator--b11b1caf-b910-4304-8c02-76d527811586", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fca08f-9da9-4059-af40-3f60d6f8059d", "sighting_of_ref": "indicator--2ee8046a-803e-4ed7-8288-ce25df61ff7e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c71b817-b21f-484c-943b-d06d2533ec3e", "sighting_of_ref": "indicator--7bfabae1-77d1-4bba-9249-3b6748741c30", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08690d8c-8fb8-4ccd-bfe3-829e49b3f03f", "sighting_of_ref": "indicator--8d9ae0e7-30e5-4f31-a397-60b15f34c4b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75658c4e-9419-4b6b-96fc-fe5e5a02a328", "sighting_of_ref": "indicator--8d9ae0e7-30e5-4f31-a397-60b15f34c4b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b05b931-6014-4a5c-9d51-bad605805c93", "sighting_of_ref": "indicator--1c9768c1-2a46-4953-9292-6d6a043f1e8d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd7de21-c7af-414f-9551-6967e6abfcca", "sighting_of_ref": "indicator--3fade9df-e42b-4af9-8500-6921995624d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b07450c-993e-4f71-9fed-ac8f2b44934c", "sighting_of_ref": "indicator--54f0068e-94e8-4940-84f4-557b7c02faba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a497aca-bb6d-49d2-997c-13002060e5e7", "sighting_of_ref": "indicator--0dffefbd-84ab-49d7-903f-2c2a5395b39f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de13d0e7-92d2-4da0-9e41-924d8609c4c9", "sighting_of_ref": "indicator--817f2d27-3b80-410e-8bb4-c4ee0fdcf65c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3a5e3d-3ed2-4f66-a906-a98248bdba50", "sighting_of_ref": "indicator--817f2d27-3b80-410e-8bb4-c4ee0fdcf65c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8965a08-1c74-4e4e-8c32-f12493aeecaf", "sighting_of_ref": "indicator--07a12fc6-a38a-4469-9e43-edd431e82754", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304de1b9-546c-4318-89c8-87a3e625e835", "sighting_of_ref": "indicator--07a12fc6-a38a-4469-9e43-edd431e82754", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d4dcd5-eaa4-45b3-9436-6bd966b6f859", "sighting_of_ref": "indicator--b37bd046-7ec3-4f94-9c77-3db9cb9bc6fd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ff4f46-0197-4cf7-9c2a-41e2d69a3d0c", "sighting_of_ref": "indicator--3cf9a60c-10f0-4ae5-8bd4-e15da6c58eff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431b702a-c392-4d5d-a09f-1275be7694fb", "sighting_of_ref": "indicator--196262ce-04fb-4221-9eaf-fcd5c36a5ee4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a23dfa-259a-4915-b30a-9cfd013c48a4", "sighting_of_ref": "indicator--a3ba517b-f05b-4f8d-a86d-76918ce9fac6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9ff324-acf3-45df-b3f5-a7032df79ea3", "sighting_of_ref": "indicator--154b3f22-a688-4bb4-9802-29cb9d1bde32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e6d0f6-2fc0-457c-8bc7-295ebeeb79e1", "sighting_of_ref": "indicator--6356c38e-2019-4cce-84e5-b9e681828a3d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671048cf-298f-4862-9f31-7be12c377f45", "sighting_of_ref": "indicator--4d399bfe-2a86-4143-ab5c-197d5ec61a08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f172bd8-e624-43bc-8c27-0ba15529b55c", "sighting_of_ref": "indicator--dbff70f3-6bd0-433c-9e02-a39ba35aa4bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290373f9-024f-40cd-ac70-94783a667147", "sighting_of_ref": "indicator--dbff70f3-6bd0-433c-9e02-a39ba35aa4bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d52a48-c9af-4fee-a0a8-70517e44a95f", "sighting_of_ref": "indicator--d152943e-8a7b-48c3-8ccf-71c52fd7a47c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65cb048-a786-4028-afac-4eefe07b7983", "sighting_of_ref": "indicator--d152943e-8a7b-48c3-8ccf-71c52fd7a47c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7b0da7-450d-4a8c-b1f9-3d551cab7674", "sighting_of_ref": "indicator--ce9704cf-add2-4493-9041-2e4037378fa8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2177fa-d000-4a82-902f-4a9d740a7eca", "sighting_of_ref": "indicator--8a6ac5c6-2cb4-43e4-829d-ae6743329ed3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55670f1-e751-41eb-b9b0-2297441dc296", "sighting_of_ref": "indicator--2b9bfba5-4725-47df-bd4b-3592b7dcedbf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc689ec9-c6f8-4946-9775-c7994826ade4", "sighting_of_ref": "indicator--79891e7e-34df-4ff0-b231-31878ba13d9c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff463ad-d9d1-4206-bef6-eeca0dfb63ca", "sighting_of_ref": "indicator--f1ed8800-a830-4a80-a1b5-0f52a3ed8462", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99be9ea1-c0f1-4c9f-995c-82f62238a64e", "sighting_of_ref": "indicator--4f0106e6-de3c-4f5f-97a2-8a5595a7d022", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c34d048-0d3a-4991-a3cf-7e3a3bb72bc9", "sighting_of_ref": "indicator--5f44aaf1-6360-4985-a865-4580a14e6790", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cb50c5-feee-4e2a-97c3-7ec1bb00a2b9", "sighting_of_ref": "indicator--5f44aaf1-6360-4985-a865-4580a14e6790", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e2e817-c4c4-495c-ad36-68e7c6bb08f0", "sighting_of_ref": "indicator--dfe66a49-06b9-43a3-adeb-5a8b35219ae6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a796ca-51a9-409d-ab79-6b0dbf54540a", "sighting_of_ref": "indicator--3c6a74dd-7a62-4036-9e5d-ede48578d62e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033222d8-ce20-4ff6-992d-8bb7b1c72552", "sighting_of_ref": "indicator--34917c79-380c-4566-b486-f6750b35c4ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae276b0-5787-4e35-afa2-2a0feb1b5457", "sighting_of_ref": "indicator--34917c79-380c-4566-b486-f6750b35c4ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc62fd5-5f96-441b-8ee3-d55bada5c5fe", "sighting_of_ref": "indicator--73abda43-4067-4089-b4da-92cd61f5f37b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f69eb2e-63e5-46d3-aeef-e2be0e902928", "sighting_of_ref": "indicator--5721497a-629e-49a8-86f7-1323b0eb38ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2382a4-6f33-4d41-a976-ab90f46e8dc2", "sighting_of_ref": "indicator--8fb38859-2261-4334-be89-46524b49a9ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd764d50-643f-44a2-977c-8fbbe7dedc90", "sighting_of_ref": "indicator--b239934b-c2bc-4bf0-b513-9344d5f125ad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0fd670-e61d-4bf4-9a9f-71a505fb2c9b", "sighting_of_ref": "indicator--165218e3-0a3b-4423-b73b-fdcc4b729525", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb4c2ae-c234-449c-b5e4-52338d1e5f7f", "sighting_of_ref": "indicator--01b24442-7dc3-4698-86e4-d678aa3e49d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fcad6b-9f46-4dd7-8558-582d2e14400d", "sighting_of_ref": "indicator--f692c455-4406-47c4-a7f3-f4a3d78cb4d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965c8df4-7ebd-4254-952f-665a810e7278", "sighting_of_ref": "indicator--ed2b59b8-abcd-4c67-8f5d-e8e911dbb5d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450c9144-ee1e-48f6-8c3d-80295666f99e", "sighting_of_ref": "indicator--ed2b59b8-abcd-4c67-8f5d-e8e911dbb5d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0746c267-fa68-49d9-8a59-83a66a7d38f8", "sighting_of_ref": "indicator--b3fcd8b0-c616-4aa5-8b49-757bbd29a735", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521972bd-ee5f-4394-8985-15d6405cab69", "sighting_of_ref": "indicator--b3fcd8b0-c616-4aa5-8b49-757bbd29a735", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d06ab8-bd11-4f62-ae15-ad494870eb35", "sighting_of_ref": "indicator--fa5b4b75-6eb9-4cf0-88f7-ccd1961c266e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ef3e7a-7676-470d-93ad-434f28d893bc", "sighting_of_ref": "indicator--fa5b4b75-6eb9-4cf0-88f7-ccd1961c266e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d69e92-a504-4c65-818b-027992da04e7", "sighting_of_ref": "indicator--429ed622-d84a-42d9-9c15-d1d36f3db6ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce756f52-79d6-48a8-aef2-6924f6a79592", "sighting_of_ref": "indicator--a3c55aa2-eaff-47d1-8c46-b3979e86f526", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298b857a-f3cf-4cd4-ad18-6c26f9c57c0c", "sighting_of_ref": "indicator--62dd1544-9286-4de7-80ff-c1434307a66b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda0b812-53d0-44fd-9d2c-52e5646893b5", "sighting_of_ref": "indicator--2440e292-7e72-4ceb-95de-6514610bdc6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197e3e87-4749-4f92-aefa-4c7c58d0512b", "sighting_of_ref": "indicator--2440e292-7e72-4ceb-95de-6514610bdc6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1769a0f3-1649-4469-bcc3-d6dde5254932", "sighting_of_ref": "indicator--48ff5201-e2cc-43a4-bcdc-f7e1a7dd8d42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6537cd9e-92f9-4c60-966b-858d39cb1ea3", "sighting_of_ref": "indicator--48ff5201-e2cc-43a4-bcdc-f7e1a7dd8d42", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c6fbcc-3ca0-453c-b0cd-d9a74f841714", "sighting_of_ref": "indicator--9cf175e0-2216-41bf-a3b0-bc8c5c5c9026", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04073193-1069-4697-917b-6188931951ff", "sighting_of_ref": "indicator--2fdca5e4-18cd-4a4d-bc87-f286df914d4d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a84d01-ff30-4764-9671-8fcfffdff69f", "sighting_of_ref": "indicator--2fdca5e4-18cd-4a4d-bc87-f286df914d4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cf8448-6d4f-4cd5-a018-bcbd9e9da6f9", "sighting_of_ref": "indicator--ee15f15b-6af6-4e68-a2da-1c3f741d29a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60179ed3-4c55-4acc-98b1-757d050f73a0", "sighting_of_ref": "indicator--f39a9303-bc4d-4776-b28e-b2cb1cdd274c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2454b24-393f-4aa2-96b3-28869e0c2728", "sighting_of_ref": "indicator--f39a9303-bc4d-4776-b28e-b2cb1cdd274c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b86f22e-101f-4245-8572-93378db3f461", "sighting_of_ref": "indicator--b67bbc4b-adb5-460b-bf44-77f75eff5290", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5640a2f6-16de-4870-a7ca-527b8bcd78bd", "sighting_of_ref": "indicator--84e3ee95-4e4d-4923-a5a2-372d3617d2eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fc7a9e-0784-4ea6-a29c-49aca3c60e59", "sighting_of_ref": "indicator--1234de8f-c08c-49cf-895f-3ad71d4addd1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee06e41-9cb7-404e-93f5-0b9e12700ad7", "sighting_of_ref": "indicator--15cb59a6-b279-43c2-8f22-c70a8828cf75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3347e1fc-def7-4ebd-9c52-5212f095e347", "sighting_of_ref": "indicator--dc760cd9-ed94-41b6-9b8f-80e742c12936", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6955b2d2-1418-4bf9-aca9-a9b40b96461e", "sighting_of_ref": "indicator--6c6452a8-e602-451c-8d30-fda501758373", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f18e7f-1c11-4119-89fd-7eb7f1e46f64", "sighting_of_ref": "indicator--d2614b17-3556-4f42-92cd-9ae33ccb349e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cea6ef-55cf-4a9f-b64f-3e47a3b60d0e", "sighting_of_ref": "indicator--d2614b17-3556-4f42-92cd-9ae33ccb349e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1be485-6919-4f0e-9ef0-0809d2c9d02a", "sighting_of_ref": "indicator--4f381dd8-4f36-41dc-9d44-1895e1083636", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee04281-ff58-447a-857f-ee005e8ee2b5", "sighting_of_ref": "indicator--4292152d-a6b0-44e5-84d7-28ca74434480", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201b2efd-5a21-4bf1-8c31-a1f819f0b23e", "sighting_of_ref": "indicator--57f73a0a-95f1-40ed-b2ef-18b4ab6e2115", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c7eea9-9c12-4d31-8a4e-98004b3b804c", "sighting_of_ref": "indicator--d75b15a5-7e89-448f-ba10-86db97eab802", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c44a08-d7a8-4aa3-b3d7-7bd697aa437f", "sighting_of_ref": "indicator--d75b15a5-7e89-448f-ba10-86db97eab802", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b92f34-2adf-48b5-a4bb-6de18a5e3b70", "sighting_of_ref": "indicator--f626b2fb-864e-41f0-a0e3-2712edb09565", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48d11e4-5873-4e25-879f-0a95427d4744", "sighting_of_ref": "indicator--a60c9d8b-4814-4674-8ddd-a622b2095d69", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cd6e2e-485c-4a91-bb3c-cf12528e0a84", "sighting_of_ref": "indicator--b581c414-86d2-4d2d-bb13-6c67e10de85a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82dd618-f056-49d1-bfd6-b8537060ec4a", "sighting_of_ref": "indicator--b581c414-86d2-4d2d-bb13-6c67e10de85a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1984ca90-67eb-4fcb-a4d7-3f329f0133a5", "sighting_of_ref": "indicator--0cfca90f-6f58-4699-b04e-7b048be4b72a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba172f2-ca41-42fd-bf3b-96320a7574ae", "sighting_of_ref": "indicator--749828ed-12dd-4ed5-b6bc-fc046c98131b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46c9341-e988-49a6-8e26-4b5c1529c00f", "sighting_of_ref": "indicator--749828ed-12dd-4ed5-b6bc-fc046c98131b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbca239-fad4-4e83-82dc-3259138a0660", "sighting_of_ref": "indicator--7fec80ea-c244-4ba2-9e34-1c8a4fbfa5e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419b4e92-ffcb-4cab-8a75-ec6331b375ad", "sighting_of_ref": "indicator--7fec80ea-c244-4ba2-9e34-1c8a4fbfa5e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a80182-a86c-45b9-8ee6-0b5353ca06a7", "sighting_of_ref": "indicator--4f70f6f8-35da-43f6-9c4b-82cc97e6be8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23694634-c19c-49b7-b8f1-41be18ba3f74", "sighting_of_ref": "indicator--c08c7e8e-1c04-4900-a074-a28afa2275d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac358bd-3d29-4eb2-910a-11ba346a01a7", "sighting_of_ref": "indicator--99ed06a0-c49c-4d5d-ac14-b40e162cb2cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d585da-d5a3-44f5-99b8-ac5fe297c280", "sighting_of_ref": "indicator--99ed06a0-c49c-4d5d-ac14-b40e162cb2cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9261c9a7-6d2d-4324-879c-bc2347c58875", "sighting_of_ref": "indicator--303f0216-f686-4a72-95f7-2c760683ab17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af90ec5-1bda-48e2-a076-bda7ca8b9bf9", "sighting_of_ref": "indicator--69a6bfa1-6b25-4970-8eee-9527e4bd357b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8fcb17-b782-498d-bf0b-7439883f9f44", "sighting_of_ref": "indicator--69a6bfa1-6b25-4970-8eee-9527e4bd357b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818bee07-ef48-4376-bed5-25311097c9bd", "sighting_of_ref": "indicator--8367e64f-b3db-4e97-bd18-b946fe04151b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9930efa7-1faa-497e-821d-37ca015851c1", "sighting_of_ref": "indicator--a1701d9e-5174-4942-839f-bad5e1959e07", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1972273-e26d-4e9b-82a7-4597dd7c1513", "sighting_of_ref": "indicator--d5fdea05-cb7a-4c39-b7d6-825f2a2f74a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400ebb98-b968-401e-81ad-13876504ba07", "sighting_of_ref": "indicator--d5fdea05-cb7a-4c39-b7d6-825f2a2f74a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61e6e28-2fba-4fb1-ae02-94f6fb74cc7c", "sighting_of_ref": "indicator--89493247-771d-4fae-9005-4bf947e3d639", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dfbd0a-a120-4e71-9cca-771c8fbac0d8", "sighting_of_ref": "indicator--f2a851d3-236e-4b01-a1b3-968c5c67041f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc0b2bf-9896-42c8-8aa5-59c587d9d8d0", "sighting_of_ref": "indicator--f2a851d3-236e-4b01-a1b3-968c5c67041f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fc61f5-d492-4f84-8288-fc4f9e3261e5", "sighting_of_ref": "indicator--e360368b-99f3-4ed1-98b0-2457eb170a4c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a6836b-7285-43b3-a641-ce9ee6b4779e", "sighting_of_ref": "indicator--9d7e480f-bbf5-4c6b-a65a-44364c0c39ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002c4077-8106-41f5-aa1a-67788fde4c4d", "sighting_of_ref": "indicator--3a37f423-613c-474a-8190-19a2a0c49622", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdc2145-43ba-4026-a148-5d6ec0af4931", "sighting_of_ref": "indicator--b6cd4714-a8c3-4e0e-b9df-15fab11da3d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502c27c7-f954-423b-ae44-18765c81b238", "sighting_of_ref": "indicator--b6cd4714-a8c3-4e0e-b9df-15fab11da3d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd24870b-b0e9-4eb9-92a1-06fca7fc8642", "sighting_of_ref": "indicator--44a47d84-2c78-4ec2-b525-95ce45c4a05c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c13cb8-f5c9-415e-83a6-65e9a9ef6d05", "sighting_of_ref": "indicator--44a47d84-2c78-4ec2-b525-95ce45c4a05c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016be7cd-3c44-461e-9ceb-db8e3366f678", "sighting_of_ref": "indicator--35b25e18-1b9f-4967-9e49-ca0c032da448", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d2d7f3-cfca-4fdd-9edd-e7a2ad26edb0", "sighting_of_ref": "indicator--35b25e18-1b9f-4967-9e49-ca0c032da448", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e053e313-e0a6-41cb-9d04-61ecd6f802ec", "sighting_of_ref": "indicator--9dfbcb62-b096-443b-9c08-4de938c6f7c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4a00a3-8f78-415d-b740-f3505da16166", "sighting_of_ref": "indicator--f4aa4172-c74f-433f-ae43-5aa12b077b90", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee89bebd-f731-4046-9bfb-9c8c5ce76268", "sighting_of_ref": "indicator--a7dc0724-b32a-4dd3-8620-58a60eb286c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f62c36-769e-4fac-b86a-7118980bd41f", "sighting_of_ref": "indicator--61bb7c88-8d0a-44dd-bf60-eca5f89a2b1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9f9f89-645a-4f61-91cd-760189cd1fed", "sighting_of_ref": "indicator--cb0f9f28-bccb-476d-a35f-920ba6c331d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aca333e-e12b-489b-88a3-d7a8e5cd3278", "sighting_of_ref": "indicator--3ead3773-d145-4a9a-97ea-5a912ba3aa83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcf7578-e1d4-43d7-952b-0e6f7b1de55e", "sighting_of_ref": "indicator--58d154e9-32cd-4e33-bfbf-cef9933f26ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b54ab50-6d1b-404e-9c8b-3f57d7afd310", "sighting_of_ref": "indicator--58d154e9-32cd-4e33-bfbf-cef9933f26ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64711786-8e37-4719-81dd-7d40e6901aff", "sighting_of_ref": "indicator--2f852686-b3bc-42c2-9d9f-c929911d1174", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb998e9-716d-4714-a291-1a5b2288d97d", "sighting_of_ref": "indicator--b51947dd-7101-4be7-a1eb-6e071a9225e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8513568-d6fc-4968-a8b3-4838a1c20e1b", "sighting_of_ref": "indicator--f09c60fe-ab17-414a-bb16-e7d6291a87d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309b10a3-1c3a-4ecc-b4df-47f7b2a9f99a", "sighting_of_ref": "indicator--d117029f-25b6-42ee-8e23-0756d4c760fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8e5369-308d-4f43-bf3a-de8579eb124f", "sighting_of_ref": "indicator--d117029f-25b6-42ee-8e23-0756d4c760fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9ec3c8-49b6-45af-a031-9998beb6abad", "sighting_of_ref": "indicator--1176e0af-2778-4ea9-ae46-16bd258d43c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83880e7d-8026-4593-814e-9b02faa10f71", "sighting_of_ref": "indicator--c1ff6f53-df6a-419c-a29d-1fee4001cbeb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf7bd4c-dd37-45d0-8ae7-58ff6e2d7075", "sighting_of_ref": "indicator--ad704851-fb73-486d-9994-94c6ae0a7969", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ee62d7-f5d8-499e-8ffd-b435a843acd7", "sighting_of_ref": "indicator--e26b3135-eef3-4c49-8fea-ecd0d41c478d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb0a6af-bb52-44b1-84ff-8e73c1c2b708", "sighting_of_ref": "indicator--fe7ef295-c505-4ed0-a04e-339d166fa7f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf283fa-fba3-4df4-b881-1419c7132754", "sighting_of_ref": "indicator--b1460e1a-964a-4834-bd5f-4120f651aa49", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6622cb4-1afb-483e-8b68-cac25d84be4d", "sighting_of_ref": "indicator--d976e500-2037-4d5b-9a5d-188ad2232e08", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28d7f50-3bc7-4d4e-a165-e34cc39b056d", "sighting_of_ref": "indicator--d976e500-2037-4d5b-9a5d-188ad2232e08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdbfd99-fddb-46b8-8d0b-5c49f315bb60", "sighting_of_ref": "indicator--039fd5f8-e9aa-43b6-995e-0bfda6f79dbe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1467e990-5911-4dfa-beda-a2c03ed410bf", "sighting_of_ref": "indicator--039fd5f8-e9aa-43b6-995e-0bfda6f79dbe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc048f77-e178-4ac0-83cd-d657f2d212b7", "sighting_of_ref": "indicator--51b36fde-6e48-45d6-a799-3b09eb7e42fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7db6db5-9b58-4c17-806e-97085d0ad4f3", "sighting_of_ref": "indicator--51b36fde-6e48-45d6-a799-3b09eb7e42fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f52729c-1374-46db-a1cb-20788c953b26", "sighting_of_ref": "indicator--e7abf1a6-4f90-4152-97e2-ea2c8d51d376", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e049d3-e834-434a-ba3a-4dd5ed96caf7", "sighting_of_ref": "indicator--e7abf1a6-4f90-4152-97e2-ea2c8d51d376", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e17f019-bd7b-4cd9-82b6-86f119a81b12", "sighting_of_ref": "indicator--acb1ebe1-43eb-4864-b55a-2fd903ef4193", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1301d2-1d54-44b2-8cdc-48929ed56295", "sighting_of_ref": "indicator--acb1ebe1-43eb-4864-b55a-2fd903ef4193", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5129b898-58db-4f7c-8343-60aaf4abf37c", "sighting_of_ref": "indicator--ab877140-c0c2-42ca-8c76-acc5efa0686d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabc9bba-c16d-49b6-81a0-327ca56ffa78", "sighting_of_ref": "indicator--ab877140-c0c2-42ca-8c76-acc5efa0686d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f51c9e-d9cd-4248-886b-447ea172724e", "sighting_of_ref": "indicator--56af0fd4-656c-4f7c-a9ad-6359e4acb448", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a7a077-e03d-4e20-8b58-08cf6855cacc", "sighting_of_ref": "indicator--c78a6cd2-1b9f-49fd-9134-40fff1847b9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dbfcb2-3f58-427f-84c2-85c8afc4a0ec", "sighting_of_ref": "indicator--a2ed5698-a15b-4f3e-9ec9-33958b3dbd99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ee984e-25ce-4f93-8d86-3ff120032283", "sighting_of_ref": "indicator--839ff9f0-e6ac-419e-a51b-90314330ed47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f1ce62-d4e8-4b74-a0be-63d2f031489a", "sighting_of_ref": "indicator--11956877-0cf3-4c5b-b15e-178bcb9df69a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8687b666-8a9a-49be-94b1-f366e5b9872e", "sighting_of_ref": "indicator--072a4354-bb44-4a18-b50a-2fd5ab27f42a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187fd7da-4ce3-4012-8de1-c66ac281c2af", "sighting_of_ref": "indicator--072a4354-bb44-4a18-b50a-2fd5ab27f42a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d6eaab-f5f7-4f71-896c-b570369caecc", "sighting_of_ref": "indicator--1f180c57-0eac-4785-8dea-ff5fafc6324e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd908c9e-5c5e-4211-8a33-17c225139a39", "sighting_of_ref": "indicator--1f180c57-0eac-4785-8dea-ff5fafc6324e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62406b9c-25c8-4f9b-b414-0495d8fc4670", "sighting_of_ref": "indicator--09372d3f-c05a-455c-8279-c9fe53f8a398", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec50e61-42ac-4702-b359-53eafb5f6a32", "sighting_of_ref": "indicator--09372d3f-c05a-455c-8279-c9fe53f8a398", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6538dcb-dd24-4194-b37a-9323e8b56aa3", "sighting_of_ref": "indicator--876ec443-1ed6-43f3-ae25-65d40fe55bca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dde0ea6-5177-4471-a507-01cd6ca62148", "sighting_of_ref": "indicator--0232450d-43d1-4548-b3cf-f3c9dc1da07d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265256a7-78d3-4cf0-bfeb-6746127cea4e", "sighting_of_ref": "indicator--7ad104cd-631e-4aab-a564-4e0f96223106", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99831b2d-afe8-49e4-a4ec-ed5782efcd23", "sighting_of_ref": "indicator--7ad104cd-631e-4aab-a564-4e0f96223106", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd1ac72-0baa-4475-a019-fa78e2277f6a", "sighting_of_ref": "indicator--a6e77f3f-85e0-4b79-a12b-4369e70f2505", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59791e53-3d1a-47c9-876f-65f80dfd6bba", "sighting_of_ref": "indicator--bab49750-0a66-4b33-a68f-1ba744497789", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e17df74-ecd6-4cd4-86ed-35d49e9b005c", "sighting_of_ref": "indicator--5133a460-90a9-4e27-b10d-89da5ff3bf09", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47add3d8-2eab-4515-b5d3-5dcec3f5a1a7", "sighting_of_ref": "indicator--66c43edf-aa45-4ed3-99ed-0f74c762c110", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c637e0-ebe7-4556-99f0-da44626ea5db", "sighting_of_ref": "indicator--66c43edf-aa45-4ed3-99ed-0f74c762c110", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df39b6cc-1963-4dc0-a935-f6b06ba7d4f5", "sighting_of_ref": "indicator--39d35b90-18bd-49fe-921b-1ebbee509cb7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d2513a-b579-4cb1-8a1c-1f2ab71b8be5", "sighting_of_ref": "indicator--b57a7ed2-0828-479b-a0aa-b176bca1fc17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c1cf8c-c6ef-4946-8e68-3da4297a2087", "sighting_of_ref": "indicator--13481e4b-8b8b-4661-a985-18e8cc4c0f97", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25076606-9f4a-430f-a0f6-5a1d919c45fc", "sighting_of_ref": "indicator--89380249-103d-4ccb-b538-685b0cc4cdd9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0aa3d4-576c-4856-8a60-dfbb014f5bd4", "sighting_of_ref": "indicator--9891def1-3347-4dc7-bbe8-0e82151447f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb0ae64-9ba3-4934-9438-189dc988dcb4", "sighting_of_ref": "indicator--7c2bc560-9633-4ce6-812c-6bafe685b60a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8564a485-6c7d-4e63-96d6-c58fb49ddc93", "sighting_of_ref": "indicator--51663432-5805-4e5f-b58f-eb5fba75a0c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2a98ad-6c15-4be9-804d-db8feef930c2", "sighting_of_ref": "indicator--d3374c30-e08b-4b93-99f1-3a3eb2ffae78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec6d890-620a-40f7-865b-1cfe09a77cb2", "sighting_of_ref": "indicator--4ce13f20-49d9-49ef-a551-6643164a11e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dfb9bd-9984-42dc-a558-0ea51845c7c1", "sighting_of_ref": "indicator--7090a5c0-439b-4fdd-a2fd-d339d51bbef9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f19d682-506a-41a2-a12c-fbed81c2fde9", "sighting_of_ref": "indicator--6d7afa6d-c534-4b06-9f92-13a15167f697", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd905655-7cf6-4efa-bd07-4cd8f05344df", "sighting_of_ref": "indicator--9020c370-303b-49eb-9505-e55c20de05ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0dc172-df33-4e28-8e78-f005ea8a7913", "sighting_of_ref": "indicator--0b6157d8-e3cf-4dc1-b727-a4f345c8023e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c95d812-4ea2-4533-9683-9889bc5e3226", "sighting_of_ref": "indicator--f2108df1-6ac8-490b-acb8-e0f53c590385", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826b6f5c-f1a0-4284-ba1d-3934186260dd", "sighting_of_ref": "indicator--4c1cac01-f0cb-4c36-9f70-554335dc454d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b7b4a1-2a3d-4b17-8372-b2e0521ec130", "sighting_of_ref": "indicator--7694eef1-2ff0-4531-a35e-68e9f3d399a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcde510-8e60-4237-a0d2-209471dc1ac1", "sighting_of_ref": "indicator--ccef7315-6490-4b38-b9fb-a3d4320b6769", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17097ad-31e7-40c7-9494-b453d1c123d4", "sighting_of_ref": "indicator--ccef7315-6490-4b38-b9fb-a3d4320b6769", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65091601-ca3a-4d7a-aa6d-7737008c227d", "sighting_of_ref": "indicator--5ccd8bc1-3fa2-4117-9f88-6f9c00b3eafc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfff16ec-56a8-4bbe-ab1c-fa11fcbd4f47", "sighting_of_ref": "indicator--eeaf102b-a069-4336-8f32-71fb8607878a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963ebdf1-a64b-433a-9f6f-e82f4c7e9acf", "sighting_of_ref": "indicator--5e527267-4eb6-4f7d-b9a9-bc1ed4297e1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d0a7e1-0d3f-49f7-8df4-08407d14be35", "sighting_of_ref": "indicator--f2b62849-fc7c-4fa9-b573-522d0c051e4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d747279b-0ed1-4037-a5f4-6aace123ea12", "sighting_of_ref": "indicator--04829c60-402c-437f-995a-bf61ba3d870b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6931faa-1a0e-4611-a78c-dc7365f1dad6", "sighting_of_ref": "indicator--137769c8-6149-44fe-b629-7c9c87a2e1f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a98a9c-304f-460f-b2d1-8ca45705795e", "sighting_of_ref": "indicator--66391851-537a-4ee4-92a2-42c36760bdc5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f8adb3-6c9e-4f73-baf9-b6cf8dc3e37c", "sighting_of_ref": "indicator--fa10a7e2-631a-43c3-8316-4b37a57b32ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1718fc-0c31-4a8d-8fb1-9d5c2e8d20f9", "sighting_of_ref": "indicator--6cffa5f2-5535-4c3a-86e8-fb58c0e30e3e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6cd52a-2515-441f-8514-0c95bbab5d20", "sighting_of_ref": "indicator--1f0b7a1d-bfd8-4ad4-8bfe-9c62d6fac04a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7350365-8f46-4b92-aa8f-ce82b6d5e097", "sighting_of_ref": "indicator--6cc4f562-3c7d-43b3-9d0e-65930e7ad70a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1368b93-0b02-4083-b890-15826cc1c34e", "sighting_of_ref": "indicator--2b9a9d6c-b7a0-4dee-a2d2-994584c0cc4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f227cd6d-8e1d-468b-afe6-4896cea6ce17", "sighting_of_ref": "indicator--ecdf7856-68d5-4172-9e04-57b779676c0b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7f80e5-4190-4e4e-84a7-88c4091a7f3a", "sighting_of_ref": "indicator--6075cf5a-c3c2-4e5a-a34c-c6a4e0da046f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce661b6-9c48-4416-b0bd-0b4072bad1a2", "sighting_of_ref": "indicator--6075cf5a-c3c2-4e5a-a34c-c6a4e0da046f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9b1246-2ba9-4a31-bbd2-703dd7dc2644", "sighting_of_ref": "indicator--5a8cbf9e-3810-4346-ae34-58f8794dc61a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4ba49b-d855-4b2a-a492-f51f3a4b6264", "sighting_of_ref": "indicator--062bd5cb-e51a-43ac-8dcc-449b65d6bae1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bdfb0b-d068-4fc7-a870-b3cfa5bde02c", "sighting_of_ref": "indicator--599fb556-bc3c-48bd-b548-7cd3033598ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72b3b9b-41fa-4d62-a679-ec9d7bdf371f", "sighting_of_ref": "indicator--599fb556-bc3c-48bd-b548-7cd3033598ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39962a0-d095-4c38-b217-a6b4a16aeb43", "sighting_of_ref": "indicator--6f3cae70-9ac1-4e3d-b65c-447b9372c549", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3347ac-1fe9-4426-bcf7-ba3c466c53bc", "sighting_of_ref": "indicator--4e416257-3be8-4fcd-bbde-dc002684f846", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18235a47-1835-46c1-9e7b-86cd31fc5e2e", "sighting_of_ref": "indicator--94132856-6e8e-4394-8601-d629c43a9e95", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec528d87-b55e-4e57-a33b-df44b7dbd09a", "sighting_of_ref": "indicator--c6b77ffc-fd08-4a2a-9099-849db5e91109", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b85f47-699b-414f-95f1-026a231976cf", "sighting_of_ref": "indicator--d6e37c6c-4883-4418-b7cf-70d11b60d3fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcef97d-e609-4dfe-a91e-bb061aa6c726", "sighting_of_ref": "indicator--64560860-d0c9-4557-ae4d-13527024a6c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3bb0fc-87e1-4331-b293-aa4730435c10", "sighting_of_ref": "indicator--64560860-d0c9-4557-ae4d-13527024a6c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010bb62b-ffc2-4f57-b2f6-e2d3f1c6fbaa", "sighting_of_ref": "indicator--8eac3312-33f3-42c7-b8d9-f9eff09f30a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9680e07b-8d56-4e38-95fb-ef40ef4d3d9d", "sighting_of_ref": "indicator--a527c439-6ae7-490d-bd1a-c9a17b450bb9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee01e69-3e42-4893-a9bb-fb837bed74cb", "sighting_of_ref": "indicator--77ebadc0-8abb-4fa7-8b0a-28dae82cc025", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42de7e33-6961-4b9c-a7c0-2e7baea7517f", "sighting_of_ref": "indicator--27ff83bb-58f6-4df0-9a93-4d79fb936a59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4386ba1-1fc7-455d-adaf-730a2601bd41", "sighting_of_ref": "indicator--d744e629-5e2d-472d-9263-5a7d268b690d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26ad976-8b32-452f-a751-edfba8febdb4", "sighting_of_ref": "indicator--04ef31d4-e6c3-428c-83b0-a7e6223a70ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2aff3ad-cf3a-43d4-8d21-048d554bb76b", "sighting_of_ref": "indicator--14cdb9c7-7df8-4b87-a4c2-d5f63e6fd6f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723c792a-72e6-4a6a-88b4-cbdc06f09ce6", "sighting_of_ref": "indicator--b0e6cb18-6af4-48ed-8006-7d274783c6bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98f99da-524b-4971-8af4-bb47746ae767", "sighting_of_ref": "indicator--58226aaf-eeb2-435c-9859-af2e54525d62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98837fff-3526-41ce-8da1-3962aaac4a24", "sighting_of_ref": "indicator--c0db03c5-0e47-491a-8fa2-e76b44df5c64", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe308671-48aa-4216-9f2e-ee8a7dd2fd60", "sighting_of_ref": "indicator--dd9bca3f-375c-462d-b496-2c445f8b486e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4a2846-1cc4-41c7-9358-e6e8784a1848", "sighting_of_ref": "indicator--9c135402-a28f-460c-9625-d0d8c5dc98d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e4ff7c-f0c2-4166-a8af-c5b4a8e31ae0", "sighting_of_ref": "indicator--0b3829f6-1d32-4c2e-b394-a26f31b31b34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f078792f-4f62-46af-ba62-00e5dcc89cb9", "sighting_of_ref": "indicator--5afa2869-ca99-4638-a09b-1e8234557d8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34b1172-214d-483c-88b7-5b79bc838c18", "sighting_of_ref": "indicator--5afa2869-ca99-4638-a09b-1e8234557d8f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9455bb6-6454-4861-838a-fb91a44b5301", "sighting_of_ref": "indicator--5b9884e1-139f-4d38-ba2a-1ca9dbc9d68c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f166082-4bbf-4557-b856-9f558b3ea3b7", "sighting_of_ref": "indicator--5b9884e1-139f-4d38-ba2a-1ca9dbc9d68c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec6f06b-d411-4758-832d-0c095127f02a", "sighting_of_ref": "indicator--6b7e9213-f2d0-4b80-b724-21075840667a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d77332-a8f2-451d-b438-eea164685175", "sighting_of_ref": "indicator--9defac3a-8afb-44b7-becb-aacb0c6c3db2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd47878-4f75-4598-a874-a5ac719a103e", "sighting_of_ref": "indicator--a55094d5-386c-496b-8218-1fe32fe86732", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ca1bf5-9fb6-4fad-8d9d-00042c04fc26", "sighting_of_ref": "indicator--e4ec01a8-bd38-41fb-bb29-931d91dab9b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94bbfec-9d17-47fe-984f-9a81dccf4fec", "sighting_of_ref": "indicator--9d3f5786-4d0f-4529-b95e-bf4c437250cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a108e84-4820-4d94-9aa8-012648f65ed9", "sighting_of_ref": "indicator--19398959-8707-4e72-b185-d1ad92048135", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2353b8-ee1b-4e21-9bb9-d8f888384f11", "sighting_of_ref": "indicator--bedd0507-a93a-4094-afd4-df3bcdc8a7d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06944c84-f6cd-4c63-b53a-0c422bfc67b7", "sighting_of_ref": "indicator--0f9449f9-e3bd-4f7f-96f9-07de87c6c1fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f265d2-b775-4bba-b26c-06e36c636744", "sighting_of_ref": "indicator--5eb2cb84-141f-456f-aa52-56ed0a1d96c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ab5072-526f-419e-8a88-865e8a54aec4", "sighting_of_ref": "indicator--cff0279d-6f40-4a3f-b727-48c9899e84a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368122df-5193-4a4f-9d36-435bad88d94e", "sighting_of_ref": "indicator--ff2cedc5-85df-4f8e-afac-fecf61e2c86f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0959a90a-0659-4800-94e0-c638802b61ec", "sighting_of_ref": "indicator--b1eaf3df-4fc6-4d59-afe4-cffd8419949b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6625b887-50a1-4af7-905a-7da556f1b83d", "sighting_of_ref": "indicator--848c3f4e-7d70-4346-a579-963ed0cec097", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ae47d7-ab48-4ec7-9537-cee9d4944112", "sighting_of_ref": "indicator--1ca9e233-45f5-47ff-aa1a-5d095970ff30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf83627-6e3b-4015-8b69-5e23ac21e437", "sighting_of_ref": "indicator--5dba4502-54ad-4977-b1b9-bc1f862311e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b536dfb0-4f94-444b-856a-39900055a0a1", "sighting_of_ref": "indicator--5f16888e-1e79-4d43-b35d-0dfd3f814689", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04f71f1-01bf-413a-8dc7-2a1557f82490", "sighting_of_ref": "indicator--50ff07e0-38e2-4cb1-b5d1-d4289c4ec71e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b42d5e6-085a-496a-9ca7-41f7d16abf75", "sighting_of_ref": "indicator--57822cbb-7985-4342-88d4-8d76153ad73c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c7f4ee-59e2-4598-8949-ce5f26d56558", "sighting_of_ref": "indicator--a46fde37-7224-4def-8b79-0ed98a6e41b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f907d9a7-208d-4acb-90b1-f5728fb445e4", "sighting_of_ref": "indicator--d152dae2-1a0d-441f-9d4f-664bd9778630", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd07afd-2571-49bc-a4e6-68a346143ad6", "sighting_of_ref": "indicator--d7b61190-2946-40d5-9915-595689f46457", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcdeef4-f65c-43d6-9d6c-d8b9b94fa309", "sighting_of_ref": "indicator--27f9e9f9-ba8b-44bf-8209-3df9fb706fa1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba08f819-d210-4a1c-9b61-72984d08e0db", "sighting_of_ref": "indicator--d084910f-8c7b-45d5-a7fa-21460d28f041", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6e66bc-dba2-45ff-816e-7274b9e0c216", "sighting_of_ref": "indicator--9bb56e05-4c79-42d6-9865-2121f5151a45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f035b89e-f16d-445b-a29c-7cf4e8f59602", "sighting_of_ref": "indicator--aaedacb9-437d-48db-8ee8-4f9f4f75e1c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b647cc97-7e0b-40c9-bac4-d3a1417cf595", "sighting_of_ref": "indicator--53ebef81-b106-4520-993d-ae33c742397a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39f0210-335e-4888-a010-f75e9ed3b3a5", "sighting_of_ref": "indicator--47e405f5-f319-4cbc-8249-f1ddfbd06af2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0aa2d8-d819-4e7a-925b-9656704382af", "sighting_of_ref": "indicator--9eb6393e-a2e7-4ee0-a1df-cd93c0da358d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43622cb8-0be3-4aa8-9e23-0bb8176a5f73", "sighting_of_ref": "indicator--feb16961-19f3-4b00-9ec8-5374d5a019fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f2a599-eb07-46f2-be1c-a2f6ec353518", "sighting_of_ref": "indicator--4fa4534d-2ec7-401d-ad61-0cc2f1f28cb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f67810-d4f6-494b-b147-5e2813d9ae1d", "sighting_of_ref": "indicator--59b33c91-83cf-4a58-b1e9-4de9e0d14494", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5333ad-6e7c-4b0d-8cff-59b014423809", "sighting_of_ref": "indicator--d9dd3c39-9b0f-4c98-be68-b66396edbd12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b13057-8597-46c8-99d8-3999f8e4a459", "sighting_of_ref": "indicator--08466eb4-4b30-4ad7-ac37-97cf8bd25bc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4cd7c6-0ad2-4615-a9bf-03edd1868150", "sighting_of_ref": "indicator--8b45e1a5-4774-4a49-a4b9-3d32deaf95d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1c7e8e-657d-4806-af57-4e10af6b8574", "sighting_of_ref": "indicator--aa946219-1065-4232-b429-4668b1543405", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3890480a-d7cd-4bab-a3f3-26a47e0620bb", "sighting_of_ref": "indicator--8219b0f8-f98d-4071-a6d9-3a40c6029f21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16307532-c8b4-49e7-b773-a1ce27d880aa", "sighting_of_ref": "indicator--e39de0d5-35fd-4dcd-8a21-79c32992c0ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1a841c-87fc-4581-88f5-a8652bb07fea", "sighting_of_ref": "indicator--2d42cc7c-61ae-4fb3-9dd0-d925ad9c8066", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03374143-f03f-4ee2-8d4e-111528235a2e", "sighting_of_ref": "indicator--3b4446ba-2e4c-4d94-81af-bbcb26a69a74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a09d57-f16c-460c-988f-11b33f87a240", "sighting_of_ref": "indicator--c442219a-c03e-4954-b53d-33962932d870", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6508710f-3ab5-4d57-a567-15d11cd88a42", "sighting_of_ref": "indicator--d674a697-d3ac-4955-8072-4fecd53a1f16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15258f1-8b42-4a6e-8dd3-3511fbfd166c", "sighting_of_ref": "indicator--5dfbbb04-8d66-4289-9578-0353fb456133", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b573cce9-cbc1-4fec-a5f7-7438b1518b0c", "sighting_of_ref": "indicator--b2845084-aed8-4c93-a2b0-1cb2ebc336b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da20387-2a7a-4cff-87f7-a17d0bb6b262", "sighting_of_ref": "indicator--aabd86cc-90eb-4cef-8dbe-23fc7e9c6ed0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef722d0-493c-483d-a5d8-74d01e159903", "sighting_of_ref": "indicator--d2319c83-bcb2-419a-81b3-e8526bd998f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c9419d-066a-47ec-b494-2439aad89ca8", "sighting_of_ref": "indicator--ee876d3d-a2ea-4482-9f0a-ab9c70042f33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84e7b5f-d82b-43a5-b95d-5865ae0c60ef", "sighting_of_ref": "indicator--c5a8cd40-1fc0-4ec9-9b71-bcc32be3d590", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eeaf94-278f-4e85-bdfc-a21f64389e3f", "sighting_of_ref": "indicator--5667839b-3245-4386-a5c7-a5df8a190122", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0186ce-7466-418b-bb31-6b3050597402", "sighting_of_ref": "indicator--b087af8a-f925-46fd-bbe6-e575b37b305f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bece5756-a676-47f1-869b-b5597b009173", "sighting_of_ref": "indicator--9c05d317-3f8e-4ae6-bc6f-8f9e3bf5955c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50a4da2-33c7-4056-b8d0-58a716d12ae2", "sighting_of_ref": "indicator--39c76ed5-c90d-4b64-8932-2f07f325314a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61c83b9-4223-450c-86a5-9586ddf9ecb1", "sighting_of_ref": "indicator--81c44d0b-c37b-48fa-b3df-dcc59a8e3f66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7855551-4b02-41b2-b731-fe822f583266", "sighting_of_ref": "indicator--9174663d-38e9-4485-ade6-b50122a33edd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3f19d6-cd92-44c3-af93-8f0219919c90", "sighting_of_ref": "indicator--6b92aea6-1de8-4a1a-918f-d93be195476e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcb9de0-93ce-4fea-9059-1e8c25070d7a", "sighting_of_ref": "indicator--e5cb69e6-6588-4f02-a587-bcebe6ad615e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0662d799-e136-41ee-a1b1-7bd84e35c460", "sighting_of_ref": "indicator--7be0dda6-12a7-4419-a76f-df14c9b7c6d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9208bb6d-14c2-498c-8b25-15ec70e66e05", "sighting_of_ref": "indicator--dc53b533-58e0-4122-bcab-85f3edb6d560", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203ae12f-a55e-42a9-b06f-d8bb0f2543d9", "sighting_of_ref": "indicator--93896823-0afb-4470-8d15-4badf5687d07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b4e7c8-afb7-4625-bd4d-dfe0f16c0278", "sighting_of_ref": "indicator--a1f5f91c-d68a-424e-8aa7-5880e2085699", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dcef47-90f1-42cf-af70-a00ff8195255", "sighting_of_ref": "indicator--b012fcad-33c6-44b4-9b55-3ad3d6403ad2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf1955f-27b1-4388-98ee-0347beae27a5", "sighting_of_ref": "indicator--cf5418df-e4c4-4b6a-8ce4-63223f73645c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb1936d-9a82-4bab-8fa1-a94195ce9704", "sighting_of_ref": "indicator--d1d6a8b5-0a18-412e-88a1-1bed8a7edc22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968bd492-9f0f-427b-8e11-9420a01f029b", "sighting_of_ref": "indicator--4b8e4fd2-4cc5-4ec5-9772-1cb7e49741a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61a94a1-6da0-4024-acae-3076cb0afdb0", "sighting_of_ref": "indicator--bd778894-105e-44d9-aba7-b16d0518c86f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cb2295-366c-4fd8-847b-fdbe6582892b", "sighting_of_ref": "indicator--5e774a31-dd18-49dc-9400-9beb2146bf8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a413e8-3484-47ff-8369-494afa65b505", "sighting_of_ref": "indicator--9ae3740a-bf72-4df2-bd05-d659bbc93811", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26076909-38d8-416e-8f83-15fd043af956", "sighting_of_ref": "indicator--e1a7fae6-558a-4942-8ffe-c9c05e7a9e19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7c6fc8-105a-4e90-b7dd-94a7dfed5d34", "sighting_of_ref": "indicator--4ca8134c-5bf2-4e33-9b00-8c9c94ad46bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9932a46c-20c8-4fa8-a17c-a97064e95382", "sighting_of_ref": "indicator--5d2c1974-3b2a-40eb-bbae-893d5930b90f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e89112f-5ba0-4a69-ae87-4f9e5520dee8", "sighting_of_ref": "indicator--5d2c1974-3b2a-40eb-bbae-893d5930b90f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49997639-8c1f-4c30-8030-d5413267ca84", "sighting_of_ref": "indicator--8147b9cc-f215-48c5-86b0-b0d68d61415c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e1779b-952f-4e6d-bbbb-b7a3388d647f", "sighting_of_ref": "indicator--8147b9cc-f215-48c5-86b0-b0d68d61415c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709c854d-7dcc-4136-9c68-1a02e0de7157", "sighting_of_ref": "indicator--dc03d7d5-8c31-488d-b49d-52271d19820f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d94aa9-8646-487b-b2e7-e130393ca35e", "sighting_of_ref": "indicator--dc03d7d5-8c31-488d-b49d-52271d19820f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbab497-5f17-4d6a-90ec-f856e46fb3ff", "sighting_of_ref": "indicator--2b011659-7de8-49c2-8037-667dd8d7e486", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48116b79-0338-4a88-957d-b0ae4e2ebc32", "sighting_of_ref": "indicator--2b011659-7de8-49c2-8037-667dd8d7e486", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cde350-25d3-4098-a30b-b68699e55b79", "sighting_of_ref": "indicator--6e405773-0a66-4233-821d-b2160bbf76e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cf82a1-0c92-4c64-8326-a217523a3429", "sighting_of_ref": "indicator--6e405773-0a66-4233-821d-b2160bbf76e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1381ba-46ed-4ccd-8ae4-40893e95ae96", "sighting_of_ref": "indicator--adbd69af-2041-46b7-a7c6-b97d3fdb13ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006faa9e-f14a-4ded-8e32-7872cf4c6b1f", "sighting_of_ref": "indicator--adbd69af-2041-46b7-a7c6-b97d3fdb13ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d73aff4-5eb1-42f7-9641-111be54e34c4", "sighting_of_ref": "indicator--2a45be23-8222-43c6-9801-6fa670a3bd1e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7babcf-5c5e-43cd-ab9d-03087133f9b8", "sighting_of_ref": "indicator--2a45be23-8222-43c6-9801-6fa670a3bd1e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d188a81-03a0-4634-ae2e-c0c7d6b99164", "sighting_of_ref": "indicator--83ce2db6-bfb6-4ae0-8222-973127388179", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df09c45-6bb1-4852-9834-d55b6368b585", "sighting_of_ref": "indicator--83ce2db6-bfb6-4ae0-8222-973127388179", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af25454-4ea3-4286-99cd-bc021505a059", "sighting_of_ref": "indicator--2680ddc3-c36d-499d-bf08-6d83915bf8df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c73098-be9e-4216-ac66-23922b2dec56", "sighting_of_ref": "indicator--322d967f-24e7-421c-894c-806581129011", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894d3ff7-48d2-47d7-a6e5-bba50e30d705", "sighting_of_ref": "indicator--322d967f-24e7-421c-894c-806581129011", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6f1c63-d3e9-49e7-927a-7bcdf756b1fe", "sighting_of_ref": "indicator--1630e947-a5a8-4b62-8340-f7ee716d380c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5c4fa8-e596-4c0e-9a32-b20eaf0f41dd", "sighting_of_ref": "indicator--1630e947-a5a8-4b62-8340-f7ee716d380c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd689d7c-ed33-43c2-8b0f-4f6b568f54e0", "sighting_of_ref": "indicator--b9dbb41a-e6ba-4579-afcd-5dc9fd6a6ee7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4d1126-d996-41ec-93ac-30d84f43952d", "sighting_of_ref": "indicator--14c3373c-51c9-407f-bf3b-e9f19d3de52b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8901b9d2-1f61-4059-9c40-61410869279a", "sighting_of_ref": "indicator--18e80ca2-7639-4fcd-b6bc-463ea554d7c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced22e62-8def-4fe2-96b9-8e8776226009", "sighting_of_ref": "indicator--e09bc67c-887f-437f-80ab-37b87c065bb9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe2e52d-9542-40c0-84ee-99a6438b12e8", "sighting_of_ref": "indicator--e09bc67c-887f-437f-80ab-37b87c065bb9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d6464a-5dec-44c4-be27-8a09a3a7a4f9", "sighting_of_ref": "indicator--b5f82f8f-b158-4d64-ad91-344dfb962fed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fe9dcc-5261-4678-8d0b-66fd2e89ced4", "sighting_of_ref": "indicator--61650fbd-a32e-4d29-9bea-b90c440d00cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49adfc8-580f-4794-9285-d473878f25a7", "sighting_of_ref": "indicator--3756401c-4055-4274-8bbc-1ca2fe3b7e68", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1afa124-0d1a-48a8-a6b3-f475333f6114", "sighting_of_ref": "indicator--3756401c-4055-4274-8bbc-1ca2fe3b7e68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc90ed84-f5d0-4f4f-8712-8717835c5bd7", "sighting_of_ref": "indicator--0ed210fb-aeb5-4b1c-99ac-a70870176c5e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76539231-0238-4fe2-9525-266f7ad8be45", "sighting_of_ref": "indicator--0ed210fb-aeb5-4b1c-99ac-a70870176c5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fdc64f-c39f-4d68-b4bc-f0033f3f684a", "sighting_of_ref": "indicator--dc898ae5-d521-4499-86fe-a75f49859ab2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd51176-80e6-4ced-9fe1-4f276a0a2bdf", "sighting_of_ref": "indicator--dc898ae5-d521-4499-86fe-a75f49859ab2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dc157a-1195-4f3d-bfd1-41b6996723e8", "sighting_of_ref": "indicator--c31af671-49b4-4e77-ad40-9e9960aaab04", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46b1e0d-570c-47ac-bc93-3a85b0cd2669", "sighting_of_ref": "indicator--c31af671-49b4-4e77-ad40-9e9960aaab04", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b433c5d7-f9f0-4863-9bcf-f8b3c51d4892", "sighting_of_ref": "indicator--7bf1dab3-5353-48a4-89ad-9676668456de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b56dc6-5eb7-4445-9730-48b4b08bdaa1", "sighting_of_ref": "indicator--23f95f18-e8be-4849-8a06-a3189b80053d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b332b4-ae79-45cc-bd49-2c99f4896659", "sighting_of_ref": "indicator--f969e639-7079-4e70-b334-a3c1b27015e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21011750-66a3-49d9-aa37-557dbf00c72b", "sighting_of_ref": "indicator--f969e639-7079-4e70-b334-a3c1b27015e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377da5d2-e74a-4b1d-b634-71e5c0f34a31", "sighting_of_ref": "indicator--64cae83b-be2f-4a4a-9552-620f30c10704", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c3005c-b25e-4ae2-b797-51af3c653e8f", "sighting_of_ref": "indicator--cf66b2d0-2d5d-4f5c-8bcb-09d10a22a798", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34802ec3-eb57-4347-9aa1-6def1a4c5952", "sighting_of_ref": "indicator--9696b3f0-9480-4fc3-bfbd-bdf1c1e1213c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2af3c6-524d-4f88-bdae-40d6a09835bb", "sighting_of_ref": "indicator--9696b3f0-9480-4fc3-bfbd-bdf1c1e1213c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057e869a-e00c-4d33-aaab-73bc6915cc64", "sighting_of_ref": "indicator--c91eb8cc-0f3b-4279-b1f1-c6902cdfe51c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e7c883-e34c-41e6-b6fb-4461f47fcccc", "sighting_of_ref": "indicator--c91eb8cc-0f3b-4279-b1f1-c6902cdfe51c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0399c854-20be-4c98-ae43-da110e40850c", "sighting_of_ref": "indicator--43da7a21-19fa-416d-9033-0f4cc89364d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ded6a2b-237f-42b3-8974-e0c427fc7bf4", "sighting_of_ref": "indicator--43da7a21-19fa-416d-9033-0f4cc89364d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f15bd93-f05d-4270-bb6f-f13ee6c64a13", "sighting_of_ref": "indicator--ad5ae954-346a-4a30-943e-ae42a1a8f244", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9ea5cc-730e-4477-aa94-7415f6e56959", "sighting_of_ref": "indicator--c15fdf8a-42a4-444e-ac0f-1b2f2ef59d1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c2cc1c-2ca1-4741-8835-0f2afa9f02c8", "sighting_of_ref": "indicator--c15fdf8a-42a4-444e-ac0f-1b2f2ef59d1f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc2cd30-2e70-4a1a-b6e7-dc9707b8107d", "sighting_of_ref": "indicator--3c7b3646-6255-4579-838c-2678f250964e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9246ed-156a-44da-b9e9-624b1d5fca8c", "sighting_of_ref": "indicator--3c7b3646-6255-4579-838c-2678f250964e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9e4431-8f07-4ef1-ad80-ac2bd2ce67b9", "sighting_of_ref": "indicator--7bcc99c0-0d36-4d13-b39a-79c77a8af264", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6472efc6-3fbc-40d0-bea5-f4ad2949907e", "sighting_of_ref": "indicator--5fd193b0-cda9-4a2c-8796-112c9ea79d20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42877bdb-37eb-45e4-92e1-0e01b78b7d59", "sighting_of_ref": "indicator--7596a606-8a37-4f48-bd74-84e0a18b6909", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13f6505-ac58-4816-8c08-6a16d961d645", "sighting_of_ref": "indicator--58ec7a3d-757f-460f-8211-12d8ff0aab4d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aee0661-dc9d-4591-bbe5-5ee39b3da457", "sighting_of_ref": "indicator--58ec7a3d-757f-460f-8211-12d8ff0aab4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f632420a-6c5a-43a8-a159-738ad8e6c66f", "sighting_of_ref": "indicator--025e34ad-15ab-4f8a-938f-3dfe18876e58", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687f20c2-f899-4daa-bdcd-7fafef214402", "sighting_of_ref": "indicator--57e178a4-7bfb-4f0d-8c6d-b07b782fe469", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ccdfb1-ffda-4a61-95f4-d10134abf999", "sighting_of_ref": "indicator--57e178a4-7bfb-4f0d-8c6d-b07b782fe469", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5fd6d9-84d0-4052-a2f7-78e561321ba0", "sighting_of_ref": "indicator--fef471c5-40b4-44a5-a44f-7053262034f7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37e8b00-913b-475d-9924-b72de546fbf9", "sighting_of_ref": "indicator--fef471c5-40b4-44a5-a44f-7053262034f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbc93f1-09fb-4007-809e-e5dd5864d35d", "sighting_of_ref": "indicator--7269a2ce-5f88-4467-9bec-77086a834193", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4560f4-e690-435b-97d9-993a589eef42", "sighting_of_ref": "indicator--ecbc0db1-86e1-4068-a4a1-eed5e1127a56", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b10676-c82c-4210-8393-058430c6d52e", "sighting_of_ref": "indicator--ecce832c-7c69-4738-bb41-151029368e68", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c437d386-2bb4-478e-a325-8c978d801948", "sighting_of_ref": "indicator--5d983450-f361-4f01-9cac-2df247ba465d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e45c2fb-e000-41fa-9e48-0bb69c4f8637", "sighting_of_ref": "indicator--5d983450-f361-4f01-9cac-2df247ba465d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5289e554-dfb0-4eed-9dce-651c51942cb4", "sighting_of_ref": "indicator--d05cd9d1-f0b6-45a7-82be-9c94e4e1ace8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8853b5-94e5-4d34-b8c2-20f3fd3822c7", "sighting_of_ref": "indicator--d05cd9d1-f0b6-45a7-82be-9c94e4e1ace8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3f9b1c-d329-4ceb-998e-1d13e129a275", "sighting_of_ref": "indicator--25f4ae14-15b0-44da-842f-be79040c558f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a2d2f3-79c0-4585-86bd-2b457363ef05", "sighting_of_ref": "indicator--e3b2e69a-754b-4c42-bf91-538879721129", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4843e8-cb7a-4904-8904-c294d36c7cb2", "sighting_of_ref": "indicator--e3b2e69a-754b-4c42-bf91-538879721129", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d64e92b-0f20-4b1c-83d4-7fef097c9596", "sighting_of_ref": "indicator--274e8906-78f4-4238-986f-6158e454b40c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3de81a1-1ebd-49fa-bb07-849f6c14250d", "sighting_of_ref": "indicator--2352601f-d24c-4c05-88b1-92121eabedf2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b15ffe8-b233-4a11-bb9a-4543060beed1", "sighting_of_ref": "indicator--2352601f-d24c-4c05-88b1-92121eabedf2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1716ecd-4744-4650-870e-e05636f3c249", "sighting_of_ref": "indicator--105f089f-dbe1-47fc-92b2-5a75007a65fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34463c50-e6fb-4e30-9f00-a0c470c8a3c2", "sighting_of_ref": "indicator--105f089f-dbe1-47fc-92b2-5a75007a65fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e615e4ea-7e2c-4a7d-80bb-ffc07c9f849e", "sighting_of_ref": "indicator--33b1735e-b614-462d-9330-0bb63fe254ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15633e6-3375-4fef-954b-c01085728081", "sighting_of_ref": "indicator--8ff6b5d5-f38f-4d6a-ba7d-abd73d2f121c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93f97fe-9c9e-426c-b4d6-34569757f87c", "sighting_of_ref": "indicator--8ff6b5d5-f38f-4d6a-ba7d-abd73d2f121c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12313735-1b9e-45b1-bd01-cff3326697e6", "sighting_of_ref": "indicator--99e31b49-f984-4c16-b99d-1f7c59179c76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ae62db-1d10-40d7-aa06-51de98325db2", "sighting_of_ref": "indicator--9fd9a674-70d0-4fc2-bbe0-a6ddb334ca0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7e3083-cea8-422e-ae48-a75e0fbff93b", "sighting_of_ref": "indicator--f3c8663e-f221-4cc8-bc7d-66b7f9aee6e3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f73a21-0181-490a-8a67-aa75b04a2b57", "sighting_of_ref": "indicator--f3c8663e-f221-4cc8-bc7d-66b7f9aee6e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c86fdf-614b-4d22-a97f-fa1e5ed2d5d1", "sighting_of_ref": "indicator--94fffda8-5740-4847-a9c8-7a30a0298990", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dce857a-afdf-4e8e-8ba6-54064c509525", "sighting_of_ref": "indicator--2fa44ca7-379e-4abd-b2ae-e2bd476f97ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7139ac-c73e-494a-9da1-d50b2bdd019c", "sighting_of_ref": "indicator--2fa44ca7-379e-4abd-b2ae-e2bd476f97ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e3b134-7b1a-45cf-93ab-c63c09d2cd01", "sighting_of_ref": "indicator--abd13fbf-d042-43ae-9ba3-f5f679fd2137", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01550ea4-7841-4831-aeb2-ff25fef380f5", "sighting_of_ref": "indicator--abd13fbf-d042-43ae-9ba3-f5f679fd2137", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0568ae01-b029-41c2-b379-56178c2435ca", "sighting_of_ref": "indicator--b0b33ead-bf22-4dd6-897d-2350cfb88c71", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d61508-d179-47b0-a052-3ed337073e56", "sighting_of_ref": "indicator--b0b33ead-bf22-4dd6-897d-2350cfb88c71", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded33f63-0598-4709-b82d-0a629eb40468", "sighting_of_ref": "indicator--15956928-1ea7-4dcd-b441-3bbfa3932529", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7ef6da-05a5-404c-906b-f7174876a6e5", "sighting_of_ref": "indicator--52ce7d79-5fa0-4e30-97b4-1118707fe46b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff91335b-7674-41db-ab75-03715a1029da", "sighting_of_ref": "indicator--52ce7d79-5fa0-4e30-97b4-1118707fe46b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebdcbc1-dd30-43fb-aa9c-9f97f5e8e402", "sighting_of_ref": "indicator--875c91bd-dbf3-4730-93c5-5f884409b28e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de224a3-1234-4370-98bd-66ad9591c289", "sighting_of_ref": "indicator--f4812a3e-7417-4074-a16f-ceee1884912b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a6a02a-c794-4612-a764-282fb105fe63", "sighting_of_ref": "indicator--f4812a3e-7417-4074-a16f-ceee1884912b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79ad377-1813-407c-86c3-7b6b7d432db4", "sighting_of_ref": "indicator--f755d2bc-502f-4fe8-99f4-38c440f98252", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc18a68-725f-4a50-afed-1ffc68d23804", "sighting_of_ref": "indicator--1360e013-0356-4828-880b-cd5d2b36f820", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29768868-5a9c-46e4-b1ea-4a68fb2b09a2", "sighting_of_ref": "indicator--77d44a9e-ef2c-425c-8ef1-db0c6186747e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ade94e-b49f-473e-84ac-b9861de304a3", "sighting_of_ref": "indicator--8a166f72-52ea-4184-9090-2982e407a5a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792ce357-6089-47c4-bcfd-e7c51fbc7bb9", "sighting_of_ref": "indicator--6715153c-d6eb-44cd-a0ed-42b5e8817ee3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae9cb27-bc74-4550-acda-0374be27c6fe", "sighting_of_ref": "indicator--6715153c-d6eb-44cd-a0ed-42b5e8817ee3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdca68e-9c63-44ad-877e-cafb894d8ea4", "sighting_of_ref": "indicator--a46f5c1f-0bc7-4e08-9b5d-3ceed737e4c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be20f4bd-d476-45e3-9d65-fd9d9ac40ddd", "sighting_of_ref": "indicator--18922b1b-3e3b-4c2b-a2a7-d30eb0553316", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ca6424-b08d-461e-9a4b-3efe4af811bf", "sighting_of_ref": "indicator--b04dea62-d105-4aba-8198-57dea92c0b36", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf1f945-76ea-42f0-b8d0-54e90db5a8f2", "sighting_of_ref": "indicator--b04dea62-d105-4aba-8198-57dea92c0b36", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4315e5c-6ef6-4e81-ad0d-afddb3a937be", "sighting_of_ref": "indicator--60b0ca8a-5a35-415d-b59f-af456a0b61dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e8c6df-a76e-4426-9c89-894b0382e849", "sighting_of_ref": "indicator--60b0ca8a-5a35-415d-b59f-af456a0b61dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11788ca-815e-4d21-ac40-91fa272249c1", "sighting_of_ref": "indicator--9d2c774f-38aa-46fa-9b49-df6328bea06c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad6a33f-f0f2-48cc-8fe7-3e31d32b4cef", "sighting_of_ref": "indicator--d58567e6-734e-4963-b56c-dd06d9549801", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be2b4fb-fdb5-48aa-b6fe-5564244bdfd7", "sighting_of_ref": "indicator--903bec85-fe63-4712-9d5c-35b85a9ac8ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced36229-e492-4fda-98df-06216c40088a", "sighting_of_ref": "indicator--903bec85-fe63-4712-9d5c-35b85a9ac8ef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b65e9db-9579-436c-a841-f50ae4bf59b1", "sighting_of_ref": "indicator--90090083-c590-4c95-80d0-2a7079bbcc21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f89ffc-f5d8-4969-8317-68b3d30e4953", "sighting_of_ref": "indicator--fdd99dbc-0708-44a1-ab12-d6807f85db92", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85368bdd-e15f-438d-82a0-d7807a0e580d", "sighting_of_ref": "indicator--fdd99dbc-0708-44a1-ab12-d6807f85db92", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cfc8c4-be35-4167-9172-699e2f04f5d5", "sighting_of_ref": "indicator--12aefe4f-f238-4db9-96e7-a69669ba658e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9e52ff-bd3a-4462-b790-e700ea039d36", "sighting_of_ref": "indicator--12aefe4f-f238-4db9-96e7-a69669ba658e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9115967-1ce6-4c0a-aa28-2f26f0973ea8", "sighting_of_ref": "indicator--11c1871c-e680-42a7-818a-e448b9327e42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7122ab57-e96e-488c-94a4-3eb4b117d756", "sighting_of_ref": "indicator--11c1871c-e680-42a7-818a-e448b9327e42", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb29d626-8df4-42e2-81fd-0c2ac7eb8b64", "sighting_of_ref": "indicator--49518b5b-d3fb-451f-bfa0-5cce69a3f49c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9bace6-f3ed-4743-82b6-08093a564131", "sighting_of_ref": "indicator--49518b5b-d3fb-451f-bfa0-5cce69a3f49c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68c6378-2ae4-4bac-81b9-282db4d40438", "sighting_of_ref": "indicator--56cfd032-7a6d-47a7-86c8-ad8130731439", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159c185e-717c-464e-af24-18a0de316435", "sighting_of_ref": "indicator--56cfd032-7a6d-47a7-86c8-ad8130731439", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3069b4f-2134-4bda-ae37-b0b828f97407", "sighting_of_ref": "indicator--2d3c38b2-60e6-4c22-b13c-b1bb681feaf4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33fb074-9120-4b2c-aef2-14268102458f", "sighting_of_ref": "indicator--2d3c38b2-60e6-4c22-b13c-b1bb681feaf4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a335c079-70fa-4850-9d16-0bc0407de1b1", "sighting_of_ref": "indicator--92e56adc-f3ec-4a5f-8f0e-667932705790", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7c06e1-1106-48dc-92b0-a8dcaa8a5d58", "sighting_of_ref": "indicator--8e54138d-e372-463f-9dc8-5b20acabd32c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61b776a-f8a7-42b6-9956-40cedca76852", "sighting_of_ref": "indicator--8e54138d-e372-463f-9dc8-5b20acabd32c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e70433-9a86-4083-89a2-13ff9bfee091", "sighting_of_ref": "indicator--2a930f22-b7ad-4e27-98ab-777f9d9aa280", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487def2e-e180-4ff1-886c-0cd578096f2d", "sighting_of_ref": "indicator--2a930f22-b7ad-4e27-98ab-777f9d9aa280", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce746c32-c06c-4dc7-a8f6-1c799910a057", "sighting_of_ref": "indicator--a55c01cc-c3b1-47ac-a4fa-cd3ca2dbfdb9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666eee74-b9ca-4f35-b0ae-56325cb7bca5", "sighting_of_ref": "indicator--a55c01cc-c3b1-47ac-a4fa-cd3ca2dbfdb9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d33a8fe-e7fa-4ef2-a7e3-639ee47e806f", "sighting_of_ref": "indicator--edec58fc-5d9e-4d8f-af36-6169bf83cb88", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01411b5b-ff34-4c9d-805f-8d83d772cd59", "sighting_of_ref": "indicator--edec58fc-5d9e-4d8f-af36-6169bf83cb88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a90a33e-e448-462c-ae0b-b25bae3de3a7", "sighting_of_ref": "indicator--3859e10d-970e-4290-9962-c2426066cfbc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e387ee6-260f-4b0d-a1c0-122b13245981", "sighting_of_ref": "indicator--3859e10d-970e-4290-9962-c2426066cfbc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc3f4df-4ce9-4c8e-87ba-f3639df306a3", "sighting_of_ref": "indicator--5d7e03a9-9d39-4083-ab7a-2f9c0d87a96a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1c6b51-581e-489b-b327-9c5a43cdb156", "sighting_of_ref": "indicator--0e3f6636-a697-4b24-85b2-7561f42b8a7e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4fdd76-0dd7-470b-922a-f1f4a7db43b3", "sighting_of_ref": "indicator--98aa2ecb-d888-4fa6-9cf8-ac9e324e0eae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a698aa4c-b337-4532-bf7e-6e6f5bba6060", "sighting_of_ref": "indicator--1c2b1a9e-5120-42d7-b7a7-9aa34a8d8d83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6ea4de-cbd8-4fe5-a37d-9caeeb99c0c1", "sighting_of_ref": "indicator--1c2b1a9e-5120-42d7-b7a7-9aa34a8d8d83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d6fcd6-ff0c-4fdd-9815-ec5470c4f721", "sighting_of_ref": "indicator--e377bf6e-6fff-46d2-afba-30160e82ebce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422f8888-2aa7-4f84-ba25-8254f7e35dc5", "sighting_of_ref": "indicator--e377bf6e-6fff-46d2-afba-30160e82ebce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30a78a9-9ac6-4d09-be97-1d57125378b9", "sighting_of_ref": "indicator--9747203f-ead0-4ad8-9fac-dcea162a75e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9ad374-b44b-42e3-9079-a50e0030a7e9", "sighting_of_ref": "indicator--9747203f-ead0-4ad8-9fac-dcea162a75e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e791d5-f2b9-435d-b7e9-bea80097e1b9", "sighting_of_ref": "indicator--0334227a-0a3a-4567-9167-c2c01637a824", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6aa3a63-ab69-44e3-908f-bff8dab0a402", "sighting_of_ref": "indicator--0334227a-0a3a-4567-9167-c2c01637a824", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9103f600-92a6-4ed0-a34b-ef3d58fddd1c", "sighting_of_ref": "indicator--69408965-5b30-46d5-b400-ab3682fa8587", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687783b4-d9dd-415a-b76a-2db4d68aa16b", "sighting_of_ref": "indicator--5062ee1c-4fd7-4050-99ca-b89d7529da8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be8c4b0-ec09-487f-a2e8-c96ce7c1d692", "sighting_of_ref": "indicator--4eda0bb7-f717-486f-97a9-da0bf2dc91a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8366c63-4e47-4bff-bbe3-8825be108271", "sighting_of_ref": "indicator--4eda0bb7-f717-486f-97a9-da0bf2dc91a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dffa8bf-c630-4e04-ab8c-e837a20a5415", "sighting_of_ref": "indicator--0d555ee9-6438-4645-bcdd-12e5cca6bc8e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca403b25-99f6-45ff-b4e3-5e4ebdbef2eb", "sighting_of_ref": "indicator--b85a3fa5-f694-43e8-afdf-67211f8869b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f487bd71-5e73-46bf-98f2-e5aff838686f", "sighting_of_ref": "indicator--23d676a1-deeb-4678-97ce-58efa4113d83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee281e3a-23d2-4f06-89bd-241262b33cc4", "sighting_of_ref": "indicator--23d676a1-deeb-4678-97ce-58efa4113d83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00feae97-64ab-4663-906e-3505e5c6a6a2", "sighting_of_ref": "indicator--f6fe80b5-a69a-4cbc-a46d-25742ba88512", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3f6f64-27b2-4e45-9d21-4b27aa3d7a26", "sighting_of_ref": "indicator--ae38f207-8ef8-4509-b9fa-e07b437b3721", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bb21d9-1c00-4703-b9f6-928d438195c8", "sighting_of_ref": "indicator--f28d6869-5c2e-42ca-8788-bd5ca94c33d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3129957-c95e-4ea6-807f-a98bf7747961", "sighting_of_ref": "indicator--f9f7bb73-840e-4e89-82a3-aab36c7bae3d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5ba2be-4012-46f7-bef6-395b7483aeb2", "sighting_of_ref": "indicator--bf2526da-a623-45e6-81b9-177f6cfe0eec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481e8fdb-8b7a-4051-b797-8850e12d8d12", "sighting_of_ref": "indicator--01465d72-4243-407f-a9c5-e05397df5790", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f8cd35-2057-4763-a9ec-381728a4e973", "sighting_of_ref": "indicator--01465d72-4243-407f-a9c5-e05397df5790", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676e914d-14fc-4ef6-bbb0-82706f53dbfc", "sighting_of_ref": "indicator--580e851a-9750-45b6-ac0b-e56797194e18", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b41d85-5d9e-40ff-afff-99d153f3f698", "sighting_of_ref": "indicator--580e851a-9750-45b6-ac0b-e56797194e18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1975cf-440a-4aaa-918f-43b41d45814a", "sighting_of_ref": "indicator--c0cbd481-bfbb-42c5-97b0-bd826c0bded1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31266802-af39-494e-a2b4-6ceb5248a2a7", "sighting_of_ref": "indicator--ece3c3bd-4425-4ea6-adb5-9a1ebf75239d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f666ae3-1ada-45f2-837b-1bb18b3be7af", "sighting_of_ref": "indicator--c17575c2-248e-480f-8d0a-22ea56a9446d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab111bcd-778e-4472-9ccf-b4b90b13cf5c", "sighting_of_ref": "indicator--c17575c2-248e-480f-8d0a-22ea56a9446d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fc2911-1342-4bd6-925f-28bb29ccddbd", "sighting_of_ref": "indicator--f17074f5-122e-4a48-b860-5cb085a14e4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285896d1-0918-456c-a49b-02992ec2c8fb", "sighting_of_ref": "indicator--f17074f5-122e-4a48-b860-5cb085a14e4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4547a4e6-281f-4ff2-8333-1ee9ca96b318", "sighting_of_ref": "indicator--a467f0cd-514a-4835-8ae7-a8d1dbe7950e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62e276b-b64d-4dac-86af-4a1cd269ac76", "sighting_of_ref": "indicator--9eb3d851-3f3c-45ea-a723-52a4a3d1fca0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd5fe1c-0817-48b4-930b-7eb8c19b1796", "sighting_of_ref": "indicator--6767c6a4-f988-4cf7-a0eb-c0f0f76251da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff011375-8e64-4abc-8559-9c09cc0ea39a", "sighting_of_ref": "indicator--6767c6a4-f988-4cf7-a0eb-c0f0f76251da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e6b101-3d8b-4bad-9377-5c7ec3cefb08", "sighting_of_ref": "indicator--e16bc138-180b-4853-b8d7-293898ec46bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa128e84-90de-4b65-ab96-ff617baf83f2", "sighting_of_ref": "indicator--469f9fa9-b91a-4c3f-ae92-a26539d4a58c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc440d3-1b79-473b-bd27-ad49b61b8e28", "sighting_of_ref": "indicator--469f9fa9-b91a-4c3f-ae92-a26539d4a58c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6c084f-7af3-414f-8da3-57dee3421cca", "sighting_of_ref": "indicator--b0392f56-6337-4eb3-9703-8521f19135f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dc48dd-bb01-49c8-aabb-40b003a9c6bd", "sighting_of_ref": "indicator--5682915a-d6eb-4c23-ac24-7a1194f2598d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965187f1-917a-4273-b259-34df29b2d631", "sighting_of_ref": "indicator--9987fb18-6df3-4ff9-8184-6dc231237a3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695250c7-a24e-42ef-bf8a-430799ef94d6", "sighting_of_ref": "indicator--160ac2d3-0867-412f-926a-8b02654ad199", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1da365e-3d95-40c4-a9f7-98ce2e0840de", "sighting_of_ref": "indicator--57164f51-9abf-49e6-9f93-04d55f6f3181", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8a45c6-efa0-4246-8de4-819433b08c9b", "sighting_of_ref": "indicator--61083a81-21d5-46f4-bf8e-9837759caece", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b76ae3-b87e-4d43-bc32-2becd1056a95", "sighting_of_ref": "indicator--d306f91e-74f3-49e5-9eb1-4db08fa8456f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf4ee8c-4d86-459b-badf-7f2ad1ae90f3", "sighting_of_ref": "indicator--d306f91e-74f3-49e5-9eb1-4db08fa8456f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4d35d3-ebd0-4102-a4eb-7a0d4719035e", "sighting_of_ref": "indicator--c46d3f09-e54d-4b4a-bee3-4c2c7ea94db8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c99c48-ae9b-40d7-ae54-332b20da159f", "sighting_of_ref": "indicator--c46d3f09-e54d-4b4a-bee3-4c2c7ea94db8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84574419-0711-4c4e-a81d-70d3bbaa54ce", "sighting_of_ref": "indicator--49b4d39a-3422-4541-9cd8-1fe1ef801612", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bce7404-ddd2-4859-9bdf-59cc6044cbb0", "sighting_of_ref": "indicator--49b4d39a-3422-4541-9cd8-1fe1ef801612", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbfbd22-7cf8-4df5-80ed-7ed7c6dcb3d1", "sighting_of_ref": "indicator--4bb6c12d-ab69-4cbc-b689-69ab3c2401d2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3fc882-0416-4b68-bf34-b2a48b671df8", "sighting_of_ref": "indicator--19fc9507-f570-43c7-bb61-12b875b2be7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a07059-d95c-4c3b-bdb3-a8e62d521ffb", "sighting_of_ref": "indicator--d794db0f-49d2-4d7e-8704-f7228de0da45", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e39749-12a3-4e28-b50a-a3faf6b98378", "sighting_of_ref": "indicator--d794db0f-49d2-4d7e-8704-f7228de0da45", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de0753c-4787-4c1c-a7bb-ae541867792d", "sighting_of_ref": "indicator--244fc7e5-0c0b-4ce3-9719-db3340976fcd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac9c654-e491-4bcf-bc29-b4beae8a8adf", "sighting_of_ref": "indicator--b25dbe7e-8de1-4916-8f72-991d4492af53", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5eb518-c049-4cfc-b732-7b37a8b8ef9d", "sighting_of_ref": "indicator--b25dbe7e-8de1-4916-8f72-991d4492af53", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc48bfe-7afd-432b-b2b0-2a15e75dbfdb", "sighting_of_ref": "indicator--436d3c78-b9b6-4568-a2e2-b43e4b729e76", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9414f4e-0db9-4785-b577-a3b4c6f0d7ac", "sighting_of_ref": "indicator--bae00e6e-82ec-4bb8-bbd0-9bdcd4cac5da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b0641d-48dd-4dac-9470-1f0e20b86a0b", "sighting_of_ref": "indicator--63c4ea80-cf4f-46f9-b035-b11f532690e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe8c70b-c427-4900-bbb0-0572335aa6b1", "sighting_of_ref": "indicator--fbb4ceae-99b4-4a38-a220-865c07d96397", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9565954a-8fe4-44cb-b63f-b192fb44e6ef", "sighting_of_ref": "indicator--eac46065-4bce-4277-a738-5802f90cab73", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a3d525-a085-4be7-bfc4-8e07ee06806f", "sighting_of_ref": "indicator--78284e95-7f7b-4be8-b764-daaca7314064", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b671963c-2519-4736-8bb2-bce5123a8e03", "sighting_of_ref": "indicator--1063e6e1-fe20-4c94-895f-b197dab24868", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49063829-551a-4657-bd1b-884e74ee890d", "sighting_of_ref": "indicator--780b96ee-1f15-4861-b9e9-aabb0399da19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efc5d89-fc9f-40dc-9c61-59507662143d", "sighting_of_ref": "indicator--5cb70cb4-7556-46f3-bded-e85b8039c9c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e70388-b0f6-4fc1-bd32-89b629ee3c5a", "sighting_of_ref": "indicator--34ac2f24-ac63-440d-a7ed-6dac30c47466", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eae2c9-b87f-4ea8-9dd4-4b2dcb7d19f4", "sighting_of_ref": "indicator--87d371da-4011-481e-bb46-e2641fccce6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a07af5a-de01-4d74-bc47-2d7686ab183d", "sighting_of_ref": "indicator--87d371da-4011-481e-bb46-e2641fccce6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e294600f-0988-438b-b305-12f01c139d4e", "sighting_of_ref": "indicator--f55fed91-b814-4b59-b262-4dbf6e0c3227", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0501275b-521f-4a77-bfbb-1342a818203a", "sighting_of_ref": "indicator--f55fed91-b814-4b59-b262-4dbf6e0c3227", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf24a6e-559c-4169-a7f8-e4d18ab83740", "sighting_of_ref": "indicator--f0ca3fb7-728c-45ba-8d80-2e3f6ef2a176", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac93ae8-2fd6-43d6-8c44-17b8484c355c", "sighting_of_ref": "indicator--f0ca3fb7-728c-45ba-8d80-2e3f6ef2a176", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5664dd7b-2ba3-432e-af84-8022df2ca013", "sighting_of_ref": "indicator--26d7e958-4b84-466e-9ced-ca7ba91862a2", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e305e5-94fb-43cd-ba8f-e4f01c442ee6", "sighting_of_ref": "indicator--0fd6cf0e-4319-4392-82e5-16043deaad30", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564b436c-2079-413f-b2ba-45afa5c4a2ab", "sighting_of_ref": "indicator--2180647e-06d9-485a-903f-42973db2fc80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8864b5-1902-4054-95c6-b9cf9943c941", "sighting_of_ref": "indicator--8be3a75d-3449-47e1-9273-c291d9e7603e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3765bdb-67fd-4e81-af90-38f5da34b0fa", "sighting_of_ref": "indicator--ec54972d-f262-4de3-877a-09b6262b23ea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ad0bfb-2763-4b41-8ac1-8077b12d88ec", "sighting_of_ref": "indicator--c21a022b-9531-4ee0-9a36-a343ccab0c97", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d780f56-8ab0-45d3-a9a3-e2f2372c1a22", "sighting_of_ref": "indicator--b7279dcd-e1fa-4d15-ab84-8e6d43b4b919", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa383443-1cbf-4ff4-8d5c-353c9db212ac", "sighting_of_ref": "indicator--1c123416-b4b7-4a7e-8511-b2780fb2ecb4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb2afe0-1364-49a2-8612-f518026559dd", "sighting_of_ref": "indicator--241a66e7-58c3-4785-be12-c402260352e5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4423f53e-4770-45e3-b4e8-2776c3477d8e", "sighting_of_ref": "indicator--241a66e7-58c3-4785-be12-c402260352e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d65bda2-ad92-4b9d-97d2-2d06d34f747b", "sighting_of_ref": "indicator--5f7a3eaa-8dc5-4015-ba5a-6457a3a01a51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a06a955-072b-4e16-93dc-0a79f20a99c0", "sighting_of_ref": "indicator--5f7a3eaa-8dc5-4015-ba5a-6457a3a01a51", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3394d4-2a23-4ce2-82e0-11749b43592f", "sighting_of_ref": "indicator--de8e77ab-357a-454b-8826-22c68e5b4b14", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cf51c0-07a8-4707-aa36-5540f718026b", "sighting_of_ref": "indicator--098e63de-0884-46af-94e5-0b0dc1d15522", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559e52b3-9ac9-4de5-be2a-3639278c40a8", "sighting_of_ref": "indicator--55b459f3-3a18-4819-929f-0a1e3dcbb2d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0d1f5b-5bf6-458c-abdf-3500f5e54901", "sighting_of_ref": "indicator--005c763a-41da-4305-be16-ed99076a7b09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6a78a9-932d-4451-ac84-d099619b230b", "sighting_of_ref": "indicator--5cb92f8b-10df-4f5c-879f-a470490bd1f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70dab12-cad7-4fb6-bcf6-0a6f3a277306", "sighting_of_ref": "indicator--5cb92f8b-10df-4f5c-879f-a470490bd1f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4aa73f-e65e-4d0f-8539-48806b1c364b", "sighting_of_ref": "indicator--58f77432-ea4d-4f2b-97c9-11451df1df51", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436d7db1-f6ef-4734-a015-fe0e84525e63", "sighting_of_ref": "indicator--7ec6159c-052e-403a-951d-d63bad03d603", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ca5e3f-c5a1-47dc-93f8-fae1293a55d1", "sighting_of_ref": "indicator--7ec6159c-052e-403a-951d-d63bad03d603", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797465d2-de68-443d-8993-22328591fdc7", "sighting_of_ref": "indicator--9cb20f76-301a-4b93-a9f8-c882f213cadd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a14a662-9620-4099-82c9-6e30862e165a", "sighting_of_ref": "indicator--9cb20f76-301a-4b93-a9f8-c882f213cadd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e4aede-0086-4a57-9585-33aae6f68afa", "sighting_of_ref": "indicator--a0ad05f2-c069-40d9-86bc-050781995463", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2280cd89-39ec-407a-9829-e3f690d8fa37", "sighting_of_ref": "indicator--a0ad05f2-c069-40d9-86bc-050781995463", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4d0285-9ff1-4c21-9ccf-6412442a37ad", "sighting_of_ref": "indicator--2be140fb-7ecd-40ce-992b-c3610377f153", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b062ddb-8bb8-4d47-b6bd-dac342c75d93", "sighting_of_ref": "indicator--6324c857-04b9-4e75-bda5-ce632e295d3c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05f0c42-a76e-471e-9d9f-1a3fd2a7a5b6", "sighting_of_ref": "indicator--6324c857-04b9-4e75-bda5-ce632e295d3c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c054ae2-25d0-4e34-8e84-eae65c676174", "sighting_of_ref": "indicator--7a149615-3e67-4828-a984-c378fc7e16c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415c0567-2107-46b9-bed6-ce1801fd2e0b", "sighting_of_ref": "indicator--7a149615-3e67-4828-a984-c378fc7e16c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b69de0-41c2-4dd9-be43-5e05552ec9e3", "sighting_of_ref": "indicator--93080de2-17c9-400a-98b4-e846b81c2709", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62ca217-f25b-49c5-86dc-77bf70d22bd9", "sighting_of_ref": "indicator--93080de2-17c9-400a-98b4-e846b81c2709", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f9a5ac-805b-4dc0-882c-509d29093261", "sighting_of_ref": "indicator--36be2a14-48d8-40f6-b657-3b2e6fdd7f26", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981811c3-a293-4a01-920c-99ec08260891", "sighting_of_ref": "indicator--38413a7e-0ab6-4b7b-8169-b2b0cc52a3c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140e4378-42ae-44a4-b65e-888ab6b48dfb", "sighting_of_ref": "indicator--611a413a-4e41-4cf6-acdf-3a0c80ffc17a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4838b8d8-ee87-4a1a-98c4-e0ce55aa40fe", "sighting_of_ref": "indicator--f515fca7-a6d8-4cb7-8680-bd8baab7a167", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f8513f-e637-43b4-baa9-a3aa04396649", "sighting_of_ref": "indicator--4ca0ac3d-c83b-4e3c-88ce-cf8ba3ff17a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71670a2-9fe1-494d-be45-29732573cfcf", "sighting_of_ref": "indicator--48a7dd50-7869-430b-8591-773794c3d6cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3aa26f-95c7-4d82-888d-cb5247c5e8a1", "sighting_of_ref": "indicator--7a2218b8-dbed-4c8c-a9d4-e0899ad79aac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbb64c6-eca9-4402-9fbc-399792fffc17", "sighting_of_ref": "indicator--a41782e1-4bf7-4ee1-a6fc-013272573b36", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575310a8-4e77-4e65-ac01-c0de04765375", "sighting_of_ref": "indicator--6c659275-4f65-4a71-b7ed-3962c0288643", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fc7a7b-9563-4564-8b4d-27c69e222303", "sighting_of_ref": "indicator--7eec3162-6482-46ae-bd88-f9a213e9912b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79e3537-5452-42a9-bfc8-36dd101ef8a2", "sighting_of_ref": "indicator--2e999954-ff55-4c89-9b63-4abf4d0a0533", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf03fd0-aa43-4f3e-8efc-123f980df654", "sighting_of_ref": "indicator--b7b60b2d-dd58-4af8-9203-62093f2720d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511cc435-4ebc-4e78-a3d1-e86646fdc2ff", "sighting_of_ref": "indicator--b226b99c-670e-499d-bc43-ff153a06dc0b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7999b5e8-b051-466c-a708-284b4c166087", "sighting_of_ref": "indicator--c278f474-99ee-4d5c-bbdf-f5a3aa9973ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabbb637-87e2-4422-986e-1c29a061c5c7", "sighting_of_ref": "indicator--605823a2-c06f-413c-a0e2-9c3596c870b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97f15da-d915-4bdc-bef4-be57d11a70eb", "sighting_of_ref": "indicator--20103472-35e8-4170-9443-06729ed015bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0fc4ab-b1d7-435a-8ff1-76b422d0e812", "sighting_of_ref": "indicator--36013d56-2f8c-4442-9249-911dab4949fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dbbf7e-ed08-43f6-83f3-7a81ee6f6b24", "sighting_of_ref": "indicator--306fdb99-84e9-441e-b2b9-42b1db906a1c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afa300c-c266-44db-ae48-bc049bee589f", "sighting_of_ref": "indicator--46c3473f-24df-42e8-8d33-3378a3e67fa7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fcefa5-7164-461c-bea7-abde88df9b4b", "sighting_of_ref": "indicator--b8f4051f-9291-4125-b83f-ade59dacc553", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b1b995-2bd6-4320-af9f-c78d15bf784b", "sighting_of_ref": "indicator--df7a12b9-4425-408b-a62f-4c5a00474277", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d41864-40aa-4b7a-8bb6-5f2106a64c37", "sighting_of_ref": "indicator--0cdcdfba-cc1b-4344-8f11-512723432ba7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d680375-13cb-4ce8-a317-1b3797cc5629", "sighting_of_ref": "indicator--e16a1c55-94d3-4eec-8fec-0c3216c8d292", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8832f1-e0e1-4f14-ad22-1a1cccce332c", "sighting_of_ref": "indicator--e16a1c55-94d3-4eec-8fec-0c3216c8d292", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93ddf25-6856-4659-aa77-e81e3f3c60b3", "sighting_of_ref": "indicator--641a683f-21aa-480a-a986-05491f6a5a64", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c869a6-4ea5-4a16-82e2-4e23c1015fb3", "sighting_of_ref": "indicator--641a683f-21aa-480a-a986-05491f6a5a64", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07e6635-15df-4893-92ed-1e4d82c622d5", "sighting_of_ref": "indicator--e48da895-a22b-4816-a5fd-4bd5ab51a4a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4851c982-b804-411c-891f-9406b23a2f6d", "sighting_of_ref": "indicator--e48da895-a22b-4816-a5fd-4bd5ab51a4a4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8aa21c-16f3-408a-9ff8-eb65d9d599cd", "sighting_of_ref": "indicator--d8dfc753-6a12-4892-8b40-ee28d194824b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160ae8b7-828a-4e6a-bb9f-b501fdbfc3fb", "sighting_of_ref": "indicator--d8dfc753-6a12-4892-8b40-ee28d194824b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4e4312-52c4-493b-95bd-90730612406a", "sighting_of_ref": "indicator--320ea59b-2118-4c73-a498-2576d8f07b77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90c304d-2ccb-4448-8c99-be694e30ce22", "sighting_of_ref": "indicator--d28e3f5e-041f-4ece-b86e-a1f60d015ee2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea3b912-2618-4e24-a4d7-eae9f61c3a51", "sighting_of_ref": "indicator--12f2b79e-a395-4547-b719-b066db6d2371", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a156af1e-e9c7-430c-8ee7-4bd0e123c4f9", "sighting_of_ref": "indicator--12f2b79e-a395-4547-b719-b066db6d2371", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aa33e5-a805-4969-974d-87d8053fbc40", "sighting_of_ref": "indicator--b2fc8fc5-a289-4c6b-9910-73ed62e52b7b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7679286-0615-4784-981f-655329988e48", "sighting_of_ref": "indicator--72f24523-5fc9-4ce0-9a8f-4569b613195a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f387dc2b-32ee-4a6f-a0fb-31d4f4b71424", "sighting_of_ref": "indicator--672d9291-6c5f-4d64-b92b-38263f03da2f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05602e5-0cad-413f-9989-b7e5210ec28c", "sighting_of_ref": "indicator--bb7c54f9-5c00-454b-a4f2-d814560c3288", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cbf2d2-17ff-4d18-89be-36f04762e5df", "sighting_of_ref": "indicator--0c9a6538-641b-4c74-a4cc-c4ebe62ae791", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf60ce6-b432-45de-94ad-3dd12b33ff5f", "sighting_of_ref": "indicator--99e26c56-5f93-4bc0-85bb-f87bb584af43", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7044d207-3352-4b88-9760-d2077097f80e", "sighting_of_ref": "indicator--5f9f33eb-e67f-4ca6-891e-93fa11d3130c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fb6757-7337-435d-9465-acfa7db6021e", "sighting_of_ref": "indicator--8af64b6b-d5d4-4f7b-8b16-d31169e26bb3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cb80fe-35dc-43f0-ab8a-66f35d202cbc", "sighting_of_ref": "indicator--4b0f6439-76d7-43c6-8b75-dcf80479d6ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dbe6c8-2ad7-418d-af99-aef59264813f", "sighting_of_ref": "indicator--4b0f6439-76d7-43c6-8b75-dcf80479d6ce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39344b4-2914-4986-b100-9ef3875fc6f2", "sighting_of_ref": "indicator--c408a355-52e2-432b-93bb-35f8c0986d52", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad117c5-774a-4243-951a-9cc3e2fc5a72", "sighting_of_ref": "indicator--0a3e5f25-256f-4c1b-8fcb-c2a871c71797", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fddfcc5-e119-40b5-b7c6-ae206feebe9c", "sighting_of_ref": "indicator--d73d0c4b-83b8-4973-bb7e-c6ab8a41aeda", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4897e24d-d75e-4a68-be42-daee6348db89", "sighting_of_ref": "indicator--01dfaf9b-f7b0-4dfa-ba9d-e7498b29c52a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a0a447-6b3f-4419-95f2-83a28255aac0", "sighting_of_ref": "indicator--01dfaf9b-f7b0-4dfa-ba9d-e7498b29c52a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157ae371-ca7a-41ad-af88-a6756f28f532", "sighting_of_ref": "indicator--999fe52f-fc51-4fc5-9e66-ea346f55f443", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6633f5c0-a52c-451b-aa2f-2017030314fa", "sighting_of_ref": "indicator--21d74af6-0cff-4265-9843-155b63bada89", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdf51e9-c21f-4d39-b843-3cba29d4c14f", "sighting_of_ref": "indicator--2f8848b6-0838-4083-8803-1a5dbd2f8b23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ceb2a8-c54f-483b-83a3-5480d9761aac", "sighting_of_ref": "indicator--507ecb3d-250c-449a-85c5-74f5bc3d4e46", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c64702-dab7-4027-bcc3-b9c77c1e686c", "sighting_of_ref": "indicator--bea9c264-4f93-4216-95f2-53869473466c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae81204-4b35-4a66-9a01-f91c288fe608", "sighting_of_ref": "indicator--bea9c264-4f93-4216-95f2-53869473466c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5733fb82-2f65-4729-88dd-1206f13fd2a6", "sighting_of_ref": "indicator--1b336a01-29c9-415e-8e2d-b5b9567c2638", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c09bf5-0275-412b-b5a6-25e06a193259", "sighting_of_ref": "indicator--01735cac-a9f1-401f-8d5e-2cf9d63f6372", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fba12b-4495-4a02-a585-6cadcf6872a5", "sighting_of_ref": "indicator--01735cac-a9f1-401f-8d5e-2cf9d63f6372", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38be557-0b7a-4b63-89cf-82497923dd07", "sighting_of_ref": "indicator--770703c4-2cac-4d04-ac24-5449a175d4e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568e3778-4b90-4154-a194-331054cf732f", "sighting_of_ref": "indicator--770703c4-2cac-4d04-ac24-5449a175d4e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eae810b-fde9-42da-9ec4-38e6bcc8fc58", "sighting_of_ref": "indicator--a1444cca-0a31-4824-884d-c679ff7f41cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa3a659-2198-4438-ac6e-1d06dd81a9fb", "sighting_of_ref": "indicator--a1444cca-0a31-4824-884d-c679ff7f41cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db1b469-748a-4bd8-bb97-c77ee856ee51", "sighting_of_ref": "indicator--1d0d1867-0b6e-46df-8a6c-4bf08136bc0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ab3251-eef8-4139-995f-a8e0a623d075", "sighting_of_ref": "indicator--f7ef42be-c7e1-4d08-87a7-ef7f024d5412", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a19b9a-a0bb-4ddb-aae0-412e571957ea", "sighting_of_ref": "indicator--36b850ee-0c25-4b4b-b223-961e8bc92264", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16957ea-65a7-4ff6-a973-ac74a343e774", "sighting_of_ref": "indicator--54d9cd5a-b7b6-458f-ad0c-4bfc5405e22b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a463ca81-d46b-4863-918a-03e7b97f2459", "sighting_of_ref": "indicator--3f819c06-4684-4117-9bb3-debec9eceedb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0e80b2-277a-4c5b-a988-335290bc3b75", "sighting_of_ref": "indicator--3f819c06-4684-4117-9bb3-debec9eceedb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85406094-9777-451f-b684-23d77c6eae43", "sighting_of_ref": "indicator--c6057eae-1948-4b97-962b-5fd5561dc2ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8bab6f-08a1-49b6-8b10-87d9f957bdc0", "sighting_of_ref": "indicator--c6057eae-1948-4b97-962b-5fd5561dc2ef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f013c5-b1cc-4cc4-9aa2-adceda2ca38e", "sighting_of_ref": "indicator--f7403609-3647-42cf-a8a9-e00aabf98bf5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccce6d90-7ff8-40c5-8173-839ced90fd2c", "sighting_of_ref": "indicator--e8eb49a3-ed11-42f5-b8d6-e8cc339a7cb1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ba776e-92fa-4b60-bddd-f6a141e4b268", "sighting_of_ref": "indicator--dfd40d29-1780-42e5-b94f-52392757ca38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41996fe-459a-40cc-856b-8274dd6d5e4e", "sighting_of_ref": "indicator--f2d5e28b-72f0-4118-ba62-74fb9d2dd794", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f34c95-cbae-4d0c-b422-bb7c5ae3e420", "sighting_of_ref": "indicator--77c01e85-0f94-46d1-8d10-bc93e671537b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce03549e-d478-430c-959d-f29acc42ee2b", "sighting_of_ref": "indicator--13205e63-0f40-4b1d-bad4-7d7e1e1df608", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798411ed-1fbb-46cc-856d-8b32dec1d4f2", "sighting_of_ref": "indicator--75025d0b-6af9-4632-a7e9-bf097b5951b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcf8910-9127-4158-89d9-9151eefd7484", "sighting_of_ref": "indicator--3d4ef16f-2d8d-448a-8414-c4e80da09f9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68e952c-9257-4404-a389-d6a32f8909a2", "sighting_of_ref": "indicator--ce2d7daf-5553-45b6-850d-a8b35b593afc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7f00cb-7613-4c1b-952c-339181a4ce73", "sighting_of_ref": "indicator--ce2d7daf-5553-45b6-850d-a8b35b593afc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50775e58-1ec9-4194-800d-dd009a9a9fcf", "sighting_of_ref": "indicator--7db8299c-9811-4d0a-9876-fbb3b6e5cc2f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a069bd96-2b6e-4878-a834-5ef8eb48760a", "sighting_of_ref": "indicator--5c85e9c5-ee12-473f-bf05-d37a1c129bfc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9a0cfd-77bd-4c48-9fb9-b96ce35dcd03", "sighting_of_ref": "indicator--5c85e9c5-ee12-473f-bf05-d37a1c129bfc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885beeb7-4842-45bc-be42-8e32f64e9dd6", "sighting_of_ref": "indicator--fa2efbb6-22de-4d8f-958b-c8eee49b71bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df60879-6f72-4fb8-93a0-d82f5de58e2f", "sighting_of_ref": "indicator--0d2c91c8-5e00-4f67-a6d8-1732418ae915", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cacef7-71ef-4ce1-973d-35d4bdae5b85", "sighting_of_ref": "indicator--0d2c91c8-5e00-4f67-a6d8-1732418ae915", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcf1edb-74f7-4266-a602-f92f64dc2741", "sighting_of_ref": "indicator--58b65be0-4a06-40b9-a310-303c4bd8c452", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba77798-a2be-44ce-ab58-fd18a8ce8379", "sighting_of_ref": "indicator--58b65be0-4a06-40b9-a310-303c4bd8c452", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b2c604-5624-4629-a8e3-443e31d0462c", "sighting_of_ref": "indicator--5492efc4-d833-453a-a8bd-21c359015bba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fd90a8-762e-42b1-8e4d-f3ba1ddc795f", "sighting_of_ref": "indicator--5492efc4-d833-453a-a8bd-21c359015bba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6664f6-eb6b-4fb9-a6eb-4721d15c9295", "sighting_of_ref": "indicator--9f243567-89ca-4e95-aadd-3312ea57b20f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721347fd-be7f-454e-9b30-69d8d03be41e", "sighting_of_ref": "indicator--308409c7-0256-4223-9227-78f8f4ec2c35", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388c5890-7630-4387-ae9c-e7edcae82ac4", "sighting_of_ref": "indicator--308409c7-0256-4223-9227-78f8f4ec2c35", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce529093-e66e-465e-8194-de7c91e49e88", "sighting_of_ref": "indicator--d649f68f-2f5a-4757-97d3-dd40723be0ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13587b89-fa9b-4761-9b45-136f10b28e68", "sighting_of_ref": "indicator--d649f68f-2f5a-4757-97d3-dd40723be0ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff114f0-dd2c-4fa8-932c-774471086260", "sighting_of_ref": "indicator--8cf99fbf-f0f4-4ed7-b93c-0a63c8691ad1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39926de6-cb17-4d8a-b584-5468a6eec90c", "sighting_of_ref": "indicator--8cf99fbf-f0f4-4ed7-b93c-0a63c8691ad1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faff5a29-593c-47f7-8fa2-7af7dcae73d2", "sighting_of_ref": "indicator--f9819067-4e44-4b24-836e-f60fd09b3eaa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63614d8c-43ab-41ed-96be-e0645ec832fd", "sighting_of_ref": "indicator--4be82e68-ca24-4a61-b6b0-c3fe7cdb44f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815eaaed-9da2-4072-9996-f16df958d570", "sighting_of_ref": "indicator--4be82e68-ca24-4a61-b6b0-c3fe7cdb44f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134fdc9f-78e5-421e-8c7b-25bcc74f9f09", "sighting_of_ref": "indicator--30395930-de45-44e7-9eab-9ef499efc8ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadcb85c-b615-4fba-82d5-fb579bc67410", "sighting_of_ref": "indicator--30395930-de45-44e7-9eab-9ef499efc8ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374020a7-4038-4f20-bfa0-649239dd02be", "sighting_of_ref": "indicator--47a9caf8-f202-4c79-bcd6-eda9309f72b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9091840d-7782-4952-94f9-489c83f3324a", "sighting_of_ref": "indicator--47a9caf8-f202-4c79-bcd6-eda9309f72b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ecad63-b0ba-4bdf-aca3-45cba11f47e2", "sighting_of_ref": "indicator--97e65f24-0787-4f2b-b70a-f0148f8fe179", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e56d64a-625a-478d-aeb6-1beb54897cb7", "sighting_of_ref": "indicator--34e65369-7f66-43fc-b8bf-cd7646a75d2f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7574ea-d181-4068-9dc2-c69a2557d963", "sighting_of_ref": "indicator--34e65369-7f66-43fc-b8bf-cd7646a75d2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17feb95-1077-4eb9-88f4-c14ec18ba938", "sighting_of_ref": "indicator--dfcd493f-772e-47c2-9567-b3ecc77fa560", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cecb985-c5ec-4733-8326-b6cba8a986c0", "sighting_of_ref": "indicator--dfcd493f-772e-47c2-9567-b3ecc77fa560", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7351efa1-e01e-4cdb-a460-d8b2ad105210", "sighting_of_ref": "indicator--db075fdf-cdc7-4d91-ae93-0947cac150f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444ae971-2d8d-44f5-9acd-628aef581a66", "sighting_of_ref": "indicator--db075fdf-cdc7-4d91-ae93-0947cac150f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33cecfc-07f6-4c1c-ad75-5182a00b6d3d", "sighting_of_ref": "indicator--dfbd3939-0b43-45af-bf05-51699f4496d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21db5e0-b24d-407a-b382-1f488cd33166", "sighting_of_ref": "indicator--9aa650fc-cfec-4c7e-a296-c9ce1369acce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bca485-837d-4004-8fef-b8c106ff785a", "sighting_of_ref": "indicator--73ac4323-bbfa-4ca0-9d65-f91c25addbb8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cd1566-09bc-432a-91f4-975238f2f72c", "sighting_of_ref": "indicator--73ac4323-bbfa-4ca0-9d65-f91c25addbb8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1b7255-7288-4171-8444-5a3e371947f7", "sighting_of_ref": "indicator--38447e5d-4c68-4869-b260-1bfcc33b1d0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8125a386-0c29-4e9a-b0fe-8f7ed58b03af", "sighting_of_ref": "indicator--38447e5d-4c68-4869-b260-1bfcc33b1d0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ed9b7d-5eac-4b80-b25b-7decb311ad68", "sighting_of_ref": "indicator--8d6a51f2-9490-440e-9d87-1c01187f2b51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4b71af-ab02-4b6c-a103-9e9df0099cd1", "sighting_of_ref": "indicator--d86236b1-64d7-4fed-8f12-7b6349c496aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87b5c36-939e-494c-83ed-60a3b57a6b42", "sighting_of_ref": "indicator--c9c369fb-bb17-4a9f-88b6-9d9026fc520d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea859bd4-7957-413c-be90-6fa8fd44bc05", "sighting_of_ref": "indicator--c9c369fb-bb17-4a9f-88b6-9d9026fc520d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d194ec-b2f5-4996-81e9-67a0ca003e8b", "sighting_of_ref": "indicator--14f2d125-f171-4f1a-a060-ba52bfce30e5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c370e88-8a65-42bf-a3b1-6d01b41bc416", "sighting_of_ref": "indicator--14f2d125-f171-4f1a-a060-ba52bfce30e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a16611-85fd-4985-b6e6-c57efb80be6e", "sighting_of_ref": "indicator--632ba66d-f27b-48f7-8810-213a60fdd259", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8be0ad-3544-4d20-8e95-46369fc9096f", "sighting_of_ref": "indicator--9205480a-ea48-49de-9c8c-2d61c939e1ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5eb6750-2e26-4d32-be56-91b3a8e86995", "sighting_of_ref": "indicator--aa1941ec-5dae-4aef-97cf-d0ab35218542", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319c1dcc-d2d2-4554-afc0-b26275b08def", "sighting_of_ref": "indicator--a0302ab0-eec6-422d-b668-afd1501ce68b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67e97f6-f847-4368-acb3-9cd7d8934a5a", "sighting_of_ref": "indicator--698389bd-273f-415e-8baa-32ab9a71450b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b05482a-8406-435c-9231-01cefdf7f233", "sighting_of_ref": "indicator--0c5c8952-a98e-4f49-8a37-93c68b2ccfca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb8d5f4-ef75-402a-910c-befdc79d941f", "sighting_of_ref": "indicator--7565d109-38fa-4423-a651-a2e17d782e49", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1b87cf-78f1-43f4-a3ae-29ce7273543b", "sighting_of_ref": "indicator--a59c956e-5c33-4414-b924-4ac6ee96fabb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8894c828-9973-41c1-8ff6-8b3fb6fec7c1", "sighting_of_ref": "indicator--a59c956e-5c33-4414-b924-4ac6ee96fabb", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334df327-19e2-4d4a-b90c-adb9ccca1ddd", "sighting_of_ref": "indicator--a59c956e-5c33-4414-b924-4ac6ee96fabb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacf2b0a-a764-4d02-beb6-428b421684a9", "sighting_of_ref": "indicator--7bb5219d-d245-408e-93cd-582fa9e3c735", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c463b8-548e-46b8-bb1e-9a21864805e5", "sighting_of_ref": "indicator--26103089-da29-4bbc-a73e-bcf7e1bacc9d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8320c3-d651-48cd-ba4f-3113b86cfbb9", "sighting_of_ref": "indicator--4a3ed1fc-73ec-4d03-8bd0-254cb1a5570a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7ebd91-f22d-40ef-b8f8-775e4dd1dfea", "sighting_of_ref": "indicator--2767f5d2-e70a-498b-8f71-89107a4a847b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c6b241-1132-41f6-9e32-95db5dfe4d59", "sighting_of_ref": "indicator--d068b674-49c9-4c68-a99c-4d03a8f423c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d39e6f-0638-4c16-ae03-b281c71a613e", "sighting_of_ref": "indicator--b9a94168-4ad2-4943-a52c-26f0d6c707b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97446d13-d2c6-42ef-9723-d2f08b9e858b", "sighting_of_ref": "indicator--3b76eb59-9e3c-4034-b81f-2f38d4a483e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0213fa9-ab4d-4668-b2e4-ee742d003e77", "sighting_of_ref": "indicator--5923c653-789f-47cd-b718-77dd90df4176", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682cb8e3-ed7f-4137-ae0f-c9a408fbd310", "sighting_of_ref": "indicator--4c888e4d-f832-403b-9bd3-b08395701b2a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba418246-315e-40d6-989a-0ea35ffa0011", "sighting_of_ref": "indicator--42e908f7-2380-4a73-bbc0-faf422156197", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606c31b5-51f6-4dd8-8acb-d72b52001e92", "sighting_of_ref": "indicator--85b5cd63-dcb9-443b-9129-7ba79611806e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fd5742-acf3-421f-8871-ac2fd0d09f31", "sighting_of_ref": "indicator--5e551a6e-ebdf-4560-b781-602f8b9c4da5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1b0f06-0ade-40a5-a115-6cefa02cb470", "sighting_of_ref": "indicator--fc410244-5c80-421c-bd1b-912fd5ae0424", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522d9a4f-8319-4c9f-87b7-4ef7ac5dc57c", "sighting_of_ref": "indicator--8c6e8e17-7038-4202-950b-41c55a11a2e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee1b412-25ab-49cc-8e38-c04fc6c10381", "sighting_of_ref": "indicator--9e4bd30f-2d24-4a10-b70d-6441c22e8e11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93bab4e-7da5-426a-aee4-4794b4f34314", "sighting_of_ref": "indicator--9e4bd30f-2d24-4a10-b70d-6441c22e8e11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19155c9b-a0c6-4cfe-a307-783c8ddef73b", "sighting_of_ref": "indicator--7923a176-18f0-4788-b9bf-1a075794862a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0f6cd5-0015-4974-bce1-75cca2c09c46", "sighting_of_ref": "indicator--7923a176-18f0-4788-b9bf-1a075794862a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c87a72-e91d-40b2-bda0-4d0a309ef3cf", "sighting_of_ref": "indicator--522b8b9d-dcd1-4c6c-8ae3-fc3c32f33181", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf2f871-1cff-4b35-8e6e-67edaa1812e7", "sighting_of_ref": "indicator--1ae5d10b-fa79-4822-b484-c91b6382a0c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bb1270-0d8c-4f09-a674-560878317051", "sighting_of_ref": "indicator--73605d13-a9ce-426b-92bb-e8954359e030", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8001bbdf-edee-4809-87db-a045261c6951", "sighting_of_ref": "indicator--73eed0df-c639-480c-b07d-944016c660e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562701cf-04cd-4463-b498-fa25ce604856", "sighting_of_ref": "indicator--73eed0df-c639-480c-b07d-944016c660e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a57f09c-3c31-448e-a4b5-5b3a19918c34", "sighting_of_ref": "indicator--3ae6a950-01f8-4928-b17a-894cfd10590f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0858c5-a780-4627-9a33-e1990f43bbcf", "sighting_of_ref": "indicator--b99ebeaf-67e9-4082-8b97-dfe2b1f12ace", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69070e27-e6e7-4361-8288-04c139704881", "sighting_of_ref": "indicator--71b7e6c8-ec9a-4d8c-b04f-38647532578d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b225df-e76f-437c-883a-7c1572fb4434", "sighting_of_ref": "indicator--e119eea5-c49f-4e58-b80c-81eb9fb65275", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2ad091-996c-489d-9674-cafe0f85e468", "sighting_of_ref": "indicator--f26faf71-374b-4494-b615-120817a9fb8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86258ed3-9c91-4a8a-b1ba-a148dd35c364", "sighting_of_ref": "indicator--1fd45eeb-1d03-446d-986a-d9450d7379e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541e9fc9-8a7f-4298-9738-490bb8cde20f", "sighting_of_ref": "indicator--9b2fd3d2-1f66-4919-8a0f-926b6afea332", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2998e4d-8615-4f53-9c20-054a00deca41", "sighting_of_ref": "indicator--c3bc6167-56b4-450b-bb32-c66dd582512d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b430181-7ea9-4d51-8c6f-00877cbda538", "sighting_of_ref": "indicator--19f7d4c2-0199-4f95-953a-cd28cad1a4db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081ca9da-d3b5-4b65-8452-3d4700fc4876", "sighting_of_ref": "indicator--67a7c16b-2740-4273-8728-eae0c8f8d448", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e07ffe-0b56-41d9-a7c1-87106f4944ac", "sighting_of_ref": "indicator--1fff978c-919b-4137-aa2b-29503f31fa14", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0758e10c-96e6-4c46-ae0f-c334d799e3b3", "sighting_of_ref": "indicator--aa3acab5-3b5f-4b19-8eb7-9a4fba74873a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef068126-9390-47f4-b7c4-2188d7faf807", "sighting_of_ref": "indicator--ea21b41b-0f1d-4f91-b06c-d0b03bfd9789", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4364c5-d89d-4b5c-8084-cf81a9f22ab0", "sighting_of_ref": "indicator--ea21b41b-0f1d-4f91-b06c-d0b03bfd9789", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528e9cae-58ad-4ab9-bed6-9c2684a44ef7", "sighting_of_ref": "indicator--c46099f4-6039-465d-8c94-a9ae70405d6f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab963caf-afa6-4d3c-9855-89d3ebca7f19", "sighting_of_ref": "indicator--2368f0f6-b46a-4f1e-8ec2-c72e8d85df3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9668714-4618-4dc8-84bd-0c9575213e0e", "sighting_of_ref": "indicator--646ff4b1-15a8-43dc-9a35-58c75ff54601", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5d6459-2bf1-45ff-86e2-2dce10c0c5d5", "sighting_of_ref": "indicator--2c1a8969-ec14-4669-926c-da3a7bdeba26", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda11143-bcbb-437d-8c42-41a5b8fd1a0c", "sighting_of_ref": "indicator--9b6f5e29-d8f5-4893-b34e-73eec825cb08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8f7580-ced3-475b-b3bd-9656830f7dcd", "sighting_of_ref": "indicator--e53fe2f7-c40d-44e9-aa40-7c57aed36a0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f570697-7d0b-47c2-8754-a7f9211321a8", "sighting_of_ref": "indicator--8791949e-8431-4301-8db6-4a9fc86841de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b006610-b40b-46c8-bcbe-6c584c7c8c2e", "sighting_of_ref": "indicator--fffbe7bc-c808-4d3e-b014-2d1efcbc949f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2d3d40-fe8e-491c-917a-cdcce74d0ecf", "sighting_of_ref": "indicator--505b1fd4-fef7-490a-8fec-20de2617362f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3138a028-510e-4263-b8c0-3290e2dc8354", "sighting_of_ref": "indicator--9f805e4f-06f0-4ef9-b954-e727642f9c22", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dfb374-cc15-43b4-b348-040838f12257", "sighting_of_ref": "indicator--9fba5276-c9eb-4681-9ec8-ca28d000d41d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c95241-416f-4373-b036-942fdcd9ff97", "sighting_of_ref": "indicator--2d559e22-46bf-4368-b2e3-4a96a8110ea0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f37c3d-2730-45f1-83ed-d5baf11f0e71", "sighting_of_ref": "indicator--2d559e22-46bf-4368-b2e3-4a96a8110ea0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9b4616-9c01-4cd5-bf6d-6dfc3b65c24a", "sighting_of_ref": "indicator--82eb1a28-f794-424d-be83-e0458c97d7bc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2764f0-69bd-4a9b-8165-5e4f1d23ecc1", "sighting_of_ref": "indicator--fec783cb-46a5-4a7e-b196-9f2bdf66725c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d250f899-f9ae-4705-b8d3-b24b014f5257", "sighting_of_ref": "indicator--24a462e0-3a3c-49fd-8a25-a985d0c07c85", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c53fd5d-a7a5-4cdb-bdd9-ce73d171ae9c", "sighting_of_ref": "indicator--24a462e0-3a3c-49fd-8a25-a985d0c07c85", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9568725-35ef-4530-8fa2-8fab72475212", "sighting_of_ref": "indicator--d39f5f59-9b7b-4ace-b06c-d53516496362", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba11e916-d8b2-4c85-9ff4-cfe35c0cfb1e", "sighting_of_ref": "indicator--d39f5f59-9b7b-4ace-b06c-d53516496362", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8643e2e-76c7-4504-bc2e-2639e649fadd", "sighting_of_ref": "indicator--c0fd5744-25f8-446f-b16b-0a189fd92bb1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73458c07-66bc-4817-b86a-dd6aaed06da5", "sighting_of_ref": "indicator--c0fd5744-25f8-446f-b16b-0a189fd92bb1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1918eb4-a28b-46fe-b659-361ddc162bce", "sighting_of_ref": "indicator--b1ea55ab-618e-4c99-8518-8d2590d8e82a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b06964-00c1-4450-8300-acb7dd9a32e1", "sighting_of_ref": "indicator--b1ea55ab-618e-4c99-8518-8d2590d8e82a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba469eb-30a9-4338-97cb-ebaba9c62525", "sighting_of_ref": "indicator--a776ae54-a8a3-46e2-b93a-266af672e31d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da26241-6b75-4519-b677-c882c244fa29", "sighting_of_ref": "indicator--7a36aea1-3251-4a82-938c-ccd2df79a3ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63633fc2-3fdd-4dc6-ac9c-02a171417ea6", "sighting_of_ref": "indicator--822aaf82-2e4f-4e2a-a83e-25d19d1f5fda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8909ab31-efae-4168-b17f-1b1e6ca4fa00", "sighting_of_ref": "indicator--129f60ee-a36b-4851-97a2-35314926927b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faad95a-9368-4628-9f5f-08cf41dc2a41", "sighting_of_ref": "indicator--2485f8ca-5505-4db6-8b8b-1e7f0d195acc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1209c4e3-0d67-4a41-8e88-884c1ef17b5e", "sighting_of_ref": "indicator--b3630219-a66b-428d-b735-82b5a742377d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec143218-2934-48a8-a1cd-71881caeea87", "sighting_of_ref": "indicator--b3630219-a66b-428d-b735-82b5a742377d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07806e5-3bc0-41a9-8ccb-b40d1e426859", "sighting_of_ref": "indicator--f17e2010-fe7a-4903-8e3a-402c2fcc4abb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5222be7a-c617-45fe-9a25-91969a94664f", "sighting_of_ref": "indicator--deeb1948-b0d0-4cc4-9ee4-f4f78056e8c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7051c635-fed8-4568-bc92-59ae4f3c04f8", "sighting_of_ref": "indicator--deeb1948-b0d0-4cc4-9ee4-f4f78056e8c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec783a55-55b1-4abb-b691-85c7689b4588", "sighting_of_ref": "indicator--811a5d28-d31a-4c4f-b3d4-b6af3adc762a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1685b0-02c4-47de-b4b2-d0ea8064b982", "sighting_of_ref": "indicator--856fae07-4f35-469d-8d85-c250bd34bc07", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60455894-62b9-4cc2-a261-aba763a80b29", "sighting_of_ref": "indicator--856fae07-4f35-469d-8d85-c250bd34bc07", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88500626-1f3c-43ea-a976-153449934cf5", "sighting_of_ref": "indicator--405d4cde-2118-4e39-85ee-66d7673ab02b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd2f542-47d1-4416-8c80-aeb219938108", "sighting_of_ref": "indicator--fc2e91d1-02b5-42fd-8cd4-9a1a58ae3c1e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2b7bbd-abd5-4ea0-8dbf-e2d74c50034b", "sighting_of_ref": "indicator--fc2e91d1-02b5-42fd-8cd4-9a1a58ae3c1e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7da01b9-c520-4d51-b24f-d89e67f854e3", "sighting_of_ref": "indicator--4b94b71c-98a3-45fe-bea8-b23001b37246", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fb86b3-6e80-47db-816a-cfedc47c62d2", "sighting_of_ref": "indicator--13e9e156-682f-4bab-8db0-4b0fab9fdfab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce3bc6b-b289-4b5e-9663-f13628d05450", "sighting_of_ref": "indicator--2f2e1886-21ea-495a-b9aa-3f1b5bcd06f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1084cfab-9071-4abe-b1f5-869570d46a46", "sighting_of_ref": "indicator--e341b387-267a-42eb-9eaf-b595e162852a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d23a443-b296-4b7f-9df7-4041880639a8", "sighting_of_ref": "indicator--297733be-afa9-4e81-8bcd-de011bd43584", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06edf31-53f0-47b2-b232-65e91bc3958a", "sighting_of_ref": "indicator--bc7d00e5-46c2-4c99-9b88-7c4b90c214fd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51868fa-d701-4a67-b804-03649bedc689", "sighting_of_ref": "indicator--6f97d72c-c183-4c74-8c23-6bb4303dd7b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d04e23-39ce-4271-af62-24eb67a5c9fc", "sighting_of_ref": "indicator--219a1eea-c568-4ac1-8d77-70caa2b1c959", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ee5fb5-8864-4adf-b621-505254b8c2de", "sighting_of_ref": "indicator--dcae339f-0dc2-4959-9deb-3b501e089833", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04979af-3cb1-4a0e-b962-86a5850148d3", "sighting_of_ref": "indicator--2eacbb1b-0150-4272-a26f-c30a8cf5e412", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1094328d-a048-4111-9ff6-e32879acc189", "sighting_of_ref": "indicator--da130dc7-331c-4e56-b268-df8333347702", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3602d06-d6aa-463a-953f-2af8af30986c", "sighting_of_ref": "indicator--7e2e2282-1b22-4482-ac65-1d30353c5569", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d80bdf-67c3-4d6d-b926-d3709faaa5f8", "sighting_of_ref": "indicator--2f176aab-fcdf-404d-8329-12a40b16729a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9804fd15-b6a2-4948-8578-16e72c367e4f", "sighting_of_ref": "indicator--23b7b633-ae5c-4568-a7f8-588810735244", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e6643b-5bf0-4956-948c-95bdf433aca0", "sighting_of_ref": "indicator--59138dea-cd5c-48bc-a7a2-a5bb554446e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c59f78-71ab-4d7d-b3ca-8651480d8897", "sighting_of_ref": "indicator--0e4f1269-53f9-41a7-aec9-534707b64edd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621a5b9d-c3e2-489a-b204-90e16eb2d2a4", "sighting_of_ref": "indicator--5462b787-bc97-4f87-8862-c87ba4118161", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c2da9d-aa9d-4621-b7db-1f52c4643329", "sighting_of_ref": "indicator--5462b787-bc97-4f87-8862-c87ba4118161", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d293cc64-2b22-45b4-b658-40c1644d5d08", "sighting_of_ref": "indicator--49674529-31d9-471a-9631-0056e91d78e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27787f6a-787c-40dd-b6e5-64e361fb0724", "sighting_of_ref": "indicator--aa10a769-c328-4437-b122-5d42ef1c809f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4edf18-2177-42fb-b58e-5529e5c80464", "sighting_of_ref": "indicator--31068d82-b2bd-4db5-b53b-b65d44110771", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f7ddd2-7c5f-461d-8e25-fd917ee4e668", "sighting_of_ref": "indicator--b8ad9193-b08d-4770-b2a4-3b9307902adb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca98b381-56dd-4185-850c-e86a182003ef", "sighting_of_ref": "indicator--90380335-2469-4fb8-b841-eb8e44cabd3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d40ac15-6090-45ec-b342-ecaca8eccff8", "sighting_of_ref": "indicator--f66cc8dc-efe6-4642-b36c-1c94b79bdba3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98aeaa85-eeca-4342-82d6-227ba821eba3", "sighting_of_ref": "indicator--f66cc8dc-efe6-4642-b36c-1c94b79bdba3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd612e68-33d5-4664-bac0-5e81f46fb248", "sighting_of_ref": "indicator--8cfcab54-a22f-40e4-adf1-dfa37f1fecf4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a857fa16-1340-4252-810a-b194fd739dca", "sighting_of_ref": "indicator--b618eac5-2f96-4f5a-86fa-49ae31e8a003", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fe674c-03be-4472-9501-5fc628543853", "sighting_of_ref": "indicator--b4c1ab24-aafe-4402-938b-9157807d2879", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9e78dc-ce6b-482e-9aa0-1621766de9f8", "sighting_of_ref": "indicator--79233a32-fe21-4aa2-a3fd-7facb8783312", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b192a6e0-de73-44e5-ab0e-8e54e4058dd0", "sighting_of_ref": "indicator--e9dc8f32-9401-4a4f-a237-961685bb9185", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00287c57-a43c-4564-86ab-4ec6c0a9b348", "sighting_of_ref": "indicator--02295ae7-ede8-4aa9-953b-0bd95ae06d27", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99ac8f3-2ce1-4185-8509-858c6402b368", "sighting_of_ref": "indicator--f9661f6e-7f39-4afc-8c1f-46b21522ac43", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a33fa93-e99e-4daa-8fe1-d65ef230d1b3", "sighting_of_ref": "indicator--f5e83e76-6e86-4b7f-aaae-45c0712a6577", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bc7907-2279-4e54-978b-a9f211d2a24d", "sighting_of_ref": "indicator--7546db0e-2cde-48d7-85fa-b0b4ec432e24", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e800fa22-5ed4-430c-9ab3-8b3cd8b7ce0b", "sighting_of_ref": "indicator--7546db0e-2cde-48d7-85fa-b0b4ec432e24", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822ce8e4-1813-49eb-ad03-ec3f07c8d910", "sighting_of_ref": "indicator--23f0dc99-b51a-468d-bb58-cad7358a2179", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fddd14-24bb-4d50-b143-56b9c8aad408", "sighting_of_ref": "indicator--23f0dc99-b51a-468d-bb58-cad7358a2179", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80fdfff-e122-4905-86c1-515899f98c4f", "sighting_of_ref": "indicator--efc26e43-a4b1-4083-bea5-481ea5fe4fee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c2ca6d-799f-403b-ae55-526ec46e7ad7", "sighting_of_ref": "indicator--b5af1ac0-feb0-4bbc-9e4c-51b15ba17746", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f4574c-9d36-4628-9034-2609261d90fd", "sighting_of_ref": "indicator--b5af1ac0-feb0-4bbc-9e4c-51b15ba17746", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e56c90-7a57-4083-8a11-998c8b035fe7", "sighting_of_ref": "indicator--22a33127-4d0b-4609-903e-3be45fac21df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d04e83-d11b-4ec7-8b60-ebcd7c1ed33b", "sighting_of_ref": "indicator--0243fd2f-b4bb-4b47-bfde-be890134ba2e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc80c0cc-24c4-4656-bae2-7757d5ac2e79", "sighting_of_ref": "indicator--0243fd2f-b4bb-4b47-bfde-be890134ba2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3533fb60-349c-4946-91d5-0c241059e50e", "sighting_of_ref": "indicator--34fd45aa-4916-426a-9930-9c90a6f4a1d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1913718-cf98-4dd2-9a49-207f30b04f2d", "sighting_of_ref": "indicator--34fd45aa-4916-426a-9930-9c90a6f4a1d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca30e73-5b6d-431c-9af4-ace11a95acbb", "sighting_of_ref": "indicator--c772fd19-eb1a-49c9-a9ea-b5c8b51efa40", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a126faa-2ed6-40e9-b5e5-604bd89d1630", "sighting_of_ref": "indicator--f2f5f1ea-b4e7-44e1-8648-ab461f01e2b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a6be5d-6bd4-4d1f-b8d7-61067273a564", "sighting_of_ref": "indicator--aea6e2b4-0b80-4c61-ba9a-3a01e1240780", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd8a8b1-31e5-479a-b07c-7cd22eecd212", "sighting_of_ref": "indicator--7a6ba8b7-9cdb-4154-b330-bccd32cb7824", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3bae59-0dd1-4f8d-b91d-55eea487d1b8", "sighting_of_ref": "indicator--84ae335e-2703-4b1b-8772-b70f4a1b2252", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dda8c7-4298-4424-8d38-871ef1222d9f", "sighting_of_ref": "indicator--1acc53d3-d968-4b8c-a96b-e2f783aa5c57", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9fd0ee-abb4-4f80-b2cf-ae209158f4d3", "sighting_of_ref": "indicator--17237cb4-2150-46fa-b986-a53e8ea7ea7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff419d92-a18c-4dee-8da4-3a2cb34db8a7", "sighting_of_ref": "indicator--c4e98600-04a1-4c12-ad8f-41cf7e5676b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b76b4a-3641-4ac7-bcc5-6acff5de9bd2", "sighting_of_ref": "indicator--396c3aec-b0e7-47b0-8b76-54ebfbb8bd7f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91651743-1fe5-4f7a-8249-c9fa06e9b052", "sighting_of_ref": "indicator--396c3aec-b0e7-47b0-8b76-54ebfbb8bd7f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b83599-8ae0-4f7e-b3a2-25a7e12da403", "sighting_of_ref": "indicator--18a2ee5a-8e56-4368-84d6-423fbe9802de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e4ab32-8a70-4aa6-a7f1-0f151702ab89", "sighting_of_ref": "indicator--18a2ee5a-8e56-4368-84d6-423fbe9802de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97544944-6a84-40b6-b1e2-9a26d7d8476d", "sighting_of_ref": "indicator--350174e8-65b0-469b-8941-e7cfdcb1d894", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e1fd8c-191d-4090-9072-598537c830df", "sighting_of_ref": "indicator--44db5ce5-ce57-4503-be96-0713e23d276f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97248fdc-0ccf-4717-9de6-1e8f849da699", "sighting_of_ref": "indicator--aba05513-4eb6-4768-8bd0-383d9c6c0d6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455a9ac2-566e-4d1c-9f6f-4fb7d079a483", "sighting_of_ref": "indicator--aba05513-4eb6-4768-8bd0-383d9c6c0d6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cffc5f2-aed1-49b6-8884-c71dce61612a", "sighting_of_ref": "indicator--dcf22331-cf4a-4e90-bd40-2bf27c2b656c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491b8997-d0e1-47de-8fac-1a75086dc4a8", "sighting_of_ref": "indicator--08c41596-7390-42df-9fd6-4ee67cfdb930", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c084521-128d-4601-83f0-e689d9ff1c90", "sighting_of_ref": "indicator--f9122b74-55ee-4e47-9da8-018bd732c260", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be81c817-ab0e-40e2-bb18-a27e1f0caf27", "sighting_of_ref": "indicator--6991efee-ec82-48ba-ae01-00cebbbca254", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a833d0d-692d-4ea7-85ed-b8d7db24ff19", "sighting_of_ref": "indicator--306e9b57-f8eb-4212-9213-88222876d75a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b791f61f-2295-4474-86b0-ae723bf0649a", "sighting_of_ref": "indicator--306e9b57-f8eb-4212-9213-88222876d75a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d555a63a-bb94-4d90-b7db-8eb9b839e1f0", "sighting_of_ref": "indicator--366867c8-d7bb-4482-bb6a-5e233b209597", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b05e84f-df32-4f13-b77d-26044c977a32", "sighting_of_ref": "indicator--b14f5248-2c27-47a8-8937-9258adfa2acd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4083e802-062a-445f-a952-19277a2443a8", "sighting_of_ref": "indicator--a59ff6e5-6a64-47a8-8a3f-cfe47187b201", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbc856e-9169-4f89-9ec4-c89c1a50ccb1", "sighting_of_ref": "indicator--a59ff6e5-6a64-47a8-8a3f-cfe47187b201", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4787fba7-7805-4269-8ff5-3fcf4df16b28", "sighting_of_ref": "indicator--4e5da25e-999e-4687-a517-42e93ca4d0c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08f6400-fde3-4e7e-aa29-5c255714fd65", "sighting_of_ref": "indicator--3af02ad7-c174-451c-a240-ce674868a1e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9d0b55-c5df-4909-8567-690692e5c828", "sighting_of_ref": "indicator--3af02ad7-c174-451c-a240-ce674868a1e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adb8fb9-8ad1-4461-8b4a-e41faf0f5f38", "sighting_of_ref": "indicator--7f064efd-c84e-4ccb-bac5-321a1f44743e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fcee9f-774b-4605-9618-9fe08c66b7cd", "sighting_of_ref": "indicator--26c689df-8443-4055-a321-2e23ced12465", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215ae8e4-84bb-4843-bdb8-39e5af9a0eb2", "sighting_of_ref": "indicator--0584627d-8cdc-4984-b471-2de70a6a91d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e90917-ff59-4c35-b115-48082bba3aa9", "sighting_of_ref": "indicator--ae053210-753d-4498-93de-efd4b7bdf4ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155b1d69-62b4-4bde-bdaa-62c5fdca5cd3", "sighting_of_ref": "indicator--9fab1a20-2fd6-46cb-9a37-4959209c2a42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac17793-9c0f-4c22-ad62-182273c007eb", "sighting_of_ref": "indicator--da929bf1-8ebb-402a-a8bf-056827a07c9d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67de164-37b8-450a-ab6c-1ca8e8105d92", "sighting_of_ref": "indicator--b316d348-6e18-4302-b388-8844b5f078b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052cc132-bc24-43f3-b22e-4604b52aaff0", "sighting_of_ref": "indicator--55b068d7-2cd5-44b0-8bf0-a1248787334f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f15860-e8f7-40d8-8195-499b99179f1a", "sighting_of_ref": "indicator--1ae52981-9910-49a1-a75d-03466d94cc0e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0f1665-9ec4-46f2-bcd0-5e1979f4eb81", "sighting_of_ref": "indicator--7bcedb3b-0437-4651-9b0e-a7537aeb29fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eddabe6-5895-4b02-8b02-ed50e95a8ecc", "sighting_of_ref": "indicator--7bcedb3b-0437-4651-9b0e-a7537aeb29fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac6f8dd-9dcf-4540-ab69-1b1616a8350f", "sighting_of_ref": "indicator--646d3733-89ef-4af2-afcd-aee975c48f19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea292602-d635-492d-94a6-c67ea0378857", "sighting_of_ref": "indicator--22ac8533-1de6-47d2-b58f-791ca9b85631", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a04f070-3527-4022-9b85-60bfc1d322b5", "sighting_of_ref": "indicator--22ac8533-1de6-47d2-b58f-791ca9b85631", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303adc61-e3a4-4d07-ad46-277b3c001779", "sighting_of_ref": "indicator--a8242cba-2868-46ad-9500-8a8005319e5f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb969e43-54f9-42d9-a9de-2acfdc16154c", "sighting_of_ref": "indicator--7c681947-8ea1-4885-8714-82d0e472fb87", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5538d8b-86c7-4461-bc84-16fec5c0d998", "sighting_of_ref": "indicator--7c681947-8ea1-4885-8714-82d0e472fb87", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc7bb79-8b52-4e67-8e06-6dd5b2992412", "sighting_of_ref": "indicator--6a18e71c-0a3b-4437-950d-a4c9702c8feb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70832647-e395-4fc1-a7aa-742dfdaa88cd", "sighting_of_ref": "indicator--eeff64e9-8a3c-4812-940d-750c56cd8517", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2225466a-60a6-442d-b70a-f6c2e2861a85", "sighting_of_ref": "indicator--a9585dd8-6d87-4799-8c00-a91d5c81b75c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a3db4f-e673-4971-98f5-3ca2e2de0232", "sighting_of_ref": "indicator--24c7503e-5ad8-412c-baf0-4efbd3c1882d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e984753c-84d5-4d3f-8150-cd715b2b61c7", "sighting_of_ref": "indicator--24c7503e-5ad8-412c-baf0-4efbd3c1882d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668f2f1a-173f-4d16-93a9-605383e87530", "sighting_of_ref": "indicator--45556c8c-78c1-4c4a-91e3-782bc029b522", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e7cc9b-9f72-48fa-b90c-4f3ac140d065", "sighting_of_ref": "indicator--e54a70c2-9478-40bb-9b54-5e83ae2d66b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b541bbf-88ce-4836-8ff0-2203dce93b5f", "sighting_of_ref": "indicator--e54a70c2-9478-40bb-9b54-5e83ae2d66b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d12370-3557-46a6-937a-8f7a0e62d4c8", "sighting_of_ref": "indicator--9cc8da47-d016-49a9-81cc-a92ea9c47b21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7dd072-ee68-4949-9ac0-3e7c7fbd8d86", "sighting_of_ref": "indicator--9cc8da47-d016-49a9-81cc-a92ea9c47b21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b95b4fb-24ee-47a7-a2ba-9d8be5923623", "sighting_of_ref": "indicator--420fdf9a-77b5-45dc-86a5-126bddfdfc80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59beaf58-9fbc-40b0-8704-1c598bddffc1", "sighting_of_ref": "indicator--420fdf9a-77b5-45dc-86a5-126bddfdfc80", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e8cd69-fc4f-4079-9d60-b237b95b9871", "sighting_of_ref": "indicator--48f5cb04-a8dd-4079-9923-808942a7e323", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca6bd9b-1449-4eab-8157-4476defbc667", "sighting_of_ref": "indicator--0990b840-247e-4f86-842b-8ba7d4f9d753", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce045b0-6dde-4832-816a-d715d5166bcd", "sighting_of_ref": "indicator--29ca0aeb-c82c-41e0-a429-489719acb8f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ce717c-afe6-4ac8-8f6e-e511b3400b65", "sighting_of_ref": "indicator--29ca0aeb-c82c-41e0-a429-489719acb8f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feae3f8-7678-46db-a9d3-04bd9db168c6", "sighting_of_ref": "indicator--112eda8e-ec0d-4cf0-879c-863fe0b5a1be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134b2086-6ac0-4d5c-9971-2e756183201a", "sighting_of_ref": "indicator--782a2773-cc5e-44c9-ab13-fed2c3d1bfda", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18afc22-ea6f-4d82-8219-64e7c62f76fb", "sighting_of_ref": "indicator--986ba0ac-482d-424f-8240-237451e5c85b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f44ca5-91f0-4015-aaf8-4385c3449fa1", "sighting_of_ref": "indicator--b52470ff-236c-49b1-bcd7-5c383fa6e6c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ee97db-ceb0-4e72-818e-9452c301fe5d", "sighting_of_ref": "indicator--8bceadf9-be7d-4561-86fb-29b4fbb35a3f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766cf66d-27cf-442e-91b5-bbceec53426c", "sighting_of_ref": "indicator--8bceadf9-be7d-4561-86fb-29b4fbb35a3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decd920b-28bf-45ff-b1a7-b7c055270848", "sighting_of_ref": "indicator--602a72f4-bc14-4564-a7e8-02c0277d2f14", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6f613b-0bb8-4742-be6a-41b85fbbbbfe", "sighting_of_ref": "indicator--e12ee0f0-ed43-4f5e-8436-72848f3c46cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f29f70-c301-4d14-a608-31cd452312ff", "sighting_of_ref": "indicator--e12ee0f0-ed43-4f5e-8436-72848f3c46cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e115ba-711a-4926-a9c4-a3816f3b14e7", "sighting_of_ref": "indicator--d47d1b9f-6fda-4038-b280-268bd738d210", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac006a4e-e56b-48e3-8e98-d2cf182498d5", "sighting_of_ref": "indicator--d47d1b9f-6fda-4038-b280-268bd738d210", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f78f7d-ce1d-475d-bfae-517b8df3cf07", "sighting_of_ref": "indicator--184bf4bf-45ca-4eae-ae31-83b96e08e43e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf32f579-0e75-4066-815b-1195c378fe38", "sighting_of_ref": "indicator--6c9854ab-b379-4bb1-9b51-2641bbb7b091", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ad37e7-2ebb-4926-8045-4cded5227763", "sighting_of_ref": "indicator--20a84171-beb8-4aad-8d8e-35bebb365dff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3254b329-89c4-4a8d-8120-b5546cc5a7de", "sighting_of_ref": "indicator--9e2547c2-294a-4d6e-83b9-72b767f9fdd8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7b195a-94f0-4460-8356-7f81629b4e4d", "sighting_of_ref": "indicator--545315d0-dd62-4090-9efa-80b138da2e58", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728a3aae-6312-41a5-854f-2ef0e822168d", "sighting_of_ref": "indicator--7d5fe00b-b9fd-4c4a-bb70-8c13f7ee1035", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88202d2f-8f89-4266-88fd-0fd03552e12e", "sighting_of_ref": "indicator--7adef828-76a5-4957-a717-6410c0d36d03", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030f11b0-6c0f-4629-a09e-59c3ef9d8d12", "sighting_of_ref": "indicator--7adef828-76a5-4957-a717-6410c0d36d03", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43696783-4d8b-4fee-b1ec-e6c46e6a64b0", "sighting_of_ref": "indicator--ff4d661b-3e7b-42c2-905a-0947847c739c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d3043d-32da-49fd-9820-cf64e3f2c760", "sighting_of_ref": "indicator--99494f49-cf09-4e24-9f40-b7ad98a19fcc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d563ffd-66f4-4c9a-b630-40be43e0bf5e", "sighting_of_ref": "indicator--6e2627e4-4448-4bab-9221-eaea147599a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca1f691-e19e-41bd-a35d-76f0015b71f7", "sighting_of_ref": "indicator--6e2627e4-4448-4bab-9221-eaea147599a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21314357-a15a-4baa-aef2-b0f268fa5c37", "sighting_of_ref": "indicator--579494f9-3a40-4612-b146-f3c1a37860ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ecc175-0c56-4194-9a21-646a56ca46fb", "sighting_of_ref": "indicator--579494f9-3a40-4612-b146-f3c1a37860ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1243acd8-c5c1-4257-820a-12309af65f50", "sighting_of_ref": "indicator--420faeda-1ebf-459b-84b5-6e8625d68f8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1355888-d33b-48bc-ad7c-dd12cf4b06e3", "sighting_of_ref": "indicator--420faeda-1ebf-459b-84b5-6e8625d68f8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7531c53-bbe2-4ff1-a668-b733384888b6", "sighting_of_ref": "indicator--5ff8f255-25dc-4e87-b966-d617b9e428e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc2a1ac-28f0-4e79-86cd-49aaf43afb69", "sighting_of_ref": "indicator--2d315e4e-f63d-4777-ad62-284232137575", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f53dc4-a822-4bc8-838b-3485a4a1b23c", "sighting_of_ref": "indicator--53eea611-f2c4-4ee6-aca3-76abc3748b83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e139f258-af43-4159-862f-80f12b78f4d4", "sighting_of_ref": "indicator--53eea611-f2c4-4ee6-aca3-76abc3748b83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946d9152-79fc-42e4-847d-a61f0288e74a", "sighting_of_ref": "indicator--0b7829f0-ed13-4cbb-b95a-bda4c30b01f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84af70ee-e0c0-46a7-95fa-afbb96f1161a", "sighting_of_ref": "indicator--91996e90-2948-421f-8544-a04ed08875b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5889095f-789f-4855-abe4-5f64c76b8e7d", "sighting_of_ref": "indicator--f848926f-9b5f-43f2-a605-9b09752fc59f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9d6725-2274-43f5-8f94-7afc93141e97", "sighting_of_ref": "indicator--f848926f-9b5f-43f2-a605-9b09752fc59f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa8f545-e14f-410b-825c-cdce626ded91", "sighting_of_ref": "indicator--29f1866a-1b5f-4f6d-b547-72c10bd34260", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f596b81-98dd-4d75-8753-02151c6b844f", "sighting_of_ref": "indicator--9266c7c9-ee15-4da9-92cd-00a32605fef6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c23a45-4397-4b94-856a-3d6e388b6612", "sighting_of_ref": "indicator--c7673ee4-7725-413a-964c-1e1054b89b2d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457b5a26-e17f-4a33-b8e1-97f1bf34bac2", "sighting_of_ref": "indicator--c7673ee4-7725-413a-964c-1e1054b89b2d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f6e45a-3e75-46de-8486-93f3e90408c8", "sighting_of_ref": "indicator--cdc5679f-e3ae-453c-83cb-9f08e955e10a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eee372f-74f1-4101-a60b-c952ddcb6392", "sighting_of_ref": "indicator--a46e10b3-e524-4b42-93b0-d3096c2568b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55535dc0-03e9-4519-990c-038a70c7de41", "sighting_of_ref": "indicator--a46e10b3-e524-4b42-93b0-d3096c2568b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9142c831-eb8b-4db9-b918-7a17b9013712", "sighting_of_ref": "indicator--99c9d10e-02f3-45cb-8150-d3bde19b49b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4940d7-9246-4caf-8aed-c9911f16db44", "sighting_of_ref": "indicator--4b6253ec-5e5a-4e1e-acf8-fce3dd757a2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b71d977-6e14-4c3b-85e2-a926cb36f599", "sighting_of_ref": "indicator--6c82d49b-6b14-47ed-a9ac-d641c2a70e93", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85b56d1-9077-47ab-849a-5fccea1dacdc", "sighting_of_ref": "indicator--1ec8c6bf-32a7-49ef-a409-31d8b376b95d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12c0369-bedc-49ff-a3c9-fc22af41b208", "sighting_of_ref": "indicator--1ec8c6bf-32a7-49ef-a409-31d8b376b95d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f58fd3-8e82-4a32-8337-d4583f5a3e0c", "sighting_of_ref": "indicator--e0f2745a-257b-4c78-b82e-123d18a9dbf8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768a181c-6f51-4b51-98c4-360ea0ff7527", "sighting_of_ref": "indicator--b718fbb4-c295-4375-a6d4-8e9137b34989", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2dab29-652e-4869-9ac2-822d92a35831", "sighting_of_ref": "indicator--b718fbb4-c295-4375-a6d4-8e9137b34989", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47d2f94-ed3d-4cfe-b56d-b1ee0e2fe299", "sighting_of_ref": "indicator--9ef4244f-1700-41fc-83ed-72587a54c6b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61b4de0-2a43-4ca1-a545-7df109986d54", "sighting_of_ref": "indicator--9ef4244f-1700-41fc-83ed-72587a54c6b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b38cd7-22b9-4add-ad31-26801eff95ff", "sighting_of_ref": "indicator--e3d10117-f07e-412c-ab7a-502c6accb91d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75668161-5eee-4c9a-bece-4ef8f9c4cd0c", "sighting_of_ref": "indicator--e3d10117-f07e-412c-ab7a-502c6accb91d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448f238d-2dcc-4d63-b438-f248f143018a", "sighting_of_ref": "indicator--a55d06dc-544e-4138-953c-00c229c085e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a409c6-ad79-44b8-8e75-ee04cb42d346", "sighting_of_ref": "indicator--4377dbe7-d464-4e35-8ec8-442ddec9b2bc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a8b1d0-6ac2-4e4a-a379-1967d766a281", "sighting_of_ref": "indicator--57fdda33-85a6-4fec-a606-139e9d22ef9c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263347c4-756c-4069-a691-db69e9b0aa8a", "sighting_of_ref": "indicator--875db571-c71f-472c-9273-f6cd93234a9e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6b3210-0ffa-4550-9dc8-a860529e210c", "sighting_of_ref": "indicator--58f96d04-7fb9-4dac-bdce-2b92ed5e8f9e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c73c0f8-311b-4925-8326-16e9dd56bed3", "sighting_of_ref": "indicator--58f96d04-7fb9-4dac-bdce-2b92ed5e8f9e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e07237-0f68-4de5-9db7-1884df8dcb89", "sighting_of_ref": "indicator--30ce0b50-6303-45f1-8d04-f24259a09a6d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f582ec-0edb-44ea-92c3-d2daccad2afb", "sighting_of_ref": "indicator--30ce0b50-6303-45f1-8d04-f24259a09a6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627590ec-1312-4f41-b4cf-1778f6671ca8", "sighting_of_ref": "indicator--292bd4f8-dcda-4b7c-b29c-0be77e0a2bef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642f7b0e-b5ca-4788-b869-08b0d65460eb", "sighting_of_ref": "indicator--0db54d5c-4e23-491c-8e50-02ed0e7b97bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacb3a18-f5af-46f5-aeab-19793f57e483", "sighting_of_ref": "indicator--aec087a3-d3f4-470e-b999-98f31c97d29d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e97a4e-167f-463a-a3b8-fc3b15f8bc5c", "sighting_of_ref": "indicator--60091ea7-684f-4d73-9e7e-64f79e939f39", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0f4b74-b6cd-49c5-a3fc-28431e12ca92", "sighting_of_ref": "indicator--60091ea7-684f-4d73-9e7e-64f79e939f39", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179bb808-d06f-4a7e-8d22-ed7c9579efac", "sighting_of_ref": "indicator--ced7cca9-b9bf-46d8-b718-d8f11b63fd12", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cbc129-4d76-49ca-9cc0-c2c1c769f6cf", "sighting_of_ref": "indicator--ced7cca9-b9bf-46d8-b718-d8f11b63fd12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151640dd-da27-44b4-8e21-5e67e13c4f6b", "sighting_of_ref": "indicator--f431d44b-7a7e-4a76-b7a2-3e1f39ac39bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b974431e-5bc5-4d1f-812d-874e1a641c0b", "sighting_of_ref": "indicator--f431d44b-7a7e-4a76-b7a2-3e1f39ac39bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b596bec-3c63-48ab-a326-0b9b187fe0cc", "sighting_of_ref": "indicator--dfc548b5-f39e-47d9-992f-c50ea8be9e10", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e7e4ce-cf2b-48f2-b951-a413e29891ca", "sighting_of_ref": "indicator--7504f7c6-5b05-4669-9295-711fc6b7b7c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aaa2a4-7ca8-4fc4-9412-afa406521079", "sighting_of_ref": "indicator--7504f7c6-5b05-4669-9295-711fc6b7b7c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1998b811-affc-4f48-9ea9-515817107617", "sighting_of_ref": "indicator--17d8647f-dce3-46e1-bcf5-a6419b327140", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd348a00-4772-438e-9739-5085585e42cf", "sighting_of_ref": "indicator--17d8647f-dce3-46e1-bcf5-a6419b327140", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d469d619-b534-4ed0-8552-5d5143357cde", "sighting_of_ref": "indicator--a17893ae-c9d2-4695-8b9f-ffc001e0ddb5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd8ab76-7abb-4fd2-8745-77c51c68c9c0", "sighting_of_ref": "indicator--913a5b02-cf30-4367-9b41-5b13a4988bc1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cd9af6-f15f-42a4-83f2-f9b2cf3e6cdc", "sighting_of_ref": "indicator--913a5b02-cf30-4367-9b41-5b13a4988bc1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7234a45b-174f-4467-bfff-1707d6dfbb26", "sighting_of_ref": "indicator--5af22eba-ff69-4413-bcca-e745da2fc22d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cb308b-ad60-47d0-bd06-f4c9eae47e02", "sighting_of_ref": "indicator--5af22eba-ff69-4413-bcca-e745da2fc22d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910bc214-5438-4f46-9159-5ae69b91c488", "sighting_of_ref": "indicator--90ef967b-1c02-4073-b9f4-c54b7d4b5738", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482c7989-708b-4029-93f9-918cee81001a", "sighting_of_ref": "indicator--83307a98-1016-4726-8fa2-3ffdaf9c9a0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f6ef1c-5bdc-43ea-9982-17358f35ac2c", "sighting_of_ref": "indicator--83307a98-1016-4726-8fa2-3ffdaf9c9a0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ff776e-8e43-41ed-912e-3f5c811384c0", "sighting_of_ref": "indicator--dcc31d93-e8c4-48c3-8609-41afa2d794b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99dc5be-a708-4ec5-be4c-a8fcb0c50196", "sighting_of_ref": "indicator--7402a931-ca82-40ea-9c10-f00963574615", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaad384-fb1a-4de9-901f-5c5b6c61f332", "sighting_of_ref": "indicator--7402a931-ca82-40ea-9c10-f00963574615", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47d7539-1444-4782-a437-2e9808fe2730", "sighting_of_ref": "indicator--680ac2fb-54ef-4121-af0e-8109473973fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0951b8bc-a977-439b-9cf4-f5f9ee1e26d9", "sighting_of_ref": "indicator--bd6c8e93-428d-4c09-96d3-3b689e415ffe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999fbbca-46da-43ed-970b-1665f7d76fd0", "sighting_of_ref": "indicator--bd6c8e93-428d-4c09-96d3-3b689e415ffe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84730ff2-ae77-487c-981f-5c9612653252", "sighting_of_ref": "indicator--7c378f3b-9f18-4305-ae4a-71929f743d55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3f01f1-5eac-43d0-af17-d90d1d548d5e", "sighting_of_ref": "indicator--56b8e3e6-d463-40ed-a521-b0fa7e2ea007", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7602f10-a414-4f0f-bf97-966f8b73e387", "sighting_of_ref": "indicator--caa7b8cf-1699-427a-8fe7-f26612d2cf43", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56338ae-ea13-4a1c-9f82-06408355f508", "sighting_of_ref": "indicator--38b47ac1-5b27-4fa2-92c8-ee756f6933af", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a5135b-0e28-434e-bc77-9be82665a705", "sighting_of_ref": "indicator--b14ca7f1-519d-4840-81f2-5daba75ceb33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a928d88-7bf8-424d-b905-e946387002d3", "sighting_of_ref": "indicator--b14ca7f1-519d-4840-81f2-5daba75ceb33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a97683-74fa-452d-8e5a-58546013d52c", "sighting_of_ref": "indicator--ec76ac73-e6e2-4128-8bf0-16bd0dec684a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3b18a1-7a99-4e6a-9c71-6e00b7506677", "sighting_of_ref": "indicator--4f824d8b-8641-4ffa-9656-364d9baaf054", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df46ddb8-7b81-4eaf-8ccb-ce67b1315cba", "sighting_of_ref": "indicator--b5f6f636-512c-4fdc-bb4f-db61c31ce482", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a1d44a-b61e-4b14-b98a-820e10deb2c6", "sighting_of_ref": "indicator--b5f6f636-512c-4fdc-bb4f-db61c31ce482", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f167d658-e052-42dd-96ec-ed2107ff37f3", "sighting_of_ref": "indicator--f1b11f5c-53b1-45c3-8a49-2255cc1c75b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5054db43-23b1-44eb-b10c-8b7d29fd4310", "sighting_of_ref": "indicator--bd9784c9-b55c-4aab-9a69-4b50de8be614", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3857f22f-cca4-488a-891a-ac571b29de19", "sighting_of_ref": "indicator--e3e40a44-49e7-43d6-b059-f79e813877db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688fff40-800a-42a8-bbff-52c9e2e6144f", "sighting_of_ref": "indicator--8def819d-9d90-4d9f-8a6b-a8315a6bf11d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f86f90-3f02-431a-b583-642bf6055e11", "sighting_of_ref": "indicator--8def819d-9d90-4d9f-8a6b-a8315a6bf11d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb105fe-ef0a-4977-b68a-e29cad990491", "sighting_of_ref": "indicator--f6856817-a4d4-450f-a204-4ef01c0f6e41", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590851f4-395e-472a-b0c9-9f1d4ce491a4", "sighting_of_ref": "indicator--f6856817-a4d4-450f-a204-4ef01c0f6e41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d98757-dc6f-4ce1-90d8-f86b2ce4fba9", "sighting_of_ref": "indicator--9c6550ff-dc7a-4d2b-9715-a7be45dc96eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c92c415-abd2-4383-ab67-4a8ee18a9216", "sighting_of_ref": "indicator--3f8fc5b6-6770-4516-bc5c-9aee28418596", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984a3bae-0e4e-43f8-a350-78ccbda5c63e", "sighting_of_ref": "indicator--f8eb3fbe-760d-445e-836f-7a20165b7794", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f520d51-2711-4ab8-84fb-3af590772b90", "sighting_of_ref": "indicator--a7c4ff45-091c-4cb5-a60c-a7f883cb6850", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f944a3a5-5dc0-4066-bb40-5026708dd4a2", "sighting_of_ref": "indicator--96bef089-d01f-449f-b17d-f151d3d2f253", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a01fb57-0fd7-41c9-b1ca-f610bc827d7b", "sighting_of_ref": "indicator--495b5499-24d5-473b-bb53-744296794dcf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97bcb57-950c-4527-b7f4-8dab5013c64e", "sighting_of_ref": "indicator--11d8c9c0-cca8-43e4-b1d9-3a6d22f8d020", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fee2b9-c741-4203-a1fc-bf62d19c44e4", "sighting_of_ref": "indicator--470e3df6-a4c3-443e-bbeb-c5d07afff4c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246c4ecd-c388-4982-86a3-d48386cea77d", "sighting_of_ref": "indicator--3271220d-b953-4306-87c9-43d0929f7edf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0108608-29a1-489e-9c33-e4af1d9d12fc", "sighting_of_ref": "indicator--dda779f0-e9e5-4e58-9d04-105541575c6f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad5ea8e-0b73-4555-89f9-e5d978f1c2ad", "sighting_of_ref": "indicator--dda779f0-e9e5-4e58-9d04-105541575c6f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43662f3-f6ba-4474-a327-79406181b886", "sighting_of_ref": "indicator--ce939b49-eb5a-4d0e-bfe2-900efbeda5fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a0cd6d-ef1a-45b7-9769-27317a3efd46", "sighting_of_ref": "indicator--80ede604-dc8e-4311-8acb-21773826d13e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6f9e5c-362a-4c8d-b24a-3963afc260b1", "sighting_of_ref": "indicator--80ede604-dc8e-4311-8acb-21773826d13e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb0655f-f3c7-44f0-bafe-c6a4e742d61a", "sighting_of_ref": "indicator--f37dd63e-0608-4341-b46d-b95112203b6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c4c99b-7e11-4efb-b5f8-8c1590d9ce8e", "sighting_of_ref": "indicator--bd533aab-d1b0-478e-bf80-aec4cd3992a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96a82e7-78fb-4634-90ab-f474dc6d1787", "sighting_of_ref": "indicator--fbdbf8ce-4aa8-4b20-9b01-de9bebff85ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ae0e4b-582f-4c6d-920e-6797f6027aac", "sighting_of_ref": "indicator--ffd8aa18-c01c-453b-86b5-117dac9ef6c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b5b8ca-23c8-4074-a822-87eba64b8c3d", "sighting_of_ref": "indicator--ffd8aa18-c01c-453b-86b5-117dac9ef6c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d920e33b-2cfc-4b22-86fa-a457cd193ee1", "sighting_of_ref": "indicator--d9a3c6e6-71c1-490f-a4fd-e02a3fdd28de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d44e1c-be4a-427e-b812-32a86f817eae", "sighting_of_ref": "indicator--45e0970d-9392-45e2-bc3e-08fe776c0f3d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b953353-370a-495c-a632-c0a4773bd0ab", "sighting_of_ref": "indicator--afc9421a-1f67-4544-9f65-9674b028df5f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7cd319-7985-4d1f-b78a-72e4b2ad30bf", "sighting_of_ref": "indicator--361fe04a-57f3-47e3-b58a-d73e7a8659ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36475638-01dc-4f13-8cbf-621a130f297e", "sighting_of_ref": "indicator--64dc3004-9b3e-4a01-b6f9-f3f59d644777", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fb4eb6-89ac-4f7f-8207-19f854234aba", "sighting_of_ref": "indicator--64dc3004-9b3e-4a01-b6f9-f3f59d644777", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009f1a72-449d-4231-b1eb-ed79a5d3f6f6", "sighting_of_ref": "indicator--a77c424f-1184-4023-8ff0-aa6362d9cf97", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a16772e-0c48-4401-a641-6b36eda8432f", "sighting_of_ref": "indicator--a77c424f-1184-4023-8ff0-aa6362d9cf97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b804dc57-3b3e-45aa-b5cc-a3fa5edb6a4b", "sighting_of_ref": "indicator--20c7ed6d-0224-4737-b4b6-1e56e0ea3196", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1b3468-7469-4d50-8f08-55edd3318439", "sighting_of_ref": "indicator--33424cb5-9b19-4ef6-8397-a3518102e7d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dd40e3-ef8b-4324-8d5c-890aa6df0396", "sighting_of_ref": "indicator--3bc92de7-3265-4940-a1cf-c9102914e9ba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4066ba6-9729-4ec8-a3aa-85f67939ac97", "sighting_of_ref": "indicator--5fbfb4b0-9a7d-4982-95f0-3701a588bb19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79598947-865d-4ba8-889b-cf9a729f04b1", "sighting_of_ref": "indicator--19cbde9b-5ea7-4260-8739-29b1dc533bd3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4029d120-c789-492a-bc22-957e8cc59542", "sighting_of_ref": "indicator--a7f23d66-74c0-4923-ac6f-016ab0e64fd2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b920f3-7930-4f48-a36b-0cf09406b279", "sighting_of_ref": "indicator--53af908d-0b33-4069-b1d1-00423387303b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6efe4c-dbb3-48c7-960d-e963e67ae04d", "sighting_of_ref": "indicator--c77a9890-c93e-4543-8959-9444ba205051", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d02cc91-dcd3-4f87-acdb-9ff52a5a735b", "sighting_of_ref": "indicator--c77a9890-c93e-4543-8959-9444ba205051", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8976ff-a719-4cb8-876e-cf7b9acb2762", "sighting_of_ref": "indicator--46d495d8-a14b-448d-b381-559c9dbbec57", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2680b0ca-9319-4339-afb7-93d4d3221460", "sighting_of_ref": "indicator--46d495d8-a14b-448d-b381-559c9dbbec57", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818cbb85-dc1e-4f5d-93c6-13fd238edab7", "sighting_of_ref": "indicator--0f89d81f-a46b-4f19-9218-e00f2e745c03", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b68923a-9496-4296-8684-8abdcae7ac99", "sighting_of_ref": "indicator--0f89d81f-a46b-4f19-9218-e00f2e745c03", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f538c218-e194-4b49-895e-94479179e52c", "sighting_of_ref": "indicator--54925618-cbe8-471a-a09b-d23dc3183636", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d295c6d-92f1-41de-b71d-32f3d7caea53", "sighting_of_ref": "indicator--314e376a-3f6f-4440-b776-45cfda2683be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e25a06-bebf-495f-aefe-84947da108b9", "sighting_of_ref": "indicator--314e376a-3f6f-4440-b776-45cfda2683be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0f979d-2666-4c25-9975-e9182764dfb0", "sighting_of_ref": "indicator--2d118db3-0bdd-4acf-b62a-7e04ebf3fd0b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698002cf-2a57-4994-8182-da93f697f22f", "sighting_of_ref": "indicator--b7ab6661-f59a-4d52-ad72-590d29a04b4c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a193f72-573b-4714-b9b0-2c6cd63be41e", "sighting_of_ref": "indicator--ffe14afb-c2f9-4160-bdcf-15829c293f25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0251225c-fd58-4646-931c-8d5fe0649aff", "sighting_of_ref": "indicator--ffe14afb-c2f9-4160-bdcf-15829c293f25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9a7018-8f6e-4133-b356-4e3ea43d4858", "sighting_of_ref": "indicator--b3abebdd-96bc-4ac3-ba1d-891d239d40cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced5be8c-2baa-4a2d-93de-7f07d011909a", "sighting_of_ref": "indicator--3d332fe1-5fef-48b9-913b-c79b045a8c99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51832a32-a83f-49a7-808b-6379e97f51e3", "sighting_of_ref": "indicator--138ceced-c39a-4cb7-a103-516cf2eda48f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e1f849-383a-4257-9817-85b326a8a80c", "sighting_of_ref": "indicator--4b44b9ba-1e3f-49b0-8d50-faabfc6ff943", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f2c831-78bd-4a65-bea1-6e8e134d7124", "sighting_of_ref": "indicator--54c7c8cf-e1d2-4cfe-b713-51fb303a2515", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417044b5-f62d-404f-bcf0-4552a1f67f4d", "sighting_of_ref": "indicator--5c61175e-c0d0-44e8-91ea-fa732e7dd8d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39188864-b78f-4108-95dd-b56ab654421c", "sighting_of_ref": "indicator--386d5ffc-09b5-4ce7-99a4-f440b702118e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9fe900-ee29-4949-a4c9-0f0e9951de2f", "sighting_of_ref": "indicator--b8261d9d-ecab-49df-818a-a1cc02f0be94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa45e19d-95cb-44cd-9f61-0ea4e97cb770", "sighting_of_ref": "indicator--e7b88533-0c41-4f43-8421-87ed13b443b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ae4af9-5099-44eb-899a-cf8df5ed460e", "sighting_of_ref": "indicator--e7b88533-0c41-4f43-8421-87ed13b443b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb631328-6e9d-4abd-bda8-4252ea4ab555", "sighting_of_ref": "indicator--bcb17805-909c-4774-8c85-776e6ccc5f61", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b27ab3-765c-415c-b8b3-13855b9327fe", "sighting_of_ref": "indicator--a6781fe6-4949-403c-afa7-bf5a591b1191", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5daba78-03d2-4599-8f51-42b9165ddc52", "sighting_of_ref": "indicator--a6781fe6-4949-403c-afa7-bf5a591b1191", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15d5329-db08-409a-b953-b59af78d2172", "sighting_of_ref": "indicator--89db787b-0925-40e1-b58b-7362e5da8d5d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9665af0d-5e41-4809-b62a-3ace53802c63", "sighting_of_ref": "indicator--e867e504-5e0e-4848-9a74-08b982393291", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a8a297-ef23-462a-9bbf-ba0c5f2a72f3", "sighting_of_ref": "indicator--e867e504-5e0e-4848-9a74-08b982393291", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e945f8-4d37-4998-a34f-22a2e6b1b864", "sighting_of_ref": "indicator--c2c4751b-85e5-4a47-940d-914da693f185", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72f62e4-064b-479c-bcba-d40c6c00532a", "sighting_of_ref": "indicator--552aef6c-a6d1-4668-bc6f-4b4fbf382ae8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e3cabe-ca42-4540-bedd-f512815ff838", "sighting_of_ref": "indicator--395433c7-96fb-479b-aa4b-aa594051a85c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ed7d4e-1253-4d94-b9e3-7382f7097f39", "sighting_of_ref": "indicator--395433c7-96fb-479b-aa4b-aa594051a85c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a385f63f-8da8-470c-a380-24c5fb869632", "sighting_of_ref": "indicator--e83d892a-11df-4caa-b67a-4084b35c892b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89bbb90-0b01-4792-8341-6e1763b99b14", "sighting_of_ref": "indicator--68859c90-b332-44cc-8856-6e6b8b655634", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dcc7c3-8e10-4a55-b407-659b9c372bb3", "sighting_of_ref": "indicator--16e39e4f-c147-4711-9cd4-c6bc4c677c11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1620ce-3365-4888-8c66-7295b7022264", "sighting_of_ref": "indicator--2870da32-f95d-450a-84d7-1ac4515d2a62", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a643373-7399-4343-afed-3bd92958acd3", "sighting_of_ref": "indicator--8138bf98-4f40-4121-a1ed-de2675690f33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811728b6-8f84-427d-9c10-0871a7f6fbc8", "sighting_of_ref": "indicator--e54cc12a-14d7-443b-af29-ed0e90eb0179", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41daed2-8676-4207-b4b3-06bed971742d", "sighting_of_ref": "indicator--53d81bd3-738d-48db-8255-d914e87a81e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc61c875-faaa-43ee-9b3f-e9e35461a053", "sighting_of_ref": "indicator--dcd066f8-6aa9-4932-b8a4-838a2779c84c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defa383b-5509-44ea-a259-d14db2320274", "sighting_of_ref": "indicator--8b578905-fbe0-4dc3-8766-4dcf3ceac6e3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59db19a-62ec-4b96-8c81-e36836619004", "sighting_of_ref": "indicator--8b578905-fbe0-4dc3-8766-4dcf3ceac6e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd1dd5-98cb-4fb5-8de5-e8b00ce3551a", "sighting_of_ref": "indicator--4f9f697c-8313-4734-a22e-e9de5adb50e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204384e0-93e2-4876-ba8f-51907ec737f5", "sighting_of_ref": "indicator--f5c15541-519c-4b8e-93fc-32ed5c2293c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4644f9e1-af00-4349-91cd-c83eca7dea3b", "sighting_of_ref": "indicator--f5c15541-519c-4b8e-93fc-32ed5c2293c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92a4ac8-ca0e-4608-942a-cc9b1ad4f91e", "sighting_of_ref": "indicator--41d54bea-e7b8-435b-ba6f-0d350ea0b9cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfae1dc-f795-46dc-b844-c2daf6568fe3", "sighting_of_ref": "indicator--f7750017-cb2e-4ef3-a496-74566cecc6f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c691a9-e5d8-4e9c-b1c6-4a0c69fbcab1", "sighting_of_ref": "indicator--f7750017-cb2e-4ef3-a496-74566cecc6f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8737ef90-faa4-42c7-a843-54b0055b66ed", "sighting_of_ref": "indicator--258cdcd6-fb47-4fcf-bc78-2e67525b7f05", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352bfe08-eac9-41ed-a5ed-170399ae6fd1", "sighting_of_ref": "indicator--79b111ac-8707-4e35-b650-38eb5e3c8f1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9631ae9e-84c4-4ddc-9e26-8b8c01478d0e", "sighting_of_ref": "indicator--6833aa80-c5cb-4fca-8385-210c4a79ff7e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7eb24ba-23ca-4da2-bb91-3f90c9437daf", "sighting_of_ref": "indicator--6833aa80-c5cb-4fca-8385-210c4a79ff7e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fecc80-1c21-4245-b08a-bf4c7e89b495", "sighting_of_ref": "indicator--8bea952e-7389-4add-8f11-104fa01b3eb0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392c006d-683a-4925-830f-06540705c91b", "sighting_of_ref": "indicator--a5f22eb1-a331-446b-9efd-73a0aecd9a83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3a4324-18ff-4a43-bd64-e4d21f3ebe45", "sighting_of_ref": "indicator--3cf3ed24-c903-486e-a8b6-bf643e7821d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1dbff4-4495-42a6-b6c5-776aeebbf1ec", "sighting_of_ref": "indicator--d9f54b16-bcfc-4d50-ba82-a8ff304e6c4e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92922c1-7c9f-47b2-8629-94e1e7b9c2c4", "sighting_of_ref": "indicator--c1d49897-c5b0-40a7-a04f-ad6e5063c82b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81d4657-3fb8-4547-a20c-f557085f1db1", "sighting_of_ref": "indicator--b1608dbc-38b5-462e-a775-067286877d06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bf97c8-9f32-4f70-9b33-1bd7c997bc42", "sighting_of_ref": "indicator--e053401b-1abc-41a7-9c2b-408412bd31ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf3f83c-bbf9-467a-b930-9cdd78905cc3", "sighting_of_ref": "indicator--e053401b-1abc-41a7-9c2b-408412bd31ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc8cd75-46cc-4891-9f09-02582dbc1f24", "sighting_of_ref": "indicator--64f54f3c-a491-4307-a063-ecfd2b46a283", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b76e5c7-7c17-4503-9a1d-9ced0cee2459", "sighting_of_ref": "indicator--3b597572-f608-4576-a490-828a1977bff1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481b4817-ec6c-4c19-ada7-0be79a8b91af", "sighting_of_ref": "indicator--7569e00b-3d02-4423-a302-9e448287d6a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78d7fc8-f095-4347-8861-78486fab0c0d", "sighting_of_ref": "indicator--c70d1185-67d1-47e5-a718-41f28a0c5b38", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e61e28-f842-4ad2-9060-404616be14cd", "sighting_of_ref": "indicator--91da503f-af33-403f-96cb-408231b70d2a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330db5d7-5598-447f-a460-bdf8c8206278", "sighting_of_ref": "indicator--6dc1cf2e-e087-4ee9-83a6-c9e27595850e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bb903f-bb18-447d-8c49-f9c9cabcdb5b", "sighting_of_ref": "indicator--57d648f2-29f0-4ddd-8f01-eda1c052a8ad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc51923-1839-45f7-ab81-f25e66273a25", "sighting_of_ref": "indicator--648b4e69-11ff-479e-9edc-5d105e7b6cf3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00802c5c-7437-4532-a06f-36183816da39", "sighting_of_ref": "indicator--648b4e69-11ff-479e-9edc-5d105e7b6cf3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b70a9b5-dd8b-4bcd-a31c-4f00f1e3a229", "sighting_of_ref": "indicator--f1201267-9820-482a-b9f5-0690f6c91f59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c876523-5297-4edd-959b-3a8d290f55a3", "sighting_of_ref": "indicator--51b82aee-2e16-4ca4-8dfd-408ce925dbfd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f8f890-46e0-4ae0-ad34-7a218c19d571", "sighting_of_ref": "indicator--ba267b09-67df-4bc4-bb47-bd916d97a304", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b41a63-21ef-44ac-be40-fc5a36adb3d2", "sighting_of_ref": "indicator--eee7204b-7493-490d-bcd9-e1cc463ace32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99556c2-f677-4ccd-9c87-3cdbb618d1ba", "sighting_of_ref": "indicator--b6c26ae3-c130-4278-b37d-7ed50de7cbc1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea26481b-2b03-41b4-9e42-ef9d64528215", "sighting_of_ref": "indicator--b6c26ae3-c130-4278-b37d-7ed50de7cbc1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e6b5f6-2c25-4c2e-997d-3a35f62091ef", "sighting_of_ref": "indicator--73d06530-9cbc-4fbf-be66-fb9eeb8b0b59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f62b45-1231-445d-a423-8e2a9851f00a", "sighting_of_ref": "indicator--73d06530-9cbc-4fbf-be66-fb9eeb8b0b59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8ebcb0-1452-4104-b269-5f60a6810994", "sighting_of_ref": "indicator--efcf31c9-4f53-4913-a811-5faf8b1645ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18901828-dc2d-4442-88a1-209782800ea2", "sighting_of_ref": "indicator--bd0044dd-036b-4903-ae67-104a0e775968", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d83e0e-70c7-4220-9d65-866370d10df3", "sighting_of_ref": "indicator--bd0044dd-036b-4903-ae67-104a0e775968", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9f3080-2448-44aa-88b2-4cdf7411aa9c", "sighting_of_ref": "indicator--6d2c9d75-feb9-434f-8127-67117f68dbe1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05056bd-6627-4150-b8a3-d0ff3ce7d9fa", "sighting_of_ref": "indicator--922326ab-ccb0-4c4e-bb79-e251426efd63", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a2565c-2873-4c64-b789-9402ff73dd87", "sighting_of_ref": "indicator--d0543bf2-33aa-49d1-8134-ed5a14558c4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1661065a-f9c8-4830-9b9a-c8ddaee153a9", "sighting_of_ref": "indicator--8f2d99a1-ee2e-40b3-8893-7e6b3197c76a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1f696f-84f0-4700-8b7e-cb9d20eeb182", "sighting_of_ref": "indicator--411965b9-2c62-4389-ad33-9438c80afade", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df84dad2-1953-40c2-af7b-1404a66c120f", "sighting_of_ref": "indicator--411965b9-2c62-4389-ad33-9438c80afade", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44648b50-cf37-4925-a3b3-a62a753705c3", "sighting_of_ref": "indicator--766574bb-35e6-43d9-ac96-9c7567a8483d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cfbbf7-2f76-4f6d-9520-3d11b2e4bc75", "sighting_of_ref": "indicator--653ec220-402b-4186-86f1-8ccee1a65618", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a7131b-1d59-428e-8519-7748311a5eee", "sighting_of_ref": "indicator--653ec220-402b-4186-86f1-8ccee1a65618", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cee58e9-5bf0-40ee-9a43-0a3baaf44384", "sighting_of_ref": "indicator--08f7088d-c313-4b2e-95fd-ebcb69d42779", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aecce05-85b1-4b58-93e7-d37ca1c98e81", "sighting_of_ref": "indicator--08f7088d-c313-4b2e-95fd-ebcb69d42779", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e26253-7e4d-4b08-8c7a-73c81200bb08", "sighting_of_ref": "indicator--f984134e-a021-4dee-be7f-b0e5fbfcf338", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8723c519-11fc-4130-a779-19e199884bb8", "sighting_of_ref": "indicator--a59f2675-deff-4cfe-badf-2e1a1c1bbb3c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd087a4-dce3-4ae1-b5f5-5243015d4161", "sighting_of_ref": "indicator--9d49e3af-48fa-4708-97a1-ddeef748f81c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e275bb90-83aa-44ec-ba1a-b35d8a3715c9", "sighting_of_ref": "indicator--40e2b8ea-d6fd-4ae9-b6ed-4589b42eb7ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffa96c0-d01c-4932-b6ca-6f57a126012d", "sighting_of_ref": "indicator--40e2b8ea-d6fd-4ae9-b6ed-4589b42eb7ce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95acff5-8811-423b-b509-48b31b6c20e3", "sighting_of_ref": "indicator--856b7412-cf9c-4314-8cce-9e5916ca4aa1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f120438-bd16-4d7d-b880-aeaeceada2e6", "sighting_of_ref": "indicator--856b7412-cf9c-4314-8cce-9e5916ca4aa1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092737f1-7cfb-45c6-ba20-2b761504f698", "sighting_of_ref": "indicator--6fb616ff-63c5-494b-8556-5faf6cb01e49", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e10d8a-cd56-4176-96c1-320590389eb9", "sighting_of_ref": "indicator--6fb616ff-63c5-494b-8556-5faf6cb01e49", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e540f9-becf-40e3-90c5-e817fc555c5b", "sighting_of_ref": "indicator--61ba1be6-3c70-4010-9f10-c41df052d288", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8824b1f-e0b3-4d1c-812f-85c1005938d2", "sighting_of_ref": "indicator--b5876133-64b5-40a6-abef-a7d20ef41f06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8dbbf8-9217-43e9-98f7-36ee6b4d0f38", "sighting_of_ref": "indicator--57e0034f-ac06-42fe-9fb4-6ba3d3c75743", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f03c71-6943-4385-87ff-17b204b59066", "sighting_of_ref": "indicator--e1730ebf-76aa-4105-983e-4038dcd9c4e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e0119f-ecc8-4a67-aaa1-068b8ce4f3dd", "sighting_of_ref": "indicator--b18a9fde-d692-4136-810f-df65a398d4a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a116b48f-775b-415f-bfc6-a65feec8fd2a", "sighting_of_ref": "indicator--29deae7e-b1d6-4fea-b65e-02b77b3d0448", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adafe641-bb7d-42b4-9483-5ceb841c955e", "sighting_of_ref": "indicator--80256984-7dce-4db7-800c-3440c4039b23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf2d269-94a3-42b0-950f-b9d21be2be60", "sighting_of_ref": "indicator--80256984-7dce-4db7-800c-3440c4039b23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f77a13-591b-4627-a15f-c05a9aeb183c", "sighting_of_ref": "indicator--93bb9984-4cc6-4a55-b433-5d6821b16a21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8481959-0b3f-4708-9ff9-176802f45a46", "sighting_of_ref": "indicator--ea1984f5-9029-4a8d-bb4e-510979ceef54", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e0f084-2418-49ba-9527-4e9300958c6b", "sighting_of_ref": "indicator--14c80c04-edac-4635-8227-1f47c4c7dcb2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcdddb7-7b81-445b-8cf6-8dd2ea7bc5e5", "sighting_of_ref": "indicator--85a1dad1-ff95-4679-a8a3-68ba36dd4d6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a222d353-b5d5-4411-9f41-61098735dc5f", "sighting_of_ref": "indicator--ebc678ea-39af-4183-b978-32d4ed1eaa6c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03bcf78-46b3-410e-bfdc-fba827ab6acb", "sighting_of_ref": "indicator--9c9ac975-41c9-4aa6-8af0-abd257af8480", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591a6545-3b89-4e99-b093-890feebcfddf", "sighting_of_ref": "indicator--e8d96790-f97b-42cf-b40a-c478e103c402", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cace5215-04b9-4ac8-a722-6f6d4575ac55", "sighting_of_ref": "indicator--25bc5001-4aa3-4474-a9b2-32a62507f80a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e90886-1391-44c1-a35a-689d5cd27862", "sighting_of_ref": "indicator--24843729-50d8-4f46-a830-ac2f9f9ee0f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c277a24-c165-4aad-9ee5-c495beda1623", "sighting_of_ref": "indicator--e6caaa60-bb2d-4fff-acd5-e4f3000c7a17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47d94e9-e009-40a4-9cf9-4d942f752eb8", "sighting_of_ref": "indicator--e6caaa60-bb2d-4fff-acd5-e4f3000c7a17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d939df1-8733-4eed-9615-27e1c0ed23c2", "sighting_of_ref": "indicator--c77d544b-62e1-4e85-9515-33390c3cef55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd81978-736f-4d5c-ba99-1e35df37397b", "sighting_of_ref": "indicator--7c5082f7-db2d-469f-afea-a1c7837fdb51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244d1998-7a02-4fa6-8809-234a34a1411f", "sighting_of_ref": "indicator--7c5082f7-db2d-469f-afea-a1c7837fdb51", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662238cc-3b78-4872-8676-58bbb6ea102d", "sighting_of_ref": "indicator--46c9e713-485d-4dcc-be83-e60d0cb917f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa010389-a0c6-40cc-83fd-8a36afeb62e1", "sighting_of_ref": "indicator--ad20b739-ff3f-41f9-b69c-2d28db2656a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881955af-bd1b-4c18-9bf1-863d94f42bff", "sighting_of_ref": "indicator--ad20b739-ff3f-41f9-b69c-2d28db2656a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823525ed-1102-444f-b2bf-e0b29ffd00ae", "sighting_of_ref": "indicator--e2736e6f-1e19-4472-b6dd-7745ab54ab73", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf682516-c2d7-4550-baa1-2d26513b779e", "sighting_of_ref": "indicator--0556e25d-0641-496d-ac67-a37ad444c11e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc22b072-efab-41b1-855d-6cd31cd9d4a8", "sighting_of_ref": "indicator--74902fed-a046-484c-bf16-406728ed8465", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff73e0de-37e7-48ff-a8d7-3914f3d9e97c", "sighting_of_ref": "indicator--b03066f9-057d-4d2f-a77e-f8d806eae841", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e961a926-f590-45b8-bcbb-6fe0f6c89078", "sighting_of_ref": "indicator--e2c80a63-8367-46d4-9978-0e7cc58ffb9a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7938c23-cfc8-4058-aad1-d2cb92877ae0", "sighting_of_ref": "indicator--c44d1b44-7d24-4b82-8601-b98bbfcf170c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643d43d2-8ee2-48e9-8f20-1b91563d4b3f", "sighting_of_ref": "indicator--9e482084-3c96-4149-ad13-f55aaf870b19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93eb34f-6fb9-40af-b9bd-4208c8354a38", "sighting_of_ref": "indicator--e91d6fd9-f57f-4663-b1a2-7cda7957402b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f4058b-8214-400f-9e79-0cce4ff37d46", "sighting_of_ref": "indicator--a1e3fa25-c1c7-4e92-ada1-58279290a8c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1313e8-f576-41d8-a9ca-42ba6bf9114a", "sighting_of_ref": "indicator--a1e3fa25-c1c7-4e92-ada1-58279290a8c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295f54da-760b-4e52-915f-87b72a10e688", "sighting_of_ref": "indicator--04518310-db09-44ea-bdd3-884b2ea0d7a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a26648a-64ef-48d0-b075-b80ecf40804b", "sighting_of_ref": "indicator--0789996c-9a0c-42dd-90fa-37930ce947a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ec7bdb-0252-446e-9ef3-189c11e0d622", "sighting_of_ref": "indicator--a902707e-f259-4a59-97a7-16efb929e7b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43093399-1480-4ecf-a5c0-4be3f3bb0590", "sighting_of_ref": "indicator--6b551c93-61fd-454f-b472-94eed7e5f121", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5809dbb4-36ad-4876-bdd9-2f5c112ba222", "sighting_of_ref": "indicator--6b551c93-61fd-454f-b472-94eed7e5f121", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2911e314-6c09-4a70-ad5b-c73e1dfa8be6", "sighting_of_ref": "indicator--71c26743-f6a7-453d-81f4-4d2a6db36e64", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546f2eec-8fcc-491c-8c15-475fe5207e70", "sighting_of_ref": "indicator--9a1a7216-b156-41be-9c88-5499589a69ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a225823e-71e1-4022-9b00-bc31cfeda825", "sighting_of_ref": "indicator--7c8fe8b1-a8af-45d0-87eb-a6cbd76a25e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2759da10-d0d6-47b7-a963-6a9af570e655", "sighting_of_ref": "indicator--7c8fe8b1-a8af-45d0-87eb-a6cbd76a25e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9f7755-915e-4f27-b126-0aad913ed59f", "sighting_of_ref": "indicator--8580490b-1ceb-4b19-8c12-03aa2cf5160b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379d6228-4b71-4428-af2f-8b9f6ae6b8c2", "sighting_of_ref": "indicator--8b8854e4-f0e1-408e-b5a6-9c1fccb0ebee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850f555d-7d04-4c01-9aef-136c94a569c1", "sighting_of_ref": "indicator--c9736bb6-f141-4fc2-a85a-f3db8e99fa5f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7488c27-5e1d-4ddb-9176-cefb2372d120", "sighting_of_ref": "indicator--c9736bb6-f141-4fc2-a85a-f3db8e99fa5f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80231ca0-8477-459b-a7bc-1113458cecb4", "sighting_of_ref": "indicator--ec614b1d-a134-4ada-bd7e-cd0b39e49e0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7bbe01-1613-4d91-b55e-f5b9aa870a9b", "sighting_of_ref": "indicator--b5d5b41e-edfa-4475-bdeb-81c74c08fcb1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ebdf4f-3f0a-4afb-bf81-4838c1e77714", "sighting_of_ref": "indicator--1b710810-fb70-4808-860a-9943159a437b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623ec845-277e-41c6-8ec7-a0bd26a5435b", "sighting_of_ref": "indicator--3da34ff0-0a75-4d45-b2e1-6a5a68192531", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777c0399-48bf-4fdb-871b-e2343f0acaed", "sighting_of_ref": "indicator--fb5d9a95-e4db-4661-8f33-57cf8c8966b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b0206b-33e5-4396-b4a8-d1a36a558150", "sighting_of_ref": "indicator--fb5d9a95-e4db-4661-8f33-57cf8c8966b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3573768-4039-4320-be31-04b68e9898df", "sighting_of_ref": "indicator--cf49edbe-b913-44ec-8c8b-cb57f556fbf4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ff173c-b010-4e5a-83e0-b25b8deed4b3", "sighting_of_ref": "indicator--cf49edbe-b913-44ec-8c8b-cb57f556fbf4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da43cdb-827e-464b-9e4e-aa09e1f0667b", "sighting_of_ref": "indicator--4ab42a02-8cb5-4d68-9e71-2f4eb1c0aac1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7284c95d-a5c4-4109-87ec-d3e2a6fae88f", "sighting_of_ref": "indicator--0029ff39-ab41-4d48-856b-379ddbbf8649", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12224c28-838b-43e4-a616-26c25f0781be", "sighting_of_ref": "indicator--e7f704c7-47de-426f-9fc4-6a857112ad33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5608861f-53a5-4a5b-bbbe-391b9472671b", "sighting_of_ref": "indicator--8c4fcce7-6a6f-448c-aee9-56ca5f89dfdd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a7c5a8-4418-40de-a181-03eac7e0ecf8", "sighting_of_ref": "indicator--b663ce18-d713-471a-bb48-4d148fb1a87c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b7409f-d06d-4257-8c44-51194b04dfc3", "sighting_of_ref": "indicator--3ed8392c-cea6-4217-9e7c-f34d07442f42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb56ae3e-4e74-44d7-8163-fafb788003ed", "sighting_of_ref": "indicator--786b67d1-0056-446a-85b9-ec00ef4cad05", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dda82e-b092-4dfc-ab05-fb400a592d02", "sighting_of_ref": "indicator--e0de760a-b896-44f3-8f23-f44853744674", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f48b457-0bab-4430-9eed-d9373a4b4e3d", "sighting_of_ref": "indicator--e0de760a-b896-44f3-8f23-f44853744674", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4426c5f9-d3ac-4eb0-8971-41b07eaadba4", "sighting_of_ref": "indicator--57bad38c-16d9-47d0-baf4-738fb0e1e878", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43900937-a2f2-43ac-808a-4627b84f4bfe", "sighting_of_ref": "indicator--57bad38c-16d9-47d0-baf4-738fb0e1e878", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873a7f3f-30ae-4f30-8df9-cf3b1cd82a4e", "sighting_of_ref": "indicator--2af8b002-39f1-4d29-bdb5-235c6731002d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b395d3d0-b6be-4668-9a7f-928a78b5fcc1", "sighting_of_ref": "indicator--d34aad7b-cead-4fc1-97e2-165757bf4e23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f465f177-a23d-4057-bcae-2ea774b887b8", "sighting_of_ref": "indicator--d34aad7b-cead-4fc1-97e2-165757bf4e23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98831d21-ce1a-41c9-b337-27b0d8d88594", "sighting_of_ref": "indicator--4a2bd42f-dc20-47cb-9a4b-47f5800d9425", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a856d7fc-837c-4f5b-91d5-11110ffa865c", "sighting_of_ref": "indicator--1b8aaa95-7c72-4aae-a969-77e715d70db1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc0e59c-66d1-4a11-bfdd-52e49c64ab9f", "sighting_of_ref": "indicator--6217fe9b-5e9b-4cec-b319-bb3296dbb34c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c81a12a-2d2b-4e20-a46a-1102f82373ba", "sighting_of_ref": "indicator--6217fe9b-5e9b-4cec-b319-bb3296dbb34c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf0592f-d7e3-459e-aa9b-f40f3e5e967c", "sighting_of_ref": "indicator--1928c422-b47f-436d-950c-5457dde3eb04", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef5fe80-4fda-4151-8f55-2e1d48d2312b", "sighting_of_ref": "indicator--2a3f7c0a-3097-4ecd-bf55-d144c1e82bf8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fe5329-b2f1-42be-8067-0dcbad042353", "sighting_of_ref": "indicator--2a3f7c0a-3097-4ecd-bf55-d144c1e82bf8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5618fc63-8033-44fc-85df-afaf3452be75", "sighting_of_ref": "indicator--e73c85e2-5bfe-4eba-99ac-70895b51a827", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af42ab8c-6ab7-4cbd-b3bf-8a8c0f7ba305", "sighting_of_ref": "indicator--e73c85e2-5bfe-4eba-99ac-70895b51a827", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2645195-2730-4292-880c-a61a70141755", "sighting_of_ref": "indicator--f9515dd4-46f0-4d38-8e13-472242bd6227", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da494a11-805d-469e-aaf6-fc159b7fbce5", "sighting_of_ref": "indicator--f9515dd4-46f0-4d38-8e13-472242bd6227", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9919123a-db82-4582-b628-c6d413ab7cfe", "sighting_of_ref": "indicator--691807d2-f9fd-427e-8592-10e24929d492", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbde55e-29fb-4a18-8784-0b1450192957", "sighting_of_ref": "indicator--691807d2-f9fd-427e-8592-10e24929d492", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c772c9-a2e8-4efb-af3f-2cf1da8a8180", "sighting_of_ref": "indicator--3667584b-9571-40d8-9905-6a14ce6b2027", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b0a125-f9c4-4177-afc7-3e97e72bc664", "sighting_of_ref": "indicator--0feb64b7-3d6a-44a1-a196-98a6fe8e848f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139fa35b-1f02-4c3d-848d-6d8752efa05f", "sighting_of_ref": "indicator--268e8795-7780-465e-ab1a-0bfe7ff07a8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d950a6fb-2a6f-47a8-bb11-bfc3eb73eacd", "sighting_of_ref": "indicator--fcb30c9e-76d7-40db-b3ab-2d69cb816876", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffb4ac5-7aab-4e3b-90b4-002a661b64bd", "sighting_of_ref": "indicator--a88a952d-acf7-4725-adfb-39a88b89e58a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b3a286-974b-4857-aaca-01b67c82efa5", "sighting_of_ref": "indicator--2666a26b-c566-4a1c-b8e7-041ccf0ecde1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1276461b-7cfb-486d-a175-ca7b23c58892", "sighting_of_ref": "indicator--27eceae5-63b7-4d1c-977d-d4f92f64ab6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46257f2-55d1-4a38-b1af-16149ecf624b", "sighting_of_ref": "indicator--558ac129-a3d7-4023-a921-3ed2ef224d5d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ff79e2-8eec-47b3-8fb3-6030b8fd7c3d", "sighting_of_ref": "indicator--558ac129-a3d7-4023-a921-3ed2ef224d5d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29624b83-75f1-4f50-92f3-2b788af15421", "sighting_of_ref": "indicator--7ec210e0-36ca-4fa3-bd4d-cd40f5fc70e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb4d939-7292-48e7-8c49-08ad335cd717", "sighting_of_ref": "indicator--7b2cd8de-14eb-40dc-a1cc-91ee8ccdde12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa162779-550a-41e5-bb2c-5643c8204481", "sighting_of_ref": "indicator--08dd7b81-89c5-4f0a-b566-66b7962b2431", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8200303f-980a-48ae-a673-1d16b1426292", "sighting_of_ref": "indicator--b65b83c6-8952-43cf-80bd-d4131cd51d86", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fe6c11-28dc-44c4-ad2d-56b72b234e5e", "sighting_of_ref": "indicator--b65b83c6-8952-43cf-80bd-d4131cd51d86", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da21cdb-b7fd-42a6-b75f-4fa75fa6f2aa", "sighting_of_ref": "indicator--973da2d7-8d3e-49d9-afd6-e3bdc70575a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901a0015-9ff9-4b92-879d-b5139d8226c0", "sighting_of_ref": "indicator--a768adbc-7ff7-4783-ae4e-24c52197a491", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22569cd5-b303-408b-87d2-37339d9f8a81", "sighting_of_ref": "indicator--4b5fe529-fc6a-497c-a7a3-e377fb82cf4c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a21110-8556-4261-a97b-a544b504b91b", "sighting_of_ref": "indicator--4b5fe529-fc6a-497c-a7a3-e377fb82cf4c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a28a99-9d78-4632-816d-1b5932b6fed0", "sighting_of_ref": "indicator--67e158f6-9396-4a22-a724-8048baac000d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e16c734-1d4b-41de-bb04-f4f3627f26b6", "sighting_of_ref": "indicator--2fd4c055-f2c1-4618-852c-770633150179", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06327a2a-5816-4ea6-96be-bc68037ba48d", "sighting_of_ref": "indicator--c1ab0e87-52c5-4245-b886-9fedd1050bf9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf397ff-0ca3-45f6-b8b8-1bf69ec83529", "sighting_of_ref": "indicator--c1ab0e87-52c5-4245-b886-9fedd1050bf9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14016fc9-24e1-4d51-9024-b9725cc713b7", "sighting_of_ref": "indicator--2f1fa2d5-a005-4c1d-a415-47b5f203fa78", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f18f65b-1429-4191-a810-4514e376cda0", "sighting_of_ref": "indicator--2f1fa2d5-a005-4c1d-a415-47b5f203fa78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22eeaa6-ebcd-4bce-bb26-95451020c1d5", "sighting_of_ref": "indicator--abc0fe6f-a05f-4e87-b46c-e913dd8564b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d09f0a-4006-4c5f-a950-b1876751c97b", "sighting_of_ref": "indicator--abc0fe6f-a05f-4e87-b46c-e913dd8564b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256fe3e5-08f8-4cdf-861e-dc218c9a11ea", "sighting_of_ref": "indicator--bd7a6cc6-5a80-4e3e-8728-7380514b5143", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208463eb-b588-4881-9d71-b3b482d66f7d", "sighting_of_ref": "indicator--bad1945d-8fb5-4363-bf4d-f68d8b8fb9eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c8f546-20e8-4e65-b5c2-b3f5a0da92fb", "sighting_of_ref": "indicator--bad1945d-8fb5-4363-bf4d-f68d8b8fb9eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d43cfd-a171-46a7-9814-296840da63da", "sighting_of_ref": "indicator--852342a5-17b2-481c-b04a-763443e79492", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610e5e0f-88e9-4e70-a514-09ff63e9bccd", "sighting_of_ref": "indicator--0a15eacb-2711-43db-9db8-f5f0302feb7c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb94370-7747-4a0d-b229-b1759ba5bcae", "sighting_of_ref": "indicator--a9001f41-be5b-4218-b9f3-991119cd2372", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166886bf-a6a9-4cf9-9987-228a5aa29a5a", "sighting_of_ref": "indicator--b90edf27-a314-4b6c-a8e7-1e9d82c83a33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd9f08d-7354-4cd0-9ac0-b4ce68284243", "sighting_of_ref": "indicator--c850e76e-89be-48e5-a58d-cb2c49ae43bc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c952eb1-f69e-4004-a976-e6443b774b1e", "sighting_of_ref": "indicator--c850e76e-89be-48e5-a58d-cb2c49ae43bc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ba9200-4559-4eb7-a592-ec7b8218bbdc", "sighting_of_ref": "indicator--82a32724-016c-44a7-a0fb-e1d493fdf88e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79eace2d-2fb6-4b0c-8c59-b25841dd59f9", "sighting_of_ref": "indicator--454d5bbc-8588-43d1-9075-8d6357376033", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65044f1d-c558-4bb2-a61b-52590a57762f", "sighting_of_ref": "indicator--34e206de-a3d3-4210-863e-d5982c770099", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62013b5-df5a-4e0e-bdb0-fd64cfc0b8a0", "sighting_of_ref": "indicator--6c8f6c90-2b48-4ea8-bf3f-c8b266cff19a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0152cf92-7fe9-4524-8e4f-e1ed094a0d89", "sighting_of_ref": "indicator--6c8f6c90-2b48-4ea8-bf3f-c8b266cff19a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e888160-a1d7-419d-80c6-1abd0b9fd94d", "sighting_of_ref": "indicator--d00f5af4-b716-4f1a-bf71-b163eeb04a6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c0c8fc-384a-4a46-9afe-89502a446484", "sighting_of_ref": "indicator--6ba8d9ec-83a8-4380-851d-f9529b156718", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7964eb0-70ae-44e8-9aa5-01c08fcca839", "sighting_of_ref": "indicator--8cbe99ad-bcf6-415f-bd51-673ea5fd5089", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf1bbd1-d21a-498e-b35f-bfdfbc5fd542", "sighting_of_ref": "indicator--36af273f-7aad-438c-a1f9-8f7e6cd739f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e37c7d-7d0b-40c6-8693-2d841edabdb1", "sighting_of_ref": "indicator--36af273f-7aad-438c-a1f9-8f7e6cd739f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6450f63a-0aca-41f4-aead-6e7e0d844de5", "sighting_of_ref": "indicator--3a1bebdd-e51a-4a0f-8b66-d3cb56102fa2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb52280-b426-472e-888c-bb6e829d3197", "sighting_of_ref": "indicator--63202938-3748-428b-8974-ecef2af678db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c196d4-8caa-4908-95ca-352406ef98b2", "sighting_of_ref": "indicator--63202938-3748-428b-8974-ecef2af678db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d783e6ee-8ed5-44e4-9fbc-b79aad572655", "sighting_of_ref": "indicator--462007d6-236e-4a9c-88bb-879101952a4c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8bdbdd-080d-4481-bba8-aad49614dfff", "sighting_of_ref": "indicator--462007d6-236e-4a9c-88bb-879101952a4c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736b8b13-2d0b-47e0-b0e4-e17b48dc1e20", "sighting_of_ref": "indicator--8a8cbaf5-0c47-47d4-b6cc-8e066111e22d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452f55de-0717-429b-a1a9-042023e3a92d", "sighting_of_ref": "indicator--8a8cbaf5-0c47-47d4-b6cc-8e066111e22d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d14f6ce-079f-4477-abb1-2d8a1d19daf0", "sighting_of_ref": "indicator--c3da216f-6a04-4a6a-9bab-c44cbdcdf69f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325ccc74-19f7-4d82-ae81-0827e66d293d", "sighting_of_ref": "indicator--c3da216f-6a04-4a6a-9bab-c44cbdcdf69f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89f2738-2f8c-407e-a11e-db9ea209eee8", "sighting_of_ref": "indicator--c4bc5ce5-01c4-4d48-bf2a-3f68612b6868", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e41b58b-5e52-436a-a0b5-a3961f213069", "sighting_of_ref": "indicator--c4bc5ce5-01c4-4d48-bf2a-3f68612b6868", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cba66dc-1929-44e2-bb12-7a81e3a513ea", "sighting_of_ref": "indicator--18fc7160-73e6-4f5f-a8e1-ddd7302b497e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f286faa2-93e5-4f8a-a9ec-595f0f10d31c", "sighting_of_ref": "indicator--18fc7160-73e6-4f5f-a8e1-ddd7302b497e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8137dce-daa2-4d30-8019-0bdaac32d62f", "sighting_of_ref": "indicator--2efcfa17-4005-42e4-b92f-8b0fe4599e74", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e0c369-37fa-4ff5-bdac-27b4879ca559", "sighting_of_ref": "indicator--2efcfa17-4005-42e4-b92f-8b0fe4599e74", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33ffbe9-1956-4e51-b526-a45fb6cdbcce", "sighting_of_ref": "indicator--2efcfa17-4005-42e4-b92f-8b0fe4599e74", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70a6da9-ecaa-435b-9513-27ce3be49786", "sighting_of_ref": "indicator--29962db6-3c80-431f-9441-55ecdfd0c4c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e01132-b51e-43f1-b2b9-df939f42b7dc", "sighting_of_ref": "indicator--689023ce-a9ca-4bd7-9c14-054a609c97c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250f9fb7-eb7d-414d-a57f-d82b6a6842c6", "sighting_of_ref": "indicator--c6195ca8-eb3c-465b-92b8-7b193627f4bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42831c6a-2598-4a5b-9772-0df9b5b7b387", "sighting_of_ref": "indicator--6c8c363a-4d18-4c41-a1c3-057f0a9b9d10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d50222-bb31-4df3-b058-ec5b2339cdb8", "sighting_of_ref": "indicator--6af0a730-3b2a-4074-8803-1c9676982473", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720c6d3c-c8f3-4328-bd8a-327f1bfa05c0", "sighting_of_ref": "indicator--02d5ef24-75d4-4124-8a86-c5bfec371b74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b005a3-d747-4e02-aaac-3bcdba706328", "sighting_of_ref": "indicator--9888c476-2b4d-45fc-b214-694bed039d24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255257b0-3ebe-493c-b268-37e7c5823942", "sighting_of_ref": "indicator--6112ea60-8863-4174-a352-861ee9bf0652", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf7d8c6-5356-4889-8f6e-6106e6696afc", "sighting_of_ref": "indicator--4a0410a3-47c9-493c-8030-989ab5032bea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06154f65-04b1-4f83-8c24-d2d0eb49a609", "sighting_of_ref": "indicator--5fe1a04d-6ae4-40d2-b78d-58137c6538cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4378cee-b9f9-4cb0-b9c6-cacbfcb5461f", "sighting_of_ref": "indicator--1d490727-0ad9-4bdc-9b56-b9abcfa249fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab6fe43-33f2-4590-94e5-96d114f73fd5", "sighting_of_ref": "indicator--c6e879f5-783b-4ce7-831f-753a2568de9d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f255e7da-8d0b-4132-9ab4-faae69b1c1ce", "sighting_of_ref": "indicator--2abb0b27-91e3-4bf6-bbf6-ac058ae7f5a0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff9c9be-1949-4548-8f68-9eb4097c36a1", "sighting_of_ref": "indicator--e6ff5556-e780-4d42-af5d-9ff7f8525e97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d794005-675a-45ef-81b5-61af1324a880", "sighting_of_ref": "indicator--4242837d-fc99-4b36-b7ed-8f81e48f2a87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4c8bab-a379-4b4b-b520-b4c0f0cd55b3", "sighting_of_ref": "indicator--048c56d1-150d-4a2f-8379-0abb471974aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bd313c-b43c-4bb3-af02-83ee9940a7b6", "sighting_of_ref": "indicator--66d09c83-b511-4990-8157-a00373e4e650", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c78910-fb71-4564-9bc6-5c536fad6712", "sighting_of_ref": "indicator--b5fe2003-5024-4978-82b6-5c2c0c23e0e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bddcb62-9ff7-4fab-bd2f-9c3c5f1e7795", "sighting_of_ref": "indicator--dfb4baf6-9ffb-4985-8415-26cbfac76f70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112c9168-c8a0-44db-9217-471f3df4d99d", "sighting_of_ref": "indicator--9988b6b5-d2a0-494a-a6d3-500a7f3ec1ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba64317f-888c-4e9e-8565-9debc60a129b", "sighting_of_ref": "indicator--3a3846a0-d9e5-473c-b712-a20fcec12e24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e277cf2-978a-4a7f-bf3d-4d4edad39e17", "sighting_of_ref": "indicator--8b0ad8f3-08b5-46d3-819e-65d3c44f30ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a6a9be-5db0-4336-a316-94ab3c9f5656", "sighting_of_ref": "indicator--866817d1-41bd-45ab-b6ce-65af3b3a2af7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc242b5-a03f-4998-b870-97b793279e08", "sighting_of_ref": "indicator--2841b628-1ba8-4ab4-9a42-339b51bcb4cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca33549c-946d-4c30-a8b0-05c156b8e352", "sighting_of_ref": "indicator--967b21df-ee70-468b-be07-e37d9d24d61d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d32602-9c7e-4fa1-9eb4-aaee7629429d", "sighting_of_ref": "indicator--c1a9b190-a90e-4e90-bd5e-1b2da00cf776", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b0fb4d-c349-4a28-ae11-743f67dfaf84", "sighting_of_ref": "indicator--cfad2f01-72c4-44b1-b281-ed16c716af6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112d33da-586f-46d3-9b26-59a1fc4ac650", "sighting_of_ref": "indicator--4e29d090-7fd2-4d20-a528-02215af19f80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134fdeb4-31b1-478f-8fdb-c0082b523b6d", "sighting_of_ref": "indicator--1f798a2f-8463-4c6c-958d-909c9d1dcfc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6623957a-e6b8-45c7-809e-f3de035f5008", "sighting_of_ref": "indicator--dd04d5a5-a84d-44cc-9cc8-322f29aac576", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9b0c86-cf1e-4a79-993a-977f5a646038", "sighting_of_ref": "indicator--b25e44cb-7803-4c0f-a302-37ad62800853", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3040ada5-b737-4410-9123-cf50c96d83b9", "sighting_of_ref": "indicator--f7e66e40-e76a-4bb8-8763-6139c10185ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277d1b56-2c08-44e3-8b21-4b611bdc0da7", "sighting_of_ref": "indicator--188363f0-054b-421c-a50d-e0d2618d6f2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ebf97e-e649-47d5-ae41-6e108b0a1b24", "sighting_of_ref": "indicator--c2f73096-396d-4b60-bbfd-eaf9bc581e7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079afd84-431e-4cdd-af06-64acb77d76c2", "sighting_of_ref": "indicator--19428d73-29b9-4d5b-8600-891ff124c25e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba07ad0-2453-4278-90c9-00787507b18f", "sighting_of_ref": "indicator--94c5caea-cf51-4685-911e-8d9c7413cb84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee238c2b-827c-4c4b-a379-8bd2a882a0c2", "sighting_of_ref": "indicator--7106a259-6694-4d32-930d-140136729059", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0f1151-55ba-490f-8b91-3be750a7e692", "sighting_of_ref": "indicator--28d56488-5a05-4eba-9667-ee05174e5604", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a44077f-a72d-451d-bc3a-6df2d9ebe533", "sighting_of_ref": "indicator--0110d901-f8b8-4942-ba1c-47f4d012fa93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31ca0e8-1ecf-4a6f-ae12-af0751368b46", "sighting_of_ref": "indicator--d2e93e39-3c7b-4ba2-9520-c20f3f474a21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1330340-1e6d-48ee-8ca6-96fe34189be7", "sighting_of_ref": "indicator--c0674036-7209-41bb-8466-67480d8f185b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7050c2-5062-4cf9-9af8-5a0e695fefa4", "sighting_of_ref": "indicator--c1dd49ca-d441-4fc2-9ab7-347a58d04a26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa4cb46-15c8-486e-9d2a-19b6d47c3595", "sighting_of_ref": "indicator--f0ce1c05-6dcb-4db4-8485-85a5e2eed94f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fe835a-0bb7-47a4-963d-88957bb97c50", "sighting_of_ref": "indicator--4a5872c8-3ef8-4997-bc9e-d66c2574a458", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef78eed4-f377-41aa-9c99-9ae8330d1fe0", "sighting_of_ref": "indicator--526ca8c9-13db-4c4e-bbc1-12e93b058e69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9519df-97c9-4112-8954-8483553465d2", "sighting_of_ref": "indicator--e61ec0b7-41d7-4e60-9c7f-95b24958cee0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604458f1-8fce-44f6-b164-bbd854896aae", "sighting_of_ref": "indicator--4fafaf12-52a2-435d-a610-c1e6d39a715f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b2c79c-a5b4-4725-a2a0-102697287bb4", "sighting_of_ref": "indicator--99e264ac-b584-4a34-b1d2-7cbbc05b712f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88ed9c0-238f-4413-bd43-40e1b62804e4", "sighting_of_ref": "indicator--9a422c23-3bbe-4e90-b705-ef13d90a167b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab139f77-5860-4dc7-8b14-3bbdf7914149", "sighting_of_ref": "indicator--4be8fd9e-aedc-4d29-acbd-7590aab423c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2906908-05c0-4d66-983a-ea913a147bb5", "sighting_of_ref": "indicator--79bbf277-d92b-42c8-b1ab-31c110208fd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120bb2b3-7f31-4239-82eb-14b3746a2355", "sighting_of_ref": "indicator--b50e41bc-c651-418f-a213-2dbd0e449c96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee659f7-21e5-423a-96b4-2338f9e4142b", "sighting_of_ref": "indicator--fe4e54e0-eca0-4aad-a7c3-4348b743832b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219eccc9-fddb-4361-abb5-c96eebc2bca4", "sighting_of_ref": "indicator--14e8ea73-e6a2-44e4-bca4-4ff94c111a69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f4122a-7cad-47b8-977e-a13f47e48228", "sighting_of_ref": "indicator--7ca412f6-6a91-4a0b-b495-09ddb70f2d40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0791cea0-3f2c-43c8-b8dd-5f2fb04ac34c", "sighting_of_ref": "indicator--834ca156-7b94-4653-ab83-e79d67febd29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f685c03a-11e0-4716-b0ff-1f28b3533160", "sighting_of_ref": "indicator--d853d5ac-0dfd-4d85-bc87-7b8c2d9eb692", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a576aa-091f-4bbf-925c-ab5fb990214f", "sighting_of_ref": "indicator--c5a4158b-88fc-48a0-bb75-d7cd790092ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4de7833-06df-4b79-943e-557e933b7d31", "sighting_of_ref": "indicator--4f701ecb-0e0f-405b-8965-67efd27242c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c53718-0d16-4bbf-9666-db3cb7f17915", "sighting_of_ref": "indicator--6d1a13d3-034c-446d-83c2-391802a85c10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cadd7f4-a196-42de-891c-afb4fc29b934", "sighting_of_ref": "indicator--24901954-0fc8-4725-acc6-a63113474b53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58ddab1-54b8-4ab3-89f8-772e8e35569d", "sighting_of_ref": "indicator--c590a758-143a-4842-aaca-d2446c34e12e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cad8c5-0aae-475f-a362-828f8fdcfcd9", "sighting_of_ref": "indicator--6b360cd3-9bae-462a-85ca-6da53711731a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d153b3-faeb-424c-b5ab-06e403005d83", "sighting_of_ref": "indicator--f086e7fe-c8f5-4254-9c28-d962dfa3e46d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9329698e-7f4c-4c06-b69c-7cb8da8110c7", "sighting_of_ref": "indicator--630d971c-86c0-4195-b67e-c740d0f6d38d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e124f2-9598-4c77-b384-48a2c83aeff6", "sighting_of_ref": "indicator--3acc1375-afdb-4ee5-be3c-7fb5337eda86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8248191e-9f89-4fad-8128-493aeef38b81", "sighting_of_ref": "indicator--c2299cac-1cec-46b2-9868-2b99e6b7747d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7890baa-8323-4a53-b694-4fbaf7b67cfa", "sighting_of_ref": "indicator--2cb0b2fe-32b0-4023-b94d-c2d1b479c9d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c8f029-8b2f-43b2-9130-d5207fcab8a4", "sighting_of_ref": "indicator--7b8a911e-1ba9-4d53-a3b2-051bec776532", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068f87d5-5f68-49c5-8ff7-9d1b146bdebe", "sighting_of_ref": "indicator--345a3214-5b17-4ad8-812b-31444c4bc866", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37eb7061-6cb0-43b9-b099-75a033a5ee57", "sighting_of_ref": "indicator--1d2e3e65-e7ad-43c7-a0da-8a03ea31e5d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a79f60-020b-4a50-b39e-9df0bf9c8353", "sighting_of_ref": "indicator--cee30743-3e3d-4ec9-b233-5f85d0d602cd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4992bbce-07fc-45f1-b79b-bfdec561c1d3", "sighting_of_ref": "indicator--80a74e74-ec91-42ce-aaf3-3774d221e41e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9f4d6e-d50e-4dd7-85b8-60c971784732", "sighting_of_ref": "indicator--91024ffe-d402-4e0f-affa-f6dadafaaeb9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dbac87-2213-4d8d-bc39-fabf01551a41", "sighting_of_ref": "indicator--99a83a89-8ba7-4f89-b9a6-4794bdd782f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63adb8dd-e760-4fa0-8e43-3c20d5d9261f", "sighting_of_ref": "indicator--12905081-9f24-4a32-bd2b-ca2b08225d2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987638f5-a9e5-4a80-8c03-e3e93d31aacb", "sighting_of_ref": "indicator--12905081-9f24-4a32-bd2b-ca2b08225d2b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf3b0ee-a304-4b44-8d74-d3c3e94cd2d4", "sighting_of_ref": "indicator--b5a31c78-1e9c-4342-9a0e-a4e55fe69da2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e024b270-770e-4c1c-831a-43299221c605", "sighting_of_ref": "indicator--36bcf87a-999a-4571-afae-cc23274522df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e2b2ac-3a8f-447f-930a-e95a5d674ff2", "sighting_of_ref": "indicator--3bf38f1e-ff7d-47e6-b650-9cce149353cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c7035b-1cb4-4cba-80ed-b91a1e72abd9", "sighting_of_ref": "indicator--ab44daa9-c2b9-4075-960b-b291d6b95c4f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745b7a07-0be6-4474-b68b-3d6b3fc9b427", "sighting_of_ref": "indicator--d26da2f4-e5f6-4880-9b50-851d6f256c71", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b399a838-6a09-44f5-a7df-9bc0c342e2d9", "sighting_of_ref": "indicator--410744fe-64bb-40f4-8601-af49ac2753ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6ea473-bef1-4bc4-815a-2de5ed3f55bb", "sighting_of_ref": "indicator--410744fe-64bb-40f4-8601-af49ac2753ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570528ea-653f-4bc4-bea6-bba1e758da4e", "sighting_of_ref": "indicator--3cea8733-00c0-48ac-b237-c9de37df7359", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baa76e3-f0bf-404c-8e7d-a275cfb6977c", "sighting_of_ref": "indicator--ad2f806d-ec25-4998-a4d7-35478129b86c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b9b059-232f-47ac-94a2-013800382fc0", "sighting_of_ref": "indicator--39b20fc1-ec63-4aac-88a4-d70f4616ec25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c611a3c-7b23-46ab-b4e2-b1673f5522a4", "sighting_of_ref": "indicator--4756aa51-1c82-4653-9b3c-f0148b7c21ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08779ac2-3bd0-4e36-8b41-01693b40c8a1", "sighting_of_ref": "indicator--4756aa51-1c82-4653-9b3c-f0148b7c21ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a231f4-5c90-4c7b-94ad-b32b243127fb", "sighting_of_ref": "indicator--a1514043-8f59-4895-9673-efd2ba6215cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2954ce4-a76e-4f6e-9c65-828da428243b", "sighting_of_ref": "indicator--a1514043-8f59-4895-9673-efd2ba6215cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12e337a-6258-40eb-a691-e05a82ce4336", "sighting_of_ref": "indicator--7dce547c-f58e-4cea-9508-4bedf3ab91ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79332053-099f-4a48-910a-59cf9f197753", "sighting_of_ref": "indicator--eff79c44-9cc7-426c-a70a-57e637c8e3b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03b7d60-56de-4baa-8248-97ef8ed6062e", "sighting_of_ref": "indicator--1d07501d-e60a-4f44-ba9f-89012fbad540", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b7a9fe-5e05-449b-b3f6-0d6e92d5e1d9", "sighting_of_ref": "indicator--60f2792c-45d5-4891-be4b-c815646bf0ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17f3c91-c923-4feb-8450-341c345404ec", "sighting_of_ref": "indicator--453930a6-2baa-4db9-a939-2c59b9947430", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9335534-5081-47d6-b501-159a0a63f618", "sighting_of_ref": "indicator--e9ed0321-96b7-400c-a228-2048bfc3e00e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b3e6ef-06f2-4488-a090-6d2793419d45", "sighting_of_ref": "indicator--e9ed0321-96b7-400c-a228-2048bfc3e00e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4c95e4-34d0-47a1-a89d-db30f3a09d34", "sighting_of_ref": "indicator--ee3d05c0-16dc-477d-bb50-39dcccb3dffa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfca6fb-cd5c-45b9-8600-df2145d60380", "sighting_of_ref": "indicator--ca48e94d-9641-4175-87c0-758d16bc2107", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff39635-4b8c-4722-b7ec-1bf7a99eae61", "sighting_of_ref": "indicator--7b64e2b0-d6f8-49ff-9466-0e23a3a1f301", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2081e51-1111-40d3-8b34-3664ac147812", "sighting_of_ref": "indicator--a2646c87-e89f-408d-9d45-0ef0280c7f8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0809b7-a263-47e1-8ea5-149aac0bed83", "sighting_of_ref": "indicator--0db57e5e-15eb-410d-b453-7de32cfadc1c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c50348f-ad1d-4d60-840f-8bc9fec56b15", "sighting_of_ref": "indicator--eb2a26b8-5f40-45ce-a8d3-acfb9489c1a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001ba226-1e73-4edb-ac30-cf906765f8a7", "sighting_of_ref": "indicator--1f14c326-c7c1-40ce-8f80-ebd28695df1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073a898d-0264-4ad0-8510-46514f433a68", "sighting_of_ref": "indicator--cc4e035e-61c9-428c-9d30-50d1ad6b0f25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a030db-c2b5-49b5-aa80-c6cedaf2240a", "sighting_of_ref": "indicator--fecd3113-6f2d-443c-afcf-6ebcd81ae915", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff47ac6f-8d1f-4061-b5e4-a1775708a970", "sighting_of_ref": "indicator--fecd3113-6f2d-443c-afcf-6ebcd81ae915", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a916302-feda-4cb4-be0e-0b2375923771", "sighting_of_ref": "indicator--ed03a8f9-8494-4302-b328-eac9a7fc0e87", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef204eb-6b9e-478e-bf73-c07aa19dc07b", "sighting_of_ref": "indicator--0463dbb9-9954-4a0c-a20f-4a6514238609", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f41e89-2df9-4fcf-8754-3f8f51952906", "sighting_of_ref": "indicator--e34af8a4-c421-4b05-a093-13b0be24faa2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9363d92b-2b51-434e-910f-7cfcf17a2bd4", "sighting_of_ref": "indicator--7ae13fde-8478-407d-a01e-55516fec79ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b63b91-2ec5-4c78-a341-91f39e683659", "sighting_of_ref": "indicator--5d4c5c13-ec9f-4fea-9d3b-dda3168874d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963220ca-3743-4417-afc2-fbf19b96e1ea", "sighting_of_ref": "indicator--5b46d61c-3e4c-462e-b0aa-b869226ebd3c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acce125-95c1-4524-9e0a-508b8033323f", "sighting_of_ref": "indicator--5b46d61c-3e4c-462e-b0aa-b869226ebd3c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfd382c-f2ee-4961-9cb8-ef30af7e3c68", "sighting_of_ref": "indicator--11a6c73b-95ad-4872-afdf-211a23d85967", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0880249d-0af9-4b5e-9d6f-a473a002f04b", "sighting_of_ref": "indicator--7c7667b1-304f-4187-a54e-aafe2397cdf5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1507807-a8b6-4199-9b48-6c00ccd5e9fa", "sighting_of_ref": "indicator--7c7667b1-304f-4187-a54e-aafe2397cdf5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f31161-bb1b-4fc7-b546-6f7c09f2d490", "sighting_of_ref": "indicator--20ec7528-4dc5-48ff-9be8-b47c27de065c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e116bd1e-da8f-481d-8be7-9910b7a830c4", "sighting_of_ref": "indicator--2e6c9b61-423a-4c13-ad7f-bb2b9f634f1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b9d7bc-367d-4429-b17d-7e437dcacfdd", "sighting_of_ref": "indicator--a5e0b785-84ac-40ce-b3bd-4e532d5e3615", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9456b2d6-b1b5-41d3-b80d-7e3279f6e9a3", "sighting_of_ref": "indicator--d2ecd0ad-b823-4776-bd43-f90c782e595b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fca983a-3065-4921-851a-4f420ad846b7", "sighting_of_ref": "indicator--a6e0301f-f506-4ba2-bd5e-0aedbcef39bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385bdbee-e357-4ac2-a487-116bfd4bec5c", "sighting_of_ref": "indicator--a6e0301f-f506-4ba2-bd5e-0aedbcef39bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af6a5bf-61d1-431e-b70c-f5a1f23d4de4", "sighting_of_ref": "indicator--f0898a8a-78c1-437b-9dfb-60a6cdaceead", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93611e5-24d6-403c-aec5-659129d76eff", "sighting_of_ref": "indicator--a32a3a65-52a1-418e-ab69-c721890efc6c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c0aceb-58a5-4c57-9c78-7dd4b592a0ce", "sighting_of_ref": "indicator--0ec5629d-d3ca-4f66-881a-6ada17e1cc47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca34953-d9ad-472f-84d0-1760007c89ea", "sighting_of_ref": "indicator--0ec5629d-d3ca-4f66-881a-6ada17e1cc47", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a8d315-707a-4dc7-96e6-b13dd7ee5f96", "sighting_of_ref": "indicator--436a9758-0a37-473d-a277-f03aa0e8fe44", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1aae0ae-7e8e-4e0d-a3ab-9a5b1d2a453d", "sighting_of_ref": "indicator--b2e14aa2-0d3b-4c7b-86ef-90fb00f3f770", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7bc974-a0b1-4471-9f0e-53097be66705", "sighting_of_ref": "indicator--318207e2-a6f6-4f87-98f0-2b91076bb7fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75ea62d-5e2d-4c2b-afb7-ee316b1ade83", "sighting_of_ref": "indicator--f38e8b05-a18c-4587-ba7a-83b40c9d15fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97622bf5-cc08-4bcc-af6f-55e91fe3ec13", "sighting_of_ref": "indicator--f38e8b05-a18c-4587-ba7a-83b40c9d15fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2900f115-93d9-4b39-af8f-0bc6714eccce", "sighting_of_ref": "indicator--603401c5-8e7b-4e0f-848f-ae773da27675", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5695a8dc-b011-40c9-b8e0-152ca69575dd", "sighting_of_ref": "indicator--d669c2ba-a056-4964-aed2-5f1676e7d1c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffc4c05-5dfa-430a-a44f-48fe0200dbba", "sighting_of_ref": "indicator--d669c2ba-a056-4964-aed2-5f1676e7d1c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3a3bb7-9a72-4bb2-864f-ad8e5bbde2e3", "sighting_of_ref": "indicator--23072715-e8b4-462e-b3f7-a193f9b7996c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa58ebbc-82f6-431f-8556-9cdc563be71c", "sighting_of_ref": "indicator--d89fc5d1-0ccc-4d96-87ad-ef6fc79763be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32da7bde-0eec-40cd-bb40-9c0fde534de0", "sighting_of_ref": "indicator--3cef61fe-f250-4464-81c7-53b94a516c19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428e425f-4578-4766-978d-8153564761dc", "sighting_of_ref": "indicator--44fc8dcd-ad46-4886-8dcb-d1a0f79c02b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84988586-2c96-4d36-ba95-6b0d9a38f3a2", "sighting_of_ref": "indicator--e36ae155-447a-44bf-ae83-f08c9ff2c1f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838e54f2-ec1e-4214-a0b1-c015b5854e7d", "sighting_of_ref": "indicator--e36ae155-447a-44bf-ae83-f08c9ff2c1f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa3843f-7f3b-430c-97f1-ea71612c2283", "sighting_of_ref": "indicator--1c1be9b7-8211-4fa8-9214-0ea6d68a6f83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a47085-3acc-4bf2-9812-c27ecf2a3c2f", "sighting_of_ref": "indicator--1c1be9b7-8211-4fa8-9214-0ea6d68a6f83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705ecfa9-c29f-4e0f-8585-762110b8de7b", "sighting_of_ref": "indicator--a5efc7ed-e4cf-46e5-aa7d-7d71bc4c227f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee3e7fc-26ed-489d-b72c-2cdc97803344", "sighting_of_ref": "indicator--0ea67889-5086-4efd-9d57-ded4e6687b87", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e52cfa-eb52-4acc-b840-6ca7edc7c3d0", "sighting_of_ref": "indicator--31c3f269-d4c4-45b3-acb8-f54750beae4e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244aa034-1c20-43f9-b1c5-f31abadf604d", "sighting_of_ref": "indicator--31c3f269-d4c4-45b3-acb8-f54750beae4e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5028c0d6-76d9-4539-9a8c-125ecefb2de4", "sighting_of_ref": "indicator--2f7c6682-2d9c-47fe-b08f-7c91726e97e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60079657-983f-49a2-91ac-cef8af5d20cc", "sighting_of_ref": "indicator--9ede6223-dec8-46e3-bdb8-d248a479573e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173f1a24-93bf-49b4-880c-ac27430e2320", "sighting_of_ref": "indicator--1774947a-fe34-4e91-b902-4a62c7763827", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e07b57b-a9c5-4819-b9d0-f5e45c470ffa", "sighting_of_ref": "indicator--66b18800-b90f-4cba-a012-09b240ddf60f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243bb8c1-f1da-4722-be1e-5d8e072dd662", "sighting_of_ref": "indicator--230ff03f-8f95-4e58-82af-b6fdab051a20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258e2494-81ce-4f12-baf2-c388e265778d", "sighting_of_ref": "indicator--2689e17b-7525-41ef-8ef1-98879ed8a246", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828d534c-2c6d-48be-8555-f62efbcdee23", "sighting_of_ref": "indicator--6980cd5c-9cda-4c47-9499-a173db4bc132", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffba54a3-526c-450e-92d4-31d13d07d2ed", "sighting_of_ref": "indicator--6980cd5c-9cda-4c47-9499-a173db4bc132", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4f5347-b1d6-4a25-81db-c077825fe2aa", "sighting_of_ref": "indicator--3d0adcaa-a596-4ecd-9bd4-d25e98a1e04d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf3e2d7-d550-40b5-921f-3933ed58b099", "sighting_of_ref": "indicator--3d0adcaa-a596-4ecd-9bd4-d25e98a1e04d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea802bb0-0875-4c3c-bf87-5b1a9a0df4c5", "sighting_of_ref": "indicator--760e2cb3-de8d-4f51-9a49-dde0a51bdc5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f1a639-f5f9-4aa3-ae13-a69ed14adada", "sighting_of_ref": "indicator--760e2cb3-de8d-4f51-9a49-dde0a51bdc5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278f9263-7479-4f32-9788-40dd701d1bb1", "sighting_of_ref": "indicator--6ecd50cb-e549-4913-aab8-3b1ef4b7a8d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400b6ae9-78a1-4d41-ae90-b155fd545a11", "sighting_of_ref": "indicator--29096b77-bdd1-448e-902d-72a518e69bef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d91e0a-c9ff-4ec0-ae0e-ba4c9ec36cd2", "sighting_of_ref": "indicator--29096b77-bdd1-448e-902d-72a518e69bef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42cfe45-a1ba-4a32-9f2b-aadee8c303bd", "sighting_of_ref": "indicator--2fca7509-d447-4035-952c-a1105cb24a41", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b69e5f-900b-40bb-99e0-4f12d886187e", "sighting_of_ref": "indicator--db53b6d6-1ec3-4672-9ed7-282f71356a44", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5219f6-96af-42f5-be83-e00b6530ef3b", "sighting_of_ref": "indicator--db53b6d6-1ec3-4672-9ed7-282f71356a44", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9709f77e-661a-43e8-badf-0213bd4f75d9", "sighting_of_ref": "indicator--e00bf5a3-039e-4105-9be4-7766739dbec7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e1e980-8226-414a-a0d5-d620047ade10", "sighting_of_ref": "indicator--e00bf5a3-039e-4105-9be4-7766739dbec7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cce5e63-b1c8-43b4-b3e5-a433d107eb43", "sighting_of_ref": "indicator--9365bbe2-529a-4284-8409-aec0c0f4cd25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94ffdc9-fbbe-479d-9ae2-f56fa6639d44", "sighting_of_ref": "indicator--fe899d44-bdd9-4718-b297-46caa80b1736", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254dcff0-4f75-4644-80c5-1ca58babe3dd", "sighting_of_ref": "indicator--5f1207f0-4a70-4f78-9611-a56c543341e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6572a56e-4370-44dd-b45b-8365e96dbd03", "sighting_of_ref": "indicator--2e1bfce9-a300-46b3-9e77-7b9da6a84d5a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6685c54-cbc9-4445-acc4-78b9de18f722", "sighting_of_ref": "indicator--bcaa7adc-9782-4af8-b3c8-0f0742a79349", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01dddc6-d4a2-4741-8e78-2624c7d68098", "sighting_of_ref": "indicator--d3f4b956-5593-4ac6-9baf-7b9813dea310", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3906ddf7-ffed-46ae-9640-c1bd8147b6e0", "sighting_of_ref": "indicator--d3f4b956-5593-4ac6-9baf-7b9813dea310", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b419f5e-3f40-475b-b00f-50627f92fdeb", "sighting_of_ref": "indicator--f986c9bd-41cd-4beb-8470-1029c4344934", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3daa3480-d731-47fc-aef5-4974cf0b05fe", "sighting_of_ref": "indicator--fa6e9ef6-a079-4abf-ab1f-8923fd2d2dc8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7931f0-83bc-4748-8515-84e5db24e359", "sighting_of_ref": "indicator--fa6e9ef6-a079-4abf-ab1f-8923fd2d2dc8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5b1a2a-3e95-4c99-b752-5c72bb164028", "sighting_of_ref": "indicator--d9910e66-db69-42d8-be3a-991119f1d1f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ed14ab-8631-4e47-956e-6fa6aa9b1101", "sighting_of_ref": "indicator--d9910e66-db69-42d8-be3a-991119f1d1f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75a28be-b579-46a9-b581-e8a68b356574", "sighting_of_ref": "indicator--3430565d-8790-45af-ac27-6cdf3056be32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb459e0-12e5-49e3-9787-4d9ae0b5c2bd", "sighting_of_ref": "indicator--85b8bd32-3ddd-4198-947a-74bf23706bd4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89c283f-3683-4ff2-9168-7d29a25a55b7", "sighting_of_ref": "indicator--d266e0a4-8876-44e3-a8de-65aed5e16bd7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deaf4001-2b72-4c7f-8394-2dc567254710", "sighting_of_ref": "indicator--e368a132-716f-4511-b9d3-af9cb27461c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef584c44-8f5c-4073-8bad-065b76dfe06a", "sighting_of_ref": "indicator--ee9af5ff-f86a-48c9-9b9d-4e95c040e903", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07927c16-fd8f-4b7e-a903-ee5e60362f83", "sighting_of_ref": "indicator--ee9af5ff-f86a-48c9-9b9d-4e95c040e903", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9a616e-b357-4d44-acd5-c7c36e053bdc", "sighting_of_ref": "indicator--d23a6f20-0339-4518-94f3-2de93366c4cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c371eb15-6a05-4c3c-8a78-562fbdbd005a", "sighting_of_ref": "indicator--9f2fcb76-c4c0-46be-8887-c099c7894eb1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c128af27-5851-4199-9b34-91e1d34a1f74", "sighting_of_ref": "indicator--9210fe88-3e10-4585-8673-653e7c8945bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9033d05-7fe2-435c-b101-99cb4362232a", "sighting_of_ref": "indicator--e4cc2b32-bd2a-478a-8bda-d975fe52edbd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1a0d0d-a66e-478d-ad55-8d16f49bff1c", "sighting_of_ref": "indicator--ddc753f3-421f-4c5d-ba0c-7e946ff03449", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bce81d7-a0c9-4cbb-8611-399db249cda7", "sighting_of_ref": "indicator--0725bbaf-a8ba-4d4f-8100-507416f025d7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbc1e69-d9e2-49d9-a426-cc2063b2ea42", "sighting_of_ref": "indicator--9e2d58c2-e535-43bb-b5f1-1f35f441dfec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2937ca10-72f8-4739-9a47-31962c1d51f2", "sighting_of_ref": "indicator--c3b71485-1eaa-4c26-ac91-04e6a2359ffd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69adfaa2-786e-47f8-ae9e-15aa7481bf7d", "sighting_of_ref": "indicator--55fd1a39-d923-470f-ae87-4a1754e88586", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb972430-01ba-4ca4-9f13-73b9aac376bd", "sighting_of_ref": "indicator--81a5ba3b-a7c6-4bb4-889b-4dbb3cb65fd0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14219000-6e3e-4e1d-af6c-e9f1c8a4c8e8", "sighting_of_ref": "indicator--da971dea-c64a-4ce4-9d32-dea3c97ca3ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcefb68-19a6-4bb9-b1da-b4eeb6ca96f8", "sighting_of_ref": "indicator--9a317e5c-028d-47b6-bec0-4ef725e6bae5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e02a314-ec79-46fe-b05f-7fa0763e306e", "sighting_of_ref": "indicator--0a1388d9-35b5-45a2-95cc-d31d01b5f2dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35515b36-0dd1-48c2-90aa-787942ff78f5", "sighting_of_ref": "indicator--fba6ece6-1785-4427-927e-57460d52914f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e409ea0d-8b65-41c6-9a0d-e9e0ff5cfc33", "sighting_of_ref": "indicator--fba6ece6-1785-4427-927e-57460d52914f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581e8b52-9f34-4629-89a5-8d0706c93de6", "sighting_of_ref": "indicator--26956deb-09c3-41af-815a-2cf623b289e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780b03f8-a7ee-4014-9a2e-29529135e201", "sighting_of_ref": "indicator--26956deb-09c3-41af-815a-2cf623b289e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919f552d-5d04-4132-9e12-cc83a4c19015", "sighting_of_ref": "indicator--dc976e21-07b9-4b91-a0e3-171890928577", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a14c5e-4d18-4ed5-8cff-843c31fd2e2f", "sighting_of_ref": "indicator--dc976e21-07b9-4b91-a0e3-171890928577", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0590df35-66ab-4262-a5cb-5ecb9bd8b9f1", "sighting_of_ref": "indicator--5cba6ad1-e8bc-4362-b687-3e601546e10b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd48a455-6fd0-4ead-a6af-2fe0da1f3f25", "sighting_of_ref": "indicator--fbe7a003-1393-411a-84cc-ccde71e809f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5ba416-13b9-4a3b-a855-8d6940a727e7", "sighting_of_ref": "indicator--b7319ad1-eccb-400e-9e72-7b97c86d5548", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f254b636-bc77-4319-82c2-65d3a3bb9b5d", "sighting_of_ref": "indicator--b7319ad1-eccb-400e-9e72-7b97c86d5548", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e3e27d-10a7-4a9d-8b9a-e2c67792be70", "sighting_of_ref": "indicator--176ad622-c526-4f9a-98da-0c48b030ab69", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328decb5-ba02-40cf-98f4-cad5cbffcebc", "sighting_of_ref": "indicator--176ad622-c526-4f9a-98da-0c48b030ab69", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d293283-8ac7-4052-b48c-358b532456b7", "sighting_of_ref": "indicator--65cb6a7f-924c-4a73-8d07-f499aaa2fcde", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020a720a-7438-46f7-a661-5d689fa63e21", "sighting_of_ref": "indicator--3950f43e-dad5-4100-85e4-e51510dd3198", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfe69c5-a8a1-4647-a816-c52afa349f9e", "sighting_of_ref": "indicator--8c299d3c-c361-4278-bf0b-da618f57cd00", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ca8f62-c33b-4830-abe0-8e12b0d34be7", "sighting_of_ref": "indicator--ca121c10-d53b-4fde-a7f5-e1d5d059555b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c23806-4cdf-4dff-b98b-6944615f30cd", "sighting_of_ref": "indicator--ca121c10-d53b-4fde-a7f5-e1d5d059555b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f22e582-bdfb-49fa-9b64-35e96accfc8d", "sighting_of_ref": "indicator--64b4c739-6be7-4572-8a85-e1c6a4ba72da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ae8c3d-7e4f-4258-88b2-89266c30e466", "sighting_of_ref": "indicator--4689aeb6-29b9-4312-ab76-ecab2fbc9edc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142d131e-d990-4bc5-bfdf-2ed5b54f959a", "sighting_of_ref": "indicator--4689aeb6-29b9-4312-ab76-ecab2fbc9edc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e8f809-c89a-49e8-81bc-475eece661cf", "sighting_of_ref": "indicator--5b4b7761-1b40-4d58-b8aa-908b93878b36", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ebbada-3dd4-4b68-9e29-703aa194bdf6", "sighting_of_ref": "indicator--6ad59367-d702-4da4-bbe8-c1f332517ff8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bfba2d-218e-47ec-8db9-d6db17e5a3ee", "sighting_of_ref": "indicator--57538976-dc2b-4fc5-9fec-5a4abdde07ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22201ced-8c11-4a11-bd93-309e87ec0991", "sighting_of_ref": "indicator--7d41d570-1cff-449a-8582-3ea4f618dd60", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1152a4b2-4835-4315-adc4-a8397f754b56", "sighting_of_ref": "indicator--7d41d570-1cff-449a-8582-3ea4f618dd60", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cefbc9-de1c-4f83-861f-33a4327cfa74", "sighting_of_ref": "indicator--054d2e91-7b17-49e6-bb95-30cca4775a41", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664966aa-2170-4dac-89b6-43955fb2dd6d", "sighting_of_ref": "indicator--054d2e91-7b17-49e6-bb95-30cca4775a41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43113ec7-884b-4ce5-99fc-158208f55e91", "sighting_of_ref": "indicator--d4750a66-7a98-4d01-a66a-9704775571c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964082f8-e24b-4ad9-a287-815d6741b13c", "sighting_of_ref": "indicator--bb63a24c-93a5-4d3f-9cdb-5cd11f972199", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f55f2de-5871-4e74-97a4-3a9a9b6d93ac", "sighting_of_ref": "indicator--fa6bbc85-a9d5-4f3b-acdb-ed1a98571eb2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b40e9c-dec9-4473-ad6a-b466fa7cf733", "sighting_of_ref": "indicator--f2a17f73-83ef-4c67-bec9-f62a6d8477c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9076780-7ccc-4919-8ed2-672ef2902cdb", "sighting_of_ref": "indicator--fcc2eaea-37e1-465a-ad67-428e0d8595dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4414db-3bf5-4ba1-9125-a691b0a20010", "sighting_of_ref": "indicator--5270669a-060b-4ade-a8c9-536558a1a385", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9760162-c79f-4320-be53-744af920d1df", "sighting_of_ref": "indicator--5270669a-060b-4ade-a8c9-536558a1a385", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d50532-b68a-4fb4-ae9e-3f996fab5fe2", "sighting_of_ref": "indicator--add0906a-2fd0-4a80-ad12-d45a5caad8ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019006b2-7c83-4e66-9ee6-9f0487ff8707", "sighting_of_ref": "indicator--add0906a-2fd0-4a80-ad12-d45a5caad8ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b627b9cc-ce4d-455e-80e4-207c51e5f4e5", "sighting_of_ref": "indicator--732ec6e4-ea3f-43a7-9172-7cf4e873d1f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3412ae04-a8a5-4358-99c1-1a6058253901", "sighting_of_ref": "indicator--732ec6e4-ea3f-43a7-9172-7cf4e873d1f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb4327d-4f7e-495e-8a5a-2b356bca236f", "sighting_of_ref": "indicator--79c7ab20-4baf-47c8-880e-770419f5c559", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac8e98c-640f-43eb-93a8-b5c7264b1ea8", "sighting_of_ref": "indicator--79c7ab20-4baf-47c8-880e-770419f5c559", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c815681f-8e7b-4751-91ee-d637ec26fdea", "sighting_of_ref": "indicator--439a88ef-209c-407c-aa84-7b97ca8563e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a374a4-34c9-47b9-ac2f-1ca694450e3e", "sighting_of_ref": "indicator--453f8d00-7ff8-4e6b-b5dd-f6a726337148", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fb936a-abec-4d5e-8560-c187de2dce53", "sighting_of_ref": "indicator--949cdf06-8a3d-496e-9cda-5e5986248489", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc87840-c7b7-4ef7-a43f-72548ffbecec", "sighting_of_ref": "indicator--6732624d-8952-4403-9b3f-ace0f78fc605", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a155c5a7-f965-458a-b0ae-25c70dc49bd5", "sighting_of_ref": "indicator--5c45e77d-d0d0-46e5-aae3-506e439dab74", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdee6c7-9531-41aa-96b5-4e5cb3c05800", "sighting_of_ref": "indicator--5c45e77d-d0d0-46e5-aae3-506e439dab74", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9002bc8-1d5a-4e27-a3b9-7e1481247592", "sighting_of_ref": "indicator--1a6ecfc7-23bc-492a-8768-7da9d3b7b2dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f7d4a7-9d33-4394-b579-a68bf4805b04", "sighting_of_ref": "indicator--3cc4b9f6-12ee-4717-8b3d-90986169fa7c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0891d373-a3a2-4663-bb4a-874f5f7f3c90", "sighting_of_ref": "indicator--fe19d723-6661-4913-ba8d-53394f9e9c18", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1022e4b0-ba60-49da-a8e9-932e6ec6fac3", "sighting_of_ref": "indicator--fe19d723-6661-4913-ba8d-53394f9e9c18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f48b44-a24c-4d99-8609-e1c9a8b67a23", "sighting_of_ref": "indicator--6ed82a06-eb1c-4f21-9429-f490bdd5690d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7456b6ed-994d-4ed4-9578-fff89ab0a8e8", "sighting_of_ref": "indicator--a2b817c6-de53-4b15-b490-7f52a17bc6b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a848f714-585b-4d22-8406-14559c95789e", "sighting_of_ref": "indicator--8926173d-ab29-4d2b-b5d9-7744bd1cfe1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269ca26d-1d76-4120-8924-0691754c8dff", "sighting_of_ref": "indicator--e419c33b-b0f7-431c-836e-1184067d31c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97100341-3b38-4ace-8d80-598d30f481ed", "sighting_of_ref": "indicator--e419c33b-b0f7-431c-836e-1184067d31c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffeb8c0-b4df-4c72-bd67-b6ebe439d026", "sighting_of_ref": "indicator--f5aa12ad-74a5-4f55-980f-137b01e08546", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92df511-9d69-49d5-816b-418a917542ee", "sighting_of_ref": "indicator--f5aa12ad-74a5-4f55-980f-137b01e08546", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0db9cb-6ae1-4afe-bf66-e9dd78fafdc5", "sighting_of_ref": "indicator--46799beb-6a90-4d11-8775-837f7eba0c1e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48c7471-e951-4f09-bba5-1681222cdb74", "sighting_of_ref": "indicator--3cb9c188-31f4-4bc6-bb8b-c865e1bd3531", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a59bc1-7394-4ad1-8fd1-3d95fd8da801", "sighting_of_ref": "indicator--77fde254-abf3-4b7a-86f7-d92c3fb8345a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06e313d-bb56-4027-8f66-85e201c0ebcf", "sighting_of_ref": "indicator--29e3696a-0416-4acb-b619-749fe4a847a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563f9721-c573-446f-b5ff-457f21a27d7f", "sighting_of_ref": "indicator--9a720396-e072-4a5e-9756-9d146ee1ae82", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73401d70-5068-4f2a-9cb8-bb3b751b7163", "sighting_of_ref": "indicator--9a720396-e072-4a5e-9756-9d146ee1ae82", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6f94f8-15d4-408b-83de-2a60b31e42cb", "sighting_of_ref": "indicator--6de08b46-5cf0-442f-b0d9-0237fdbd6bf7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e3e3fb-c2be-4208-9b34-64f6eba8c039", "sighting_of_ref": "indicator--e33edad0-2b92-44b4-bf8e-c9a9a7405238", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee92e7be-e8eb-481e-a011-9b3478d2dcde", "sighting_of_ref": "indicator--54763d7e-1bdb-4f9c-8246-efcaba14ccf7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17990efd-b4af-44a8-8fe6-1082e07a482b", "sighting_of_ref": "indicator--fad9d3d9-1763-4500-83f2-6428b0255da4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8f5f4c-a9a4-4245-8700-a4963c447ce8", "sighting_of_ref": "indicator--70546a1f-d9b5-488b-b612-8490a3dc09f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924d44a7-b076-4768-989c-ccaca42e47c0", "sighting_of_ref": "indicator--70546a1f-d9b5-488b-b612-8490a3dc09f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a4181c-4901-443b-a2af-90fab74d5e1d", "sighting_of_ref": "indicator--b0acba23-7a1d-4d5a-8da0-02cea77bf1cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1183add1-ea0d-4a7a-a1a9-80ca3298561d", "sighting_of_ref": "indicator--76e325d3-4603-44f5-a174-116cdc82c23e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba08b0b5-9df3-4225-8538-e7b185fd14c4", "sighting_of_ref": "indicator--76e325d3-4603-44f5-a174-116cdc82c23e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a713e815-8402-40a6-ae12-d1ce0a2c8c1a", "sighting_of_ref": "indicator--66c1faa3-5d8f-4f24-9f65-173109295bd3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8580169-0766-43f6-92e9-0079b15f2f17", "sighting_of_ref": "indicator--d6b09d01-cc53-44e4-8351-74f5f5dbebfc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6379ee5b-37a1-4dd2-899b-51bd711b8b84", "sighting_of_ref": "indicator--5a45a267-734f-4b6a-a88c-e0ed4d1a99e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6a98b5-f89e-4ee1-80fe-3db20b94186c", "sighting_of_ref": "indicator--bf2c30a7-09b7-4205-a058-244e561eeefa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc283e9-ca8a-46d9-86eb-ac3dd5ea68c0", "sighting_of_ref": "indicator--0a7edc98-e073-493b-9caa-4ebb0a142f35", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700170bb-5dcc-47cc-8085-8bc28f096119", "sighting_of_ref": "indicator--0a7edc98-e073-493b-9caa-4ebb0a142f35", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6297b24a-2ce9-4452-9857-e009779feff3", "sighting_of_ref": "indicator--b3213199-3562-4cba-8902-d0a8131b8f17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1492c6-1f92-4c7f-9488-1315280c0b7c", "sighting_of_ref": "indicator--4b6a2187-b70c-457a-a217-836ec595cc7b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7055f4-12e8-4621-9fab-22ea23948bbf", "sighting_of_ref": "indicator--bd42b020-d020-423f-ae3e-42eb0332058b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174ff94f-8099-4eaf-9c84-1d3587fd5d6b", "sighting_of_ref": "indicator--bd42b020-d020-423f-ae3e-42eb0332058b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b077296-6b4f-4509-bd68-777fdb0a5e83", "sighting_of_ref": "indicator--285151a4-5871-491e-9f5e-55b8144380c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f029db-95bb-4b9c-8155-64ba02aef8ea", "sighting_of_ref": "indicator--99b6fb2f-21ee-49f9-9bda-76dd13f56288", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e76af4-1804-4ec7-8c43-14325d1e81a9", "sighting_of_ref": "indicator--1aa4f95f-95a9-4a5f-be16-759486c1c997", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1759dffc-f3ca-4ef3-8f90-d92eb0fac1f8", "sighting_of_ref": "indicator--c5ed0a1c-dfc8-4d6f-96e5-14301e2ee0db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480c1246-2a14-4400-a0b3-9eec758c3bf7", "sighting_of_ref": "indicator--c5ed0a1c-dfc8-4d6f-96e5-14301e2ee0db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6e3ee7-1931-4db7-b1a0-cbd910016bd4", "sighting_of_ref": "indicator--d08424a2-6764-4009-8c6e-3ceb6e0a096d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099e8226-3f03-4a0a-9c27-b5427cf0912e", "sighting_of_ref": "indicator--ff88ea95-04f9-453c-a98f-e018ad8381c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5523cec0-0f12-4613-b3b3-1ec0604824c0", "sighting_of_ref": "indicator--3fd0714a-02be-4b8a-bb1f-e6b1d9dcf8b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0255cb56-954f-4849-8106-4c3d159af779", "sighting_of_ref": "indicator--ec32a1af-7158-489e-99f1-6b34d4ee84e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae242e3e-51f7-403e-9374-b7c89f319fc9", "sighting_of_ref": "indicator--7efa675c-3bcd-4069-8ce5-c0accf8f3682", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2597ff56-de6f-4eb3-a872-96567f3bd4f2", "sighting_of_ref": "indicator--7efa675c-3bcd-4069-8ce5-c0accf8f3682", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a965b229-9320-4151-bb1a-092167bdaccd", "sighting_of_ref": "indicator--cb3483cd-0324-4919-a3de-a2ce5d8fcea5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a47fde-d8a0-4415-a278-a2323a11f033", "sighting_of_ref": "indicator--cb3483cd-0324-4919-a3de-a2ce5d8fcea5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee26c89b-c744-4ced-b844-7b08fb93b271", "sighting_of_ref": "indicator--451cc433-248f-4966-a97f-9285dd9226c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8de62c-57c2-4e91-b024-78838d9f4c23", "sighting_of_ref": "indicator--451cc433-248f-4966-a97f-9285dd9226c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbc1518-2b55-4189-85aa-95019ca7c568", "sighting_of_ref": "indicator--2455624c-cb17-48b0-a402-d0f52918184d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa4374b-1601-4b45-8652-3872a06bc4cf", "sighting_of_ref": "indicator--2f926554-5c04-47d7-a86c-415a671c6b0e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf49cf37-6637-43ca-b23a-63b1b48924a3", "sighting_of_ref": "indicator--4aa6e60b-e2cc-4cdf-893e-a9d8a3ac7405", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3628600-3255-4b93-8391-1b748354805a", "sighting_of_ref": "indicator--9162cf3b-30a4-434f-b31f-e67fb8dc89ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a21554e-19df-4467-92b5-120049e2f8d4", "sighting_of_ref": "indicator--9162cf3b-30a4-434f-b31f-e67fb8dc89ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd717b4-5453-4966-830a-8a77d841e1b9", "sighting_of_ref": "indicator--d29c738d-186a-47d2-b030-da38a176d4a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba425bf8-3b59-4838-90a2-08d0f7d25771", "sighting_of_ref": "indicator--d29c738d-186a-47d2-b030-da38a176d4a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe414e3a-4509-4a8d-b50d-7457338ce5a0", "sighting_of_ref": "indicator--aa824aab-19dd-446f-a90f-f26713a5384f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6515aa-0af0-49e0-9155-d8508d3d5ed8", "sighting_of_ref": "indicator--96cb6dfe-ffd7-42fb-99b9-169aea709ed9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b791fa30-32c2-40b2-8418-a4e30d4a255b", "sighting_of_ref": "indicator--6b453e0b-29f7-46e9-ad9b-45a8dafec9a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c905db18-189f-4dfd-af64-cf988e5434b4", "sighting_of_ref": "indicator--6b453e0b-29f7-46e9-ad9b-45a8dafec9a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799762ab-24a9-41d5-a3f7-9ec9d40df81e", "sighting_of_ref": "indicator--e35de30e-4a9a-4d91-a92b-36f55e031d31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc0992d-ca69-4595-805b-733fa19853b4", "sighting_of_ref": "indicator--d543074f-55b5-496d-86c9-10be405a887e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6150ce69-7d5a-4f59-b7ce-31544be697b2", "sighting_of_ref": "indicator--d543074f-55b5-496d-86c9-10be405a887e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ced5d2-f1e9-4bae-b877-fb3fce3e9821", "sighting_of_ref": "indicator--72d910d7-e49d-4b13-979c-b15b6217b9a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6a4823-92a2-46d3-ac84-aaa80cf2e5f7", "sighting_of_ref": "indicator--72d910d7-e49d-4b13-979c-b15b6217b9a5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58db829c-1a4b-47eb-bff5-3dd74cfb23e0", "sighting_of_ref": "indicator--5d745ebb-0209-4e30-8269-5ccbb53e4ea1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f450dd-3034-4693-a91c-af88335d9742", "sighting_of_ref": "indicator--b7d0374f-9646-40b0-adff-4a243df7b4d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cea9f92-7356-44f1-b499-78a712af1ac7", "sighting_of_ref": "indicator--1d437fc1-1243-489b-8a35-4045e50a6b61", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e28a61e-eee5-455e-94ba-6936efa19246", "sighting_of_ref": "indicator--6131d024-5fcf-483f-b648-18364c219fe3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2470e7-0b56-4977-9d10-96b8619809f1", "sighting_of_ref": "indicator--f30192ef-95f6-486a-8f9d-4de0998e4ab6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8ca5b7-d5d6-4a13-9527-d259c40011f5", "sighting_of_ref": "indicator--0a2824d9-7329-4898-8df1-25c5ba31d9fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0772b659-dba5-4654-bc75-bfa4d706ba76", "sighting_of_ref": "indicator--d35d61cd-2042-4b23-b909-70839dad22ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e089bec-f3da-49fd-aace-464a83f3e38b", "sighting_of_ref": "indicator--d15eae7e-35ff-41c5-bd03-2a1d63f71181", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9795c957-c94a-4fc2-ae40-8ad11903bf83", "sighting_of_ref": "indicator--d15eae7e-35ff-41c5-bd03-2a1d63f71181", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d678d3-d1d5-4c84-bd98-923622fb4343", "sighting_of_ref": "indicator--7b728eb0-fe2e-4d28-949a-d3c28f6c4cfe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dfe075-d6da-4b72-b51d-64215d6a36d8", "sighting_of_ref": "indicator--95615e6b-abbe-4f34-be3c-92cda31e1e0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e5d600-9cad-497e-b88d-966ddcd14c7f", "sighting_of_ref": "indicator--a0f46067-d8f4-4c3d-b6cd-e070c0a8dfc0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85da5c28-361f-4ef5-bb3e-b8112ce11a50", "sighting_of_ref": "indicator--35b92799-81e7-45e0-88cd-db255275bb21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16fcfce-bbba-4f68-beaf-ed636d9cbb12", "sighting_of_ref": "indicator--e671d128-dcb9-4374-a604-3f3abcd0c83d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70daab6d-3872-4cfc-894d-e16c5a2f9b32", "sighting_of_ref": "indicator--e671d128-dcb9-4374-a604-3f3abcd0c83d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebac87f-bb7f-4c2b-be55-d7a38922a813", "sighting_of_ref": "indicator--2a4280e0-580b-4352-ac1d-22c95574aa4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db22b468-9df9-435c-935b-282ff704c217", "sighting_of_ref": "indicator--bce8d08e-5f78-4b15-8194-e8d3646a240f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2276cf92-90af-4901-9eea-52f8ee1d8255", "sighting_of_ref": "indicator--d1d490a0-51d4-4a66-b16b-82e595b5b77b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac7104f-d18a-4d33-bf34-92665c0c3f89", "sighting_of_ref": "indicator--d1d490a0-51d4-4a66-b16b-82e595b5b77b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84611b70-ad8b-4602-be43-e11eeda6dc1f", "sighting_of_ref": "indicator--97018862-2685-42e6-bba8-71984500e41f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19079c0-ca30-4723-9e67-4ae47c500b45", "sighting_of_ref": "indicator--0d5f1e31-4ba8-4a4d-9f0c-4512f5725807", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a933c44-7ace-4f39-9262-dd71eba4a41f", "sighting_of_ref": "indicator--0d5f1e31-4ba8-4a4d-9f0c-4512f5725807", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c70383-d2de-40c9-8ab8-2ab8ce37a303", "sighting_of_ref": "indicator--0eadb4e5-908a-4253-974d-a101ed9f183c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5dbc9e-3077-4c83-b1e5-7a7115b4dd2d", "sighting_of_ref": "indicator--e07a7b97-f010-421d-b027-6aa3afe048c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21061480-0521-47ca-a8f8-6bb07a42a00c", "sighting_of_ref": "indicator--4740accd-41c8-4381-953c-15667552a35d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb3ddb9-f672-459e-af67-e52a2c4d4e3d", "sighting_of_ref": "indicator--63cbdd0f-2b3d-4b19-b38a-fc4b6a0c4606", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b06884-16c0-4e21-802f-14f460ac9594", "sighting_of_ref": "indicator--d7e4b714-bfb4-4102-84ab-eabcf9bc9d43", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4da0fec-2768-41fd-bc9f-8da73537154e", "sighting_of_ref": "indicator--50c1d976-5c18-47bc-b3f2-88626c2247aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03b6e88-a66e-4c0e-b9f0-3e32bb9cf483", "sighting_of_ref": "indicator--20c7ec7c-3a81-4071-9134-0637bc87ee5a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d419a6-37fd-4698-8e92-18046e713887", "sighting_of_ref": "indicator--e79f3e33-6aef-4481-82b0-5fe84e62b109", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5367cb-c6ee-4775-9c27-2504da9f43bb", "sighting_of_ref": "indicator--c5ab9a55-e38e-4a8d-9e68-39deb691ca1e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b60ad8-ff02-427d-944e-db0c3ee69c77", "sighting_of_ref": "indicator--b934481e-bc08-475d-adfe-a302872fe63b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5ca31d-cf7b-4f60-b495-f5e15813669c", "sighting_of_ref": "indicator--2839683d-9931-4079-9f1a-2417740c1bba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee9b7cf-de6b-4e43-8e8a-ce46c17b46ff", "sighting_of_ref": "indicator--004c43f8-366d-4f2c-a588-494bb181d229", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1917fc64-4375-4570-8eca-70e23873069d", "sighting_of_ref": "indicator--d57c9529-9a38-4115-8f8c-31113bcd6ece", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf34bd7-b8b0-49cb-a6c1-92c3f265a100", "sighting_of_ref": "indicator--77841757-d09d-45f0-b808-2581c7f8ac12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c569a303-e468-4b37-8eba-33c292bd5b6e", "sighting_of_ref": "indicator--d1501c8d-26cc-4dcb-a992-68cd53c973ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16e2d51-3d0d-4a36-bf87-9134cc36663a", "sighting_of_ref": "indicator--cb9ff2b3-16d9-4f3c-b57b-b5aa6f93d217", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce7a3ca-049a-4927-aa48-f8a55a79bff8", "sighting_of_ref": "indicator--cb49e109-1251-4cd5-9f33-4dd6483ae2bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d01346-11cb-461e-9245-31f73331d1ec", "sighting_of_ref": "indicator--0dac2f0c-bab8-4bbd-ab4a-b8ddf631a563", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24753ba-9c09-4e15-86c7-c028d7a513ce", "sighting_of_ref": "indicator--084cd015-01aa-4992-9736-1a1e1d585000", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d74d19-b781-4982-981c-4eda4d333fe3", "sighting_of_ref": "indicator--26582c14-7325-4b41-82d4-03b3e9690ad7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb9c843-e1f4-49af-a2e3-591198072cf4", "sighting_of_ref": "indicator--26582c14-7325-4b41-82d4-03b3e9690ad7", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a71fd68-0c75-4b23-ad2f-fb991a90adf0", "sighting_of_ref": "indicator--26582c14-7325-4b41-82d4-03b3e9690ad7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55de4ab3-666e-43e3-b6e0-91115fc80b3d", "sighting_of_ref": "indicator--5d7a2bf8-fb9c-4155-8b75-119ad6b21df3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bbccfb-52ad-485d-bf16-cf678b37e52f", "sighting_of_ref": "indicator--52490fe5-45ff-4b63-b873-caed8b11dcf9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8137b7a-5b59-4a8e-956e-43430b372179", "sighting_of_ref": "indicator--5d363676-fd75-45d3-af4c-b1e13ac7314f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe61270-8fd3-4eab-a0f2-13b1b09ee380", "sighting_of_ref": "indicator--9ad1c688-3cbb-4282-9cc2-9dbc3023a4a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f636e4b4-6692-4463-80fd-943a3b13e679", "sighting_of_ref": "indicator--821f0ca2-4c40-426b-b801-bdc383d662ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d393650d-d8ff-4f51-8f84-d806fc187e89", "sighting_of_ref": "indicator--8e6ee0de-38e2-4fd8-8be7-3405078892bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3236819-eb35-4934-9633-a0b58bbc571c", "sighting_of_ref": "indicator--5bd867b3-fb3c-444f-b4e3-2c1d7dfc3349", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398511cf-91da-437b-8a1a-3d14c1a2655c", "sighting_of_ref": "indicator--3871c0b3-3535-441b-8482-7ccbbac6e418", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61552db2-1500-47ac-87fd-a3b8e7679753", "sighting_of_ref": "indicator--8fc955cd-483d-4ac6-98a7-87d5b3f7a4aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e9aac6-d2a9-4028-ba0b-ebe5f0b4331b", "sighting_of_ref": "indicator--2eb6d8b2-6986-40e1-8e97-a62331708f94", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfe58f2-2e77-481d-989a-eea07306a176", "sighting_of_ref": "indicator--dc2a207d-64aa-4e5b-9187-ec604a209a67", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e822bd8-b952-4a31-82c6-4132365484b7", "sighting_of_ref": "indicator--dc2a207d-64aa-4e5b-9187-ec604a209a67", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009b6473-4a43-43f5-a2d4-0f3dfb1cedc3", "sighting_of_ref": "indicator--f96f677c-a558-49bb-bc0c-c9e0863ca3d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d4c9ac-ed22-457f-abb1-48453cf4c535", "sighting_of_ref": "indicator--8530b529-4069-4c95-a75e-c4f9d2292ac8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c21e10-5977-4d26-bb06-0821d2fee10f", "sighting_of_ref": "indicator--b95f471b-5ea1-4518-96dd-cb57a57ff888", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e53888b-c96e-4953-88e0-f321cafbdf87", "sighting_of_ref": "indicator--7ad1c21e-5168-49db-be15-a37b54fbd5f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ae561b-e2aa-4c02-8c9c-f5ea3b184de1", "sighting_of_ref": "indicator--aa7b441b-1ef9-4363-99b5-5a6412ea6621", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df66d50b-2951-41d3-b831-8576103c4707", "sighting_of_ref": "indicator--c388127f-0c7e-42e7-beb4-11ec99da8b35", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dc0042-2e91-4317-b3ee-400368627891", "sighting_of_ref": "indicator--09233e02-6f89-479c-96c5-933e237fb7ec", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ce3428-7dff-4553-80ed-aa28d1530823", "sighting_of_ref": "indicator--ecc8075c-41be-4755-b4cb-2ac311f27c41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0922004-40f2-4591-b0ad-ba3e718d4593", "sighting_of_ref": "indicator--d6ec41df-a13f-4c77-8e63-75c40f9397b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6d0529-bb19-40a8-8727-3dca5358f0e3", "sighting_of_ref": "indicator--ece26b2f-a62b-45f9-88d3-10f4b6fa9189", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34669fc2-7fc2-4f54-97ce-4650bad90e16", "sighting_of_ref": "indicator--f96eca21-ac5d-46c2-bd0c-026fab0f0580", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f07a5ab-9ebc-4407-a3ed-7087a2405fff", "sighting_of_ref": "indicator--67ed72f1-b5a9-4082-85da-e8f1d62f1c36", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda74b98-c504-4134-86e6-999db5d7b8d7", "sighting_of_ref": "indicator--8786bc10-31f4-432b-b681-37a34c2024fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bae7a8-a9f7-4087-8c3a-204ca03c3e26", "sighting_of_ref": "indicator--8786bc10-31f4-432b-b681-37a34c2024fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6454f0-88c5-40e1-8096-a342fa9a8caa", "sighting_of_ref": "indicator--09227865-a37c-424c-b358-2956683f005f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d41265-e2bb-4d0a-9c70-cf82614707e2", "sighting_of_ref": "indicator--09227865-a37c-424c-b358-2956683f005f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12e30de-970e-4949-b88c-6d7efb5476c2", "sighting_of_ref": "indicator--6e37649a-b79b-413b-8225-f055c1b704bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddd5bf7-6c4d-433f-99d6-2dca4919e22e", "sighting_of_ref": "indicator--6e37649a-b79b-413b-8225-f055c1b704bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e1b421-9083-4870-9079-a03e1f4e977c", "sighting_of_ref": "indicator--4a1c9ab5-173a-4530-ad1c-0b127391bbff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736d55c4-8bc0-49dd-9e90-4b7a33972377", "sighting_of_ref": "indicator--6fba918b-64e8-47e3-81cb-a77649c512d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103cd886-2707-496a-83b1-441fb19adcdf", "sighting_of_ref": "indicator--6fba918b-64e8-47e3-81cb-a77649c512d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4c42b0-d15e-44a4-97c6-026e18d9a213", "sighting_of_ref": "indicator--61d11705-03b4-4303-8870-e5d380af5698", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828388a9-0297-45ed-af9d-bf1ed7704026", "sighting_of_ref": "indicator--61d11705-03b4-4303-8870-e5d380af5698", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9026e9-21fd-4ad5-922d-d012fdba40fb", "sighting_of_ref": "indicator--01bc8836-4bfd-44d6-901e-ab7b35de10ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc63f85-5aa2-4f72-a123-b4ef31987949", "sighting_of_ref": "indicator--7a59f204-c4ae-4d69-9a5b-014e16466114", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02714b17-0f64-4825-bdf2-7d5f0dccaeea", "sighting_of_ref": "indicator--7a59f204-c4ae-4d69-9a5b-014e16466114", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432a1054-b6aa-4e44-b058-0473f1a3f25b", "sighting_of_ref": "indicator--37ed9a02-ead9-40d6-aa25-ca144f12e3be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8d1c1a-e679-4ea5-a8c5-759817e5c182", "sighting_of_ref": "indicator--37ed9a02-ead9-40d6-aa25-ca144f12e3be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a438296c-e848-4b93-a4e6-cfc785cfa33b", "sighting_of_ref": "indicator--cda0aa53-5fe2-4ad4-819e-ef5eef662495", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd84d253-f23b-4731-b13c-0ac47b5fb9dd", "sighting_of_ref": "indicator--cda0aa53-5fe2-4ad4-819e-ef5eef662495", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed58019-46f8-482a-a9d1-eb8507a6f5ac", "sighting_of_ref": "indicator--ffcf029d-8d44-4322-a7c3-c241380b8393", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf89cdb-50cf-463b-a49e-f9feed94364e", "sighting_of_ref": "indicator--ffcf029d-8d44-4322-a7c3-c241380b8393", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efab0851-f3b5-4527-ac68-c51f4c555099", "sighting_of_ref": "indicator--d6424abc-880a-4ff6-b774-710cc447e8eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfb7d48-c1c1-4a29-84b8-bfe6d8cefe9d", "sighting_of_ref": "indicator--d6424abc-880a-4ff6-b774-710cc447e8eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f828028-e55a-4c8e-a27e-4c02eb8e6449", "sighting_of_ref": "indicator--1d4d8ee3-5809-4776-a50c-69ab39ce477b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e345cbee-e85c-4398-90a5-1c6bebf27b39", "sighting_of_ref": "indicator--1d4d8ee3-5809-4776-a50c-69ab39ce477b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b59f4d-5943-4cb3-89d5-22f66627b3ae", "sighting_of_ref": "indicator--534fc73a-7fcc-47c2-b5c4-3ef20c61ab90", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dea9de9-7401-446e-8d02-fa89abd8c4f1", "sighting_of_ref": "indicator--534fc73a-7fcc-47c2-b5c4-3ef20c61ab90", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f7065a-1092-4df8-8ab8-a06ba913e8d0", "sighting_of_ref": "indicator--8b7ebe6b-edb6-4394-b871-43b0050c1a4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4a3d0c-263b-410f-b1eb-2bec08e922a6", "sighting_of_ref": "indicator--8b7ebe6b-edb6-4394-b871-43b0050c1a4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f93197-acc4-459f-9fe9-3de0c58b087e", "sighting_of_ref": "indicator--a154b393-c45f-43c4-b113-572f22587f21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c215729-7308-4f13-89df-fcb84e7c72dd", "sighting_of_ref": "indicator--a154b393-c45f-43c4-b113-572f22587f21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ad5add-10e9-4567-b329-c72901872d02", "sighting_of_ref": "indicator--360bfd62-0b72-48df-940b-8d9c84dfc491", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1248b6a2-b913-4e3b-9012-bdf3a762ad8e", "sighting_of_ref": "indicator--67ea35c3-cba3-4973-a5f9-eedc2a95615e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40030cb-b739-46da-a048-a7193a39df6a", "sighting_of_ref": "indicator--67ea35c3-cba3-4973-a5f9-eedc2a95615e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864a5683-7c89-4466-b4ca-ff40f567d715", "sighting_of_ref": "indicator--34362a69-2946-403a-bec4-c6820de6f550", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2acea4-8f5a-4375-8158-bca5bf4b0d7d", "sighting_of_ref": "indicator--9812d9ad-af12-4b33-b80d-5958e67a9a6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b94a14-4330-4bca-93c2-cdc4595807eb", "sighting_of_ref": "indicator--97a22469-f3ae-464b-a5d5-47670754ddc6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2966692-3b26-475b-864c-8b2d68f2d73f", "sighting_of_ref": "indicator--ec357679-88b0-411e-a274-834387ca2589", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5116a0f-0e49-42ec-b047-a67c256dbbd1", "sighting_of_ref": "indicator--50a160ab-8a28-4b03-a59a-ca0577a97bed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea0eec4-fbd6-4553-b388-1a4d85a89e80", "sighting_of_ref": "indicator--728ae162-0b3c-406c-a545-d5fe5005ff2f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d6bad5-47ea-4f5d-9b3d-448b00e69422", "sighting_of_ref": "indicator--7e9fcd2e-5399-4cda-9ccd-53d36c148f01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8b4491-2af5-4455-a3ab-84548a69b0f3", "sighting_of_ref": "indicator--5ae7cb50-a3ff-4868-920e-204a0db6d80f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c771e279-a567-43ca-8bb6-99195f433d23", "sighting_of_ref": "indicator--b9d87130-9cf7-4c6c-9cbc-0e50019e1937", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f020098-b740-4290-b65d-8f4b59c9860e", "sighting_of_ref": "indicator--0c939bde-bb67-43c5-8365-f8ce7f3259a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849fc7f0-4f34-4e80-b27e-d455e05aa608", "sighting_of_ref": "indicator--f2ef2cdb-011f-4d28-a06c-ecd110ff5a35", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b09f2d-33d2-4f1b-a7bd-5b523e743e06", "sighting_of_ref": "indicator--dcd8e906-7367-43c2-b9fa-7a29f74fac59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724dfa18-5511-42c2-a69a-9bd9bf5683cd", "sighting_of_ref": "indicator--4f9274ca-18f2-4a0e-a1e2-34861a52d567", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f2df4e-a2e7-4f97-a829-8697890994de", "sighting_of_ref": "indicator--edfb0928-ac81-4385-b026-b50be5949ccb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134e8438-b430-4f5d-b386-b122d89ee264", "sighting_of_ref": "indicator--ce85f377-c898-4115-b558-3846e7e125bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852667dd-1c58-4011-8e9d-b279045101e5", "sighting_of_ref": "indicator--c11b6e79-adac-48d8-aaba-be3d3d5f2485", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498c024f-dc80-4798-a916-00b4fa137b4a", "sighting_of_ref": "indicator--57188692-3689-4386-8d9b-6b33e71012a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a699b9e0-0782-4351-b2f6-e1788d53f2dc", "sighting_of_ref": "indicator--d8a9a2b8-0363-4f38-b1d5-5b3dae19104f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44db3835-9535-48b2-8f2f-70effa6eba32", "sighting_of_ref": "indicator--5dbcb99b-4564-4ba1-abe4-8c0ea82b9665", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4670b707-c1ab-420b-a4fb-1c33461e4862", "sighting_of_ref": "indicator--63fb7b21-b9c4-4ec3-98fe-c864f580b444", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f616e6d5-0aa9-45a6-b41e-bb42f4d9ab21", "sighting_of_ref": "indicator--63fb7b21-b9c4-4ec3-98fe-c864f580b444", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bf0b27-771f-49e3-b3fd-7df0964325d1", "sighting_of_ref": "indicator--11af603a-89f9-472e-9071-5dc2c59e452b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668b4009-9f34-4dd2-9753-bfa12f28e63e", "sighting_of_ref": "indicator--088be65b-446b-4986-b873-70fd553a65ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20dae13c-b5a8-4265-8c80-3a21c21fc233", "sighting_of_ref": "indicator--763b4676-8863-43fd-9903-0c90cb653b8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97a32cc-eddf-43a1-9715-f3e33fa5348c", "sighting_of_ref": "indicator--763b4676-8863-43fd-9903-0c90cb653b8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb968a10-4721-4487-8ea7-af8ec127da49", "sighting_of_ref": "indicator--0fd4f685-ec7f-4f19-9a54-a6a6b71b89da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5271f5ce-6ac4-441d-bbf1-aab7ff944dd0", "sighting_of_ref": "indicator--0fd4f685-ec7f-4f19-9a54-a6a6b71b89da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6f9cd2-5d90-4c45-9f49-0bab0554c5a9", "sighting_of_ref": "indicator--f3a710ff-63a7-49d8-a7c8-3bc65753c663", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05779d04-fbb7-4f26-88cb-57a06bb4b3bd", "sighting_of_ref": "indicator--2ae962b8-a413-468f-8e64-fbdc59e2586a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e426aaf2-3f01-4954-ad48-748010674307", "sighting_of_ref": "indicator--2ae962b8-a413-468f-8e64-fbdc59e2586a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f9540b-6d6b-4bff-b0f9-1deb8c5d5fff", "sighting_of_ref": "indicator--b00bde0d-b4e1-4404-9800-d5ea08d982ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b4a9b2-879a-4933-9da3-fbd0f51d8f94", "sighting_of_ref": "indicator--cdc23e35-5f2a-47b0-b888-fc196e5447d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7708eca-4410-416a-b7a7-5214e567e694", "sighting_of_ref": "indicator--c879ad90-d852-480b-a9d1-f01013e57e41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf84d79b-95cf-4dfc-aa68-6c9b771ed486", "sighting_of_ref": "indicator--b74be215-0d65-42ea-b304-6e8a6fd71c83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d8288e-69bd-4074-9b70-89caf10be988", "sighting_of_ref": "indicator--66d678f2-9d59-4b02-ac9d-d611130529f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02f406d-2e4c-416c-9647-cdf3716b1fc8", "sighting_of_ref": "indicator--057e48d5-ee1b-4340-8b60-68540c7bbe51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efebfe5-757f-48f8-9785-d86f1a524243", "sighting_of_ref": "indicator--057e48d5-ee1b-4340-8b60-68540c7bbe51", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda8b07d-d0b0-4867-8bdf-4dc70c8d1024", "sighting_of_ref": "indicator--c6095e9b-befe-401b-99d3-c742af3d26d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11222fdb-d7bf-4386-9f27-7db66a53b07e", "sighting_of_ref": "indicator--c6095e9b-befe-401b-99d3-c742af3d26d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bce241-b356-41eb-b48b-577cb7644d1f", "sighting_of_ref": "indicator--e1e3021c-7ddf-4679-90b0-0a8125d1e65b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3551a712-ee75-4232-9242-20501f46d368", "sighting_of_ref": "indicator--e1e3021c-7ddf-4679-90b0-0a8125d1e65b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87c45f4-c523-45f9-a35b-55703471ef9b", "sighting_of_ref": "indicator--790273a3-8122-46fc-a620-8b9a748b6d75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb227b69-6130-44ef-97f2-45c28be46baa", "sighting_of_ref": "indicator--790273a3-8122-46fc-a620-8b9a748b6d75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b9ac36-f3bc-4e82-802e-c35cb4a3909d", "sighting_of_ref": "indicator--6ccaacc1-1d12-4394-b087-dc933bc46f15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45642f88-f86c-4dc4-9a0d-160d0c24e167", "sighting_of_ref": "indicator--9fd4b9ec-6040-47cf-b342-2fd998f39012", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf3e9df-7306-4ef8-b64d-a349ff1a3110", "sighting_of_ref": "indicator--9fd4b9ec-6040-47cf-b342-2fd998f39012", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76279b7a-59ef-4c45-ae61-81529ae91bda", "sighting_of_ref": "indicator--73f35a7b-b9ac-4ca7-b3b1-c447fd67d25b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97386b09-d4b6-429f-bed0-379fcf405ec8", "sighting_of_ref": "indicator--73f35a7b-b9ac-4ca7-b3b1-c447fd67d25b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deeefd6f-bd31-4361-a0fc-3a7b5bacbbb3", "sighting_of_ref": "indicator--522e427c-7fe3-4c61-ac32-6890e7f275e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619197f1-42f0-49c3-9cf5-d3c7a866944b", "sighting_of_ref": "indicator--522e427c-7fe3-4c61-ac32-6890e7f275e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815b20e8-54d6-4817-8100-27ef8c58535c", "sighting_of_ref": "indicator--8c55d8d4-479c-4ab3-bded-ae2ec7069b9d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37717bd-2593-430b-a4f5-45cd01963550", "sighting_of_ref": "indicator--6c8312f4-ed55-40f2-83c0-a931ada64ec8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16aca310-f990-4139-a5f5-6732282a4b65", "sighting_of_ref": "indicator--a64649ed-c948-4da4-b1f3-905b557aaacf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4f984d-c0b7-420f-b4d6-0adb1a8b686d", "sighting_of_ref": "indicator--a64649ed-c948-4da4-b1f3-905b557aaacf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b67927-742a-4aaa-9e57-8c8765c55947", "sighting_of_ref": "indicator--ede32d3a-e03e-42d4-b899-feb81b3fd3e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786d18d1-6265-4305-b104-5246bd12f6b2", "sighting_of_ref": "indicator--ede32d3a-e03e-42d4-b899-feb81b3fd3e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f3f408-634c-4b2c-bf8b-7ca512504130", "sighting_of_ref": "indicator--c4172a94-d411-4b3c-b0bf-0ca6eff9b382", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b2d7ce-ccfc-4213-98b3-74fe7555545b", "sighting_of_ref": "indicator--de15f787-056d-43a5-9665-5444e883a83e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b590ea-75eb-45e3-83a4-b6ef6f78c12e", "sighting_of_ref": "indicator--8638fa3f-535f-493b-bcb1-c86de91acfac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdf353c-dd62-4031-90e1-0b4af89874b6", "sighting_of_ref": "indicator--8638fa3f-535f-493b-bcb1-c86de91acfac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c640fd-677d-45c8-a44b-c640ca322aa0", "sighting_of_ref": "indicator--201dd062-c1fa-4de4-9619-493c4ee6a10b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16980fb-4ed6-45cc-9fab-f6e487162b44", "sighting_of_ref": "indicator--bb5c2902-9a8d-42f7-b51c-b6a2addd66b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638b07b1-f565-43d2-93f1-089107897b63", "sighting_of_ref": "indicator--f9be7a28-dd0d-41b0-a7ca-83e8befe7237", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6a6117-a45a-4103-9d66-03767ff02726", "sighting_of_ref": "indicator--85e933d6-2ae4-4fe4-9c48-018c6aef1eb2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498e072b-57ae-44ab-ace6-2a80c46ec44f", "sighting_of_ref": "indicator--08421418-7534-44be-bc22-f892ac4c5f16", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46031935-28d9-41c3-8904-75a5b62d2a02", "sighting_of_ref": "indicator--878de015-77f0-48c7-b0f9-16ffdc1aa819", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b41e5c-b00a-4d06-8850-13626925631d", "sighting_of_ref": "indicator--5efce860-0078-42e4-9143-ffa34d955ac0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0776dc41-8d18-4a6c-a951-49543d8ecf01", "sighting_of_ref": "indicator--31b4a322-8558-438d-ae10-672ae0f99598", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55aebbe-7690-424c-9ea1-af62e040af7b", "sighting_of_ref": "indicator--70164b34-04b6-43f0-86d7-92fe8eced68c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d4bbc8-4509-4e59-ac6b-5ccc83b9a58c", "sighting_of_ref": "indicator--70164b34-04b6-43f0-86d7-92fe8eced68c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8643e565-260c-445e-bd32-ae98fc52a4e4", "sighting_of_ref": "indicator--83249902-a97b-4cb9-87bb-8130ecf73678", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f2d6c5-7f75-4bd2-9ae2-a118beb180ba", "sighting_of_ref": "indicator--83249902-a97b-4cb9-87bb-8130ecf73678", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49776da-9778-4530-9a2a-f3d9bc53fda5", "sighting_of_ref": "indicator--327b12f2-7636-42a2-a399-1022d47b5f04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432e4997-4c5f-4bc8-b5ef-40f60352d2ee", "sighting_of_ref": "indicator--ca7aebfc-94ac-4aa7-ab00-4766b9ab34dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26c66f3-9888-4a0a-aeea-4a4b7c948506", "sighting_of_ref": "indicator--cf875feb-8def-4768-9c3c-712cab843620", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba33a6a8-c84b-439c-bac9-b7fa5cd68bd0", "sighting_of_ref": "indicator--377d20b0-00d4-4711-b01e-6e2b4a3f8e60", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f5d8db-4a74-44e8-b094-6e907f846b45", "sighting_of_ref": "indicator--377d20b0-00d4-4711-b01e-6e2b4a3f8e60", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035537b5-5205-4537-94c9-b04f24e72d65", "sighting_of_ref": "indicator--c8a3d906-5668-4bad-b7b7-b265e622a606", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28870664-d516-47a8-a067-a9d1b0839269", "sighting_of_ref": "indicator--a5288ee4-e0e7-4ae5-bbda-dd9b0b213d20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb2ab02-418e-49f1-aee7-4dc13fbc81a7", "sighting_of_ref": "indicator--cb944c89-4a71-4cb9-9c1a-0948d5d0f9ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910d8fa9-2427-4de1-aacf-90dcd42983e9", "sighting_of_ref": "indicator--cb944c89-4a71-4cb9-9c1a-0948d5d0f9ca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4b6e62-bebe-4a02-8e4e-a88f4b80c0e0", "sighting_of_ref": "indicator--1d96224d-6522-4629-8478-74690a61b43f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f2cf52-379a-47f5-8b81-ec8cbeced4f9", "sighting_of_ref": "indicator--1d96224d-6522-4629-8478-74690a61b43f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1d896a-eb09-4c27-af6e-3ee34df25c45", "sighting_of_ref": "indicator--5718b67f-fc82-4288-81eb-c10163c9aae1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2d1e6e-ec6f-4dff-a133-0299a744bc38", "sighting_of_ref": "indicator--6dce4eba-7883-497f-a442-294d32097c4d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3499f741-4055-41a9-abc1-796b77f92fa8", "sighting_of_ref": "indicator--6dce4eba-7883-497f-a442-294d32097c4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133d6591-1447-48d2-91eb-58f3957ffd03", "sighting_of_ref": "indicator--07e4e261-69db-40d0-92d7-fb7950975f09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9161a6f-6b20-4ff2-8657-87f4a2b1127c", "sighting_of_ref": "indicator--75af7f9a-390a-4a90-bdd4-02c6e631c261", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a74655-63a0-495a-8372-a6cb5a12da39", "sighting_of_ref": "indicator--b4383d82-2c3f-4517-9ef2-a485a16fff68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9490838d-c1a4-4160-bbea-854b82d05707", "sighting_of_ref": "indicator--87253396-3e46-4abb-8d68-a1fc5ecc5785", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191947e6-a6c0-4e51-8347-88b75c941c1e", "sighting_of_ref": "indicator--8bccb425-c2ff-4637-9ba7-b450fd7fff50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89896aa0-2b22-4266-952f-eedb78e8f467", "sighting_of_ref": "indicator--6388a938-4cac-4090-a6e1-08f5586831f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f222c147-7f36-41d5-8d5b-acce5652e806", "sighting_of_ref": "indicator--d7a8b3d6-41e7-400a-a3fa-5a0a61e2b30e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7414f91c-ef62-485f-a8dc-a32683e7a030", "sighting_of_ref": "indicator--d7e835b0-ecdb-4995-ba03-a21255915daa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be29cd79-7b6c-4a7a-b5d8-da65b8231ea0", "sighting_of_ref": "indicator--413b7ac5-acfd-41ab-9ce8-b611bc978915", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48a6d84-1876-4665-b544-029aba2e252c", "sighting_of_ref": "indicator--7ff15787-1587-4032-bb44-c3337ac94a2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28907a8d-2326-473c-8f8f-2c9fa9befc1a", "sighting_of_ref": "indicator--bf2d75c2-ea85-4b13-898c-a0a6cef33486", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0daa281-e888-4491-8d22-9eac2d00728c", "sighting_of_ref": "indicator--bac58970-f883-4bbd-abca-fd0ac5befd05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7832ce4-87eb-461b-8c06-9bf6c62e510d", "sighting_of_ref": "indicator--ff21023e-3c7f-419d-baae-4348f18e9592", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de192c50-39a5-4c19-8c5a-f3c50b186c9d", "sighting_of_ref": "indicator--df335226-8277-4e26-a6a1-b792d1fffe93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ec72e1-ef7d-4fae-87b2-b2135a3c7d82", "sighting_of_ref": "indicator--532e39a7-b0fd-404c-818c-e5f3fa0169fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492dcdb3-12c3-410a-83d6-848977bfa997", "sighting_of_ref": "indicator--8ed78805-8d7d-4ea5-aac1-5a62919902fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd0cc5d-45d9-4895-be10-a0df017d4c8b", "sighting_of_ref": "indicator--f4bb82d9-26a8-4402-b258-eaa00e05a514", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfc24db-536f-4ee0-a28d-1f98c0c95fa3", "sighting_of_ref": "indicator--e62fdae1-363a-4371-8d92-2e1f03a6206a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3d3b82-14ab-4d6f-9144-8f289476ae7d", "sighting_of_ref": "indicator--0db68f27-2136-439b-9922-15419addc8d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174311a2-76b0-4808-a15a-f1d642b2481e", "sighting_of_ref": "indicator--1cd22a1f-6106-4dce-a70c-32cd5b25cd16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd02115d-4705-49c0-b182-c6d37bd0f641", "sighting_of_ref": "indicator--abf69961-5789-4581-baea-276e3be98861", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a50caef-5a2d-4e9c-bfc3-463cc70d7742", "sighting_of_ref": "indicator--ff4d9299-c8ce-4fd4-aae8-9a95aaf22bb7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7eefdbb-712d-4303-8b17-1644b934dffa", "sighting_of_ref": "indicator--eb82f280-5246-4e1f-b4ce-bd5eab771c27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c4b27c-fee8-466a-82ad-1f802f9b8485", "sighting_of_ref": "indicator--ef86c2e9-81e4-435a-8d09-60d40700a176", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f236dff-374a-4c05-8afc-a7818eac03bd", "sighting_of_ref": "indicator--842de0a6-fe58-4c82-b83c-a25b39115c65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8718f22-b5eb-4801-bf71-aacbb1d97147", "sighting_of_ref": "indicator--34d1c811-fa78-445b-8618-0333a36798bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e96ff6-1620-48bd-97a5-131fef7f7fcb", "sighting_of_ref": "indicator--562123fd-a0c8-44b8-acc4-e1a6ddad989d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35312917-7680-4927-a21f-10f67eabf6fd", "sighting_of_ref": "indicator--562123fd-a0c8-44b8-acc4-e1a6ddad989d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408a6d3f-f627-4fc0-92d6-4150ea91e7cb", "sighting_of_ref": "indicator--e9c624e5-9cef-4534-8709-e19372296c5d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7520c96a-60a0-4af0-a572-ebd65bfa2eb1", "sighting_of_ref": "indicator--e9c624e5-9cef-4534-8709-e19372296c5d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246b65ec-2cb9-43e5-99a3-377b565ab25f", "sighting_of_ref": "indicator--6f71dea5-c811-42a4-a9e4-1c9cee9d9746", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6b0d7c-a000-4020-9b6f-9113a679d9bd", "sighting_of_ref": "indicator--6f71dea5-c811-42a4-a9e4-1c9cee9d9746", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6de01dc-bf04-4c0a-ae96-416154d92793", "sighting_of_ref": "indicator--e5b96522-417f-43a3-9ed7-e21b61eb69a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a127976-7347-40ce-87b4-d0cb18509cb3", "sighting_of_ref": "indicator--e5b96522-417f-43a3-9ed7-e21b61eb69a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce67ea6-a48c-4c75-9c0f-33c55c15cb67", "sighting_of_ref": "indicator--34d8db85-0f49-4ac2-b4c9-3a8fef490ad2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd51083c-c526-46c8-9103-d9f9eef488e1", "sighting_of_ref": "indicator--34d8db85-0f49-4ac2-b4c9-3a8fef490ad2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcab2522-482e-41e2-9445-7326b075f86d", "sighting_of_ref": "indicator--4cb558c9-b77e-491c-9d06-f44c8226a676", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fa392d-8bf8-4c3e-b390-aa2ff94336e1", "sighting_of_ref": "indicator--4cb558c9-b77e-491c-9d06-f44c8226a676", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2048c92-b217-4f2f-970a-fbc1badec89a", "sighting_of_ref": "indicator--e8321aff-8709-415e-ad21-a483635f6639", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f818842b-c157-472d-bde9-c163c58b0b0b", "sighting_of_ref": "indicator--e8321aff-8709-415e-ad21-a483635f6639", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68debc45-c641-4b6f-9da4-9c41f03fa801", "sighting_of_ref": "indicator--76093bf2-5a39-4ee3-a6bd-37c38726efe0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929dd627-d867-477e-b338-62654e6edb9b", "sighting_of_ref": "indicator--76093bf2-5a39-4ee3-a6bd-37c38726efe0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c276e5-355c-4cdf-baa9-70e1c42e2611", "sighting_of_ref": "indicator--28692eed-e2da-42a4-ad92-af736c7764f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df89eb6-486e-4587-93b2-ea2b63598392", "sighting_of_ref": "indicator--b71fd704-ad7e-4802-8755-4a61c5f357c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b6614b-bf79-4d16-8235-9bcfcf01b180", "sighting_of_ref": "indicator--f4895eb2-b72a-4687-83fb-9c1802322cf6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97816a12-d6fd-43a6-b6b3-6037d02e2995", "sighting_of_ref": "indicator--f4895eb2-b72a-4687-83fb-9c1802322cf6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216bb7df-d320-4bc8-a6bb-3415d9e1591e", "sighting_of_ref": "indicator--e6594e46-db59-40f8-8792-be449d8dd85c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c95cf2d-5878-4518-97da-d3bc1cc646ab", "sighting_of_ref": "indicator--c3b32ac2-d692-4f87-85ac-7cb87faf3953", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8893fd9-e83b-49b3-b1b4-250816902a96", "sighting_of_ref": "indicator--169f7a8a-0551-4022-9a42-9851c42d2d47", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edb076c-6b5e-4bd8-ad21-72f045583e6f", "sighting_of_ref": "indicator--f03fc59b-7be2-4255-92c7-6fae8cad292e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416c0c12-00c8-4657-b309-36cde2f998e5", "sighting_of_ref": "indicator--a7c687e3-2da2-4db9-a42a-9c28ce529ec8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d8f21a-eab7-45e8-9e1a-0476d3731024", "sighting_of_ref": "indicator--c482c644-a97a-4d34-87a2-6d094c1735e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c725589-b944-47c7-ae4b-3b93662ab7e3", "sighting_of_ref": "indicator--5807ab4a-a6a5-46a6-836f-2a0a65ff0747", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3b0612-19f6-4a5c-90cb-6afb211c956b", "sighting_of_ref": "indicator--39dfd354-e3e7-460e-bee1-0e1da0ad4997", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdc4c0f-c4f3-45e2-aa51-b464aed64f43", "sighting_of_ref": "indicator--8d900a3f-7afd-40fb-83eb-212b731b3abc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a7faf9-bc24-42be-afa4-6e5b4fa1f28a", "sighting_of_ref": "indicator--9256f91f-c387-4009-8cee-70a7f1fd4f3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c522e5b-60b0-4746-a01d-97689789bfc1", "sighting_of_ref": "indicator--7d66cd61-1811-4e7c-81ab-da0b347836fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05b8ce2-e1f0-42f0-9cff-63f67fcadb70", "sighting_of_ref": "indicator--f3f9759f-cad6-41c6-ab47-6a54e3eb75c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27a9bbe-9719-4a67-93d4-13252d90734e", "sighting_of_ref": "indicator--b1d15e4f-2513-431d-92d2-0305ed9f91c4", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8e6315-b2e0-4e3d-ac53-1d3a8da86f33", "sighting_of_ref": "indicator--3be1391f-f303-4fa6-b400-b5186101f590", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a88ccf-cad1-4a79-83e3-1b5c2b2e0a25", "sighting_of_ref": "indicator--3be1391f-f303-4fa6-b400-b5186101f590", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a73ba35-6082-42b4-af7e-2859e5365277", "sighting_of_ref": "indicator--b7e7d570-d37e-46d8-b356-57a59f922f2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb3e076-7bbe-4bb0-a535-f582969ab31b", "sighting_of_ref": "indicator--a3d8e846-a6e8-44f3-953f-90236427d696", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d784c8-e581-4e3e-90af-fd8a68c118bd", "sighting_of_ref": "indicator--bb9687c5-ddbc-4886-b70b-f3313956ba20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198099f0-d3ee-4be9-956a-27e1239f3fc7", "sighting_of_ref": "indicator--97cb8173-16bb-4e46-8cfb-d0a6287e9c16", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4a4985-54f3-49d6-8e16-703b5b3a75fe", "sighting_of_ref": "indicator--978f23ae-668f-42c0-9aa7-09fc438f07f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9888e891-b76b-46e4-9035-cc1195893321", "sighting_of_ref": "indicator--96cd35e6-aa03-4bbc-bda4-564fddb0e951", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37441188-a902-49e9-a74e-59077ec4f526", "sighting_of_ref": "indicator--96cd35e6-aa03-4bbc-bda4-564fddb0e951", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02b9bd7-4ab3-4f0c-bdd4-7d3b3dce97f3", "sighting_of_ref": "indicator--8ed417ac-f7e4-401b-8f35-98dd1fac2b34", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cef47ed-2a1c-4022-9bfb-d761160ae32a", "sighting_of_ref": "indicator--d7ef5e61-56df-4d32-b168-f3ffd187e90b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b078023-db98-4267-8b09-710ba8d04e74", "sighting_of_ref": "indicator--2ea4c6ce-8375-4429-8b92-c8b4bad03dbe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5dc78b-34c1-440a-965d-e3428770213b", "sighting_of_ref": "indicator--15c41789-12d7-412b-b79c-956198177a9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e8a18c-115d-4fb6-9e85-e4c07c29dd94", "sighting_of_ref": "indicator--54c37706-8aab-4046-9d21-3c212372f933", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adecbf3-9276-4a59-8eac-6724d9136a19", "sighting_of_ref": "indicator--54c37706-8aab-4046-9d21-3c212372f933", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c568fb6-3646-4bdf-83ce-45ccac4f9194", "sighting_of_ref": "indicator--c0d298a9-bff4-4b30-9d88-5a0c253ab4c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee7d125-fee1-4066-bd96-0930f3a981ac", "sighting_of_ref": "indicator--f28b1d59-7741-47ec-9df1-e1035909e3c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197485f0-2e39-4102-a73c-3af699ea3f23", "sighting_of_ref": "indicator--26326dfb-8745-40ff-9715-65dca3766c95", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7e1cc4-061c-4c12-994a-300e11139209", "sighting_of_ref": "indicator--95327dec-c01c-490f-b16f-644daf83a5ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a1da24-162e-4e49-aad8-a717b3b44fd1", "sighting_of_ref": "indicator--7e570b78-9ab3-4830-a7d0-f729e9e9b15a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b12ba3-5b2e-41d4-9b85-cca67e7859b6", "sighting_of_ref": "indicator--393cfa21-0d2b-4275-8354-e69bfec056f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4da10cb-9968-4407-9336-e522ba81951d", "sighting_of_ref": "indicator--27f00be0-69ce-49d6-bbce-1ed40b25afb7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862fe0d5-0d2a-4f73-a525-4e80d90951a4", "sighting_of_ref": "indicator--61055440-2210-4c14-bd8b-5c40cdfbc8ba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5aa6e2-23ec-4785-8f3f-8f4a20b61ff3", "sighting_of_ref": "indicator--21ad05c1-10af-417c-a39a-d9eb12490a2c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2309f81b-a401-4010-a6be-8cad8e7b5cd9", "sighting_of_ref": "indicator--63ba6afb-bfa9-4776-abe8-200431d82fde", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d0894d-a87d-46ac-a28b-0a5f4c9d23bd", "sighting_of_ref": "indicator--772b9c87-2143-40da-9fc8-59447a9cb671", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b403c794-d691-4b65-87eb-e7d375dcc487", "sighting_of_ref": "indicator--6c48eb3d-32f2-4bf1-9c5b-3ddadf474217", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655ce003-7a96-43cf-ad27-34a4610db1b5", "sighting_of_ref": "indicator--c6145726-3c7f-45bc-9950-3c6bdf63b718", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb692af7-da61-4ceb-9425-b3d6031c5989", "sighting_of_ref": "indicator--c6145726-3c7f-45bc-9950-3c6bdf63b718", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bf5a0b-6159-494e-95a0-47152126ef99", "sighting_of_ref": "indicator--7433901f-5ae1-4c18-bd2a-2cdb2f2d5236", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee7263e-80be-45b0-835a-eeee42a557ac", "sighting_of_ref": "indicator--f44f4382-7911-426d-b9a6-326e16ff7be7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65318c29-8a13-49af-b339-a1d444d44cb4", "sighting_of_ref": "indicator--4ac913b4-4042-44ef-9ff8-4e10190428af", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43a29f6-82a8-43f0-a43a-a0590b84ed6c", "sighting_of_ref": "indicator--e1b8a81e-2ad6-4789-9dc2-f288d1bb69d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0904e2c-42e6-4403-9481-4f0568cc38ea", "sighting_of_ref": "indicator--4e74cd01-c162-4078-bb3c-ccda9fefaed5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334c7d76-6a4e-479b-b834-9f77f73af03a", "sighting_of_ref": "indicator--4e74cd01-c162-4078-bb3c-ccda9fefaed5", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135516f5-bc47-419b-8c24-3a14a6ca0da5", "sighting_of_ref": "indicator--a1accc24-faa5-49a9-97bf-c59ed7f3fc0b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e042d305-858b-4141-b3a6-cf0978f65f20", "sighting_of_ref": "indicator--a1accc24-faa5-49a9-97bf-c59ed7f3fc0b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439649e3-1d9d-47c5-8a4b-74520ddd90f8", "sighting_of_ref": "indicator--86306dd0-006c-4ce6-ba45-43bd3d292bb9", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f242bb1-9c07-4e2e-b507-4ff0e5425a9d", "sighting_of_ref": "indicator--86306dd0-006c-4ce6-ba45-43bd3d292bb9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21bd69a-b7cf-4d86-aa77-3a034644357d", "sighting_of_ref": "indicator--a7dd63b2-ec69-4b6f-a927-73f51e989b0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b60ca61-6be8-47cb-8d3f-eb6c189fb347", "sighting_of_ref": "indicator--b85dadb4-54b5-4234-84c2-d28d17e63fea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867a4430-0820-41ce-b261-840665c3f4e7", "sighting_of_ref": "indicator--b85dadb4-54b5-4234-84c2-d28d17e63fea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eea7f65-39ae-4594-8c32-d27876bb770b", "sighting_of_ref": "indicator--fc2d4d83-b284-41b3-8a72-517f639684fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3462d6-42ee-4843-813c-a746d0775f85", "sighting_of_ref": "indicator--fc2d4d83-b284-41b3-8a72-517f639684fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888f5a15-97ec-4be6-8876-f3b5cdbfdefb", "sighting_of_ref": "indicator--a4e062bc-c28d-4aab-93a3-38c704630fa2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e53a29-7fc9-4e42-9569-be9c30d6c1f6", "sighting_of_ref": "indicator--a4e062bc-c28d-4aab-93a3-38c704630fa2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276b2a8a-204a-4582-8dd5-57ff07e6ab18", "sighting_of_ref": "indicator--7800c115-e1fa-4188-8d27-7f0f6945f3aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1babf4c8-2f3d-431b-a5aa-b51851f2cde5", "sighting_of_ref": "indicator--7800c115-e1fa-4188-8d27-7f0f6945f3aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc44e227-6903-4063-a21b-158d79418df5", "sighting_of_ref": "indicator--b1ee8a5a-c89d-4c44-90bc-e007009f8434", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348700a1-d573-4e5c-be28-b176eda31fe8", "sighting_of_ref": "indicator--b1ee8a5a-c89d-4c44-90bc-e007009f8434", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d94f7eb-e676-4b63-baef-c9ca6bc16f67", "sighting_of_ref": "indicator--d2f3e5ba-91bc-459f-8b86-b6eef7456dfe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9867578e-b09b-419a-850a-f85b62d07796", "sighting_of_ref": "indicator--d2f3e5ba-91bc-459f-8b86-b6eef7456dfe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7154e912-1c0a-471d-aa67-457aae4b2170", "sighting_of_ref": "indicator--57ce5ff0-1a95-45da-bbbf-b1a0600d36eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3827d6a-8b38-4dca-9dc0-f20096d9c7a2", "sighting_of_ref": "indicator--57ce5ff0-1a95-45da-bbbf-b1a0600d36eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d46e2e9-a1f1-4e7c-851e-648ce804a482", "sighting_of_ref": "indicator--d4beda5d-9b13-4076-8485-bcab748d7e94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bcbb33-3727-49a3-a20f-a980810dfa2b", "sighting_of_ref": "indicator--894e3853-157d-4879-97f9-209735e2292b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de8be6a-fbe2-4fee-8d5a-ef45fd826f09", "sighting_of_ref": "indicator--a1e111ea-0e67-489f-920d-133a768ac5f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337f04bf-4793-4097-b3d9-ca50af2fb6cd", "sighting_of_ref": "indicator--a1e111ea-0e67-489f-920d-133a768ac5f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85073097-6be4-4951-928f-0ba17099d0f7", "sighting_of_ref": "indicator--cfd4ab2e-4304-48cd-9cc1-f46b22ea20b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2193c2-a569-43ec-85cb-aab1bcedcd0c", "sighting_of_ref": "indicator--d653fdc3-17cf-4bdd-b4ba-335f421e0c80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bb7c95-d064-4860-a69f-6d760de632b6", "sighting_of_ref": "indicator--d653fdc3-17cf-4bdd-b4ba-335f421e0c80", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442f901b-e6b2-48d1-949f-f8a0730b11d5", "sighting_of_ref": "indicator--7c8503d6-2c08-4871-ab9a-bdb30049adf6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631a9ceb-01a7-4a2d-a928-5b0ce59de0a5", "sighting_of_ref": "indicator--7921f883-19a9-43c1-ae14-1b0f0761f6e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fa3868-975c-4078-9d42-9cc8db2ea75e", "sighting_of_ref": "indicator--2c43f95f-03d2-4e28-b6a2-1bb7395f1e25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd144014-f29e-475a-956f-75e530d6604f", "sighting_of_ref": "indicator--75d0971b-53a7-47db-afb6-3eb1a4e97251", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcda4af2-202f-48b5-a312-cb5d9d0ebff7", "sighting_of_ref": "indicator--5af2278b-acda-4a4d-a14a-ee1721621989", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11813722-65be-4f8c-87d4-da496e011399", "sighting_of_ref": "indicator--5af2278b-acda-4a4d-a14a-ee1721621989", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917021ef-5cfd-4db5-b456-d064ad1a7cea", "sighting_of_ref": "indicator--94a2af90-b38a-4583-86c0-e3aeb0911de3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941f4505-2a59-4e38-91eb-99b73e4c3b65", "sighting_of_ref": "indicator--beff2446-5a06-456f-ab64-d37e81fd5fd5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3494c39d-8238-4070-8f48-50cf5079bc8b", "sighting_of_ref": "indicator--beff2446-5a06-456f-ab64-d37e81fd5fd5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dc13d1-1efb-4a01-aa6a-c6b42241295d", "sighting_of_ref": "indicator--ae06cb70-04fd-45c7-90f9-b7523149059b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422b585e-046f-4cc7-8c60-6debc3672b01", "sighting_of_ref": "indicator--35b8ab6e-043d-4108-9d72-04ddc86021e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42dcd0f-ad2f-4878-879c-56b9c70ee1ef", "sighting_of_ref": "indicator--35b8ab6e-043d-4108-9d72-04ddc86021e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35660077-824f-405a-958c-6b9e4ee5a603", "sighting_of_ref": "indicator--44864cc8-78d4-4d7e-9f03-bd837a397c09", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f3616c-bd70-449d-988c-6ec9c867443b", "sighting_of_ref": "indicator--1344c2d5-a60f-459d-ba30-ee7231f9fc54", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e06667-d22d-4b78-806f-7e2aadccc287", "sighting_of_ref": "indicator--1344c2d5-a60f-459d-ba30-ee7231f9fc54", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea2b47e-67e7-4201-8c88-3aaf0083915a", "sighting_of_ref": "indicator--56af4783-d397-4302-a8c2-9f2c535d283a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea387f91-e03a-49cf-b3ea-67fef8562616", "sighting_of_ref": "indicator--8f13f21c-ca8c-4d41-9f00-f64dcbacfba0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1247200a-0983-48ba-bf7a-9105735b45c1", "sighting_of_ref": "indicator--8f13f21c-ca8c-4d41-9f00-f64dcbacfba0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef03b33b-0a57-4610-8abf-0f13cd7a0b9e", "sighting_of_ref": "indicator--e6012993-fc02-4179-987f-8fd4155c3975", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b9da64-c21e-477e-97a9-0e1d105ce212", "sighting_of_ref": "indicator--e6012993-fc02-4179-987f-8fd4155c3975", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4808df72-b8d1-41e6-85d9-ffb88740ce37", "sighting_of_ref": "indicator--8eef699f-a14a-44bd-94df-41e2df512344", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc433216-2032-4ebb-9e8a-73888189862e", "sighting_of_ref": "indicator--411368bb-aafb-4fd3-97fb-ae34aa22aa95", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dc4612-464e-485b-8c12-31c286e2827b", "sighting_of_ref": "indicator--aa681de9-869b-4256-814a-caddaff421e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a569cce7-50e2-406b-a491-047cc7e7ee59", "sighting_of_ref": "indicator--aa681de9-869b-4256-814a-caddaff421e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd15db78-2017-45ba-a9e5-a99d5b033e38", "sighting_of_ref": "indicator--3054f5b0-951f-4fd5-8d0b-87cb3ea72e85", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e3e128-e958-40d8-aa49-1f93fe7222aa", "sighting_of_ref": "indicator--3054f5b0-951f-4fd5-8d0b-87cb3ea72e85", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a71a7c7-fe9b-4614-af90-a2ffbfa04bb6", "sighting_of_ref": "indicator--4278934a-dd49-4798-92a8-b3530b69e09b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea83968-45c5-4cd7-8f94-dce13ccc5f61", "sighting_of_ref": "indicator--7c2a2d4f-fe6d-447f-a4f6-154d04ccf48c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca942495-2b99-4696-be43-953ddae7e002", "sighting_of_ref": "indicator--7c2a2d4f-fe6d-447f-a4f6-154d04ccf48c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6f6f95-87fb-4af9-94ad-928680b8834b", "sighting_of_ref": "indicator--3ae69ebb-0568-4fba-9fa1-9edd72c38c15", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86672bbb-0852-4392-be1f-052c4caf4d37", "sighting_of_ref": "indicator--8b474009-ad6e-4290-91a9-ac798624c8de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db772d95-dd54-4e50-a3be-9006c27388d9", "sighting_of_ref": "indicator--d07d7ab9-99f2-485e-845b-6322cbc83c5e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efd6d0e-8e3c-4290-818a-1f8d2d5692d7", "sighting_of_ref": "indicator--f05e358c-8af0-48b5-8f58-18aaa0b54dea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3fd10d-ca11-4d99-8368-7cf67d0a854f", "sighting_of_ref": "indicator--54a11309-2b53-459b-aeb6-2f76a270c6fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d889e67c-c7f1-4813-a4a4-9aed2c8cad26", "sighting_of_ref": "indicator--9d4a588e-c64c-4bce-b32d-59eec4b96cf8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb97c2c-58cf-4444-8943-77a7e4b0e9a7", "sighting_of_ref": "indicator--a218a44a-9d56-4be3-8adc-99af5e54e563", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7e8a8b-ed48-4599-a556-4e0621c07869", "sighting_of_ref": "indicator--e4529cbf-441c-443c-a920-2cb2d307d221", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e016f4d2-a908-402a-94d1-0871f2a9e32e", "sighting_of_ref": "indicator--e4529cbf-441c-443c-a920-2cb2d307d221", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4b84cf-cc38-4c1f-8812-88d93f534c83", "sighting_of_ref": "indicator--ef759871-9a41-4943-ac73-1e674d61a2cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bd0718-cf9e-4490-8211-1d6061c8d167", "sighting_of_ref": "indicator--610ffa41-d0c6-4437-8622-aadcb3870c09", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09ed71e-fbe1-48b3-a443-3651e6467ca2", "sighting_of_ref": "indicator--0c399fe5-2643-40f3-90ed-034969ff0b38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1076d063-9cad-4954-a02a-ff8cac1188ee", "sighting_of_ref": "indicator--def354c7-e1c2-41a8-a9f7-80488cf5c68f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4305e559-e5af-4f0c-94d7-ed8f312be0c9", "sighting_of_ref": "indicator--4b365a7b-ac46-404b-abef-6141146e1209", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96057ba-68cf-40f2-9fa4-946ea49e3c21", "sighting_of_ref": "indicator--ea4ee9c7-5d71-43e8-a46f-f008649b15d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96191643-d03d-44e2-8323-49edf8e09aad", "sighting_of_ref": "indicator--a537bea5-6f66-4ea6-a9b9-a3ab6a9ee577", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639f6efc-5f1a-482e-b0c9-1ea8b81c403a", "sighting_of_ref": "indicator--f28e7f99-06fb-4ba8-804f-0ae0f563bf7f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c7f5e3-10e9-4d54-942f-9ea54975f6cc", "sighting_of_ref": "indicator--f28e7f99-06fb-4ba8-804f-0ae0f563bf7f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f3e593-8390-43bb-9d28-1fac6805c70f", "sighting_of_ref": "indicator--5f3e480f-ced5-429c-85c0-816ba949b2f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387f6795-1e06-46e1-a4d9-5fd034432d48", "sighting_of_ref": "indicator--205a6aa3-7a75-4b9b-b626-8c4219db3e01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0af2fb9-e20c-423b-96e3-015554fd0a5f", "sighting_of_ref": "indicator--26584951-8a47-4c0f-9777-139c5e5d3c7f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d156a8f-752c-4375-8b9b-296135860a95", "sighting_of_ref": "indicator--26584951-8a47-4c0f-9777-139c5e5d3c7f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dc86cf-3eed-4245-9d89-1cad73d74190", "sighting_of_ref": "indicator--92835cbe-5495-4c74-a984-718c2f061417", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa94b1d-a0c2-4bcb-ba66-6e563f0d0c9d", "sighting_of_ref": "indicator--44d457b9-d9dd-4dff-9676-cb185063da29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4f3653-d351-44c9-ae7b-bcba692df158", "sighting_of_ref": "indicator--f39f1ea8-ceae-407b-a6ab-cb920ece7907", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d93fb78-1ece-40ef-9bc8-bf1116a14648", "sighting_of_ref": "indicator--97135ba7-6c59-499a-82c3-6e5111a51078", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249831aa-0f4f-4af1-bae3-ca9ca89f251f", "sighting_of_ref": "indicator--97135ba7-6c59-499a-82c3-6e5111a51078", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bca3638-7a5b-479a-92e7-17b927dd7491", "sighting_of_ref": "indicator--040a4540-fc80-44a4-8041-ab7cbc0a220b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f39f5c3-de8a-4a35-8566-7130f93ef9f6", "sighting_of_ref": "indicator--0113f1c2-7712-4a10-98f1-6d8f3c5adae3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab13567b-f7e0-452d-bc77-c64bbd5ca2b8", "sighting_of_ref": "indicator--ff675089-ea09-4c81-8e58-98c70579589e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7ec6ee-737c-4b97-a361-ed88cdb9e8bc", "sighting_of_ref": "indicator--ff675089-ea09-4c81-8e58-98c70579589e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce4a824-caec-4d6b-84da-8f42594a8103", "sighting_of_ref": "indicator--49d88c0f-7867-4f31-930f-5ddfcdc8bf2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d634a1-a3f9-46b5-bb42-dc4c889ae85d", "sighting_of_ref": "indicator--fcd9de57-c76b-4da3-a85d-1b7bf6a82ed3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4dc4fd-768c-460e-b4c6-56ddd072e567", "sighting_of_ref": "indicator--f386c33e-c1d7-438c-bff4-fd58bb4be81e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b93b86-05f1-4fe3-b4f7-b2b718b0de90", "sighting_of_ref": "indicator--f386c33e-c1d7-438c-bff4-fd58bb4be81e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff0b331-3f18-4c8c-82df-7ccd5154c85f", "sighting_of_ref": "indicator--d21c324f-df11-47f8-81ff-bc125f898988", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e29288-0c21-40dc-8697-e5923290655a", "sighting_of_ref": "indicator--3ada70d6-3a57-42a1-82bd-3bdadb31b091", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90450b5-93d5-48eb-a760-7d9ad23d1fb0", "sighting_of_ref": "indicator--c76bdcaa-9a2d-47d2-8af8-0b91faa5c687", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b22e1e6-b9ab-4492-a668-324c62747757", "sighting_of_ref": "indicator--c76bdcaa-9a2d-47d2-8af8-0b91faa5c687", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd69cdd9-a44b-476f-a200-8add358531e6", "sighting_of_ref": "indicator--7cdbd2ab-f03a-43af-89d3-619002ca838b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670e213c-5a01-4b9d-962a-d6e903550175", "sighting_of_ref": "indicator--7cdbd2ab-f03a-43af-89d3-619002ca838b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30fcfbe-8248-47f4-98b8-5bfa83596a55", "sighting_of_ref": "indicator--d5c9c0ef-dca8-4c9a-bf9a-e7523bb28348", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505cc3d2-39c4-4b5f-b7f5-a6670545637a", "sighting_of_ref": "indicator--d5c9c0ef-dca8-4c9a-bf9a-e7523bb28348", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f53a64-a6fb-426a-a272-020a35768fc0", "sighting_of_ref": "indicator--fffa84e3-40d7-43d4-a5f7-461b5c692283", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558a21c4-6dec-446b-be94-e6f0aca55456", "sighting_of_ref": "indicator--fffa84e3-40d7-43d4-a5f7-461b5c692283", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d50664-a0d5-48ad-af8a-dc3784ad0dd4", "sighting_of_ref": "indicator--2ff5a58a-5002-4574-8c24-b5a54d22cde8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe7f656-04cd-4ba1-b14b-fdb19683257b", "sighting_of_ref": "indicator--2ff5a58a-5002-4574-8c24-b5a54d22cde8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c4cf71-f1fa-41aa-af58-afa5ab697f75", "sighting_of_ref": "indicator--2db205f1-fef4-40b1-9aac-99d3542a7225", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609b4898-0838-46cd-8888-e60e7475a537", "sighting_of_ref": "indicator--2db205f1-fef4-40b1-9aac-99d3542a7225", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0f1861-663c-465c-9670-0f639e8f2c39", "sighting_of_ref": "indicator--1b15a858-5237-4e65-9394-e140c5e6ec63", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d70148-0968-48bc-9a52-b6f1d8e9916d", "sighting_of_ref": "indicator--1b15a858-5237-4e65-9394-e140c5e6ec63", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35b3be4-896d-4cbf-9fae-d9018f12b847", "sighting_of_ref": "indicator--09ea2671-d8d0-4d75-ab99-70e7244c1931", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f270bd-6fd2-45c8-bdb2-46ec79f38768", "sighting_of_ref": "indicator--09ea2671-d8d0-4d75-ab99-70e7244c1931", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69b6152-85bf-41e8-b6ef-9bdd1299f0c1", "sighting_of_ref": "indicator--c24618c6-6efb-44be-ba04-fb0bfce21074", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd883f84-76bf-4f71-a7bd-19b56becd600", "sighting_of_ref": "indicator--c24618c6-6efb-44be-ba04-fb0bfce21074", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7a423d-af2c-45ce-a92e-c210bf0b9dfd", "sighting_of_ref": "indicator--68526087-873f-45a7-a23b-a012b47d5a56", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b13a99a-20bc-4432-a899-93e8184b6a99", "sighting_of_ref": "indicator--68526087-873f-45a7-a23b-a012b47d5a56", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d05e46f-dee3-4391-8936-4d56332f990f", "sighting_of_ref": "indicator--d613d58a-ea3c-47e3-a5eb-536979229abd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2c5d61-9f28-4f0d-aa6e-e6043fca2ec4", "sighting_of_ref": "indicator--d613d58a-ea3c-47e3-a5eb-536979229abd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2a8d04-3c02-4075-887c-4b8ffff798e4", "sighting_of_ref": "indicator--eb100013-5a90-44ed-824e-a34dd630bc06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2942a5b6-e98e-4942-8d6c-f1d355c1c49e", "sighting_of_ref": "indicator--eb100013-5a90-44ed-824e-a34dd630bc06", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c6c6a3-c67e-443a-93a1-9060b6f8cb6d", "sighting_of_ref": "indicator--490e4965-418e-4f5c-a712-61b11d29c4c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b3c811-586d-4bc7-bc21-ce3daad4c34d", "sighting_of_ref": "indicator--490e4965-418e-4f5c-a712-61b11d29c4c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a1bfab-0cd8-4704-af85-405eaa58e030", "sighting_of_ref": "indicator--f4417e72-e056-4d6b-8943-fe38354c5f73", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6126ae-f43c-46fb-8f8b-8e60cccd9de7", "sighting_of_ref": "indicator--f4417e72-e056-4d6b-8943-fe38354c5f73", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dfe43f-65dd-4f19-9493-6df3e1f6f02f", "sighting_of_ref": "indicator--b8dae628-5e7f-4830-8d04-4119a65471f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6355c579-b7d5-4ed6-b027-04360adac662", "sighting_of_ref": "indicator--b8dae628-5e7f-4830-8d04-4119a65471f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cb66c1-ce2d-4672-beef-bec1fffb6d87", "sighting_of_ref": "indicator--05ea40df-ac0e-4fc6-9ca5-736225674de8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d2bd40-536b-4f27-94c8-814e91feb252", "sighting_of_ref": "indicator--05ea40df-ac0e-4fc6-9ca5-736225674de8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a3db1c-db27-4448-a895-c843ce59f7e6", "sighting_of_ref": "indicator--347a1121-0c36-446c-af70-4c5af65d11dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a152c2-5c68-425c-a2e8-0934cbae03a8", "sighting_of_ref": "indicator--347a1121-0c36-446c-af70-4c5af65d11dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b908d1-37f3-4992-abf8-78eb9fcab969", "sighting_of_ref": "indicator--cca4d71e-7627-489a-8624-90726812f86f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb29cb19-84c8-42b3-8b73-d2104a98d660", "sighting_of_ref": "indicator--cca4d71e-7627-489a-8624-90726812f86f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa19eee-3e6f-4ba2-bf1f-0a08a7f9dc43", "sighting_of_ref": "indicator--38afe9ba-138f-4ca2-b07c-4d94e8472465", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38157df-a43b-45ed-9022-d79546b321c0", "sighting_of_ref": "indicator--38afe9ba-138f-4ca2-b07c-4d94e8472465", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bee558a-dab9-4bb1-af38-e2493df42b6e", "sighting_of_ref": "indicator--678c16d0-0e60-48b1-9342-5886585ea5c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d81e335-4e3a-425d-93e3-87434396e983", "sighting_of_ref": "indicator--678c16d0-0e60-48b1-9342-5886585ea5c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8c56ab-5c69-4c75-ad91-ac310c9f8835", "sighting_of_ref": "indicator--a372cae4-4b83-4943-879a-848dc06e5054", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf88419-144f-4001-a411-f5e4ed2830e5", "sighting_of_ref": "indicator--a372cae4-4b83-4943-879a-848dc06e5054", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db157679-e802-4ed2-8d5c-61e9857f24f4", "sighting_of_ref": "indicator--df7290ac-1aef-4ded-862a-a1c71ff6e0ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8969bbd-4289-4e44-b9d8-e9a9191a35d4", "sighting_of_ref": "indicator--df7290ac-1aef-4ded-862a-a1c71ff6e0ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20652bf-af54-4d77-8a8c-292a295cf90b", "sighting_of_ref": "indicator--d3fa1162-6c33-46ab-b87b-2f90546316c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4931dac-9ace-4162-a61e-dc0b007e22d4", "sighting_of_ref": "indicator--d3fa1162-6c33-46ab-b87b-2f90546316c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9796d6-662d-43fb-9408-7892cec83d35", "sighting_of_ref": "indicator--d2096907-a8c8-4527-83e0-779aad562b6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6836ce-d4dc-49e3-9e90-c24871d7de2d", "sighting_of_ref": "indicator--d2096907-a8c8-4527-83e0-779aad562b6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8a4066-1427-4440-81c6-d232a44fecd5", "sighting_of_ref": "indicator--060d11c4-f7a2-4181-ae41-df4225b6dbfc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9179c81-2d5f-4006-a166-1bd8f0da1da2", "sighting_of_ref": "indicator--060d11c4-f7a2-4181-ae41-df4225b6dbfc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4241bb3e-8798-4ee3-9964-4e298ee8f8c2", "sighting_of_ref": "indicator--fc623dc1-5dcb-4b00-9b0c-63dbbfe135be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3ea80c-7a0e-4217-a892-81b82ff32635", "sighting_of_ref": "indicator--fc623dc1-5dcb-4b00-9b0c-63dbbfe135be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec3d84c-014a-4fe5-80f9-4a61766b8043", "sighting_of_ref": "indicator--56905341-d79c-4cbd-8669-f77a52b2a3ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce9ac1b-ecd1-467f-a079-37e8411d9c96", "sighting_of_ref": "indicator--56905341-d79c-4cbd-8669-f77a52b2a3ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11327d0-b4d6-4122-a135-58f2fcd38848", "sighting_of_ref": "indicator--939be790-816b-49a9-ada3-34af474b6239", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6911bf10-67f8-450b-b31f-72d30a508679", "sighting_of_ref": "indicator--939be790-816b-49a9-ada3-34af474b6239", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5376d6-d1d7-49b7-815c-27d57776912d", "sighting_of_ref": "indicator--a9ced857-2689-4ac1-b23a-aaf0d5e66a0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ebdf17-ced7-4bd3-a835-cc3a35fb8957", "sighting_of_ref": "indicator--a9ced857-2689-4ac1-b23a-aaf0d5e66a0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66521e3-46a0-402a-83a6-46b640ee5237", "sighting_of_ref": "indicator--74744496-6954-44ed-a7ef-f229a2d289cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81116bd-7a6f-4d1c-8091-b6e05c973e74", "sighting_of_ref": "indicator--74744496-6954-44ed-a7ef-f229a2d289cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15659420-86e5-465e-a933-0d5fcbce802e", "sighting_of_ref": "indicator--f2076fb8-42fa-42f7-a670-e01c3d164e55", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527b8783-fe81-4bc4-b203-1320803e97f7", "sighting_of_ref": "indicator--f2076fb8-42fa-42f7-a670-e01c3d164e55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed52f64e-99f3-4c50-8e06-1d6e93226a05", "sighting_of_ref": "indicator--0c32fb36-9d51-40d4-9108-8941c7f114d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fc844d-c57f-4363-baee-794f53fbdbf1", "sighting_of_ref": "indicator--0c32fb36-9d51-40d4-9108-8941c7f114d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0645a839-c9e7-4e22-a9a5-99c9fea24d8d", "sighting_of_ref": "indicator--9665766e-fdc3-4d70-b530-389ffc1f7260", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a99562a-f0fb-4c1f-9c74-25dc482c8f3c", "sighting_of_ref": "indicator--9665766e-fdc3-4d70-b530-389ffc1f7260", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02fce3f-f988-4e4a-8bcc-230dc5d32ec0", "sighting_of_ref": "indicator--2beda3e0-2299-4367-9baf-e5ce38b29428", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe19121c-bb50-4da5-9d9c-8c5d0fff054f", "sighting_of_ref": "indicator--2beda3e0-2299-4367-9baf-e5ce38b29428", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a483bc3-f85c-4477-8e7b-e69543a61402", "sighting_of_ref": "indicator--bbbe4e0b-7355-4db6-b171-0f6c0c2c7370", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec63827-392b-4696-8edc-dc91447a7683", "sighting_of_ref": "indicator--f2af560e-b2eb-41bd-890e-79fbda966129", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbf43e8-6b12-437b-bef2-98565fe86815", "sighting_of_ref": "indicator--f2af560e-b2eb-41bd-890e-79fbda966129", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d79a28-f376-4e68-85b3-96e9155f55bc", "sighting_of_ref": "indicator--e7e48fd7-5fbe-4b7b-9eda-7e02e2a8f2f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320c49ad-ec05-4dd7-8d7e-f3ef8c9c5c0d", "sighting_of_ref": "indicator--c28d1e53-b51a-4768-a98c-53b4629bd060", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8948634a-5b5a-4528-a415-8720a83347c1", "sighting_of_ref": "indicator--e4fc61ae-d32b-4689-a73e-2b385c4d665c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9086b5-ba65-453f-9ebf-76f9cc2cf572", "sighting_of_ref": "indicator--51b263f3-15b9-487b-9943-20f755a8d10f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafd0ce6-9707-431e-9c27-45a1379913e3", "sighting_of_ref": "indicator--51b263f3-15b9-487b-9943-20f755a8d10f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58026879-0c9b-4912-b428-07dd9d6be109", "sighting_of_ref": "indicator--f361b2bd-475c-4bee-b6ce-f6be8548a93e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218d3f29-8719-455e-b261-b8f01d216c60", "sighting_of_ref": "indicator--f361b2bd-475c-4bee-b6ce-f6be8548a93e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bf5eea-6d92-4309-8bdf-aeb855b688f8", "sighting_of_ref": "indicator--ae50a055-ad1d-407e-a3f9-bb3363cdc737", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97173b44-65aa-4b25-82e4-01f8d3cd174e", "sighting_of_ref": "indicator--ae50a055-ad1d-407e-a3f9-bb3363cdc737", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3550004-5b8c-4233-80d3-d33f6916e955", "sighting_of_ref": "indicator--1215a870-00f3-4bf6-adf9-2b9bd750ea0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97c42e3-0fcb-43fc-b776-b769f66c96fd", "sighting_of_ref": "indicator--1215a870-00f3-4bf6-adf9-2b9bd750ea0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca120f4a-e837-470c-bfaa-029425a13579", "sighting_of_ref": "indicator--52b64dbe-a903-4ccf-a079-2270c0746c0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebc51fb-253d-4f4f-8517-4fa8188c71df", "sighting_of_ref": "indicator--52b64dbe-a903-4ccf-a079-2270c0746c0d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbb8625-c9ee-4676-a7b0-72039f95d3cd", "sighting_of_ref": "indicator--458dddf9-7482-4940-bfa6-d9628903b258", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc2aa8e-b600-4df5-8c7e-f65b037a478e", "sighting_of_ref": "indicator--458dddf9-7482-4940-bfa6-d9628903b258", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073b6a1e-f88f-478a-b96b-79c89ca09d20", "sighting_of_ref": "indicator--e1ba652e-e77b-470b-b7da-e7ccf1c45fd0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8402edf-10f1-4783-a47c-36a95ba93b3f", "sighting_of_ref": "indicator--e1ba652e-e77b-470b-b7da-e7ccf1c45fd0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137e94ef-217f-437b-bfef-16d1b26a73fd", "sighting_of_ref": "indicator--e5bd4406-ca7d-4a89-a07d-03bbcd69f445", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557043ba-c628-4478-bb2b-8dc2d1f45474", "sighting_of_ref": "indicator--e5bd4406-ca7d-4a89-a07d-03bbcd69f445", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e379e9b-5213-41e1-8dae-3fdbc653ed19", "sighting_of_ref": "indicator--7e130362-261e-4cb0-9da2-471170b6ba41", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774f7630-0eea-49af-a31c-3ff5b802baa6", "sighting_of_ref": "indicator--7e130362-261e-4cb0-9da2-471170b6ba41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1288058-6d32-4baf-b12d-f7e638f378e7", "sighting_of_ref": "indicator--8e241b3f-f2e9-4276-897c-a2a61d1356b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0449e46a-7c2d-4e1d-a054-77cc438cbce5", "sighting_of_ref": "indicator--8e241b3f-f2e9-4276-897c-a2a61d1356b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c33607-4d20-46ff-8f7f-33fddadc5d6d", "sighting_of_ref": "indicator--df1f5e51-9125-4d01-832f-bf9286a0f2f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a725a36a-f06e-4b17-943e-5db10e8e3487", "sighting_of_ref": "indicator--df1f5e51-9125-4d01-832f-bf9286a0f2f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7727923d-55a1-4718-99f2-18c483dbf04a", "sighting_of_ref": "indicator--0650053d-ad57-4798-a389-ac27f01d17e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752bb087-fcfc-45fe-9d57-e56a87d3e61b", "sighting_of_ref": "indicator--0650053d-ad57-4798-a389-ac27f01d17e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3297409c-c085-4f99-a31a-d33ca77e8c0c", "sighting_of_ref": "indicator--672e271e-5cd3-4946-96a5-235060968800", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c84f18a-6d91-4976-bcb2-07a4874b41c2", "sighting_of_ref": "indicator--672e271e-5cd3-4946-96a5-235060968800", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f3cb02-9427-4fe2-bed7-e70a2b91fb81", "sighting_of_ref": "indicator--1a690579-536f-47fd-86e5-677264f89f83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40905a2f-8ea6-4573-a5c4-a972d35d448f", "sighting_of_ref": "indicator--1a690579-536f-47fd-86e5-677264f89f83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd47f77-cfb4-46cf-8a87-1f323d3f4bcd", "sighting_of_ref": "indicator--f5938238-004f-46fe-a6a7-e8aa6b73cb9c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b22380-97a2-440d-9a41-1857c460325d", "sighting_of_ref": "indicator--f5938238-004f-46fe-a6a7-e8aa6b73cb9c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdc0566-76de-4323-906b-8e48e144c38a", "sighting_of_ref": "indicator--86cb81d0-96cb-4f42-86a8-dd99c9efe974", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b4d1c0-7a89-46f1-8175-22fdfbd0f701", "sighting_of_ref": "indicator--86cb81d0-96cb-4f42-86a8-dd99c9efe974", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8220bc8e-131c-49ec-8d9b-e5044c1f385a", "sighting_of_ref": "indicator--bd947c92-d95f-4bfa-8e8e-c97457869372", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2248550-be50-47de-b4e5-d3ab89617c41", "sighting_of_ref": "indicator--bd947c92-d95f-4bfa-8e8e-c97457869372", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f5aa76-6fbe-4000-a0b6-ad07b9c37957", "sighting_of_ref": "indicator--deffe5b4-5a80-4cfd-b25c-356f0f8d26b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3412e3c4-6d48-4049-b254-63664e749c9b", "sighting_of_ref": "indicator--3c37c0d4-b1c5-4fbb-b008-7d1de9aa47b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20765979-5bf2-4fe0-ba65-ab246febbf21", "sighting_of_ref": "indicator--55ab47a7-4534-4af0-b974-e8b52eaa58cd", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cdc1ac-75f3-44b3-824a-94b00a0f3a3f", "sighting_of_ref": "indicator--fc85c463-b493-474a-a5d0-60821654f076", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d002e6-488a-4c22-abc4-9e6702b88787", "sighting_of_ref": "indicator--45fdef0e-9966-4bc9-99a0-aa86c798f08b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c143483-b9b1-4ded-afef-b63821eef8a2", "sighting_of_ref": "indicator--45fdef0e-9966-4bc9-99a0-aa86c798f08b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b0c659-7f89-4cf2-9f6b-44c477a102d4", "sighting_of_ref": "indicator--39604409-bd7e-40fb-a64b-1736425efca2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d042ad-23b6-466b-9a1e-2c2de6f0a834", "sighting_of_ref": "indicator--07d0ef29-9e4e-40cd-a92a-1a0c8cd572de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd888e4-3347-46d1-b4d3-23fd4bdfddf1", "sighting_of_ref": "indicator--07d0ef29-9e4e-40cd-a92a-1a0c8cd572de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fceb4b-f1ee-4ac9-8eec-8d5884892ea7", "sighting_of_ref": "indicator--c4fad2bd-d8bf-4214-9602-66532ed9d431", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c4e8ca-d553-4ac2-8f09-5ad509e951cf", "sighting_of_ref": "indicator--20c5cf20-a970-4008-888e-6143e602179a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7027e90e-0ddf-485d-af6b-7cae852a652d", "sighting_of_ref": "indicator--20c5cf20-a970-4008-888e-6143e602179a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b843f5-4d0f-4c52-a107-a07d5950176a", "sighting_of_ref": "indicator--737ea77c-4a6b-4fd2-b173-c6d1e361339b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5fc2a6-67a2-42d5-8d19-636f4f1eb1bc", "sighting_of_ref": "indicator--737ea77c-4a6b-4fd2-b173-c6d1e361339b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bae202f-7a1f-4230-922b-cb2529523b52", "sighting_of_ref": "indicator--52a182e5-1f37-4249-a795-5eb727365ad9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5b9b3a-6583-468d-bde4-93621d0d19e9", "sighting_of_ref": "indicator--026cac85-fde9-4713-8d52-06beac1a08a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fcffdb-55ca-42b2-87f0-1876929a8a06", "sighting_of_ref": "indicator--31db1592-45f0-4a0c-96dc-4e3e70aa6a6c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e8d9cb-ea5f-4a41-8308-2eb41e8c05b6", "sighting_of_ref": "indicator--31db1592-45f0-4a0c-96dc-4e3e70aa6a6c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae4d1a9-3954-4b89-8a64-eb71ab46373d", "sighting_of_ref": "indicator--8e511b6c-f87c-4ebe-ba04-e9e778f742dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94bfbdc-d9d1-448f-9555-5eafbf8e4e4a", "sighting_of_ref": "indicator--8e511b6c-f87c-4ebe-ba04-e9e778f742dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2f2274-7662-4c2a-a698-ab00a12d1b76", "sighting_of_ref": "indicator--ace0f82f-a74c-425b-84c6-2b069f609871", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cb0c68-5139-4be9-b35b-cef06c47c4e0", "sighting_of_ref": "indicator--fade4773-96ca-4fb4-be10-96be3787d74b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60523be-e820-4e86-9192-2628421d5dc1", "sighting_of_ref": "indicator--e634af8c-cd16-454c-b736-a5be4066586b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61f1c5f-f702-4734-b7e0-2cfd59127590", "sighting_of_ref": "indicator--e634af8c-cd16-454c-b736-a5be4066586b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5b1194-f9a9-4283-8d63-0bbdd2ca1781", "sighting_of_ref": "indicator--cfdaf724-3747-4a34-9527-5b5fae5b1c5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ab2721-97c6-4752-b608-68ef3eeeed2e", "sighting_of_ref": "indicator--cfdaf724-3747-4a34-9527-5b5fae5b1c5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fdb5e8-d2f0-4dc9-bd7a-b5f963ee0a60", "sighting_of_ref": "indicator--07773b01-44f9-415b-a707-7c6cd844b6dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559a4222-0607-406c-8ccd-62604972e1b4", "sighting_of_ref": "indicator--07773b01-44f9-415b-a707-7c6cd844b6dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c38ecc-f929-43f3-9653-e61dcd27d9d3", "sighting_of_ref": "indicator--51cb5031-caad-4b34-a8be-c8ab5519da2c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dbe43e-93b5-4f44-89f1-273b7f7b0cd1", "sighting_of_ref": "indicator--51cb5031-caad-4b34-a8be-c8ab5519da2c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432f9393-a311-4296-8041-06487a82a51b", "sighting_of_ref": "indicator--9b43ab74-c4c1-4e89-bf89-6b81a64556a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d617e2a2-02f8-4d5a-857f-a21df5cd9ba9", "sighting_of_ref": "indicator--668c8888-f312-47e1-9e89-f1eeacbd433d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5503bf12-7f6e-4eff-8cf3-c0d679b87448", "sighting_of_ref": "indicator--40a54d1e-c12e-4ca4-a9db-ebbccad31ea3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23937bca-bc12-4b3c-b58f-4010f1472ef2", "sighting_of_ref": "indicator--40a54d1e-c12e-4ca4-a9db-ebbccad31ea3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34a0a53-0839-4fc1-9f50-c928aae447c5", "sighting_of_ref": "indicator--5cc4dede-af81-41c0-afd0-cee7e30554f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684b487d-b556-4009-a64b-fd8c56c9645e", "sighting_of_ref": "indicator--5cc4dede-af81-41c0-afd0-cee7e30554f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547f3423-c902-4f23-a807-27501549b759", "sighting_of_ref": "indicator--2a521de7-b311-41af-b877-d1817c24c0b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06960e35-b1fa-46a0-b4cd-4b424bfed19b", "sighting_of_ref": "indicator--1db82226-8666-4bfe-bdc6-9ef36b85502d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ee624a-e84c-4f3a-8bfd-486951598a14", "sighting_of_ref": "indicator--3f6068de-8a8d-4397-9c81-96726b3e9f7e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b08a4e-bc62-4f8c-8055-9fe8897bb370", "sighting_of_ref": "indicator--dd838106-8a95-4896-a089-a852e0edf100", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f5566c-4d04-4a8e-85d7-ee534e10f4de", "sighting_of_ref": "indicator--dd838106-8a95-4896-a089-a852e0edf100", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760027f4-12e5-4ef0-a8b5-3f89c13e9600", "sighting_of_ref": "indicator--b1bc4a58-41f1-4afe-b46f-519c6f12b938", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aafae7-0ff6-4316-b7e9-3857cc2a7fd5", "sighting_of_ref": "indicator--b1bc4a58-41f1-4afe-b46f-519c6f12b938", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82f9edf-b6da-4298-b8cf-a3bd5dd86410", "sighting_of_ref": "indicator--79227e24-66e6-4a66-91e1-3ca0e307c6c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5247b11f-0f19-4983-9ff6-70a206ef416c", "sighting_of_ref": "indicator--79227e24-66e6-4a66-91e1-3ca0e307c6c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3ec0cf-3799-4b1a-9770-b300c11b9c1f", "sighting_of_ref": "indicator--66ff9ffe-3626-441c-a410-071b5f180604", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1171392a-86b4-4093-b99c-94e89633c3cb", "sighting_of_ref": "indicator--66ff9ffe-3626-441c-a410-071b5f180604", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc57259-5d08-43b2-b56f-f023266d0296", "sighting_of_ref": "indicator--884e19d7-bcf6-4482-b75a-65067e478ebb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a3c329-6702-47c6-858d-960a6c2d4c3c", "sighting_of_ref": "indicator--884e19d7-bcf6-4482-b75a-65067e478ebb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193c6b08-01be-40c0-8490-90b82c27abda", "sighting_of_ref": "indicator--08778de0-74c2-4645-94c5-d4f20819c438", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bdde30-dc5a-4358-88fc-1b661bdcf093", "sighting_of_ref": "indicator--08778de0-74c2-4645-94c5-d4f20819c438", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3fdd20-966b-4e5b-b9d0-198167dffb20", "sighting_of_ref": "indicator--06a695ff-b2b9-46bd-8c8d-f0a44e3111e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfe5e7d-61f2-41db-b06d-801c97c0d1b7", "sighting_of_ref": "indicator--06a695ff-b2b9-46bd-8c8d-f0a44e3111e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b3a907-cf4c-4e83-9c18-9ea73d1395da", "sighting_of_ref": "indicator--516a243c-fca4-4438-a2b7-eace36008749", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ee0aa0-c2d5-40f1-8097-e472e78a678e", "sighting_of_ref": "indicator--516a243c-fca4-4438-a2b7-eace36008749", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85c4112-1616-4330-9a94-c51672ef7791", "sighting_of_ref": "indicator--edd45576-d036-4086-9d9e-cb32af78820f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e8ebc3-3191-4035-8c63-cb3586a18958", "sighting_of_ref": "indicator--edd45576-d036-4086-9d9e-cb32af78820f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea845cbe-74dd-42b8-8d6e-345e21aff685", "sighting_of_ref": "indicator--7ee00d9b-5269-43b2-aba7-9d94927ad115", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d74817-0c5d-4119-8e94-97eb3e5dd641", "sighting_of_ref": "indicator--7f2f4236-4d19-44ca-af72-c955701f0757", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f9073f-9233-444f-ba35-5075ca8bccb4", "sighting_of_ref": "indicator--87ce1f22-ba8b-472d-a670-e93a84e5c6eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d492ac1-8648-48d5-ad11-d1569c152d0f", "sighting_of_ref": "indicator--1b5e4114-fdbf-4a77-96a8-e1499854c43f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfd1836-ef8e-4eaa-9dca-7c1eabce155a", "sighting_of_ref": "indicator--883878ee-03a7-46e4-92d7-8eef9104af80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8010e7b3-9bd9-48e9-b94c-bdb5bf70e285", "sighting_of_ref": "indicator--f514b3ff-294c-45fc-babe-099384b3c7ad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1dad7d-5d52-4b59-aa80-204813fe2622", "sighting_of_ref": "indicator--c17d7092-5625-4c9f-97f5-e06c05c3c63a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7059c32-0dc9-475f-8031-d4958b6df5c4", "sighting_of_ref": "indicator--5b1c1912-7403-4a35-9ff4-049f46ef408d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd0c8cf-40d2-4244-b3ef-c4ecd839d010", "sighting_of_ref": "indicator--376bebb4-6520-428a-9ff4-dd5e85a170ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdebdfb-8ff8-457b-916c-8d36f3e89bcd", "sighting_of_ref": "indicator--3225d5ec-a5da-4071-9b31-46013a58b40d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839f4eee-9d70-49c1-9113-1e7e140e8139", "sighting_of_ref": "indicator--ed64badc-b1fb-4076-8cda-09c8dbf792e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af13828f-d303-4348-a913-e5c9cbfec5b3", "sighting_of_ref": "indicator--faa869f3-7ecc-4ad5-8337-810aa7224c7c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4482e6c9-f9f1-453f-8736-8b8962443c5e", "sighting_of_ref": "indicator--faa869f3-7ecc-4ad5-8337-810aa7224c7c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1c14ac-cce7-44be-89cd-6030c580ea4b", "sighting_of_ref": "indicator--a58eca9d-e342-4e5b-9415-7c7825c14dec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216354b6-8b7f-4649-bffe-5b6a2f494a95", "sighting_of_ref": "indicator--a58eca9d-e342-4e5b-9415-7c7825c14dec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaa8bd5-6ab4-419f-8974-cc7952ce45cf", "sighting_of_ref": "indicator--81da1b2b-0f74-4405-b3cc-35ce3fcfa1ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c83a6fa-cf8f-44b0-ba00-5a729e18acdc", "sighting_of_ref": "indicator--7b85f4db-d2c3-4ab4-a933-3183c77b5d3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f55a41-be43-4068-b694-0b0880ec15ea", "sighting_of_ref": "indicator--ef971daa-3350-4487-94ce-de209804ce61", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e816e27c-d4b2-44d3-ae5d-fc6bffaa5e8c", "sighting_of_ref": "indicator--0039acda-2d4b-4c7e-8bc8-5976a824d295", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0269eba9-1780-45f4-b15f-2871ac9cea41", "sighting_of_ref": "indicator--0039acda-2d4b-4c7e-8bc8-5976a824d295", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d6136e-9795-4259-ad82-54d03589893c", "sighting_of_ref": "indicator--41ce3ccf-d60b-4ce9-940c-c4c299d5b212", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6202f1a9-bc46-4aa7-916e-35abd38e2b83", "sighting_of_ref": "indicator--41ce3ccf-d60b-4ce9-940c-c4c299d5b212", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea66594-7b87-440b-a025-6b06ff5ed696", "sighting_of_ref": "indicator--654bda63-2c12-490d-98eb-3d5ad6d7d5f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ef7b78-867c-4856-ba69-d2373ea056a6", "sighting_of_ref": "indicator--23a6f4f8-efab-40d5-93e5-ebe2c61ceb74", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ee169e-23d8-4877-80db-97ae3f310e32", "sighting_of_ref": "indicator--d0cc4cee-bc29-4a74-8acc-7683c6bfc9dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d599ed-61a3-4d5f-8dea-62dd643baa6a", "sighting_of_ref": "indicator--90d6de02-f37d-457c-ba97-5001f80d8f09", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b0621a-f75b-4410-9a8f-b3d1a646c7e7", "sighting_of_ref": "indicator--bb6dc1fd-5703-4f68-9f67-2d2fa56bd60f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94cf501-25b0-4443-99ad-091c22460568", "sighting_of_ref": "indicator--542c49c3-116e-421a-bee0-f7c4c5957e1d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da7e305-f9ba-4561-8bee-26095e778e0c", "sighting_of_ref": "indicator--002c1a38-cd4b-493b-961f-f8a272b55377", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b6bde6-b034-455d-afd8-8276905d26b1", "sighting_of_ref": "indicator--4fe5f553-2553-4857-86d3-ef436602ed36", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77736fdb-09bc-4ec1-bfb8-1a055beb229d", "sighting_of_ref": "indicator--9e4ae509-fe26-433d-99a4-a21bce3990f7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d0aa48-4da2-4966-9862-590d4cdfd31f", "sighting_of_ref": "indicator--78d79c54-8536-417b-8d19-c23d28e79fa9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d8a5cd-ce3f-4b4d-8828-f35694f4010a", "sighting_of_ref": "indicator--dcb50efc-78c9-4f56-8577-d06977eb19b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9d2aaf-eb9a-48dd-8fb9-4531db168f22", "sighting_of_ref": "indicator--dcb50efc-78c9-4f56-8577-d06977eb19b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce83ec1f-e0d2-4969-a40d-5cf36fe25711", "sighting_of_ref": "indicator--670c5bcf-84b3-46b0-b0d0-c675e979cea7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb03895-e435-4480-a805-5f7508ff037c", "sighting_of_ref": "indicator--0d3ed84a-cdcb-4dbc-8394-40685c1a47eb", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e74ec8-5d02-453e-8127-107ead1a0078", "sighting_of_ref": "indicator--0fca7296-b591-4ccf-8831-497898fe7d94", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cc7125-d7ea-4b76-8187-a78fd7a88686", "sighting_of_ref": "indicator--d0419441-d0e2-498c-a6c3-c4062842b85e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381aaca2-4c54-4cac-b4de-cc2a33668cff", "sighting_of_ref": "indicator--ed742512-b8a8-40a6-a5a2-ad044b72f3f1", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d13081-b837-4bed-a9fe-c3e215e0f8dc", "sighting_of_ref": "indicator--c17bba4f-722a-4564-bfb3-3928070ebe80", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53907b02-d704-4adb-ac56-08e4ebcd4714", "sighting_of_ref": "indicator--589ea2e7-b0e8-458c-bcd1-295f48acde33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c782383-5d7f-41df-93db-df91fbbcee58", "sighting_of_ref": "indicator--589ea2e7-b0e8-458c-bcd1-295f48acde33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddce7114-9b16-4191-870e-3ad59fd89f6e", "sighting_of_ref": "indicator--5391b0cc-00e1-4845-bded-544d0477f208", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0847575c-d30e-4dd2-9657-96f62f772596", "sighting_of_ref": "indicator--55d019b3-9186-4018-82bc-0112fe5533bc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c477600-8ffe-49c2-8a46-627f27d65014", "sighting_of_ref": "indicator--b38f4eab-79ff-47b7-a849-e9a414b7b53e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7ae567-20ce-4667-b77a-705a584544bb", "sighting_of_ref": "indicator--6d3be0e8-1c97-445e-b207-9cef328a3de3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d9f5d6-e00a-452e-be0e-26e3d8ac7c78", "sighting_of_ref": "indicator--16a0c917-04d9-445e-b589-50ecf3236f90", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82df11ad-9572-4d88-b400-0d448ad69382", "sighting_of_ref": "indicator--c31ffa66-1933-47d7-b9e0-799031a269bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16769823-c07f-4841-aa56-37db820f52d5", "sighting_of_ref": "indicator--8408868a-f901-480c-8800-a4ce42dbda6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18dd48d-71b7-41a9-8488-43fcd3a8d144", "sighting_of_ref": "indicator--f548ee74-d048-4902-adea-985c76d5312a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc9010e-8501-4873-abdb-71875fd9a790", "sighting_of_ref": "indicator--f548ee74-d048-4902-adea-985c76d5312a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d80826a-b30a-49c2-8ccb-031621d7d518", "sighting_of_ref": "indicator--42c9ae59-d953-4ac6-958e-0481b65b6d8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412697f9-3fbd-4d58-8584-78224d58480c", "sighting_of_ref": "indicator--7f2f522c-8cda-4989-a30f-28dfd42bb71b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab59ca14-9d95-4eaf-a850-87346685fc8a", "sighting_of_ref": "indicator--79a61656-60c8-4bfe-b2a1-99f8b96fee5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bd513e-1a10-42d2-985e-a82942a3c695", "sighting_of_ref": "indicator--79a61656-60c8-4bfe-b2a1-99f8b96fee5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa65de29-070d-42b3-8e61-adef5cb49cd4", "sighting_of_ref": "indicator--8e18d9e3-d61b-4c75-a245-a80fb73fd9fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb62e4e-fe18-4a5e-a129-216e81dcb92c", "sighting_of_ref": "indicator--1303294e-596d-4a29-8482-1b78e16bd389", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2428bcf-c8f5-47b4-97c9-bcb012ff327f", "sighting_of_ref": "indicator--1303294e-596d-4a29-8482-1b78e16bd389", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb77209-5b05-4398-ba18-fcc99f2379e5", "sighting_of_ref": "indicator--35d3a6cf-694e-4e0c-890b-cc8a8c1932f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf831c8b-1138-46e9-89d5-bdce58459662", "sighting_of_ref": "indicator--35d3a6cf-694e-4e0c-890b-cc8a8c1932f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3217bdf-eee8-447d-8079-35a7ded102ec", "sighting_of_ref": "indicator--6c950448-2779-4a5f-b7ad-59de941c197f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ce556d-c35b-4d06-bc08-8b18b86b7203", "sighting_of_ref": "indicator--64a81e82-1c21-4184-ba51-12643dfd233e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca52386-f244-4b9e-afde-d8e7ef646bbd", "sighting_of_ref": "indicator--64a81e82-1c21-4184-ba51-12643dfd233e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daed1dbb-6e78-4846-8706-fab4bb24ef80", "sighting_of_ref": "indicator--4f7ddd43-87f6-4369-9c78-0db55f5d3c17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2acd38-d456-461c-934b-7ee7b4cc00f1", "sighting_of_ref": "indicator--4f7ddd43-87f6-4369-9c78-0db55f5d3c17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc35082-c7ca-45b9-82eb-c0a5caaafca0", "sighting_of_ref": "indicator--560d266f-6eb3-4d42-ac1b-36cb4b16768e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561a824c-0dd1-4216-9af3-822e18edb32b", "sighting_of_ref": "indicator--7ee45ab7-b86d-4a82-80b3-f2ae97bf6f7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce0da56-0c64-481d-ad3a-f2f94edb8bb5", "sighting_of_ref": "indicator--7ee45ab7-b86d-4a82-80b3-f2ae97bf6f7d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1e10cd-c1f3-41fe-8d81-3247f592045e", "sighting_of_ref": "indicator--0e545e8e-0b6a-4cc0-b50d-e9c30b8348f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4897862e-a17a-4991-a8b5-4e8936ca5beb", "sighting_of_ref": "indicator--0e545e8e-0b6a-4cc0-b50d-e9c30b8348f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8407b7b9-0800-405d-b985-d13cbb1d6ea8", "sighting_of_ref": "indicator--61905946-2b31-47b7-92c0-f77a495c3579", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021be1b9-9d6a-4af2-b48b-1b636106c057", "sighting_of_ref": "indicator--e5b9d2ad-4249-4ee5-9825-17b68a3ba472", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25110107-6d42-42e6-ba57-11598e7bdfe9", "sighting_of_ref": "indicator--e5b9d2ad-4249-4ee5-9825-17b68a3ba472", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3699ca7a-1275-4bf8-b2d9-0d4a8fe48908", "sighting_of_ref": "indicator--dae19b19-5d09-42ab-a2c0-285a380b3374", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbb6417-cc57-4a7e-83c9-5f8e024e735a", "sighting_of_ref": "indicator--dae19b19-5d09-42ab-a2c0-285a380b3374", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39627a31-ba54-4374-8744-4cf71295622a", "sighting_of_ref": "indicator--434bfef2-3a8c-4a2f-b4a4-93f42c5ba608", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980b07ce-21f2-420e-986a-3934063f67c3", "sighting_of_ref": "indicator--434bfef2-3a8c-4a2f-b4a4-93f42c5ba608", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a41f82-e4d7-4ddb-bcbb-c7d050ed864d", "sighting_of_ref": "indicator--73cd935b-3b83-4786-83e6-a3683bfc7aeb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacb951a-221e-4b4d-9304-a86552c8581f", "sighting_of_ref": "indicator--73cd935b-3b83-4786-83e6-a3683bfc7aeb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06efe2cb-608e-4e59-9677-14da55438e85", "sighting_of_ref": "indicator--a136b07c-a754-4c28-b79f-0491b64448ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13e0f71-0e2d-4586-acab-1767278c668b", "sighting_of_ref": "indicator--a136b07c-a754-4c28-b79f-0491b64448ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4326a48-8d46-442e-bdeb-97cbb28b9409", "sighting_of_ref": "indicator--7ca8a99e-4fca-4e0e-9ce7-605b56701ac5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba6aef3-cc80-4738-850f-c584b74229e5", "sighting_of_ref": "indicator--7ca8a99e-4fca-4e0e-9ce7-605b56701ac5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86813f31-221f-4b33-bb32-1a662605b566", "sighting_of_ref": "indicator--1faad8a3-241b-4cd3-b2c8-99e606f741e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810cc582-2dd3-4823-a978-251052251ad0", "sighting_of_ref": "indicator--1faad8a3-241b-4cd3-b2c8-99e606f741e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f846c7-8ba0-4a7d-819e-94d16b337a5f", "sighting_of_ref": "indicator--9982d8f1-4ecb-4853-a14a-483c9e4ce88c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3410fc-bfe4-44d7-a07e-483770e63abd", "sighting_of_ref": "indicator--e64c3228-46d4-45ad-9e0d-415fe5afd1eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9108077-d90c-4a7a-a4ab-e5db0cf663d0", "sighting_of_ref": "indicator--d9f909b0-8e8a-4bb9-8cdc-851ce62827cd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7f3aff-bfea-411c-bb88-1adc1f915ba5", "sighting_of_ref": "indicator--24bca79c-8df0-44a9-bb2e-c0ef9aee604a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f693c1fc-6de7-41e1-893b-9fe9eef9d578", "sighting_of_ref": "indicator--9bcceb7d-8d3a-419a-ad30-597e4f9a833c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87871cea-b15f-4bfd-b1d7-2fcfdc19d32f", "sighting_of_ref": "indicator--9bcceb7d-8d3a-419a-ad30-597e4f9a833c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0fa7e0-af33-4c09-b374-1e05db330c10", "sighting_of_ref": "indicator--c90b7d12-baec-4eb2-b0fc-3d03a78a5a7a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a056c9-016c-481a-989f-a85e919dc8a2", "sighting_of_ref": "indicator--ac2c1990-1d90-420e-aebc-f9f39a9b00f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79b1736-ce7b-44d9-bcdc-d7ca70ce635a", "sighting_of_ref": "indicator--dcaa2a6c-efe3-4ed2-aa3f-a69925ae2d60", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ed81d0-9ff7-4d24-8eba-13a9c6830ff9", "sighting_of_ref": "indicator--c792af44-5915-4dfe-b002-c0a980673dcb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f835a631-e019-42d3-92ac-6f0aff3505ee", "sighting_of_ref": "indicator--b00dab99-b963-431d-918c-2bda5eb29a43", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e4e0a3-b37b-481e-852b-b781ccb93bff", "sighting_of_ref": "indicator--7ed3cc6d-0b6a-42bb-8b39-c188db116041", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f38a27a-08e9-4635-9f2a-44e4537a4b90", "sighting_of_ref": "indicator--0e6e834e-3d86-4b38-9414-621cd8030598", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134df0ca-d0ac-4888-ac9a-313d92a6550f", "sighting_of_ref": "indicator--cb63e894-87a4-4e66-9b67-fbf56d1f1510", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae27ebd5-56bc-4aec-bf79-c0e8c7dfcb4e", "sighting_of_ref": "indicator--a60c0770-00c2-4f38-813e-59d97feefc90", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de154161-8619-49ea-8c30-bb8a2d7168df", "sighting_of_ref": "indicator--2fb610bd-c234-4a67-b1fa-eae34faf8658", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad04ab4-5882-48f1-a711-872cb5d50bbf", "sighting_of_ref": "indicator--fe8feb79-02b2-42e4-af23-233c93760ed7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d47b6dc-1683-47dd-93d0-a4a7a2e38f89", "sighting_of_ref": "indicator--6784530a-c3be-42e3-a042-8a22a248d79d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ecb4d5-0578-4912-b30a-2ab82740014c", "sighting_of_ref": "indicator--8db9a561-1178-412c-9ffe-c8d569caa327", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40524916-f561-4534-b14d-23d80d65cbb5", "sighting_of_ref": "indicator--d2f4bb90-0cf1-41aa-86b8-e811254f16c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8c082b-32c3-46a2-8f77-fc04e78e4d5f", "sighting_of_ref": "indicator--a46f23f7-8acb-445a-b010-a27383382a3a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b017cbe-c77b-460e-8a5b-90425ba3117d", "sighting_of_ref": "indicator--5b57e3bd-c72b-4c04-a003-e074bb137fb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c8dad6-721a-4f65-afd0-4597c672075b", "sighting_of_ref": "indicator--5cf3e286-026b-4a2b-bb49-169831becc37", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5bd727-5cfd-45d2-bec5-a4ee10f9f160", "sighting_of_ref": "indicator--24818d05-c381-4250-96f0-8a00bbc9963c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603b76b7-69cf-4ce0-b370-10bc952918a8", "sighting_of_ref": "indicator--6dd7da71-ae76-4440-94b3-df24d1a96af0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134a038a-ff15-4c6a-8fe6-733ffadb5aad", "sighting_of_ref": "indicator--810b953a-c7da-4d5f-aff1-ca58ddfe73d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3996e62f-9e8b-492e-97a4-bae39b75e5c6", "sighting_of_ref": "indicator--820d30f0-87fd-4762-b91a-be773d36cbae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb199805-06e7-4921-ab42-bee96923c474", "sighting_of_ref": "indicator--5f0a5a7c-3d52-4c7a-abc5-4f730528ef48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f688a99-4e81-466d-afe7-f66c828b4e0c", "sighting_of_ref": "indicator--9f4a74b2-57af-4af2-928c-f2408b4a1aaa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e6ec57-3ce3-44b7-a20d-7b389973b114", "sighting_of_ref": "indicator--41eaecab-5538-473e-b58f-57e25a194b9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcdb29a-11ce-46a9-9b9c-0be4e1c9dd14", "sighting_of_ref": "indicator--933ac7c4-727a-4db2-bc65-c3b99e08b7bc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6b2d26-c60b-4c46-bafc-fb591a9bca72", "sighting_of_ref": "indicator--7a8eaa20-b877-4ae7-95b3-4b56fd818775", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efed7e29-0d80-46f1-b80c-a40bf28c09c4", "sighting_of_ref": "indicator--dd5d82e6-e322-40c5-ba98-a25ea0688149", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c20b33f-01c2-4daa-8fa6-d210b4a88ac3", "sighting_of_ref": "indicator--a62fbc71-95a8-4834-808e-2201e109d211", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81b3eeb-ffda-4c5a-812a-e767e1a118c1", "sighting_of_ref": "indicator--720cee22-15e3-4312-b2bf-a38580307558", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74104d1-6a1a-45a7-bee8-f38d92ade3f4", "sighting_of_ref": "indicator--f35f566f-1ca8-4555-a77f-d0520aad62fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a7d15e-6152-4aa3-93c2-87f716a96250", "sighting_of_ref": "indicator--18b36176-03d9-4824-a9e3-f2ae9908c868", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c49115-8c8b-4c2b-b7f1-856ec481c8a2", "sighting_of_ref": "indicator--d476ef0e-446a-460d-8700-f65c2b6f92c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4319ef07-f262-43aa-ac3b-1537e3359393", "sighting_of_ref": "indicator--5cb7f5cb-06b6-4215-be87-2710a1de3675", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb12498-a017-48a0-9ff2-b336e244b145", "sighting_of_ref": "indicator--e603fa4e-e448-41a0-a0cb-fbcda2a6d69f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707b4bc1-25ec-4a3d-b9e1-47846e1b5a3b", "sighting_of_ref": "indicator--3dd436cb-501e-4c66-a61e-85cc26f6b172", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd68f463-1d08-4942-841e-c11999c48b4c", "sighting_of_ref": "indicator--0653f7da-286f-478a-8322-121f59c16043", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e8c3e3-d8eb-4866-8e80-8db1bbdc820d", "sighting_of_ref": "indicator--52ed128d-4271-406e-a221-b9aff0edf713", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5d2234-51e5-4395-8575-f3d7809194bd", "sighting_of_ref": "indicator--09dc2ab8-355c-49f0-934c-4fa9d17c4532", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698a41c1-fd2a-43be-8ab2-3d4c24faf1f0", "sighting_of_ref": "indicator--09dc2ab8-355c-49f0-934c-4fa9d17c4532", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37c2ef2-af72-4f73-9042-2791cf42c051", "sighting_of_ref": "indicator--29e32fbe-abff-43be-a2cc-84f8ca2f70a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d617e184-a761-4aa1-8947-342db1c8e318", "sighting_of_ref": "indicator--29e32fbe-abff-43be-a2cc-84f8ca2f70a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f34c05-50dd-4f0d-85ed-b3baab24d9c8", "sighting_of_ref": "indicator--d178a8c0-faf2-45a7-af87-9caa0c2c33f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8d8bef-065e-469a-8e69-232e100f0e3f", "sighting_of_ref": "indicator--d22fe6be-20b7-4b83-a9c7-a9f3ed641f52", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afd0109-45c1-439d-a9f7-58679e2e0977", "sighting_of_ref": "indicator--38863e17-13b6-4bb2-aa66-8b5e3fab6344", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e7941c-b098-49d2-86e4-c261de7bef38", "sighting_of_ref": "indicator--f5b5ead6-771e-448f-9c8a-d74692da460d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fab24c5-35d0-4cec-b904-96f5fde62f31", "sighting_of_ref": "indicator--d04909a8-7938-4e88-a142-9506c90820d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0be4f53-74dc-4960-9cbb-4ab05405c83e", "sighting_of_ref": "indicator--88963617-1170-45df-9a20-e89583637563", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c86098-5701-46f9-b013-0d88f4636eea", "sighting_of_ref": "indicator--2a8f1fe8-e993-4924-99d8-06d64e12556f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c6ac75-67c7-4d30-b73c-e52f5180af83", "sighting_of_ref": "indicator--0b635356-9785-4706-9fd1-20cffb53de28", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5d04ff-9221-43bc-9b60-d6bc426662b4", "sighting_of_ref": "indicator--688e61e8-dbf7-4c5e-aae5-5aae75d01766", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acac8afc-4837-4dc5-93b4-0baa9b60b494", "sighting_of_ref": "indicator--8513efa6-1154-40c4-9b7e-5d0fc98b4c5b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fbfe3e-85de-4ca3-99a9-80ad542fcab2", "sighting_of_ref": "indicator--0d09477d-09c5-40a2-ac15-ccfa18f37499", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1baff8ea-5564-4bc4-b4f8-2f4825e567a4", "sighting_of_ref": "indicator--b28dc2ea-a8ec-4a91-aa10-46c5899933a6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56118366-ea2e-4c28-8763-6a0d154c8ae6", "sighting_of_ref": "indicator--da930a24-4535-4f90-ad1c-987b5241cdb2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524361bd-1cd7-4f30-b31d-b59fd51eff87", "sighting_of_ref": "indicator--da930a24-4535-4f90-ad1c-987b5241cdb2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed02b7d1-80c5-4b67-ac05-04692212dc27", "sighting_of_ref": "indicator--bce4f869-ea14-445a-b158-add089505017", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaee8594-292c-4dc4-9ae9-7eb15c15cb1e", "sighting_of_ref": "indicator--fb7bb616-21c2-4872-8ca7-b695192cf378", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bca564-7f9c-481f-934d-8990728ad241", "sighting_of_ref": "indicator--fca3265b-f55b-4604-9e26-77ba908263d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b7b91a-a567-4db4-9354-878f10f52042", "sighting_of_ref": "indicator--748ef65d-b397-4588-8f9f-b7c777e69153", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59909701-3931-4e46-8c1e-e0876a9e99bd", "sighting_of_ref": "indicator--ad94ebc6-43d3-4e21-8e3a-ab9a6c7cacd7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf7d0e8-410f-4d29-ac90-671e4a15c23d", "sighting_of_ref": "indicator--0171fb3d-ae47-4638-83e9-816d9d37f520", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b22c84a-312d-4ce3-a2bd-b2ed34d8af3a", "sighting_of_ref": "indicator--c12a8dc5-999d-4db0-b083-732a97326c20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc7b79b-1cf7-4480-b019-394bc91df02d", "sighting_of_ref": "indicator--7b4280cf-55be-431c-9342-d0763a263bdf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42f138a-69e2-43e8-bbe7-3bce09f4df14", "sighting_of_ref": "indicator--75223883-901e-49e7-b547-9430d0bf1e6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a3dd0a-33c7-41c6-9482-a37425fa2590", "sighting_of_ref": "indicator--1d325e5e-52de-4ddf-87fd-de3c1316d743", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93960f4-296c-4f47-82f9-a32cd48908b7", "sighting_of_ref": "indicator--f5b0ca6f-5e3e-4207-a257-1afef5ba8f29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f992e5-af5c-4e33-ac2f-afdff83f23f5", "sighting_of_ref": "indicator--686332e5-65f4-4c21-b75b-1a69a57402a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7cd38d-56b0-4e32-a3c5-bcd803e9dac2", "sighting_of_ref": "indicator--686332e5-65f4-4c21-b75b-1a69a57402a6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae2ba19-4310-4123-a090-4940434f4bc2", "sighting_of_ref": "indicator--4125c440-e365-4389-95c2-e9216d23a7d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19aa2768-0731-4282-aa89-d80ac449dec6", "sighting_of_ref": "indicator--4125c440-e365-4389-95c2-e9216d23a7d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6241ca-bf9b-43fb-a2fb-4005a5ae778c", "sighting_of_ref": "indicator--c4d11f7f-bca7-4cde-b411-173963971d26", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a0064d-cb1e-408d-bae6-13f98d0cd793", "sighting_of_ref": "indicator--6de84d3d-51fd-4480-872f-42fec204af65", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1865c13e-0b59-43f8-9468-f22d12b4962e", "sighting_of_ref": "indicator--6de84d3d-51fd-4480-872f-42fec204af65", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b7f860-2b45-4d84-be47-47041d654769", "sighting_of_ref": "indicator--9509a6d5-eb02-49fd-825e-96b3e6c8d8ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a0a92c-eb4d-4a34-aec0-a4197182dd9d", "sighting_of_ref": "indicator--9509a6d5-eb02-49fd-825e-96b3e6c8d8ea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fda4cee-9126-4e2f-be5f-a18f8ec8e38e", "sighting_of_ref": "indicator--c1b266ee-0530-45e5-88b8-ba8619ee66fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5459fd2a-8e9c-4826-87b0-60dc97887053", "sighting_of_ref": "indicator--725dd837-8525-42b7-b855-83b98f3d4030", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f563b843-5bcf-488c-824f-373e6dd7391e", "sighting_of_ref": "indicator--20c44c96-9b8a-4fa2-bce2-8809556be535", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d01a96c-8f66-4e06-9376-0fe629b39968", "sighting_of_ref": "indicator--959e7f34-0fc6-44b9-b83e-57491918f843", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f973754-b400-4383-8db4-a2357c1e563f", "sighting_of_ref": "indicator--24d3b8b3-9b2e-46be-affb-1b7bbb4aefad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca0c6a1-cdb7-493b-962e-b2eac11f7cbf", "sighting_of_ref": "indicator--24d3b8b3-9b2e-46be-affb-1b7bbb4aefad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b6c791-da07-438a-8ef4-50c2f3d6856b", "sighting_of_ref": "indicator--f837a551-24db-49f8-8eb0-4707553d3d55", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222bf3c9-d5fe-4605-844f-33c9ea3af4ea", "sighting_of_ref": "indicator--f837a551-24db-49f8-8eb0-4707553d3d55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305aab24-38cf-427a-8600-7c26c6297f92", "sighting_of_ref": "indicator--708c3fa8-d3d8-41f9-a38c-a120bdadaaa8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df473d15-716d-4d47-8afa-c36f047658d5", "sighting_of_ref": "indicator--2db8a89b-d2ef-4e68-9ea1-bc99205e2542", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faaafcd7-3844-4db1-b3e5-912e3c078814", "sighting_of_ref": "indicator--3a43f1c7-d611-46fd-9525-ff96bb9436b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bb3be8-4900-4bcd-84e9-e036dc8557dd", "sighting_of_ref": "indicator--8837e15f-95ec-40c7-bbad-42dd342bb121", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299760fa-585d-4f9f-af09-ec1dfdff20cb", "sighting_of_ref": "indicator--8837e15f-95ec-40c7-bbad-42dd342bb121", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dcb266-2392-4471-8376-530cefa1517c", "sighting_of_ref": "indicator--7369f9ff-7825-4422-b1f4-fa7abaa33f6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f074c4e1-7705-4de5-9067-bde159901047", "sighting_of_ref": "indicator--7369f9ff-7825-4422-b1f4-fa7abaa33f6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbc7a86-a4e2-4433-a887-ea16eb88d4f0", "sighting_of_ref": "indicator--302faadf-ecde-4e32-971a-17eb7cb3e90c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee055b7-ea5c-4c2f-956e-a029b8b8b1b2", "sighting_of_ref": "indicator--302faadf-ecde-4e32-971a-17eb7cb3e90c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8684797-191e-45eb-8a81-7b956205bb74", "sighting_of_ref": "indicator--c8d0ae7b-eb1e-4507-a675-244cb3afdb76", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5ed114-d415-4ed2-a652-37e2b79109ce", "sighting_of_ref": "indicator--c8d0ae7b-eb1e-4507-a675-244cb3afdb76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f1abeb-fd8e-4bc9-9952-791a340fd557", "sighting_of_ref": "indicator--df358655-ca21-4234-8266-069477b75dcc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1fe7c3-ccb2-4c05-adc3-c9b009197cc7", "sighting_of_ref": "indicator--233b3249-6f33-458a-a16e-0344dad9cb4b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a75f7e-2006-44e7-ab41-30dc2ec2ee4b", "sighting_of_ref": "indicator--46d06f5d-98f0-45e7-83eb-a364509dd23d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8935a6-35ee-4180-b108-299afeebf0cb", "sighting_of_ref": "indicator--70d1f3b6-eab0-40b5-8389-2ee90e2018b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1eb4a4-b948-412a-b374-a6eb6f8a9477", "sighting_of_ref": "indicator--4db6c90c-768d-4aaa-94e6-83c0cb8d8442", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91934e44-61a0-4dfd-a65e-eaf202921e6b", "sighting_of_ref": "indicator--90f3eed3-ff3f-40ae-90dc-8ee06b3b67c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef65469-0f9d-4eca-87b6-a527dadcd23d", "sighting_of_ref": "indicator--4423baf3-9153-4598-95a3-30d46d4a65b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba4381e-0fb0-4150-a3f7-2f2e74b67528", "sighting_of_ref": "indicator--65c1bd53-a20d-4c00-bd8b-babf03dd36b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab0a591-cd8a-4c53-b53d-59fadcf75245", "sighting_of_ref": "indicator--8cef608e-3dec-40e2-9d1d-b9a908f461fd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec7fdaf-3e76-4e4a-90a4-3d0be1fc8c53", "sighting_of_ref": "indicator--be066b25-dd7b-4a0e-9bc7-f2b89916b4ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fce1f0-9416-4388-8a84-c9af11d61d93", "sighting_of_ref": "indicator--fb08aaa6-0909-4aed-87b7-f9addf393139", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7e8520-b756-460f-aa66-34c395e1edf5", "sighting_of_ref": "indicator--fb08aaa6-0909-4aed-87b7-f9addf393139", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac03a31-523f-46d5-9866-3168c5cf0769", "sighting_of_ref": "indicator--d9d86a43-f540-4106-b9bc-a41178fc70fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513b2165-b428-44d2-8bee-63d48b3578f8", "sighting_of_ref": "indicator--d9d86a43-f540-4106-b9bc-a41178fc70fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f633eee-bb8d-42a3-91ae-27d1e7a51be8", "sighting_of_ref": "indicator--e21c1135-c7df-4d69-9d43-679892c034c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f7a1cc-7dad-4e04-acb5-2880596c4296", "sighting_of_ref": "indicator--e21c1135-c7df-4d69-9d43-679892c034c0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329d6cdd-e073-4ae5-83b9-19cef1f342a0", "sighting_of_ref": "indicator--e21c1135-c7df-4d69-9d43-679892c034c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee81e52-1a98-49a1-8edd-86014250ffbc", "sighting_of_ref": "indicator--ab2b2e44-9ecb-46b5-be79-f74d46e6eacb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436c86b4-3b18-490f-be87-4ba9063f82ea", "sighting_of_ref": "indicator--8cdac3ab-44ae-4bc6-8f8c-25942d52aa4e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16999e7c-52af-4ad1-bc12-bc8c315bc416", "sighting_of_ref": "indicator--89f6c373-acae-4ee0-8731-5b38bf9461a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d27788-946d-4f80-a246-b8dd3f404997", "sighting_of_ref": "indicator--638545c5-a9e1-4aea-8a92-268ef5ce0106", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70985900-ae23-4152-8ff9-1eb008b060cd", "sighting_of_ref": "indicator--bf6b39de-359b-4f13-b2b3-f5945b2f31ef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8297ab-972c-4fc8-b9c6-6349e81f8c34", "sighting_of_ref": "indicator--878ef36c-2b44-41b8-b166-afa16c01155a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a01d32-9492-4da3-b21a-ecea375ba926", "sighting_of_ref": "indicator--31ce49d9-9d0d-4588-9ff2-d8fe565e1ef1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b164e4-3ce5-44fc-907c-c72c0c698927", "sighting_of_ref": "indicator--31ce49d9-9d0d-4588-9ff2-d8fe565e1ef1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c9a7e2-c758-4f28-8dd3-6d6b447df245", "sighting_of_ref": "indicator--8cccc680-3a2b-4109-a358-162a1b55cca7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8e8724-559e-4d4f-b770-f60faa8d7dee", "sighting_of_ref": "indicator--aaf19933-b148-4f3e-9704-5bd22ccee68a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa3eecd-2a91-4eee-85eb-fb76b9b4d419", "sighting_of_ref": "indicator--aaf19933-b148-4f3e-9704-5bd22ccee68a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8344ba6-142d-4746-816f-675aa0060175", "sighting_of_ref": "indicator--32d2f428-0ef9-4c65-97de-fedb5c217fd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cacc068-0b2d-42ea-b121-0b7f7c9f249e", "sighting_of_ref": "indicator--de0863b6-fee3-4cbf-8644-4492297a9d62", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d669d1-36a2-4959-b592-ee7e7d65173a", "sighting_of_ref": "indicator--826b0cc9-54bb-4974-b0dd-49032626dc05", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8c5b30-a2e5-401a-83df-13d287d91949", "sighting_of_ref": "indicator--3154bc5c-7800-4c49-85f7-b1d59e95f9a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1163a385-882c-4bdc-8e55-a5cfa9d310c5", "sighting_of_ref": "indicator--ab1fde37-d04a-46ba-be03-d82872100a5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194e60f8-5a5e-47aa-b9e0-0ab8d7e6c013", "sighting_of_ref": "indicator--ab1fde37-d04a-46ba-be03-d82872100a5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31accd38-6c09-48bf-8161-23fca704e3df", "sighting_of_ref": "indicator--70b992f1-f70b-4e82-9f4f-b9a0bd2c65f7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e65b04-a6e9-47c4-a459-be366083e311", "sighting_of_ref": "indicator--70b992f1-f70b-4e82-9f4f-b9a0bd2c65f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7534cd80-7ba7-40ed-9ce8-98bbc4c3f5f4", "sighting_of_ref": "indicator--a0ded050-6231-42e3-b8b2-f279e71d0c5a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a60cd6f-fb61-4dc7-a14f-faa92cc16750", "sighting_of_ref": "indicator--22c5dd2c-bdfd-4536-a414-4a8bfb64bdcf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c61dba3-8c2a-4a5f-8844-653c41703e9f", "sighting_of_ref": "indicator--22c5dd2c-bdfd-4536-a414-4a8bfb64bdcf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e1c417-aa1d-4478-842d-df1a7fc20021", "sighting_of_ref": "indicator--5a1676d8-2c4e-4069-a6b6-6e281e81d34a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4cac7f-94c1-45d2-9c52-714ce0783908", "sighting_of_ref": "indicator--147aa6e4-5e77-4419-8482-17b824893265", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8b5d55-66bb-4b11-ba39-9b789c6dffc2", "sighting_of_ref": "indicator--f3c001fe-249c-46b5-ba6f-7e84885220cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771907d5-e889-4384-808b-26e7fff1354e", "sighting_of_ref": "indicator--f3c001fe-249c-46b5-ba6f-7e84885220cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e5670d-0d47-4e11-b8f4-01bd1d847dfb", "sighting_of_ref": "indicator--3df6b5e7-7147-4226-8a6a-bd5caa0d5536", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479d3835-4036-4d1e-8b5c-d771ee509899", "sighting_of_ref": "indicator--ab0f9937-475c-4123-81a9-caa84cb3829a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5805740d-abef-422a-803f-3dc271bc3866", "sighting_of_ref": "indicator--fec68ec8-38d0-43b5-a808-367020153cd9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bd0a04-966d-439c-af71-1c5cbf77fa57", "sighting_of_ref": "indicator--a40bae26-9a0e-48be-9a81-7a282ad24e60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7802f19-5a0d-4f53-b1ac-8bdb1e27b9e7", "sighting_of_ref": "indicator--2fdf9e78-4a36-4ee6-95eb-19980aa3b484", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c2a930-40ef-402f-a0c5-8324d5f33b6b", "sighting_of_ref": "indicator--00d31f50-edc6-4589-9478-acc659dd0550", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a09190c-eff7-46fc-830f-bb2763ec881f", "sighting_of_ref": "indicator--816b4adc-7938-48be-8d32-3610837e7a82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9635f732-32de-4130-ba95-8660ceac9916", "sighting_of_ref": "indicator--57ce7d4a-bc9e-4ddd-bc62-19789020d12a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66acb44c-d130-44d6-b592-27baea44a3ab", "sighting_of_ref": "indicator--57ce7d4a-bc9e-4ddd-bc62-19789020d12a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8f218d-3e81-402e-8854-2856a374167d", "sighting_of_ref": "indicator--7fcc3733-7f54-4c9e-9783-a958b922b517", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850bab8c-92f1-44da-8471-822eca6f0d5f", "sighting_of_ref": "indicator--a80cc2f7-264b-4a97-89c5-67c0f9e8ef1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecbf77b-5f94-423f-a0ac-95c22e66eaf2", "sighting_of_ref": "indicator--a80cc2f7-264b-4a97-89c5-67c0f9e8ef1f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554b69fd-665b-476f-bde0-f6ce44b3160e", "sighting_of_ref": "indicator--5a409062-5721-4820-83f1-e99d42c9c23c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358e5e34-49b0-4929-9e27-ed82f0634aef", "sighting_of_ref": "indicator--1ba35891-b550-4ccb-9273-26fa61e791a2", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b95df6-c9b6-41c6-8112-21dedf5227e1", "sighting_of_ref": "indicator--c490f4f5-3614-4197-b24c-c04741d7b682", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e172c8-1759-46af-b459-7c0bfe63df2c", "sighting_of_ref": "indicator--e370a739-166d-4c41-b1fd-c790742dbffc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8e972b-9c04-44cd-9258-8d2237c5d134", "sighting_of_ref": "indicator--d38eff85-0155-48bf-94e1-b715e094a052", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa46ce4-bc9e-4c55-b02d-dc84aff51ded", "sighting_of_ref": "indicator--85f1eea8-23e8-4cc3-b917-d352c354be7c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcb3613-1331-4167-9366-0ac96bb9c8ae", "sighting_of_ref": "indicator--5297f87a-26b4-4df8-96e7-16b986b03ca7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd62eff5-53b7-4d5c-a596-11f7733c88f0", "sighting_of_ref": "indicator--0693ad45-7c27-4f7b-812f-c5f425335b85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbaa66a-f8e3-4443-9311-708635ace274", "sighting_of_ref": "indicator--883d18df-2a76-4146-acfe-7a83c8c742e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00a2d28-e7d5-455b-8cb3-be26773342ba", "sighting_of_ref": "indicator--a2557890-c523-48c6-8a33-d800a7542b25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7892ff15-6266-4214-9812-9015991c8f69", "sighting_of_ref": "indicator--7430dc31-81e0-4dec-9f42-e9152a0a0345", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06780543-1776-4e86-b073-7bb9c6d0e452", "sighting_of_ref": "indicator--e89fbff4-73e6-4175-82f2-a0a6b4280839", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7eca53-ea44-4ee4-8cc9-8842a6abe420", "sighting_of_ref": "indicator--94e0f41d-7b24-45e9-b9ae-1d5124a23535", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a482c6-8cb9-4f9e-9697-28e37e6e254d", "sighting_of_ref": "indicator--e7c06899-cfaa-4303-bdcb-819a865cbeda", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd40c74a-3f09-47da-a749-f1dd51e5abdd", "sighting_of_ref": "indicator--fcff69c5-710b-442b-9c00-7e802a759c15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b866cf3f-ecf0-4036-8e02-fa00a2921dd9", "sighting_of_ref": "indicator--8b0be7de-81b6-4e54-93bd-9c614b7e0ced", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27f61d3-c83d-4e95-8919-e33ac74455a6", "sighting_of_ref": "indicator--76102325-f13d-477f-bf9c-c9e477a50a7b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37bbe92-9b18-44e4-83a7-ed7296276f17", "sighting_of_ref": "indicator--76102325-f13d-477f-bf9c-c9e477a50a7b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8406c5a-026f-4293-b25d-9e5597c5e4c2", "sighting_of_ref": "indicator--9e1fca61-9c14-463f-9b42-4bf31ae9d45c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f18c979-b440-4f7d-ae1d-8b0ecfc78ba9", "sighting_of_ref": "indicator--9e1fca61-9c14-463f-9b42-4bf31ae9d45c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc78fdc7-2ef2-42d3-bcdc-5b748f30e16a", "sighting_of_ref": "indicator--7ebb56e5-eb9a-4f2b-ab23-c614bdaaec25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556b13aa-c430-4bbf-b24a-0efd5b1352ec", "sighting_of_ref": "indicator--0b8c63f6-a2ee-40c5-93f7-332a231c9519", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c79b866-820f-49a9-be51-a5950ae1d31e", "sighting_of_ref": "indicator--0b8c63f6-a2ee-40c5-93f7-332a231c9519", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ecf9b2-62ad-4e32-8454-7a1867699517", "sighting_of_ref": "indicator--3559d2ad-f4b9-4cfe-8bd3-f2c5e6e9aeb4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295838ea-11ac-44fd-be3b-68eb65e7049c", "sighting_of_ref": "indicator--b10f63f6-d2ba-4d25-ab05-d96f867a2b83", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e71db9e-24a1-440f-b5c5-048046e5209a", "sighting_of_ref": "indicator--1f9e79fb-2b5e-4d71-aee7-d8d7eb958ef6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66ec516-1cfd-4055-ab2b-8482f11ec8c9", "sighting_of_ref": "indicator--44dcf3f9-a375-4cd9-8f9b-cc4c55c416a8", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b54603-c4c1-458f-8cab-8011e1c0d465", "sighting_of_ref": "indicator--cc5de44c-d900-4c4e-9b41-db412bbe4a29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805ff88b-c232-49da-b95e-879cb00e9119", "sighting_of_ref": "indicator--cc5de44c-d900-4c4e-9b41-db412bbe4a29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7ec708-e208-42a0-a11b-f65592f3d1b0", "sighting_of_ref": "indicator--fd2fce5d-e7a5-41f6-95e8-cd77d308e9df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98c2ace-7891-4023-9984-7505726a3c78", "sighting_of_ref": "indicator--a31e0f3f-ec58-4a44-934c-0f200ef846c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d20b99-ec85-416c-b73f-dbbe7098ffeb", "sighting_of_ref": "indicator--bc4e77c3-7d6f-4ff4-adc9-1d5f46bf3ff6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f4102e-f18f-489b-8e27-346ca1bb162c", "sighting_of_ref": "indicator--f7467daa-dace-4335-b2fd-d2b654941ae3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e637cfe-2896-41c3-aaa9-d4daf5262593", "sighting_of_ref": "indicator--d7c9a30d-5f96-4ff2-87a7-f9aa8d771e36", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dd2c9f-94f6-4164-ba15-5149fe667222", "sighting_of_ref": "indicator--f4e8d7ec-5773-4a29-bba7-5d9f2b951d48", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c8419f-150e-449e-a13c-8ab497d3245d", "sighting_of_ref": "indicator--b43c9ee8-2715-4fbd-822a-76ed54fe009d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afafb890-fcfc-4530-abf8-cc96b1b2f74f", "sighting_of_ref": "indicator--ed825f13-bb1a-479a-8dd5-405c82c1cc51", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbbf49f-36e6-4c18-8f0d-19d251c8541e", "sighting_of_ref": "indicator--852582c7-a4bd-425d-afe8-b410805a156a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3da7600-9e53-465c-9cdf-8cd003ab11f3", "sighting_of_ref": "indicator--44daf571-fc38-4e1b-878a-aa7a5334c3c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eece6d5-6834-441b-8e97-fc3257184bee", "sighting_of_ref": "indicator--676b191d-6881-4b83-a63a-c8b70a62ff35", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322e08be-5cee-490a-89e6-e3f46615e5d2", "sighting_of_ref": "indicator--ecc844c6-5795-4c6b-bf6f-c65bcf4a515a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6be568e-fb36-4a54-83a7-4ef07066a6f9", "sighting_of_ref": "indicator--b1eda0f6-4390-46c3-bff2-57c77e952570", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694c2dac-05f2-45a7-a5fe-3f72fd533e51", "sighting_of_ref": "indicator--71213cb6-4be7-4447-a770-a7f9a9fbe69d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534dfb20-5b89-48dd-86bb-03cbb4247186", "sighting_of_ref": "indicator--71213cb6-4be7-4447-a770-a7f9a9fbe69d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e213244-b3c5-4f95-99c4-a32cea61807d", "sighting_of_ref": "indicator--677798df-4116-45fa-9aeb-5c90c0f3dd43", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279e22ed-0b53-4b87-8589-0ab82a6cef6c", "sighting_of_ref": "indicator--31f8f6c7-5f47-4b0e-a589-32451d80521e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec61291-fb07-4953-bc4e-66a52e4db0d4", "sighting_of_ref": "indicator--08dcad56-bbd9-4057-98bd-a9174559c082", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cef8b1d-782e-4195-a353-12c56b6b3f48", "sighting_of_ref": "indicator--b5cc70c2-c16b-42a5-8661-8c71a7578671", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6d19b7-3315-4eeb-b6f4-27178b5815bf", "sighting_of_ref": "indicator--2a245664-a250-4dce-8881-0072a3ca73bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80761bc-d6f0-4b31-9f46-7e98fbe6b3b1", "sighting_of_ref": "indicator--b7605873-0136-44ed-8884-7a19a271d0f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49171c9-f9c9-4c21-8fe7-11b1c2c584bf", "sighting_of_ref": "indicator--b7605873-0136-44ed-8884-7a19a271d0f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c7302e-4017-496f-a4d6-ec9adaa9622e", "sighting_of_ref": "indicator--ba9b9c57-6e50-4474-b77c-63e06d487b9c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a38e12-0743-4476-937f-908fd45954af", "sighting_of_ref": "indicator--760087fd-363c-4116-8fdd-0d076ea06134", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab77a045-9812-438f-b737-d05578260706", "sighting_of_ref": "indicator--d8981279-86c9-4bfb-8d60-0c9aef0cc552", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8751d1-cfd5-4ac4-b30b-915c2c562026", "sighting_of_ref": "indicator--dce13d12-daaf-47bb-a347-40d7430f3a4a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab2bb91-7f2a-4088-b18e-0fa30b2e2c1a", "sighting_of_ref": "indicator--35c73982-87b1-488f-9a30-a0b94c3b0065", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33f87b6-f30a-44f9-9c35-e575b4c54d1d", "sighting_of_ref": "indicator--35c73982-87b1-488f-9a30-a0b94c3b0065", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21b261c-48f4-4636-b78a-b4940cb9ce98", "sighting_of_ref": "indicator--ffb1bd62-bc45-4861-95aa-37208cbebc68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e4673d-af23-434b-bc31-d46c27d5346a", "sighting_of_ref": "indicator--9533935e-df87-4fba-b881-31baf7ddfa0b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e80760-45a0-40f4-b85b-9fcbfe349ef1", "sighting_of_ref": "indicator--ccdb1b62-8a6a-4474-8cdf-67127ad47e97", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a62eb6b-0704-4168-aff4-48deb88beb9a", "sighting_of_ref": "indicator--ccdb1b62-8a6a-4474-8cdf-67127ad47e97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9ab6da-8ea3-407d-9149-5b8375fec274", "sighting_of_ref": "indicator--b7c68a0d-cfc1-412b-8d85-38900f6222b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439f0abc-a94e-4480-8f20-5b161e553754", "sighting_of_ref": "indicator--1b4e8785-94a3-4fdd-b6ca-ffd96d6a9754", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748e8ffd-cccd-4987-acba-302755240f56", "sighting_of_ref": "indicator--fdc80a78-1ca2-4926-ad39-d320e5393b74", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ebc702-f861-4b6c-b52e-858836029de4", "sighting_of_ref": "indicator--d32000c0-6e18-44bd-94c6-feff3c4cb850", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0409459-015b-4ac6-a7e3-d9c6d78ccf92", "sighting_of_ref": "indicator--df58e764-b21a-4601-988a-767a2d7ba7bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bd3add-9f4b-4772-8d42-3ce058cab567", "sighting_of_ref": "indicator--06f40c20-2054-4ed3-8cf5-51a3815a1e58", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255effb2-f67e-4440-b70c-a10b96e7f1b1", "sighting_of_ref": "indicator--0e0834fe-e547-4496-9071-f2f992a92644", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e203e89-f6a7-470e-9dbf-2f48af14d824", "sighting_of_ref": "indicator--52058bd0-1208-46d3-bd47-41ac3b8fed6c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b8d78b-268d-4133-9708-b8f4076eaade", "sighting_of_ref": "indicator--08c55a87-d11e-4498-ad10-9c83dddbef70", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c03e37-024e-476f-aec4-329c5798697b", "sighting_of_ref": "indicator--e6bd06ed-6ab7-4014-be3b-433a9a287ba9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2cbf8e-96a8-41ed-afa3-e21b723733b3", "sighting_of_ref": "indicator--28feb7db-6db2-40e9-bef1-a3b8d058f193", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81940bcd-1d7b-4cd2-a7c2-9bc2d76cdc8b", "sighting_of_ref": "indicator--326b4b57-491d-4bf2-9661-2808863b26e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3573c1-e131-47e5-a288-132028d43b41", "sighting_of_ref": "indicator--debef8a1-2300-4f84-a1fb-54ebac59a8ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcb4202-96cd-45ab-b7b8-cf76ad5e760a", "sighting_of_ref": "indicator--3e752afa-10f9-470c-ba79-8d90081ee1f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c84ad7-a6d9-4d60-83ef-d3c66bd7619d", "sighting_of_ref": "indicator--cf017d56-7ba6-40bf-a783-b99fbc76b1c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ac0341-9d1d-4a78-b4a6-57da1146a600", "sighting_of_ref": "indicator--cf017d56-7ba6-40bf-a783-b99fbc76b1c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da084e9f-0a81-484e-bfa5-21ba4f3efdf1", "sighting_of_ref": "indicator--f5d88bf7-a6ab-42e8-8894-9cf2523e1408", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ec808d-6b14-494a-a196-548bf75e749e", "sighting_of_ref": "indicator--871991fb-f87a-4851-906a-1469f45431d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837ee2b4-4201-469e-815d-f7516de14bb2", "sighting_of_ref": "indicator--b228fda1-c28c-43e2-94d8-61ba205cbe81", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15bfb54-c288-4023-831d-1b2920cf47b1", "sighting_of_ref": "indicator--36f81329-b24d-4d90-abf1-28971493ed64", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7bb787-ada4-4a0f-879a-1b58ddf4a625", "sighting_of_ref": "indicator--531d9c22-76e8-4bf3-8003-ddfe33cccfa0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca47edad-ba04-4065-b0ff-4ff0daa2f1db", "sighting_of_ref": "indicator--2c8e250d-ca8d-4de9-967a-da28332cfe38", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3544fff9-9696-4e8b-bdb8-8132933a99b0", "sighting_of_ref": "indicator--3abc3a0a-76d8-42e9-90bb-20c371c45038", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b8ec66-a4a5-4d49-a999-c5f04dfe2934", "sighting_of_ref": "indicator--849fabe8-7cec-402d-9ec4-b6605724c470", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb23283-4b39-415e-86c8-449e1ac5b0da", "sighting_of_ref": "indicator--849fabe8-7cec-402d-9ec4-b6605724c470", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c0c5b8-1ad4-4260-8064-5f37ea0ab285", "sighting_of_ref": "indicator--e33229b2-14fa-4ac6-b994-6d362ee86ee5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a30325-fba0-4db1-b521-bed8391963ff", "sighting_of_ref": "indicator--ea4ad80f-d543-4237-bbfc-981b18091007", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb26050-21d7-4695-894b-83a14a22bb9d", "sighting_of_ref": "indicator--4f2021de-a242-4141-a1fc-f4816a119365", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc77825e-3a7b-46a1-bc47-093d139f0ead", "sighting_of_ref": "indicator--7251374b-95a5-4415-a578-9a638f15e4dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ade833-73ab-4843-9f57-2dad9d261df5", "sighting_of_ref": "indicator--b0c90682-9c47-4b77-9d35-cb5bc774d32c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60524fe1-04db-4a26-b060-1ef5fc1364b0", "sighting_of_ref": "indicator--457470d7-882e-48fc-a9e4-db70cb9c626c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068ec992-4b75-4691-93f3-4046445873aa", "sighting_of_ref": "indicator--377604bd-63a1-4234-b280-f0aa7f90e937", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d2a447-4750-4d45-a64e-220ec06845c2", "sighting_of_ref": "indicator--07e7ae98-7885-4088-8975-1dc79e7ddc65", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ec4a31-f782-4049-8d80-b4903a69bfe0", "sighting_of_ref": "indicator--5b049f40-d384-4433-81e3-d43dc52f9dd4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fbfd9f-e7c5-4821-b8af-7d514b0a8ca7", "sighting_of_ref": "indicator--6280757a-1a6e-410a-99ed-883e58fa8fdf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa83061b-cc9a-4761-82ae-2a938ef5a507", "sighting_of_ref": "indicator--6280757a-1a6e-410a-99ed-883e58fa8fdf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1101ee8b-df18-4b03-b5a7-09b51a31e6f3", "sighting_of_ref": "indicator--2a5c87f7-6903-46cd-ae3b-426aebb4f4a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2250b0c5-b046-4195-a8e4-cfed1f341cdb", "sighting_of_ref": "indicator--2a5c87f7-6903-46cd-ae3b-426aebb4f4a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4961e201-46ca-4ea7-b8a1-d83844f649c2", "sighting_of_ref": "indicator--4d7e117e-1b2f-4b26-8045-91795a7f5a4e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23aeb90-dc4a-4587-874a-527c2db052a7", "sighting_of_ref": "indicator--0f3b4cb6-9cba-4bab-bb0e-381eace47336", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4186975-ccd5-4b9c-939f-1f51798a4d31", "sighting_of_ref": "indicator--0f3b4cb6-9cba-4bab-bb0e-381eace47336", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fab8f6-d91b-4393-b2fa-60bc6b92766d", "sighting_of_ref": "indicator--5fbdf428-05de-4450-b28f-a95a132c99ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f84dba-8ecc-4c62-accc-d1cd99845cfb", "sighting_of_ref": "indicator--7f571661-d5a2-4d70-81dd-373329f821e5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f182aa4-5f38-4a34-8f9a-fcf20b5dfe51", "sighting_of_ref": "indicator--7f571661-d5a2-4d70-81dd-373329f821e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e3ce4b-28ee-4a27-8972-d92c7e162a7d", "sighting_of_ref": "indicator--cc0f48ea-7cd8-439e-91e0-0277ced121bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc88353-1b0a-4116-9f83-94bbfeacfd26", "sighting_of_ref": "indicator--df199a33-a4b1-4c7e-b635-8316f8db03ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4be279-4e2f-49c6-9857-a3dd7395223c", "sighting_of_ref": "indicator--df199a33-a4b1-4c7e-b635-8316f8db03ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01db06cb-a6ae-4f2f-bdf5-a23bfeb93a6d", "sighting_of_ref": "indicator--651a1af1-7323-440b-a3b8-e394f4a0de2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbad3c3c-c2f0-419a-88ba-fd7fce3e112f", "sighting_of_ref": "indicator--5a1ee19c-da41-4de0-92fd-74c7235943f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f9efee-0039-44ff-85f7-9ca50ac32c87", "sighting_of_ref": "indicator--5a1ee19c-da41-4de0-92fd-74c7235943f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b141719-48a0-4b9e-acea-fd9e95909a66", "sighting_of_ref": "indicator--e6955617-61d3-4c1a-8fc1-7a32fef6fd71", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb4d17b-a5ba-47c8-85ce-abeb224b7e43", "sighting_of_ref": "indicator--b746a230-b7b3-498b-9c41-a233085c1fa2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67791eae-dd37-4766-98f4-afd10bb6ad72", "sighting_of_ref": "indicator--eb73da6d-d9cd-45ad-8de9-6ecd25b348db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa925e1d-cae6-41bd-80dd-9e1e4cf8ed85", "sighting_of_ref": "indicator--76f0762b-a43d-4f69-92e9-d41d060726c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866981ee-e6ca-4142-a2c6-b0128747e2fa", "sighting_of_ref": "indicator--035ca247-b454-462f-9da3-6634563284cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e92311a-76c1-4f4f-aa7d-99e206adb79e", "sighting_of_ref": "indicator--035ca247-b454-462f-9da3-6634563284cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583dbc6e-0678-40c0-a16d-d41ccf2f99ad", "sighting_of_ref": "indicator--5b81ade2-db9a-44a5-8ea1-c11ac42a76a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f692f1f8-56d8-4ab4-910e-8e7f895bc7cc", "sighting_of_ref": "indicator--860d0312-8ca3-4cf9-8ede-85ae2853eaa3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ffe9a4-cba7-49b3-9c01-d67b1509fb1f", "sighting_of_ref": "indicator--860d0312-8ca3-4cf9-8ede-85ae2853eaa3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c32623d-9270-4d35-a420-26391dbe71e3", "sighting_of_ref": "indicator--bab604ba-c9c6-4e0f-9060-cae528795cef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a78394e-8df8-4534-a92a-0a784a93def3", "sighting_of_ref": "indicator--acdac624-3838-4521-baf6-86071deaa773", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b637c40e-df26-4c84-ae26-bca75fa7b443", "sighting_of_ref": "indicator--acdac624-3838-4521-baf6-86071deaa773", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f713c961-6b64-47a0-9b4f-6044c8fffcd0", "sighting_of_ref": "indicator--4ea339b5-0a92-4391-9cd0-3b0d19c238b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835a2e6b-7717-4283-8581-6dc9b5219347", "sighting_of_ref": "indicator--83daa79f-f948-41de-9eea-df6f7611091e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a9630c-7fb1-4769-a6e0-9ee8601f1176", "sighting_of_ref": "indicator--83daa79f-f948-41de-9eea-df6f7611091e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cf637e-451b-4f08-8746-7413b8050afa", "sighting_of_ref": "indicator--dc859046-7080-473f-a60f-984ab723b900", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdfc513-dc81-41c3-8ced-67d1e42ca1bb", "sighting_of_ref": "indicator--dc859046-7080-473f-a60f-984ab723b900", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e61c762-b0de-4bd7-a5f3-9e5d579dc19c", "sighting_of_ref": "indicator--a5226456-be02-4628-974b-ebd5f6b3e971", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa01e743-b640-47a7-a222-8e4a9fcbab6e", "sighting_of_ref": "indicator--a5226456-be02-4628-974b-ebd5f6b3e971", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29245d4-513a-4e4c-b6ec-9ac5819ce6c7", "sighting_of_ref": "indicator--70662335-0759-4603-a304-3e8a37a7a379", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56de43e9-ec63-4d6e-9524-e4488c4b3446", "sighting_of_ref": "indicator--2f646544-2f97-40ca-a263-f9a41e2fc4c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e80c58-7f18-4c64-b0a4-07e6a86dfbd4", "sighting_of_ref": "indicator--401b690d-7f54-4e6a-a7f2-b702a65cbe03", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779e27da-0a44-48f1-b552-1b5c138948fb", "sighting_of_ref": "indicator--401b690d-7f54-4e6a-a7f2-b702a65cbe03", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052cdc01-f407-42f6-97e0-6aa59e889c98", "sighting_of_ref": "indicator--7e918f45-756d-4fcc-8e0c-7a028889cca0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b9dd04-915b-4a4f-a3d3-283f39da3d3c", "sighting_of_ref": "indicator--7e918f45-756d-4fcc-8e0c-7a028889cca0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7727c53a-4e63-4686-aca7-3f33dbe0685b", "sighting_of_ref": "indicator--00958fc0-bb1a-4a96-8ca7-7c2972cf7b10", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03adb6ab-d883-457f-8506-d464a6d48ac4", "sighting_of_ref": "indicator--9ebee985-2f28-42e2-8f9d-712a6c5f7b0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd4f578-d580-46b3-9943-8e011540d1b8", "sighting_of_ref": "indicator--56e9f44a-cdbf-4704-937d-0670f88f43e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7808f6d8-6a82-4b74-8d2a-34f8070c1e7d", "sighting_of_ref": "indicator--b1787d91-a923-4690-b63c-6855a5ddeab1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff308f4-8460-4727-ac9c-f65117e162e9", "sighting_of_ref": "indicator--842b47a8-7587-4fc7-b026-1f62618c6913", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29060a42-a089-42e4-8afe-a969bd8b9880", "sighting_of_ref": "indicator--b33fea95-67ee-49ac-be96-787102213098", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca1120f-ea7a-4a2b-b9a6-9054a63db40a", "sighting_of_ref": "indicator--36ad8a1e-1390-4972-a32c-e9c4db1bf2d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6415411-07fe-4c5d-a368-124e8e08b7be", "sighting_of_ref": "indicator--0e4493f2-88e9-4d98-83df-7e100e6a2fee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fc42f8-e528-4c9d-a8c6-81827001c5de", "sighting_of_ref": "indicator--5d880702-efa6-4422-9a77-c2bc72ea7d99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdaafa4-0b02-45a2-80ae-54666b15dfce", "sighting_of_ref": "indicator--20b77236-7a15-45e7-a0ea-9e1bd7e99171", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39da9ad7-09e2-46ee-86da-a18e205cdfa0", "sighting_of_ref": "indicator--50697c52-2055-4855-8502-eb7dd16d800c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6f5d24-309e-4f03-bd9f-4494222f07f4", "sighting_of_ref": "indicator--3db43da2-7cad-416e-9189-07a920b78f5e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d21803-98cd-4f98-a0d4-077cf52a91ab", "sighting_of_ref": "indicator--3db43da2-7cad-416e-9189-07a920b78f5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d28577e-86db-469b-8b75-8ab6d27dc1e7", "sighting_of_ref": "indicator--202f2fdf-176f-4087-85df-8710e025e365", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa77d462-f62a-4225-826e-1353d685efe3", "sighting_of_ref": "indicator--e9f5fae2-d0e1-49b6-bf1b-cebfb93c97e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3a4e65-cc60-4875-90dd-2dc6e3260b3b", "sighting_of_ref": "indicator--3a79bc40-e517-4a50-905e-e3496e8f4192", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910d3a7f-92e7-4dc7-b139-18dc91ee8e02", "sighting_of_ref": "indicator--3a79bc40-e517-4a50-905e-e3496e8f4192", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122fa45d-8f3a-417d-86e7-7f4fd837b792", "sighting_of_ref": "indicator--909d4e0d-ff32-4096-8b68-0bbc2e76652c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1eb3f5-2885-4b53-8a1e-87bbb092ca61", "sighting_of_ref": "indicator--909d4e0d-ff32-4096-8b68-0bbc2e76652c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ea70c8-d248-42b5-856e-f21ce236c570", "sighting_of_ref": "indicator--9861fc8a-efc2-4ca0-be6b-0d37dcd64c24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8060a6c-824d-4c7e-85be-e2a4028b6a7b", "sighting_of_ref": "indicator--33218147-787a-472b-a8a0-852617a4b1a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baaaeec-dd0e-4a70-8dc7-ab83930309f6", "sighting_of_ref": "indicator--b8c82d64-e18e-4d68-b747-8e85fbf85a1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0376ec33-97c4-41e8-b028-29f135064b50", "sighting_of_ref": "indicator--1f8bc761-1f13-4748-8c16-060b310df375", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15551d21-87ef-4f4d-baf7-cada31499277", "sighting_of_ref": "indicator--74ef1402-a417-47b9-994b-3ca0c5d98ee2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da9902d-af6d-47f4-9392-c7e1e6b85385", "sighting_of_ref": "indicator--349cd6b9-d52e-47d1-ade9-f59b391e76d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e446a24-a0c8-401e-b33d-8dfdd36a98d2", "sighting_of_ref": "indicator--ff5800f6-1250-46d1-a5ff-9dfe80705969", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de6f5b9-3971-4fc7-9dbb-75ab87f0a573", "sighting_of_ref": "indicator--3513258c-d74d-417f-98a9-f397d727468c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378c8a18-be83-4252-aa9d-a30cbb613a38", "sighting_of_ref": "indicator--c728c924-c0d7-4212-9398-9f482676b4ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bfe4ed-47bb-47f1-a041-199c3fc24d4f", "sighting_of_ref": "indicator--a51e8ced-af84-4031-a3e0-a8708eba2c31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162e2b25-ced4-4e62-babd-17a8833a9ee4", "sighting_of_ref": "indicator--32cf0180-3eb3-4c8a-9ca9-7273f8bc038f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96054507-73b0-4876-b10d-7218d49988d7", "sighting_of_ref": "indicator--563942da-2a0d-4b42-8450-562dd2ba6f3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383b6cef-8366-41c4-a60d-2cfc6a4ef918", "sighting_of_ref": "indicator--7090a950-8581-496e-8a1a-d97b2d3a420b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38715fc2-0eb8-4074-990e-011cec51f420", "sighting_of_ref": "indicator--6f7b187e-9005-44cf-8230-c1764a73f6eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5fbe59-bd7c-459a-aaf3-7c1f3c9fdcb7", "sighting_of_ref": "indicator--1dc3e773-1551-482f-b007-6b1ec1d4febb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d345c7-5d57-457a-bf29-042e90560894", "sighting_of_ref": "indicator--e0d63f6e-eaec-43cf-8087-d56ed9e30b69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb33106-c35a-4b5b-bdfd-937c3a6bde1d", "sighting_of_ref": "indicator--f947dc87-584c-40b1-b8fe-7bf20a6468b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6725bb-a419-4d55-8dfe-b416f31c5c85", "sighting_of_ref": "indicator--3043ee01-76eb-478d-9bc0-a1c8ba9b7a80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2facbbb-4605-463f-afbf-85d8d09b617c", "sighting_of_ref": "indicator--8ccbfaba-385b-418a-99e4-e018e552bc40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97a33f9-7dbd-4078-bb20-8634257b83cb", "sighting_of_ref": "indicator--a23bfb55-a971-4e0e-82b0-a1983ecaa195", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbafdb2f-8d48-4824-81dd-5ffa7112e8b8", "sighting_of_ref": "indicator--8ca22e12-159c-4b91-a996-ad16fa2a42dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb9c4f6-adc1-4940-aa21-627f0a00432c", "sighting_of_ref": "indicator--1b5c68e9-d897-438c-b8b4-61c40807fd5b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea018eb-2d40-45b1-93f4-ab34172fe3d9", "sighting_of_ref": "indicator--1b5c68e9-d897-438c-b8b4-61c40807fd5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9449b8a6-19b1-40ac-8ebf-df6fdd13b07e", "sighting_of_ref": "indicator--8458eca3-62b8-4d55-af9a-ab3bd16350bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ee5428-759a-459e-8b25-f666e61a2bed", "sighting_of_ref": "indicator--8458eca3-62b8-4d55-af9a-ab3bd16350bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7503e74-85dd-4530-aa7f-d5f964b9f7b4", "sighting_of_ref": "indicator--b0627329-52d9-4828-a34a-2d2cab05a127", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342ca688-afc9-4d34-824f-2bee84589f30", "sighting_of_ref": "indicator--b0627329-52d9-4828-a34a-2d2cab05a127", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981d5ac3-bf0e-49ea-a8a4-c8ebb2ce2cb1", "sighting_of_ref": "indicator--71ba5fa6-0427-424c-9b51-60561b4d7eb7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d03d02e-4729-469c-bd70-5b049843eec5", "sighting_of_ref": "indicator--71ba5fa6-0427-424c-9b51-60561b4d7eb7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca0b95e-76e4-4a76-b659-df55106940fc", "sighting_of_ref": "indicator--1ae7de64-8a8b-46a0-b33e-41d4d48f0e3e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c70a54e-e885-4242-8d2c-21da797500bd", "sighting_of_ref": "indicator--1ae7de64-8a8b-46a0-b33e-41d4d48f0e3e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f57735-7022-4891-b8cc-80f38215e0e6", "sighting_of_ref": "indicator--fd3bd330-c9e9-40a1-93dd-970f2cb5ba02", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d87dc3-8db0-410b-b81d-b68b56473dad", "sighting_of_ref": "indicator--fd3bd330-c9e9-40a1-93dd-970f2cb5ba02", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916c6178-e1b1-40e8-801b-c0aee82f64a1", "sighting_of_ref": "indicator--29523223-a2c5-4523-b2e6-abfec3fb1f1b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2431a9a-5492-4d5d-92b2-68367fdee54c", "sighting_of_ref": "indicator--29523223-a2c5-4523-b2e6-abfec3fb1f1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c308ac1-7040-49e7-bb64-c75bb5b21439", "sighting_of_ref": "indicator--cfbf9c23-5617-4fb0-9dd3-8236777ff1f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1c9cd8-6001-412b-b959-6ada627f8579", "sighting_of_ref": "indicator--c5575454-8ca8-453d-851e-17de8bf6dc40", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060f8107-d400-498d-834c-b2705be55839", "sighting_of_ref": "indicator--c5575454-8ca8-453d-851e-17de8bf6dc40", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0055d8f-f88c-4be6-84c5-89061d1e097a", "sighting_of_ref": "indicator--58106b3f-8986-4dcb-b2c9-b9dd998fc77e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240356e8-6b94-4d13-9b2a-627ec9e2db03", "sighting_of_ref": "indicator--58106b3f-8986-4dcb-b2c9-b9dd998fc77e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c996c45d-c240-45d2-95bf-057efc932fac", "sighting_of_ref": "indicator--22480e39-5ae5-4f37-9061-eb30e72fb049", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c76896-5c3b-47f8-addb-7ce0cbd402ff", "sighting_of_ref": "indicator--22480e39-5ae5-4f37-9061-eb30e72fb049", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe9afcc-6037-4666-87df-f1a232cae696", "sighting_of_ref": "indicator--e456795f-dda6-49d4-9149-e4348dbcd81f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141fd9ee-5ce5-411f-bf0c-3a912096226f", "sighting_of_ref": "indicator--e456795f-dda6-49d4-9149-e4348dbcd81f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445d6164-d9a0-49f8-905c-69db315c3291", "sighting_of_ref": "indicator--b00c230b-fb90-4de0-a708-c49d7934e5c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293a8eab-a074-4114-b873-1710906d8791", "sighting_of_ref": "indicator--b00c230b-fb90-4de0-a708-c49d7934e5c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db2fbaf-8cfd-457c-a945-233cd9b7f5ac", "sighting_of_ref": "indicator--0358773a-c75a-4190-8281-19ae3595526c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da882114-d9e9-45ab-80fb-789c5615b113", "sighting_of_ref": "indicator--0358773a-c75a-4190-8281-19ae3595526c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cf84a3-6bed-4ed7-87da-5defb7322f38", "sighting_of_ref": "indicator--6ce71a8c-3f41-43da-8279-1c1df437cdba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991c6a0b-e23c-4a49-ba07-077b0efdbdde", "sighting_of_ref": "indicator--6ce71a8c-3f41-43da-8279-1c1df437cdba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c581d8f-04a7-4baa-b445-74d3959661bf", "sighting_of_ref": "indicator--9a89ee95-2f39-4ea3-bfc4-8632901efe1d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6addfba4-dc0b-4cb6-aa12-6090bc35c6db", "sighting_of_ref": "indicator--9a89ee95-2f39-4ea3-bfc4-8632901efe1d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688dfa88-3085-41de-a010-fec4e4a2017c", "sighting_of_ref": "indicator--0506a798-c947-4b42-953c-09fa40856ef5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1c008c-5e36-4f03-99b7-a21bf25078df", "sighting_of_ref": "indicator--0506a798-c947-4b42-953c-09fa40856ef5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca736c9-3edd-4202-9e72-5da5e9e5dd6a", "sighting_of_ref": "indicator--7b2709ac-49a3-4ca5-9f7f-536971c80870", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a86365-30db-48f9-ae9c-5e66246f7ec4", "sighting_of_ref": "indicator--7b2709ac-49a3-4ca5-9f7f-536971c80870", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21899b40-0218-4222-89bf-f077aff92ced", "sighting_of_ref": "indicator--3b992199-f104-4112-9026-38ac3fc39612", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0b8ce0-02ef-484d-a85e-6bdea118f794", "sighting_of_ref": "indicator--3b992199-f104-4112-9026-38ac3fc39612", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664710b1-ddb6-4c2e-b17b-6feabc49589a", "sighting_of_ref": "indicator--56995785-7cb7-49d5-a2af-343e24469f82", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b8ea93-80d3-48eb-8fdb-ebf4cac34594", "sighting_of_ref": "indicator--56995785-7cb7-49d5-a2af-343e24469f82", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0663a1ec-e1fc-4ebb-abdb-edccf6503c49", "sighting_of_ref": "indicator--8d8fb3f2-06b3-44f1-a044-f726602b5f2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8830c7ba-2a28-4f23-a2f1-504e8ab1f4f1", "sighting_of_ref": "indicator--8d8fb3f2-06b3-44f1-a044-f726602b5f2b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76eb2b85-bde2-494c-932b-30b779955d2b", "sighting_of_ref": "indicator--02c1fde8-fd7a-482b-a8d9-dd6176544d14", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e89db3-f9ed-42fa-923b-3053ce2b0303", "sighting_of_ref": "indicator--02c1fde8-fd7a-482b-a8d9-dd6176544d14", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d27a5a9-8395-433e-b408-90234acb55ad", "sighting_of_ref": "indicator--8c3dd2d9-8adb-4e97-92be-6370a3fe7a68", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb9b9ef-3900-4e5a-9e15-52c81677af82", "sighting_of_ref": "indicator--8c3dd2d9-8adb-4e97-92be-6370a3fe7a68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43d6ede-7a5f-4d23-aca4-476fd7cbfc49", "sighting_of_ref": "indicator--81b18cc6-2857-414a-8fd0-7643ddefe47f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224a3244-04cd-4320-bcd0-1eedae11269e", "sighting_of_ref": "indicator--81b18cc6-2857-414a-8fd0-7643ddefe47f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4984cd-efcc-4c13-8cee-c605f337bdea", "sighting_of_ref": "indicator--11bcd05b-b347-4c37-ac7f-83183891f90e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6ec234-9472-450b-b0ca-29a4419ac7ca", "sighting_of_ref": "indicator--11bcd05b-b347-4c37-ac7f-83183891f90e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35592d2d-aeb0-47a5-88b8-0d97b6285675", "sighting_of_ref": "indicator--f3165cee-02ba-4557-a442-43bdbfb64439", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53262338-7bdc-403b-aaa3-d87117c61f83", "sighting_of_ref": "indicator--f3165cee-02ba-4557-a442-43bdbfb64439", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dff736-141d-46c6-9ebf-f05f4bd61a20", "sighting_of_ref": "indicator--b7675f96-311e-4a33-88d6-a157fb3cc104", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cfc791-1e9a-4477-b357-d34d9c6b94e7", "sighting_of_ref": "indicator--b7675f96-311e-4a33-88d6-a157fb3cc104", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905d90e1-5913-4cd2-bb6d-0bbac3d91412", "sighting_of_ref": "indicator--ffdf6bd2-49f8-4be0-a1ec-0b6e1c7bc6ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447e2efb-8063-4850-8b99-8e22522a12fd", "sighting_of_ref": "indicator--ffdf6bd2-49f8-4be0-a1ec-0b6e1c7bc6ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b249bf10-0cdb-4963-a4cd-4c3edec8a25d", "sighting_of_ref": "indicator--09b4cb70-d01f-45a8-b2a5-1b762e2b0338", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8bfaf3-855f-4919-b748-dc4ef41fc87f", "sighting_of_ref": "indicator--09b4cb70-d01f-45a8-b2a5-1b762e2b0338", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40ee194-802d-4e34-8e1c-f1d7468f0825", "sighting_of_ref": "indicator--61317267-1a9c-4f45-996b-2c03a8bd8d86", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176bbc5b-246d-4ceb-8694-3dc5a6816c40", "sighting_of_ref": "indicator--61317267-1a9c-4f45-996b-2c03a8bd8d86", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042e8d5c-5398-46ff-a10f-6b2f35f83e4e", "sighting_of_ref": "indicator--0a0d18eb-12f4-4524-8b7c-3390d8274f61", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f27cd99-62e0-49c8-aedd-ace885f39a75", "sighting_of_ref": "indicator--0a0d18eb-12f4-4524-8b7c-3390d8274f61", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1c89ad-e8cd-403e-ba38-53ab207cd5cb", "sighting_of_ref": "indicator--25958e14-0ab3-4393-b3d1-79caf5de8615", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70744285-b41b-4701-907f-60bcdedebe2e", "sighting_of_ref": "indicator--25958e14-0ab3-4393-b3d1-79caf5de8615", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ec6337-c0c0-4404-82b1-bd4f0713ee37", "sighting_of_ref": "indicator--16807f09-61cb-49b1-87f9-55a4e664051c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba553547-8bef-404e-912a-995c814dfd13", "sighting_of_ref": "indicator--16807f09-61cb-49b1-87f9-55a4e664051c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d968f4-90ff-460c-820c-b6032308a36e", "sighting_of_ref": "indicator--93bfbffb-d6be-4e5b-9f3d-776c02221c49", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137db7da-0d27-4379-8090-016986dc6687", "sighting_of_ref": "indicator--93bfbffb-d6be-4e5b-9f3d-776c02221c49", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926129be-7b22-442e-a9f4-404ef87e5114", "sighting_of_ref": "indicator--a0bbe695-4493-4ad0-8949-4b84b2b7b93e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2163c3b2-9fca-410b-8841-3f965fab19a0", "sighting_of_ref": "indicator--a0bbe695-4493-4ad0-8949-4b84b2b7b93e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f488d96-a30b-41d7-831d-84d21acbc2d2", "sighting_of_ref": "indicator--f79a7b65-43a3-407c-8b72-d865ceabbb01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab40e6a6-da5a-4cc5-b379-130f06864842", "sighting_of_ref": "indicator--f79a7b65-43a3-407c-8b72-d865ceabbb01", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb969241-d4d7-49e2-927d-0e59cbd08005", "sighting_of_ref": "indicator--ec0d0ec0-3b6e-4e93-af9c-52a8e0572bb6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea327766-c657-407a-ba29-efa89f6ddf2e", "sighting_of_ref": "indicator--ec0d0ec0-3b6e-4e93-af9c-52a8e0572bb6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596d6f8e-89f6-4161-8532-7a6d5b630b7a", "sighting_of_ref": "indicator--c752e222-8f43-410e-aeab-15ed2545dfc6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b37fe2-6cb7-4756-b05c-fba8ddb1b7b5", "sighting_of_ref": "indicator--c752e222-8f43-410e-aeab-15ed2545dfc6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce4cff4-9462-4ad6-8377-27ff09393a13", "sighting_of_ref": "indicator--98c8da15-1f3b-4eab-9e74-f18c7e085a9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65ad534-11d7-46b1-b522-348c575766db", "sighting_of_ref": "indicator--98c8da15-1f3b-4eab-9e74-f18c7e085a9a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05967d2c-ffa1-4fcb-ac56-2bc11cf866c8", "sighting_of_ref": "indicator--1373d740-c27f-43f1-8d32-7c2ae4aadacb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad038b1a-916a-4d9c-ad97-54fdb6ad09af", "sighting_of_ref": "indicator--1373d740-c27f-43f1-8d32-7c2ae4aadacb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2890d280-89b4-4dc6-8da8-d2b46512558d", "sighting_of_ref": "indicator--5cce637c-6a2f-471a-815e-0bf46587f4b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bf9b6e-536a-4c3c-a074-327cbafacd47", "sighting_of_ref": "indicator--5cce637c-6a2f-471a-815e-0bf46587f4b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d138149f-1026-4973-98c4-0a1619b90c2b", "sighting_of_ref": "indicator--be32a90b-e0a2-41c5-8b66-04666f8873a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4974dd-f2f0-47c6-93b3-e954e2a2dd16", "sighting_of_ref": "indicator--be32a90b-e0a2-41c5-8b66-04666f8873a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1700264-73cd-4476-89de-8c041775d41e", "sighting_of_ref": "indicator--590b173c-c478-4ff5-a8d6-9f70ad3f5d0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b7bbca-b425-49d3-868f-782bdf3a4ae6", "sighting_of_ref": "indicator--590b173c-c478-4ff5-a8d6-9f70ad3f5d0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6c9165-7cf6-4ec2-8d8a-2f02741ea345", "sighting_of_ref": "indicator--6b966aca-eb7d-4e90-b45f-ad1be22831e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adde1bdb-24ca-47e8-947d-d46a15806003", "sighting_of_ref": "indicator--6b966aca-eb7d-4e90-b45f-ad1be22831e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcc2049-fa1a-4ab6-a300-f3042f35550e", "sighting_of_ref": "indicator--4e6fca48-6e62-4100-9d01-bf8e20b7ae06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db9e0a9-77c8-45ec-a34a-2c498da72f0c", "sighting_of_ref": "indicator--4e6fca48-6e62-4100-9d01-bf8e20b7ae06", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e0a9ac-31f3-4242-a8e9-5f766b944c9d", "sighting_of_ref": "indicator--1ae03616-fdb1-4f69-a3c7-ad5eb26cfb2e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c4ac40-98d5-47bc-ae33-b0c0a20ce2bc", "sighting_of_ref": "indicator--1ae03616-fdb1-4f69-a3c7-ad5eb26cfb2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dcae71-9fb8-4c68-8cea-0aad13447c40", "sighting_of_ref": "indicator--039e2fe6-92e4-4181-ad4d-d1534ca14294", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9ddc45-d5bc-47b4-82f4-04847fa055fc", "sighting_of_ref": "indicator--039e2fe6-92e4-4181-ad4d-d1534ca14294", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe160826-31b2-46d3-8094-cb68120d7a83", "sighting_of_ref": "indicator--ba76be8f-d8a7-4881-a0cf-a6b7217704a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe48ae5-1cc9-4735-8dbe-f55bbb20db06", "sighting_of_ref": "indicator--ba76be8f-d8a7-4881-a0cf-a6b7217704a5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d77e772-71d4-405b-a1f0-cb757862cbca", "sighting_of_ref": "indicator--a93f2395-ec3a-4efd-a457-9bf87fedf98e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8743d33-c2f6-42ce-9524-4ee9500a01bd", "sighting_of_ref": "indicator--a93f2395-ec3a-4efd-a457-9bf87fedf98e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cb0c2a-ef3e-4428-bcab-9c2bf25889b1", "sighting_of_ref": "indicator--b5b5d29e-5e5f-4a8f-944c-10a5149c521e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3405f93a-37dc-4865-9050-c861ab7e2f09", "sighting_of_ref": "indicator--b5b5d29e-5e5f-4a8f-944c-10a5149c521e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f44d19a-8a81-4b68-93dd-6fbf794bfba2", "sighting_of_ref": "indicator--e368a2e6-f746-424f-9131-85f6fd739a74", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4836d1-1975-4e82-9b64-3d7e169b11a2", "sighting_of_ref": "indicator--e368a2e6-f746-424f-9131-85f6fd739a74", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fe92b2-2515-4e48-b25f-e70d606ab7a6", "sighting_of_ref": "indicator--9155f753-1a0e-43e5-9577-b2f23150cf54", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d5279a-0b98-4081-8d59-11c4402915e2", "sighting_of_ref": "indicator--9155f753-1a0e-43e5-9577-b2f23150cf54", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d46bba8-b01c-4a8b-9664-953b65832376", "sighting_of_ref": "indicator--5f44b242-794f-4bd8-b320-1671bd0cf75b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26de8df0-da1d-47a2-8cb0-bce9aaa23bdd", "sighting_of_ref": "indicator--5f44b242-794f-4bd8-b320-1671bd0cf75b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996eb3a1-59f0-4923-8468-be228136a51b", "sighting_of_ref": "indicator--afc09de0-68dc-4d42-8c27-316a0b157ce0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e63643-f74d-4c4d-8251-b515f2c9ce3d", "sighting_of_ref": "indicator--afc09de0-68dc-4d42-8c27-316a0b157ce0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10999dc4-a390-4307-86e2-888bd23dc4b4", "sighting_of_ref": "indicator--f983913f-94e1-4ed4-9684-cdd862d6edad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8612a700-41b6-4f8b-a190-ebd83e260204", "sighting_of_ref": "indicator--f983913f-94e1-4ed4-9684-cdd862d6edad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacd0273-06f9-486f-9326-5b83d8d5ff7e", "sighting_of_ref": "indicator--0079b704-2012-4b3b-a07b-96b8ac05b9f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0e4cf2-c77f-4664-8b2e-5db941831719", "sighting_of_ref": "indicator--0079b704-2012-4b3b-a07b-96b8ac05b9f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a645c228-dc03-4e68-9b90-0210cc7a181e", "sighting_of_ref": "indicator--73f2eac9-68cf-4a31-b81e-791887b6b9b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2410cee9-8e31-4990-9b95-ab63730503bc", "sighting_of_ref": "indicator--73f2eac9-68cf-4a31-b81e-791887b6b9b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e402732b-b65d-4e19-b204-bc1a86e8394f", "sighting_of_ref": "indicator--b6f91b12-8d8c-41b6-a52c-0e147ace02a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2bf99d-8875-4926-98a2-1b861a1c91fe", "sighting_of_ref": "indicator--b6f91b12-8d8c-41b6-a52c-0e147ace02a6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae4deda-2499-45b0-af6c-417e13d96511", "sighting_of_ref": "indicator--74b92e15-d819-4adc-9748-02f93887535d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e6cc39-29bb-4bc8-ae1a-d72765ab9122", "sighting_of_ref": "indicator--74b92e15-d819-4adc-9748-02f93887535d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4149a4a1-1657-4d8c-b0a8-501ca7cb2cfc", "sighting_of_ref": "indicator--bd5b3c5c-3a54-4316-84d8-b7005a777f96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958f363d-1517-4942-986d-741563e2c74b", "sighting_of_ref": "indicator--bd5b3c5c-3a54-4316-84d8-b7005a777f96", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f506c754-9c2f-4aad-a07e-7049218d72c2", "sighting_of_ref": "indicator--f6e77800-5be1-4888-8a7d-f9451407c41d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7830657-edfa-4a40-bf59-d6204a2cf27e", "sighting_of_ref": "indicator--f6e77800-5be1-4888-8a7d-f9451407c41d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c135aee-cd07-4f1d-9316-be8bcf9c7817", "sighting_of_ref": "indicator--0b8aab27-ca3e-4184-8847-d9acf556cfb2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37617f70-869d-409d-a7a5-f28da7ed6d0b", "sighting_of_ref": "indicator--0b8aab27-ca3e-4184-8847-d9acf556cfb2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcabcc57-dff1-4551-8287-15a300f2ed4f", "sighting_of_ref": "indicator--5fcea4a7-4ec9-4e52-802d-546afb9e7ee6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4592ef19-520b-409e-b0fa-72884bca6c5f", "sighting_of_ref": "indicator--5fcea4a7-4ec9-4e52-802d-546afb9e7ee6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ceba78-d9fc-4cb6-9101-550929b0379d", "sighting_of_ref": "indicator--7fdd2161-24f7-4802-a68f-167f5255c099", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f54758-8b4f-4604-9bc5-e062014913bd", "sighting_of_ref": "indicator--7fdd2161-24f7-4802-a68f-167f5255c099", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be77c50-3274-483a-b2c0-15b7b2f00ce3", "sighting_of_ref": "indicator--39618978-0b00-4be8-bace-16786c044326", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51aa5c6f-cf9f-40f3-bbfc-368a9ca00c2f", "sighting_of_ref": "indicator--39618978-0b00-4be8-bace-16786c044326", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f095669-238d-4bf5-8d78-02d30d7f8935", "sighting_of_ref": "indicator--eec634fb-9aca-4195-8a11-3518dc518abb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7700c727-e4b7-4d12-b0e0-213ab7c785de", "sighting_of_ref": "indicator--eec634fb-9aca-4195-8a11-3518dc518abb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d3bf2d-4ccd-4acc-a5eb-a9588ab0e21e", "sighting_of_ref": "indicator--4dce8f9d-c58d-4210-93cf-db377f078579", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc28e1b-fba1-4aa9-ab9a-d55e0b19bce5", "sighting_of_ref": "indicator--4dce8f9d-c58d-4210-93cf-db377f078579", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dd9421-4fd1-4d16-a3b0-bdc5082e1092", "sighting_of_ref": "indicator--4f38b892-b9fe-4b47-814c-657649a65135", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9ddc09-2e05-44a2-8c4e-c75fc6adf1b4", "sighting_of_ref": "indicator--4f38b892-b9fe-4b47-814c-657649a65135", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cb81a6-7303-4f4f-84d9-487e06699c2d", "sighting_of_ref": "indicator--bb2576aa-1e3d-439d-9181-9caf63f6637b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d837f1-e696-43ed-b663-152e01451d15", "sighting_of_ref": "indicator--bb2576aa-1e3d-439d-9181-9caf63f6637b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981519fc-ca01-4b60-844f-529fa78aa188", "sighting_of_ref": "indicator--db06f681-5d0b-4d55-8ed6-13525faf4e29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa03187a-4ab3-4d64-b7b7-1b14a73ab7e0", "sighting_of_ref": "indicator--db06f681-5d0b-4d55-8ed6-13525faf4e29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2d44ff-316b-43d0-9898-6172ffe35513", "sighting_of_ref": "indicator--e90d32f3-cd9b-46e0-a8b9-b5dcd60cce31", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf923225-993f-419c-a375-a1ef81ebd3ca", "sighting_of_ref": "indicator--e90d32f3-cd9b-46e0-a8b9-b5dcd60cce31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd5ff0d-41e3-42a5-8147-96f84936571f", "sighting_of_ref": "indicator--19917efa-05b1-4e14-a414-43f8df1ea8ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2146c88a-2e29-4b5f-a553-c063886d679f", "sighting_of_ref": "indicator--19917efa-05b1-4e14-a414-43f8df1ea8ca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10428b21-6ad3-42b9-b5bc-7ddf18d90724", "sighting_of_ref": "indicator--b40d3397-7f13-4df4-98cf-46df27427a34", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec22285c-7924-4ec0-a167-279aee950f2c", "sighting_of_ref": "indicator--b40d3397-7f13-4df4-98cf-46df27427a34", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f218fb-1c24-4410-88ac-4a33fe692c07", "sighting_of_ref": "indicator--c126f84a-488f-4952-a614-6e81730b2b4c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba8e753-7dc5-41e4-ae65-2b22ebc73e69", "sighting_of_ref": "indicator--c126f84a-488f-4952-a614-6e81730b2b4c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fc75e5-c13e-4616-906a-8dc296426019", "sighting_of_ref": "indicator--afbc7143-5589-4563-9218-72c0c327005e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c26630-ff3b-4d33-8f2d-ea14eb1c7503", "sighting_of_ref": "indicator--afbc7143-5589-4563-9218-72c0c327005e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b0e62d-d3b0-4991-8ed8-aaead8d2b5ad", "sighting_of_ref": "indicator--449fecf8-a2b0-4750-94f6-d8642692c88e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91da38b8-b3ac-47c8-8311-f6aab5445bd8", "sighting_of_ref": "indicator--449fecf8-a2b0-4750-94f6-d8642692c88e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d342f60-327c-4ad0-805f-828dd5ecb98a", "sighting_of_ref": "indicator--f59fe90a-69ab-4d6f-9e27-8802645ee96d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395afdc6-8d09-4ce3-9f5e-e9e495cfd062", "sighting_of_ref": "indicator--f59fe90a-69ab-4d6f-9e27-8802645ee96d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ba681c-55d3-4c86-911f-a17865b397ef", "sighting_of_ref": "indicator--35b8a7a9-4b20-423e-8dd9-84bf5cc386e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26922c1d-91a2-4212-9195-d9b13b3a7e2b", "sighting_of_ref": "indicator--35b8a7a9-4b20-423e-8dd9-84bf5cc386e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02162e1-31ed-4f9f-b459-7510d18634a8", "sighting_of_ref": "indicator--522d48b2-b664-411c-870b-63df6e8fe56b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58f7b00-bbef-440c-b799-0c89c05a4306", "sighting_of_ref": "indicator--522d48b2-b664-411c-870b-63df6e8fe56b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0470a54-0e88-4f35-908a-506430d47c6e", "sighting_of_ref": "indicator--44abcccd-259c-485d-bd7f-910384a7b153", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1805a3-5031-44d0-b7a1-4964ceeef6ab", "sighting_of_ref": "indicator--44abcccd-259c-485d-bd7f-910384a7b153", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b18123-2acb-40f8-beef-c24fc016da4a", "sighting_of_ref": "indicator--4321cc0c-920b-493a-b4bb-b8f9e02c338f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a10649-145b-440e-a4ee-3c5ea11ee5de", "sighting_of_ref": "indicator--4321cc0c-920b-493a-b4bb-b8f9e02c338f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd04fa1-f82b-4aec-93f8-20c3650fe4f1", "sighting_of_ref": "indicator--75d64cd2-6916-4777-8285-f4bc5b9ea8b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe3ef8c-141d-4446-b4d2-6a82c90f08b7", "sighting_of_ref": "indicator--75d64cd2-6916-4777-8285-f4bc5b9ea8b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a914c5a-f197-44a6-8771-12219ac54194", "sighting_of_ref": "indicator--fc96c103-a1a8-4046-9f5c-035b12498fcd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18e1eac-3b96-46c5-ae24-366c46323f4e", "sighting_of_ref": "indicator--fc96c103-a1a8-4046-9f5c-035b12498fcd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5fbcf0-afa5-4c96-ba7b-71b57e1f0407", "sighting_of_ref": "indicator--905f75e5-99f0-4ed7-9d16-bf677f81ff16", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b82c940-01b5-4bea-9979-703226832124", "sighting_of_ref": "indicator--905f75e5-99f0-4ed7-9d16-bf677f81ff16", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c43c4aa-bf44-4f53-82d8-97cd2a27b65c", "sighting_of_ref": "indicator--3bb043a9-28d7-47ef-9dc6-31a8c2f6a86c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01a4f3b-2365-4970-8d1e-e63b254de3f7", "sighting_of_ref": "indicator--3bb043a9-28d7-47ef-9dc6-31a8c2f6a86c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeb7860-9dca-4dd9-856b-73f62bfef728", "sighting_of_ref": "indicator--c06bcfbe-b982-49dd-89db-afac5c2b1924", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd88362-3571-4cbd-9125-99427fa9fcd3", "sighting_of_ref": "indicator--c06bcfbe-b982-49dd-89db-afac5c2b1924", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2474cf5-9687-41ae-9d96-a84311375f4a", "sighting_of_ref": "indicator--fd06d6d3-ab45-41be-970b-46348d98b02e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d226b9-8538-44ca-a732-2fe8f1e02f94", "sighting_of_ref": "indicator--fd06d6d3-ab45-41be-970b-46348d98b02e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216f270f-0c81-4baf-b6e9-7d02c1394025", "sighting_of_ref": "indicator--fc9b0fba-d2be-4506-b3e8-7ff5762df535", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb161998-6d1c-4c33-8788-6f5b357e533f", "sighting_of_ref": "indicator--fc9b0fba-d2be-4506-b3e8-7ff5762df535", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462e620c-a1c0-4754-8534-740779aab9ed", "sighting_of_ref": "indicator--54adb448-8468-4924-aa57-4b8418252be1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121900c3-22cd-46ab-b9fe-5b1a3c65528c", "sighting_of_ref": "indicator--54adb448-8468-4924-aa57-4b8418252be1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1ca127-33ca-4493-8449-673fd13a889d", "sighting_of_ref": "indicator--e7d1f9be-46c9-4f8f-86dc-4bf2fa6fd5f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4be4341-947c-48a8-9b57-8aa01b2f5632", "sighting_of_ref": "indicator--e7d1f9be-46c9-4f8f-86dc-4bf2fa6fd5f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ee6775-9e8d-4b59-a64c-04ac903fa8fc", "sighting_of_ref": "indicator--6e592aeb-e18d-45e5-ba8c-d42c89dcd21c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693823a7-f014-4e14-8952-a8570a756f52", "sighting_of_ref": "indicator--6e592aeb-e18d-45e5-ba8c-d42c89dcd21c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc0b174-4815-476d-99d2-b57676f6aeaf", "sighting_of_ref": "indicator--4fab678b-6919-4227-8e24-6e9af11bda71", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3606cd6-4223-4005-9bbc-e94fcf61ec8e", "sighting_of_ref": "indicator--4fab678b-6919-4227-8e24-6e9af11bda71", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a231bf-2f54-4bc5-9656-26edb6e04076", "sighting_of_ref": "indicator--e973bbd6-f80b-4e63-98fe-b3c7e15910b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dba98b-d7d0-4798-9ee1-27d303fbd44f", "sighting_of_ref": "indicator--e973bbd6-f80b-4e63-98fe-b3c7e15910b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a0cf28-8ed3-4610-aa2c-37ddfa39097c", "sighting_of_ref": "indicator--96a8f4fa-829f-4209-93c8-0b691df01ddd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7831b62-beec-41d6-8837-a7a7cbfd4e8e", "sighting_of_ref": "indicator--96a8f4fa-829f-4209-93c8-0b691df01ddd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69d29d2-087e-4baa-a837-bec2fa472010", "sighting_of_ref": "indicator--aac9ec9f-813e-4f86-8e57-646082989809", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf3d801-ac7e-46b9-885e-cb4bc9cac528", "sighting_of_ref": "indicator--aac9ec9f-813e-4f86-8e57-646082989809", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ee024d-6c24-4b5a-acf3-785300a8e115", "sighting_of_ref": "indicator--ee39823a-11dc-4e9e-8c59-60867c410eb9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adddab3-c89c-4f71-9e81-fbf33cc9941d", "sighting_of_ref": "indicator--ee39823a-11dc-4e9e-8c59-60867c410eb9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144131ee-3c1d-487f-82c6-417eed9c98bf", "sighting_of_ref": "indicator--fa786b6e-01ae-4124-b671-0b4f351f0dca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c5055b-1962-4970-8529-5c0feb580921", "sighting_of_ref": "indicator--fa786b6e-01ae-4124-b671-0b4f351f0dca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b506d0-c7cb-4765-a60e-bc49c852c453", "sighting_of_ref": "indicator--22b14d07-8670-47ac-bbfb-809eaf8c785c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd19df1-8066-4dde-90e3-10c656ca83b8", "sighting_of_ref": "indicator--22b14d07-8670-47ac-bbfb-809eaf8c785c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40e49d2-afc8-4ef6-89a4-aa55d13bc363", "sighting_of_ref": "indicator--80548d0b-d941-44c6-a35d-e05a5fd5e323", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4318d001-99b4-42bb-a9f2-b5fa23997c6e", "sighting_of_ref": "indicator--80548d0b-d941-44c6-a35d-e05a5fd5e323", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513415bf-a319-433d-8646-2c0ee0f80323", "sighting_of_ref": "indicator--5f66c8e1-3f65-414d-b07e-7cf1de4bb136", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03753bb9-bb23-4042-bad8-c978b1a348d0", "sighting_of_ref": "indicator--5f66c8e1-3f65-414d-b07e-7cf1de4bb136", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9833e1-429c-4a87-9baf-1adbca052319", "sighting_of_ref": "indicator--a70cec16-2b67-4a01-8a54-19635f975447", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6c7f19-7a4b-4b92-928f-4ac423204590", "sighting_of_ref": "indicator--a70cec16-2b67-4a01-8a54-19635f975447", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469d2861-047d-4b86-b64a-ab641355cbaa", "sighting_of_ref": "indicator--7509e2da-6080-4b73-9aca-3c1892139a5e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97dd923-7805-4761-b0d9-b4cd632610e2", "sighting_of_ref": "indicator--7509e2da-6080-4b73-9aca-3c1892139a5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d1851d-922e-4b07-b8cd-7f7b264c44b4", "sighting_of_ref": "indicator--eae7fc5c-7366-4573-a3e5-0659314da178", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91534b2d-ffa7-4fe7-aa73-1949cbf434e5", "sighting_of_ref": "indicator--eae7fc5c-7366-4573-a3e5-0659314da178", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a607dda0-2afb-4926-a012-cb8799875166", "sighting_of_ref": "indicator--42613ef5-0d05-4f95-8539-a604228dd4b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b810ce9-6973-4cab-b2e4-c51f1619ac78", "sighting_of_ref": "indicator--42613ef5-0d05-4f95-8539-a604228dd4b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e3057d-8a00-44cd-a7c0-65b286eef49a", "sighting_of_ref": "indicator--50057465-909f-4ed5-ba57-33687bd15634", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57db2de8-615d-47fe-98ce-e7ff2d6c028e", "sighting_of_ref": "indicator--50057465-909f-4ed5-ba57-33687bd15634", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d2c3fb-529b-4186-9d48-0600059d81b2", "sighting_of_ref": "indicator--bd635fd1-b4e0-4758-884b-3ea8a9e257d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22308a65-1727-45f5-bab1-ca88fd8ce428", "sighting_of_ref": "indicator--bd635fd1-b4e0-4758-884b-3ea8a9e257d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca51e7a-54d6-426e-92fa-d21ac4903e83", "sighting_of_ref": "indicator--603ec65b-de1f-420b-a7c2-94da84ba8420", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bbae06-2512-48a8-92be-fe855c3e024f", "sighting_of_ref": "indicator--603ec65b-de1f-420b-a7c2-94da84ba8420", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa26cc2-f00a-4f2d-8784-f9ba0653a056", "sighting_of_ref": "indicator--74d4cb8e-3aae-4a67-b2e5-a09101b46135", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96929adb-d809-4c2a-ac89-4537e95f18ae", "sighting_of_ref": "indicator--74d4cb8e-3aae-4a67-b2e5-a09101b46135", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f59aad-4c62-40de-8e1f-8173cf7ffc85", "sighting_of_ref": "indicator--d402a3d9-e351-45a5-95be-2f2cd0546b1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0d119e-69ad-4baf-bb11-bf78f76f2604", "sighting_of_ref": "indicator--d402a3d9-e351-45a5-95be-2f2cd0546b1a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e46a6ed-8066-422f-a808-42f983d7d15d", "sighting_of_ref": "indicator--150d98ae-f6aa-4e21-81cf-00475dfec180", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905bb81b-0f3f-4324-a9e6-ce816a51256d", "sighting_of_ref": "indicator--150d98ae-f6aa-4e21-81cf-00475dfec180", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0c4278-f39b-4421-b36b-3e60b7b763b1", "sighting_of_ref": "indicator--0a8c3b2e-89b5-4989-ad6b-d5c1b0480e53", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78aba1b5-7f97-4507-b714-fb015c79d50b", "sighting_of_ref": "indicator--0a8c3b2e-89b5-4989-ad6b-d5c1b0480e53", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfae2ba-1d20-4317-a664-49a4db14314b", "sighting_of_ref": "indicator--0ef1219b-7d0a-4f48-8b80-8653e850011e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbad043-9ee9-4d7c-a6d0-4f6f567d4ca9", "sighting_of_ref": "indicator--0ef1219b-7d0a-4f48-8b80-8653e850011e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60351e57-9a6a-464a-b6a8-2decfa104a39", "sighting_of_ref": "indicator--208bc650-1214-495e-8158-3b0ba8a7c40d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1248f5ee-f242-4a98-a282-739fca7840df", "sighting_of_ref": "indicator--208bc650-1214-495e-8158-3b0ba8a7c40d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4254925b-1301-4bc9-a678-e293407bd70d", "sighting_of_ref": "indicator--0532f378-9808-4d57-a3ae-e34724a90e50", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd19276-c5bd-4fe7-a5a5-01ed554ae372", "sighting_of_ref": "indicator--0532f378-9808-4d57-a3ae-e34724a90e50", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b00d80-575f-40f3-8fa3-ac6cc287be70", "sighting_of_ref": "indicator--01f9108b-4769-42e1-9065-55d5b7acc7ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583dfe6f-e009-42f2-a22c-0e25efbc0d3d", "sighting_of_ref": "indicator--01f9108b-4769-42e1-9065-55d5b7acc7ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea5c767-a7b3-4031-a8b6-29f801866caf", "sighting_of_ref": "indicator--205b40be-c954-4822-82c6-7b784f843683", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f1b62a-f577-4f28-8bd7-eb4ed39a1e58", "sighting_of_ref": "indicator--205b40be-c954-4822-82c6-7b784f843683", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0ddcc1-706b-4a25-b162-fae09a2af11c", "sighting_of_ref": "indicator--c63a7ae5-fa06-4c5b-baac-888c68e81c06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8592e8f8-079d-4573-b405-225bf67381ba", "sighting_of_ref": "indicator--c63a7ae5-fa06-4c5b-baac-888c68e81c06", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0efdfa-355d-4975-8379-ad67c305d43e", "sighting_of_ref": "indicator--8801847a-d12d-46e9-adb2-31d1e709d7d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8d6a97-54cd-46c5-a270-6b38089c17aa", "sighting_of_ref": "indicator--8801847a-d12d-46e9-adb2-31d1e709d7d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8918035-cc60-4bcb-9e05-27add0354321", "sighting_of_ref": "indicator--b8415e47-aa98-4c41-85c8-1843d9e1f39d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bd7aa5-fb6e-4bde-8685-2dedf5b4e9e6", "sighting_of_ref": "indicator--b8415e47-aa98-4c41-85c8-1843d9e1f39d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6401120-5fab-47ba-99d9-22e37a4abdc3", "sighting_of_ref": "indicator--14b9f459-8757-4cd6-9f25-6f0c699bba13", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132d43ac-df92-407c-a932-315a71d718e7", "sighting_of_ref": "indicator--14b9f459-8757-4cd6-9f25-6f0c699bba13", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b252ff-374b-4226-bb98-457450aaea6b", "sighting_of_ref": "indicator--f43456d6-8401-4195-8553-a7106fe54a12", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa077e8-08b8-4cc8-a800-c9f8e1c99c4c", "sighting_of_ref": "indicator--f43456d6-8401-4195-8553-a7106fe54a12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339b0b1d-d0d7-42ab-96bf-00a924f267d0", "sighting_of_ref": "indicator--8fbfe4b7-6ff3-4992-948c-5f1ebf1be24c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db679b7-3be7-4de2-8e03-3b82b7a9b398", "sighting_of_ref": "indicator--8fbfe4b7-6ff3-4992-948c-5f1ebf1be24c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd2b23a-f935-4366-8af1-471788ffade3", "sighting_of_ref": "indicator--d2cef91d-4658-4b98-9ed6-10138845d3f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4a3b13-bc34-48e7-b97f-76e12301b74a", "sighting_of_ref": "indicator--d2cef91d-4658-4b98-9ed6-10138845d3f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6678eba5-2a3f-4ad4-bdfe-b997b47acdbc", "sighting_of_ref": "indicator--f189b0f3-2902-48f7-b0a5-742033a8fb41", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d0f535-f100-431e-8c11-e62a777529f6", "sighting_of_ref": "indicator--f189b0f3-2902-48f7-b0a5-742033a8fb41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa3faee-d35a-417d-afaa-c0d668a66f43", "sighting_of_ref": "indicator--9c92e6a3-51cf-4549-a1e5-e3a38bac48c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8610b4-acc3-44f5-bd0a-e90658f9a131", "sighting_of_ref": "indicator--9c92e6a3-51cf-4549-a1e5-e3a38bac48c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde4c2a7-8b8d-4a88-bad2-3273e667eec4", "sighting_of_ref": "indicator--2459f93a-bc58-4b36-acaf-f9007bdecbb4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182edc9f-c2c9-48a9-8bdb-1d26e38735ce", "sighting_of_ref": "indicator--2459f93a-bc58-4b36-acaf-f9007bdecbb4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2671396e-ea34-4ebf-9135-4cf2179507e1", "sighting_of_ref": "indicator--a0c0ee2f-369a-4c62-be42-50db9cc33036", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59634b2d-76d2-4856-8b04-7f3cfc330c75", "sighting_of_ref": "indicator--a0c0ee2f-369a-4c62-be42-50db9cc33036", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2926ee02-8f1b-46cb-8f3c-4aa54f872ae5", "sighting_of_ref": "indicator--8fce2318-f461-4317-a406-88a3e2075992", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e07a2ee-e664-4035-aa0d-056b3d97829d", "sighting_of_ref": "indicator--8fce2318-f461-4317-a406-88a3e2075992", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acfb9bb-9d72-4cbd-8da2-16d4accc4be6", "sighting_of_ref": "indicator--e0d2f578-5c1e-41c3-afe6-3d73d8a1df63", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa524c0-573e-4223-9f81-afc7ecc6c11a", "sighting_of_ref": "indicator--e0d2f578-5c1e-41c3-afe6-3d73d8a1df63", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74989bbc-c70b-4353-a510-4a1c92bcaea4", "sighting_of_ref": "indicator--4c88b839-d226-481b-92db-454b6dedb2b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f7a9d4-8785-4efe-9b05-9ec6036c3e02", "sighting_of_ref": "indicator--4c88b839-d226-481b-92db-454b6dedb2b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95106d1d-61ff-4de3-a776-de7355749b34", "sighting_of_ref": "indicator--c0a46164-987d-4e3f-b76b-55b936e32260", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036d9262-ae13-42dc-b122-ff4791498c0f", "sighting_of_ref": "indicator--c0a46164-987d-4e3f-b76b-55b936e32260", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0bd58c-3302-4453-9b5b-b774ba838088", "sighting_of_ref": "indicator--8ff4662f-aeb0-4d8a-8771-419b8669b373", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c792641-ba93-4804-b879-19eca6af3f2e", "sighting_of_ref": "indicator--8ff4662f-aeb0-4d8a-8771-419b8669b373", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d8fe75-959f-4b70-ab0f-0ef0a8b8fa68", "sighting_of_ref": "indicator--5e491273-9c61-4e7d-9e3a-80b3bcc3124b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0edd30-e37d-4d6f-8c67-67593055fdf8", "sighting_of_ref": "indicator--5e491273-9c61-4e7d-9e3a-80b3bcc3124b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a668858-1284-4ed9-9f3f-aac5a851a20a", "sighting_of_ref": "indicator--581c025e-2a25-4d53-9aca-6ddc8ad00d50", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0aacf2f-a9b8-4570-8371-ce6294a6e380", "sighting_of_ref": "indicator--581c025e-2a25-4d53-9aca-6ddc8ad00d50", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43a5592-de42-48d7-8fce-3ed20cd4d760", "sighting_of_ref": "indicator--1518a44e-02f2-4651-a633-c71a9a1d410e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868d8cc5-2dc4-4a38-83ef-9714663756ef", "sighting_of_ref": "indicator--1518a44e-02f2-4651-a633-c71a9a1d410e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6b9354-c674-4896-96e7-a041c571b0f8", "sighting_of_ref": "indicator--9a866b79-413a-43f9-a6ed-65c6979ff743", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ded2ae6-7e98-47da-b579-9b982baf6bac", "sighting_of_ref": "indicator--9a866b79-413a-43f9-a6ed-65c6979ff743", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1242635f-7c9d-4ac5-8826-a52a03513cd8", "sighting_of_ref": "indicator--6e796569-a9d6-4599-aaf9-90261a637adf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7e23ee-912c-4e24-bd7e-08382e5c6cf1", "sighting_of_ref": "indicator--6e796569-a9d6-4599-aaf9-90261a637adf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c49d2f4-1095-483d-ba42-621ba1a4bd64", "sighting_of_ref": "indicator--5552c217-f34c-4c76-8371-14df638c7a7a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa427545-b8dc-46b2-a2f2-75c48f5f0747", "sighting_of_ref": "indicator--5552c217-f34c-4c76-8371-14df638c7a7a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b796b4-4d05-4f78-9d65-6c94dfcaf8c8", "sighting_of_ref": "indicator--cf3f836d-2643-4006-88db-6b8623c71843", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257a4c46-d52f-41b1-9478-6a30e9609b82", "sighting_of_ref": "indicator--cf3f836d-2643-4006-88db-6b8623c71843", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cbd17e-bede-4e9e-8e0c-1f44c1a2ff6d", "sighting_of_ref": "indicator--f5bbe578-518c-4844-97fa-a5fa309335c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c30f27-006c-49e3-8a3a-c4444f241cb4", "sighting_of_ref": "indicator--f5bbe578-518c-4844-97fa-a5fa309335c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b85c63-a956-4586-96e5-b6979e0231a3", "sighting_of_ref": "indicator--1fa1dfcc-8d15-499e-a914-a29a19e099f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97092b7-6327-4524-b208-7df10b27a3f3", "sighting_of_ref": "indicator--1fa1dfcc-8d15-499e-a914-a29a19e099f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a81886d-4177-4f3c-9e73-a413a07b8495", "sighting_of_ref": "indicator--b9806818-c16f-48f1-ae43-2efb1f09e1c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91db2cd9-1371-41c4-aa62-0826770fc0b1", "sighting_of_ref": "indicator--b9806818-c16f-48f1-ae43-2efb1f09e1c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0630cf1-0046-41d7-abc3-6c5a6a896893", "sighting_of_ref": "indicator--b6ae580f-2ee5-4865-b34f-43834c58392e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d481c7-9f5e-43de-9da6-27455db969f1", "sighting_of_ref": "indicator--b6ae580f-2ee5-4865-b34f-43834c58392e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fc3a68-f613-45f2-a7e2-b01e0a7eba94", "sighting_of_ref": "indicator--0668d71d-1974-44f5-b0f9-0acdaf0473bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a04a07-d4bc-4002-b86a-4c1446e85120", "sighting_of_ref": "indicator--0668d71d-1974-44f5-b0f9-0acdaf0473bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46c64be-7a77-4e24-9748-582fb9c982da", "sighting_of_ref": "indicator--1368fe29-18c2-4ed3-8898-8d17d151c8bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaa9734-2667-4b10-911b-6bff9fe707ae", "sighting_of_ref": "indicator--1368fe29-18c2-4ed3-8898-8d17d151c8bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e5fdc6-c658-4ca6-885e-d187a58b773e", "sighting_of_ref": "indicator--4dd78f32-ebbf-4b4b-82fa-d2646850d670", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7b3ee6-d4c1-4136-800d-58824f075c46", "sighting_of_ref": "indicator--4dd78f32-ebbf-4b4b-82fa-d2646850d670", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3624a4e-6060-447a-be86-eeced9a8c5aa", "sighting_of_ref": "indicator--3e998c1a-c013-4178-a060-843af17b0bc7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a78ea5-bea8-4db1-b342-d80deb515c3f", "sighting_of_ref": "indicator--3e998c1a-c013-4178-a060-843af17b0bc7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54726279-e0a5-4b31-962b-2bed3389ef06", "sighting_of_ref": "indicator--e7f7f88b-fd64-4cfe-ad53-66ff67dcb9b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb615a1e-eb3d-41c6-a6b8-1dcfdc2464ea", "sighting_of_ref": "indicator--e7f7f88b-fd64-4cfe-ad53-66ff67dcb9b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466b530b-a042-4645-9033-a22aaa33cf65", "sighting_of_ref": "indicator--bb35294b-bf07-4fa7-9ead-2eb634309a17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f55477c-b2a3-4ad7-9b3c-87d563ac2981", "sighting_of_ref": "indicator--bb35294b-bf07-4fa7-9ead-2eb634309a17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df76ef1-cf92-4cfe-8d15-2b8d63914126", "sighting_of_ref": "indicator--fb58b0e4-31ee-47cb-b356-7889f4c0872a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0aa51a3-370e-4dec-a8ae-2bd2ab86a422", "sighting_of_ref": "indicator--fb58b0e4-31ee-47cb-b356-7889f4c0872a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b2cb0b-5449-4e77-87ee-c8e8cb162da2", "sighting_of_ref": "indicator--693a2041-0e93-4cae-832c-f791707217e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ede213e-659e-4f7b-97ff-ca7668b11d60", "sighting_of_ref": "indicator--693a2041-0e93-4cae-832c-f791707217e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a995d843-f883-49b6-8d0e-67fc48454b2b", "sighting_of_ref": "indicator--0563f579-6b8f-4cbd-b9c0-5710cc90526a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c0df5b-5462-45b4-a64a-bbc97e726006", "sighting_of_ref": "indicator--0563f579-6b8f-4cbd-b9c0-5710cc90526a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb91f6f3-1fa7-42cf-b6a4-5536e02b1701", "sighting_of_ref": "indicator--0f51f5df-ea43-4e44-90bf-b42df9f4d457", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93be8ff8-ddaa-4bf0-8ff9-f9990be7bc82", "sighting_of_ref": "indicator--0f51f5df-ea43-4e44-90bf-b42df9f4d457", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd763da-9070-41f9-8478-430983d6c071", "sighting_of_ref": "indicator--661ad937-5fae-45fe-b53f-2d6acaa654c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d97550-7f15-475f-a37a-56d11c2a3331", "sighting_of_ref": "indicator--661ad937-5fae-45fe-b53f-2d6acaa654c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3579b40-376d-4dd7-b373-186751656068", "sighting_of_ref": "indicator--3ea0fe9f-05b7-4f38-8d1d-8fca8be534b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f96d78-ae2d-4954-a3f4-dc76f4403c76", "sighting_of_ref": "indicator--3ea0fe9f-05b7-4f38-8d1d-8fca8be534b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43df3cac-5324-492e-8dc1-c6b9626c0e96", "sighting_of_ref": "indicator--c0542f56-f9b4-4967-ad6c-a05925ed82bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec83358-c0d9-4c78-ad16-676032685afd", "sighting_of_ref": "indicator--c0542f56-f9b4-4967-ad6c-a05925ed82bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df766038-a7c3-4bfd-98fe-2ae41b0f15b2", "sighting_of_ref": "indicator--f58fa7d6-d405-41a9-b9d9-8458a39a52e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d73cb5-5c11-4d4b-8d4c-72a764f52a35", "sighting_of_ref": "indicator--f58fa7d6-d405-41a9-b9d9-8458a39a52e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6713e248-a4cc-4f03-b6a9-241e95bc2cb9", "sighting_of_ref": "indicator--0bde1ddd-c069-45eb-b1da-afb3b458fa47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5036fb78-92a8-40f1-acba-ad46e9264512", "sighting_of_ref": "indicator--0bde1ddd-c069-45eb-b1da-afb3b458fa47", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de02c49-0f99-402f-9bef-0a0ac66dc89a", "sighting_of_ref": "indicator--2dd0ec40-3f1e-4ea4-8bec-ffb07163439c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86c4921-927f-4573-9c55-30214457b6db", "sighting_of_ref": "indicator--2dd0ec40-3f1e-4ea4-8bec-ffb07163439c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b005864e-2f5b-47f6-b976-0d382267f892", "sighting_of_ref": "indicator--8e35d5f0-ff0d-4095-8501-2a2ee7b3e959", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b5cfd8-ebbe-4d23-ae41-b559dec13826", "sighting_of_ref": "indicator--8e35d5f0-ff0d-4095-8501-2a2ee7b3e959", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994e527d-57d8-410d-bd9b-c7a1eef679e3", "sighting_of_ref": "indicator--ea22256b-5bff-4fb4-8971-4f97016ddd8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c06c04-36be-4154-bbdb-bffbb37f68ac", "sighting_of_ref": "indicator--ea22256b-5bff-4fb4-8971-4f97016ddd8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0d19a0-2850-4039-86fb-5250f578d102", "sighting_of_ref": "indicator--9f5e3b6a-2eb7-4275-9d58-cf5bc2e6e8af", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7721efca-9d4a-4d2b-a5af-4ab9e57fb09b", "sighting_of_ref": "indicator--9f5e3b6a-2eb7-4275-9d58-cf5bc2e6e8af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918224e5-5d26-4501-90aa-635fa95b74a5", "sighting_of_ref": "indicator--4b913a13-85ae-412d-b7d9-89ac23fd94f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb94c23-9dae-4bba-bffa-7f88e6939926", "sighting_of_ref": "indicator--4b913a13-85ae-412d-b7d9-89ac23fd94f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0585534-e764-4dab-9a78-8addaaa23bcf", "sighting_of_ref": "indicator--df88831f-696e-4630-a7d7-9d22ecdb0a7c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1891dfe7-9b68-4166-87fc-6f3e6dd98d5c", "sighting_of_ref": "indicator--df88831f-696e-4630-a7d7-9d22ecdb0a7c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf78a758-0b9c-48c0-b070-919854d2c05c", "sighting_of_ref": "indicator--3fe0ce49-c08b-4b28-80a7-d4c899fafea3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bd9d94-a16f-449e-a9b1-9247cef3d007", "sighting_of_ref": "indicator--3fe0ce49-c08b-4b28-80a7-d4c899fafea3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881b65af-c969-412b-820a-cabd6d926057", "sighting_of_ref": "indicator--65173762-cc47-4490-99a4-92d219e9b966", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c266bb-9aee-4e5f-8554-86327061e2d2", "sighting_of_ref": "indicator--65173762-cc47-4490-99a4-92d219e9b966", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab58e9ba-0f0a-4f0c-ab7a-def292b2e805", "sighting_of_ref": "indicator--ead4c31c-a090-4673-a6c4-934bd25979e9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6352e801-4388-4d84-970e-4b18f73a3e3a", "sighting_of_ref": "indicator--ead4c31c-a090-4673-a6c4-934bd25979e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04a695b-a9c2-48ee-8e3f-7d3c1efaf102", "sighting_of_ref": "indicator--cae8013d-efa0-461d-b6c6-ccaa36524008", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1566f8-3abf-43df-b216-818814eec4f7", "sighting_of_ref": "indicator--cae8013d-efa0-461d-b6c6-ccaa36524008", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008f5ce1-556c-469c-96c2-793de5b05801", "sighting_of_ref": "indicator--83a00fc4-8193-48fa-b4c9-d7d42a3635a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44fb88c-0feb-4bf5-a095-7dbaf3a96737", "sighting_of_ref": "indicator--83a00fc4-8193-48fa-b4c9-d7d42a3635a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42804b4f-4a89-4034-9ff9-fe7ca5d9adff", "sighting_of_ref": "indicator--801591d6-27e1-40ad-bccb-b58b27d33e1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39a5fb5-8428-47e1-8a81-4a8f129b4b3f", "sighting_of_ref": "indicator--801591d6-27e1-40ad-bccb-b58b27d33e1f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3334e15d-7ace-4163-af42-a91e83f5148c", "sighting_of_ref": "indicator--b97ff287-f653-4749-8e2d-dd9ee6fccf5b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6052172-f980-41f8-8923-64f702ebe3ea", "sighting_of_ref": "indicator--b97ff287-f653-4749-8e2d-dd9ee6fccf5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f445e7-10f0-4f7d-a807-b0d219cafeab", "sighting_of_ref": "indicator--4c18b8dc-b259-47d4-84ea-a7c35693d3a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aa2ea2-d1b0-4246-9429-c7cb39b02526", "sighting_of_ref": "indicator--4c18b8dc-b259-47d4-84ea-a7c35693d3a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8777f2e5-7c4a-41b9-860b-924d4575735c", "sighting_of_ref": "indicator--e8a326fc-203f-4c9d-8eba-e910f22a3475", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54255aae-9d1f-440e-8c03-1e4dd9fc8dfc", "sighting_of_ref": "indicator--e8a326fc-203f-4c9d-8eba-e910f22a3475", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85734812-3428-4754-8973-77ab996ab560", "sighting_of_ref": "indicator--d10ddfab-9a26-46a7-a128-558d78256f13", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adf6ce6-309c-4a93-9532-0a433762a0a2", "sighting_of_ref": "indicator--d10ddfab-9a26-46a7-a128-558d78256f13", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f533c918-17dc-4583-a1b4-420deeb6765c", "sighting_of_ref": "indicator--cbfcbc91-b5b2-4b3e-b15b-7be3a1d312d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed2cac7-c9a3-4241-8d83-51e7ec4383b9", "sighting_of_ref": "indicator--cbfcbc91-b5b2-4b3e-b15b-7be3a1d312d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867bd4ac-7b1e-40f4-99de-cbe7f775d396", "sighting_of_ref": "indicator--1f798939-a070-4dcc-af89-2b8137c080e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0aa92ea-17c5-494d-843b-a0ba78b29fdf", "sighting_of_ref": "indicator--1f798939-a070-4dcc-af89-2b8137c080e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c918fc-a7de-459b-ae01-e74d6e5affe0", "sighting_of_ref": "indicator--673df132-0e05-42ac-94d3-90be4312d204", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59fba75-1b97-437d-b216-e75035df8e49", "sighting_of_ref": "indicator--673df132-0e05-42ac-94d3-90be4312d204", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54abbe7a-90c6-4850-835a-35afa5339792", "sighting_of_ref": "indicator--c3cc9109-c88d-4af4-a4e4-8e66843676a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e017d1-f42f-4bfd-b429-a4efa50ec7b8", "sighting_of_ref": "indicator--c3cc9109-c88d-4af4-a4e4-8e66843676a5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a821e8d-5c2d-46e2-a57f-91a95a7612b1", "sighting_of_ref": "indicator--b8b2e703-f915-4aa5-b012-a3f7b07d6254", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb6335d-650c-4bb2-bae7-d58e24615c73", "sighting_of_ref": "indicator--b8b2e703-f915-4aa5-b012-a3f7b07d6254", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3307da61-532b-41af-a047-a003fd261ee2", "sighting_of_ref": "indicator--889822e4-a6e5-4cd6-aba8-4aafd312333d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f9459c-574d-4c1e-9c24-3a723df765ef", "sighting_of_ref": "indicator--889822e4-a6e5-4cd6-aba8-4aafd312333d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa6f413-ec6d-4990-b073-feeb57a49ec6", "sighting_of_ref": "indicator--8be28362-1909-4bdd-89b5-774f6b6f5008", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699a3f79-718e-4132-9511-133c86d8222b", "sighting_of_ref": "indicator--8be28362-1909-4bdd-89b5-774f6b6f5008", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e711aa40-cde4-447e-a8b9-1daa6555aed8", "sighting_of_ref": "indicator--6904a93a-d49a-4320-9fcc-0d2eed5aae38", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60deee07-5c64-4411-b530-40e0572c5ced", "sighting_of_ref": "indicator--6904a93a-d49a-4320-9fcc-0d2eed5aae38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034e1425-626e-42d8-be30-ad4f21ac7643", "sighting_of_ref": "indicator--ba96adb1-8836-4a31-9cbc-862d375e8164", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8996063e-7a44-4acd-9153-8ca4a98d1f95", "sighting_of_ref": "indicator--ba96adb1-8836-4a31-9cbc-862d375e8164", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae73637-315b-43a9-9b96-30343b658d9c", "sighting_of_ref": "indicator--99f356ac-9e2d-41cd-9ce5-cbdc326405e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c7733b-09f8-4c11-91b9-89d4dda55633", "sighting_of_ref": "indicator--99f356ac-9e2d-41cd-9ce5-cbdc326405e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475caad6-3405-4dff-b044-9d00c2fa78df", "sighting_of_ref": "indicator--a852543c-f383-44a9-922b-36ac9a9b296b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90864438-efc0-4693-b0c8-fba8f825cc19", "sighting_of_ref": "indicator--a852543c-f383-44a9-922b-36ac9a9b296b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a339adc2-1295-4b80-a541-c8df7583dfee", "sighting_of_ref": "indicator--67f99ded-e86a-4734-ad24-22f9e9c967ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe826da-d1b8-4ec4-9f13-c85a2fb4540f", "sighting_of_ref": "indicator--67f99ded-e86a-4734-ad24-22f9e9c967ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b948a79c-77b8-4e29-8ff9-e76934614951", "sighting_of_ref": "indicator--2cb92739-ca22-4eae-a9ed-96f411df4669", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03f50ab-bf9e-482e-b399-91a178b48977", "sighting_of_ref": "indicator--2cb92739-ca22-4eae-a9ed-96f411df4669", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2656bb-9695-40b7-8f60-30a7c1057917", "sighting_of_ref": "indicator--21d1fc83-f32c-43d6-a394-c360e0a8be8e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8c525b-6bd4-47e6-81a8-09dc3eba1425", "sighting_of_ref": "indicator--21d1fc83-f32c-43d6-a394-c360e0a8be8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20500554-f3ed-4e1c-89f9-29bb7ddd8d1e", "sighting_of_ref": "indicator--6fdbd6a2-427c-45be-8561-fbf98be855e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5800330e-0ff3-4b91-96d6-d303d48e3e77", "sighting_of_ref": "indicator--6fdbd6a2-427c-45be-8561-fbf98be855e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35fdc64-57a9-4eea-918b-4e1f03ff89c9", "sighting_of_ref": "indicator--2292ea06-5347-447f-9092-6606d04421e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f7a053-5b7d-4ab9-898e-d83eb99f25bd", "sighting_of_ref": "indicator--2292ea06-5347-447f-9092-6606d04421e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca98826-f87c-4d14-b5db-fc528b71d0de", "sighting_of_ref": "indicator--a1ee16be-c005-4b4d-92a2-f34601d228f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad3a92f-278b-4a9b-a57d-4f4116882ba3", "sighting_of_ref": "indicator--a1ee16be-c005-4b4d-92a2-f34601d228f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a8f659-b62d-4205-ab6b-a8472e549a97", "sighting_of_ref": "indicator--c466bce3-1a7d-4a6e-8279-9d94734f55da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d94bf53-5f67-4917-b465-d7184104720a", "sighting_of_ref": "indicator--c466bce3-1a7d-4a6e-8279-9d94734f55da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151ce401-7cc9-4411-bcd8-19312a348b9b", "sighting_of_ref": "indicator--b6a6bbbb-6b8c-44a5-a52f-68583ed1a652", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ea2ce2-9edc-4fb6-981a-c5c5ec5b3256", "sighting_of_ref": "indicator--b6a6bbbb-6b8c-44a5-a52f-68583ed1a652", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16165c77-6309-4d43-b2d8-dfef9f999f7a", "sighting_of_ref": "indicator--d930458a-6cef-4380-80dc-db7e8ae58157", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e3bcdd-6697-425c-af00-9b30aa258309", "sighting_of_ref": "indicator--d930458a-6cef-4380-80dc-db7e8ae58157", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25838d53-f64e-493c-839d-cf63591f6223", "sighting_of_ref": "indicator--3c0d6cc4-84e9-4ecc-a2ad-827ed7e5061b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5c58fb-d43d-44b2-a593-01b5f6d17249", "sighting_of_ref": "indicator--3c0d6cc4-84e9-4ecc-a2ad-827ed7e5061b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e2a1e3-09f6-4969-bdeb-50081a48eb0f", "sighting_of_ref": "indicator--e8764bc1-be83-4a9a-902f-49fa5e15dff3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce798c76-3f54-4334-a2cb-b2bfb9e619f1", "sighting_of_ref": "indicator--e8764bc1-be83-4a9a-902f-49fa5e15dff3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5381fed5-a1cc-4f39-8215-1236cef0af97", "sighting_of_ref": "indicator--b39ebcbe-3a17-4609-b707-baa452737fc1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da73e620-4263-4e82-811c-d26537e1c22f", "sighting_of_ref": "indicator--b39ebcbe-3a17-4609-b707-baa452737fc1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a104e68-fca1-429b-85ed-8e0d9a11e530", "sighting_of_ref": "indicator--4c799b6c-c179-49a4-abc8-37bed29d298e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40433770-0eab-4a09-a9f3-52c1e409cf3e", "sighting_of_ref": "indicator--4c799b6c-c179-49a4-abc8-37bed29d298e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85263a8-e176-4369-add0-3389626a2a3d", "sighting_of_ref": "indicator--421e3eb2-10cb-4bb1-b956-8d5d9164cff7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f791ef40-e3df-4002-9503-b0b83d7b2668", "sighting_of_ref": "indicator--421e3eb2-10cb-4bb1-b956-8d5d9164cff7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9182948d-c9d4-4032-bfc0-3230050c49d2", "sighting_of_ref": "indicator--a20ace04-deaa-40f9-b4fa-0f5b073a3a22", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e255f60-1031-4d92-bd97-0fdef49d7f6a", "sighting_of_ref": "indicator--a20ace04-deaa-40f9-b4fa-0f5b073a3a22", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83faf11e-bfed-47de-a75e-606ecc95ea3b", "sighting_of_ref": "indicator--8c50100a-24bd-43ca-a10f-3e3494fd38b0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0748ed-ad95-4a24-a682-b230db3a25bc", "sighting_of_ref": "indicator--8c50100a-24bd-43ca-a10f-3e3494fd38b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b82bf07-48cc-41f1-b54b-c783aee17217", "sighting_of_ref": "indicator--6658c1d7-62e4-44ff-9ccc-6588b9e7c7b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd53f8e-4d74-4a94-9ab3-ef1340de75a6", "sighting_of_ref": "indicator--6658c1d7-62e4-44ff-9ccc-6588b9e7c7b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6a8917-c4c8-4b37-a17a-81ffebba23bf", "sighting_of_ref": "indicator--7baa0b4c-4ca0-4c29-9900-2c93cd01737d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd02d30-c3f3-4b75-942e-2bbb02bd7b47", "sighting_of_ref": "indicator--7baa0b4c-4ca0-4c29-9900-2c93cd01737d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b5b488-0162-46fb-881d-785312a2efb4", "sighting_of_ref": "indicator--b0877bf1-b686-4145-9482-0a88ad1ccec1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40dc7e1-694b-4fad-9748-cf44c9035e49", "sighting_of_ref": "indicator--b0877bf1-b686-4145-9482-0a88ad1ccec1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533c99d4-d2de-48e1-a24a-2cefd46d066a", "sighting_of_ref": "indicator--2ee076e6-0d9c-49ce-8546-d46436ed5805", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7948a9cc-23b8-4293-aa35-40f1d95a7db0", "sighting_of_ref": "indicator--2ee076e6-0d9c-49ce-8546-d46436ed5805", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927736fa-47de-4a88-baf0-000d275ae952", "sighting_of_ref": "indicator--27fc6163-d9d7-4202-9fbf-313bac4ce891", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6847f34e-1bdf-4df5-99e7-92aa0e0aef33", "sighting_of_ref": "indicator--27fc6163-d9d7-4202-9fbf-313bac4ce891", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cc81a9-08ae-49ed-a033-8d63f16f4ffc", "sighting_of_ref": "indicator--2801490d-62b2-4854-97cd-a89003409338", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a726e0-930c-4f55-b64b-5e9d83dd4edb", "sighting_of_ref": "indicator--2801490d-62b2-4854-97cd-a89003409338", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72972c6c-3f52-43ad-8cce-9a02d93a0e11", "sighting_of_ref": "indicator--f397525a-d07b-4051-ad32-e733a848450d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8272754-f56b-40cd-902b-758f3390ade6", "sighting_of_ref": "indicator--f397525a-d07b-4051-ad32-e733a848450d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e11adf0-ef5e-4536-9476-0419ff96b9cc", "sighting_of_ref": "indicator--2c4ee7eb-e891-4e3b-86d6-4dfc64ec67e5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33940560-332b-4038-bc5d-e0fa6693e1af", "sighting_of_ref": "indicator--2c4ee7eb-e891-4e3b-86d6-4dfc64ec67e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8e533a-367a-48a0-b2cf-ec49f626da1e", "sighting_of_ref": "indicator--b3c4b8f0-29be-4942-9610-c99eb52ac388", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b557e79-c444-4f32-9231-5f5da5c7e1ba", "sighting_of_ref": "indicator--b3c4b8f0-29be-4942-9610-c99eb52ac388", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b03a9f-288e-43f5-ac3b-b7aba628d48c", "sighting_of_ref": "indicator--b5face8f-87e1-4693-865d-7405b980ede0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7577f0a0-a32a-4ae1-b9b5-ffc61f9ba02e", "sighting_of_ref": "indicator--b5face8f-87e1-4693-865d-7405b980ede0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee570f3-7343-499d-b448-fba91851dd2b", "sighting_of_ref": "indicator--a0b48f8c-6ffc-46c8-a223-605b055523dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196c1c0f-9446-4362-a1bd-9cedde81d4f4", "sighting_of_ref": "indicator--a0b48f8c-6ffc-46c8-a223-605b055523dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efdbfdb-5ea6-4115-aceb-f405520c4e7e", "sighting_of_ref": "indicator--0c17aee9-906b-4287-abd5-3ec796d79cad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f72f1d-5e38-49c3-8f61-85231cc081cc", "sighting_of_ref": "indicator--0c17aee9-906b-4287-abd5-3ec796d79cad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f21ada-27ce-4812-b4f0-de6a65c3f6b0", "sighting_of_ref": "indicator--32f8eb31-3bd3-4b91-bfe0-069f5a21a47c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226a3709-b6a8-48d6-8cba-2d4514e83622", "sighting_of_ref": "indicator--32f8eb31-3bd3-4b91-bfe0-069f5a21a47c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab13a65-c6fc-4eb5-8fca-aa765d78c55a", "sighting_of_ref": "indicator--84c4f44f-d3de-43cb-a191-2070205f4c4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1cfff3-3ec1-4829-8981-00f7f7d72b9a", "sighting_of_ref": "indicator--84c4f44f-d3de-43cb-a191-2070205f4c4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc985ea6-e4b9-473a-aa95-bf1a129eb32d", "sighting_of_ref": "indicator--649ae3ef-e504-45b5-afdd-4dde9de36133", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aee15f-1d2b-463c-8a2b-a7bcb54c92fc", "sighting_of_ref": "indicator--649ae3ef-e504-45b5-afdd-4dde9de36133", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f881b110-d6b5-4660-844d-9cc8e8a1a0e7", "sighting_of_ref": "indicator--885b4124-5269-412f-9031-14d4f0c0f611", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98be2b6c-aaec-4213-aeac-2cdd2f3b15ef", "sighting_of_ref": "indicator--885b4124-5269-412f-9031-14d4f0c0f611", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84223b7-764b-40d4-bc37-ca04f69d465a", "sighting_of_ref": "indicator--00354ad5-be30-4744-b6a8-c26cb0c44fa2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96875524-24b0-45f6-aba4-3073f0d4fa51", "sighting_of_ref": "indicator--00354ad5-be30-4744-b6a8-c26cb0c44fa2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335e2f6b-b57d-4cc9-9bf0-08991864a0ca", "sighting_of_ref": "indicator--be1e74bb-39a3-4abe-be96-0b189a5b8ee5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9ec2f9-1f5c-48d7-907c-206d2db20d77", "sighting_of_ref": "indicator--be1e74bb-39a3-4abe-be96-0b189a5b8ee5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9445c4b-0bf3-4c76-a662-9311b9bd2b70", "sighting_of_ref": "indicator--3b0415ca-7903-45f1-9cfd-8bca467286ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4494bd19-b18f-4d07-907e-08698c9c2260", "sighting_of_ref": "indicator--3b0415ca-7903-45f1-9cfd-8bca467286ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e749cae-4b61-468b-bc75-ca7a07887d0a", "sighting_of_ref": "indicator--dc424b37-34fa-41b5-8dda-c1c19047caab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad090c66-c50f-4a3a-9134-85a7f720692a", "sighting_of_ref": "indicator--dc424b37-34fa-41b5-8dda-c1c19047caab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c543963e-0bdf-4d2b-85e4-e593c728bdfa", "sighting_of_ref": "indicator--7c81703f-985f-46b2-9570-e71e566132a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640bf288-b602-47ee-9ffb-19a87261717e", "sighting_of_ref": "indicator--7c81703f-985f-46b2-9570-e71e566132a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba40b7b-a5dc-403d-ae1d-5d611e7765f7", "sighting_of_ref": "indicator--09faed54-3409-429c-92ed-c7e2209e7c5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba77c56-bf3c-4bf0-812e-f89ef0758bd7", "sighting_of_ref": "indicator--09faed54-3409-429c-92ed-c7e2209e7c5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb59cb00-0837-4b7e-8257-1146d5a1c534", "sighting_of_ref": "indicator--58f2200c-100c-488d-8be3-4d64196cda76", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7b2109-ba6d-4bb3-a416-5e590af172bf", "sighting_of_ref": "indicator--58f2200c-100c-488d-8be3-4d64196cda76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc8570e-4c9b-4fbb-bddc-701791ce85e1", "sighting_of_ref": "indicator--28d22344-87c8-4080-be5a-a71891581231", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ccb584-975b-4fed-a680-ca273e65ea95", "sighting_of_ref": "indicator--28d22344-87c8-4080-be5a-a71891581231", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce8e450-0c04-4196-9e02-b023406cc175", "sighting_of_ref": "indicator--2f3906d9-6475-4e10-b796-6ccbddb5deb7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e48f737-a9be-4f14-a1c4-c3a25869ff23", "sighting_of_ref": "indicator--2f3906d9-6475-4e10-b796-6ccbddb5deb7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7736b22f-3873-40a5-9619-eef2c5e7540e", "sighting_of_ref": "indicator--502ea086-0b40-4ed5-8f43-f884926eae20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4b31e4-2392-4ffc-8812-d91ca09b5d81", "sighting_of_ref": "indicator--502ea086-0b40-4ed5-8f43-f884926eae20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e444ab5f-9188-4153-ac6e-7fb8c49f54a0", "sighting_of_ref": "indicator--0fd2f25b-816c-49e5-a86a-fb96f9faeeb9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14b7b07-ca90-43f5-ba6c-650ff0db36d6", "sighting_of_ref": "indicator--0fd2f25b-816c-49e5-a86a-fb96f9faeeb9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5a3f1b-1936-4afe-b1f0-ff4b0a64962c", "sighting_of_ref": "indicator--c933dde5-fea9-4a69-b41e-3382d784578d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d12f81a-b19f-4cca-bca6-4b48a4e4f33a", "sighting_of_ref": "indicator--c933dde5-fea9-4a69-b41e-3382d784578d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93b0455-6aff-4e74-812c-33f891545903", "sighting_of_ref": "indicator--eb720210-1d79-4f0c-97f1-f85960707b11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121acf34-f700-444b-91d5-b3a8eb20d682", "sighting_of_ref": "indicator--eb720210-1d79-4f0c-97f1-f85960707b11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c63654b-1716-434e-a1ab-ea021f7d9902", "sighting_of_ref": "indicator--48fea121-4ca0-4a07-9842-17463eef3859", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fcf50b-b19d-4a5e-aeff-5999a47236f6", "sighting_of_ref": "indicator--48fea121-4ca0-4a07-9842-17463eef3859", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f9ee6b-b0d3-4091-bed1-a6173d6273dc", "sighting_of_ref": "indicator--f3aac285-0a1f-469a-a261-fbd6bc1a22ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c81168-51c2-48d5-bbe4-238f75680bf1", "sighting_of_ref": "indicator--f3aac285-0a1f-469a-a261-fbd6bc1a22ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1787a2e-e856-4158-b9ac-9e067bc5bd9d", "sighting_of_ref": "indicator--ad582b8c-ca1e-40f4-91fc-e05d6de182d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b59cce-19a1-4d10-8a65-ebba671bccbe", "sighting_of_ref": "indicator--ad582b8c-ca1e-40f4-91fc-e05d6de182d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e11a081-15a2-4656-a279-35e98fbd76c6", "sighting_of_ref": "indicator--57d7c0a1-ece9-4464-b999-f6a16d737d31", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55710fd4-a5fc-4ac2-81e8-42167f35e3a8", "sighting_of_ref": "indicator--57d7c0a1-ece9-4464-b999-f6a16d737d31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a18f7a-c46e-46d0-8627-42d6a07d4b61", "sighting_of_ref": "indicator--fb604a94-ed12-42f4-be19-9f73735a3b29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825dab4f-8330-4098-a52b-b8af902ef276", "sighting_of_ref": "indicator--fb604a94-ed12-42f4-be19-9f73735a3b29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1860846c-1df9-4c72-a27e-448e8b742a30", "sighting_of_ref": "indicator--82cb0db6-91f9-421e-a860-17c7d680e850", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b87a85c-c21d-4cac-999a-b3a00d697265", "sighting_of_ref": "indicator--82cb0db6-91f9-421e-a860-17c7d680e850", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a86e76-bdc0-4e3a-8102-1f172206fcba", "sighting_of_ref": "indicator--b6497b4b-dc92-4603-bf95-2c89efea60ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf8aa05-96c5-464a-a7b5-841aecd692b3", "sighting_of_ref": "indicator--b6497b4b-dc92-4603-bf95-2c89efea60ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03762bbe-861a-45d6-af87-09ec72e90dc7", "sighting_of_ref": "indicator--fb0dd15f-3760-493a-8e05-7044c6d7a37c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee204c4-1dfa-44c3-8c3e-fcf5c165c795", "sighting_of_ref": "indicator--fb0dd15f-3760-493a-8e05-7044c6d7a37c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0201023d-845c-460e-b0e8-a3fa7d950a1f", "sighting_of_ref": "indicator--88aca465-7e97-422a-a627-ce805238ad36", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f62c54-ccea-4990-ab22-2daafd18dc8e", "sighting_of_ref": "indicator--88aca465-7e97-422a-a627-ce805238ad36", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3509697-73a0-498f-92c0-887b4c675244", "sighting_of_ref": "indicator--4361cf39-9b39-46a8-8407-edb2e0bb4d15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d34256-4fd0-49a9-b855-536694e6830e", "sighting_of_ref": "indicator--4361cf39-9b39-46a8-8407-edb2e0bb4d15", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bc9ad4-b8a7-47bd-bea9-7111cfb02c95", "sighting_of_ref": "indicator--36dc4672-0edc-4a6c-95ef-368f01782802", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f04958-fa97-4e1e-905d-27fce42c8547", "sighting_of_ref": "indicator--36dc4672-0edc-4a6c-95ef-368f01782802", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8deb5e-3c53-449b-bf75-49b262a1aa7e", "sighting_of_ref": "indicator--771187b5-865f-4c72-acc8-6c8b1a927a05", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d922cbe0-4cf2-4f5a-ac8c-e5dae460ea0b", "sighting_of_ref": "indicator--771187b5-865f-4c72-acc8-6c8b1a927a05", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5060a1-dceb-418e-8bd7-916a4a484741", "sighting_of_ref": "indicator--adcbf351-fc90-4db3-bbc3-9fe6d76c0ca9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5348caf4-6c62-49e8-9096-bd601779232b", "sighting_of_ref": "indicator--adcbf351-fc90-4db3-bbc3-9fe6d76c0ca9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8375fac-57e0-4a68-8cd4-cf65a7772951", "sighting_of_ref": "indicator--cd7641f4-4db3-46ee-b9a0-2acc7ef01dbb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218749c1-5a0c-4088-98d0-66fd15b301ae", "sighting_of_ref": "indicator--cd7641f4-4db3-46ee-b9a0-2acc7ef01dbb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16126ad8-9013-4394-9199-149ceef5f91a", "sighting_of_ref": "indicator--200b1d66-3c6f-47ec-9f7e-4b3d80048216", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4f9d53-0fdb-40b7-9a83-6ab3d0ce69f5", "sighting_of_ref": "indicator--200b1d66-3c6f-47ec-9f7e-4b3d80048216", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03dc5f45-8958-45ad-8d94-0e7861612d3b", "sighting_of_ref": "indicator--128dfcfb-d8df-4ee3-81b9-949a9c441312", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bdb2b7-2673-4a92-a2f5-2001690a7c8e", "sighting_of_ref": "indicator--128dfcfb-d8df-4ee3-81b9-949a9c441312", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa4adbe-91c6-4f45-b00e-5c3d656ffe3e", "sighting_of_ref": "indicator--70ad3693-48ad-47b8-ae86-dfb1dc2a95a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baa2266-782d-4da8-acf6-92dbe5b43fee", "sighting_of_ref": "indicator--70ad3693-48ad-47b8-ae86-dfb1dc2a95a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9299bd97-a11e-4114-88cc-44db9c6dde6a", "sighting_of_ref": "indicator--2e5be27d-3857-4348-84e7-f7c23fd5b6bc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f16d58c-d662-465f-8a32-9743461dbc2c", "sighting_of_ref": "indicator--2e5be27d-3857-4348-84e7-f7c23fd5b6bc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662b30f5-2068-4f8f-8dae-954b9aed32ed", "sighting_of_ref": "indicator--9e46d6bd-af4d-4364-9b12-df401bf5a8f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ff8399-aaf8-420d-9a93-0137028e872e", "sighting_of_ref": "indicator--9e46d6bd-af4d-4364-9b12-df401bf5a8f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087f215d-00f1-41e5-a033-b22939839a8a", "sighting_of_ref": "indicator--92e4dadf-1b3b-4791-995b-22ff87886bd4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f96b56d-b41e-4cf8-8bf8-0a6a54f005ed", "sighting_of_ref": "indicator--92e4dadf-1b3b-4791-995b-22ff87886bd4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b7095d-921a-4a01-9d15-fc4a74076303", "sighting_of_ref": "indicator--c53658ea-143d-4fda-a54b-72ebe1077071", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a033ab3-c092-45c9-97bc-f1ec47267edc", "sighting_of_ref": "indicator--c53658ea-143d-4fda-a54b-72ebe1077071", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601e7ef6-feb5-43d6-b05d-12576f56445b", "sighting_of_ref": "indicator--a4ea8e16-8049-429a-9771-152264680022", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6057f3f5-69d0-4e18-af49-1a95ddce605b", "sighting_of_ref": "indicator--a4ea8e16-8049-429a-9771-152264680022", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b09d3af-01c3-4eb4-a6d7-f6f67153564a", "sighting_of_ref": "indicator--920e7d7f-d4f8-4e3a-bd2e-26bcb8d579db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72f39ea-17ee-40ca-a1e0-7554221fc7a7", "sighting_of_ref": "indicator--920e7d7f-d4f8-4e3a-bd2e-26bcb8d579db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91edb4b-ce40-4d03-a8fe-7dbce2d1871d", "sighting_of_ref": "indicator--08357ffb-8b50-4369-beeb-3ce8c831ad6b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f675012b-6d46-4edb-a76b-db7acc6fa1fb", "sighting_of_ref": "indicator--08357ffb-8b50-4369-beeb-3ce8c831ad6b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e83aa18-785c-4a22-aa5f-8a41d3b8f1fc", "sighting_of_ref": "indicator--5b8f1022-f31d-4f7e-9949-1ce548409a78", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236b1d22-f5e6-45db-bfd1-b7a26e19d652", "sighting_of_ref": "indicator--5b8f1022-f31d-4f7e-9949-1ce548409a78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e615b7fc-ebcd-4d17-9ce2-8576cfc11255", "sighting_of_ref": "indicator--86851720-977d-4a0f-8116-b6cd36eeb89f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c771c348-a9ac-4e95-95fa-5cb455a6afb8", "sighting_of_ref": "indicator--86851720-977d-4a0f-8116-b6cd36eeb89f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a5d40f-95ea-42c1-b666-b426f607e6c5", "sighting_of_ref": "indicator--c6051051-8eb9-4d12-9d6c-88fc8bffa697", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb94b183-767c-450e-8b8c-c043336f0c25", "sighting_of_ref": "indicator--c6051051-8eb9-4d12-9d6c-88fc8bffa697", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51dc486-b8f2-46e4-a267-081f776e20f6", "sighting_of_ref": "indicator--151c67e5-7ca2-4770-afb8-fd4b1de75057", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03afbcd-55b1-4456-9950-b0ff37d9a3a7", "sighting_of_ref": "indicator--151c67e5-7ca2-4770-afb8-fd4b1de75057", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b6eeee-e040-4858-be17-374ef93b7e83", "sighting_of_ref": "indicator--f840cb76-4da0-4923-8aef-0dee9870b1f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e56d80d-2007-4431-bef5-ea8f847eb563", "sighting_of_ref": "indicator--f840cb76-4da0-4923-8aef-0dee9870b1f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13680b13-024b-4adb-9746-9ae06e732f32", "sighting_of_ref": "indicator--830312ee-8244-46b8-8ea7-96ebf0e22a59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e9c231-a64a-40ee-bfb2-6b4723054564", "sighting_of_ref": "indicator--830312ee-8244-46b8-8ea7-96ebf0e22a59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03505c8-2ff4-4ff4-8fb0-620255198a50", "sighting_of_ref": "indicator--f550582d-876c-4bbd-890c-fa7b74e6c775", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7465d206-5072-485d-a868-3130b0370f04", "sighting_of_ref": "indicator--f550582d-876c-4bbd-890c-fa7b74e6c775", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa1b44f-7880-4b7c-a556-7df10bde00bc", "sighting_of_ref": "indicator--eaeb5755-0417-4564-a4ec-b66fc02a2a97", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007f0e42-f00f-4177-837e-0d277176da05", "sighting_of_ref": "indicator--eaeb5755-0417-4564-a4ec-b66fc02a2a97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213793c7-be2d-4ba4-ba5a-c02d8522e205", "sighting_of_ref": "indicator--67318c85-efe6-4339-b862-c3f91fd727c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7c813a-9599-4eae-b6e6-de4b4c67f60a", "sighting_of_ref": "indicator--67318c85-efe6-4339-b862-c3f91fd727c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f5155e-b0c7-469e-aa5e-720b18216512", "sighting_of_ref": "indicator--bf3f2e13-e98e-40df-9088-1d2bdd77131c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95e8098-7ba8-4ac4-924d-65b4a2698394", "sighting_of_ref": "indicator--bf3f2e13-e98e-40df-9088-1d2bdd77131c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9148e581-c8b7-4f25-9517-5f54a69a1199", "sighting_of_ref": "indicator--22d2f0eb-291d-4113-9796-a86eba51f211", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23941783-5d94-4152-8b23-6fa551be2e44", "sighting_of_ref": "indicator--22d2f0eb-291d-4113-9796-a86eba51f211", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d02baaf-4a87-4a32-8acb-7e0ed99bf47e", "sighting_of_ref": "indicator--c5a53261-1dd8-4caf-8e9a-8d8ee8c9ba8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384928d3-d350-4c73-8c0c-ef47d5c87659", "sighting_of_ref": "indicator--c5a53261-1dd8-4caf-8e9a-8d8ee8c9ba8f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6e4e14-4022-488f-b3e0-2706f98ae26f", "sighting_of_ref": "indicator--a870464a-080d-4e65-b079-901a32eb671a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44af9dca-b9e1-4bb2-aa0d-2d5f3b399e00", "sighting_of_ref": "indicator--a870464a-080d-4e65-b079-901a32eb671a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a3a670-caa7-4438-8d4a-616645057641", "sighting_of_ref": "indicator--fd5b52b1-5ab9-460c-a7fe-27b260574f19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ec8609-79a3-4a4c-b752-9031439428ce", "sighting_of_ref": "indicator--fd5b52b1-5ab9-460c-a7fe-27b260574f19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a58c57-3653-45c1-8e62-f634f9243539", "sighting_of_ref": "indicator--3c2d79ed-deaf-4c58-8185-9488f8fb1b21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33c32cd-5c62-4e30-a5b4-763cbdf70f49", "sighting_of_ref": "indicator--3c2d79ed-deaf-4c58-8185-9488f8fb1b21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a5c9ef-b9f0-4153-b9fd-77782696547e", "sighting_of_ref": "indicator--67a33d39-5210-4237-b28f-78b025fc706d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ce7ae8-804f-4e37-9a87-8b0bbc3e0339", "sighting_of_ref": "indicator--1749c752-53a6-4ca7-a1a2-11b45694f18b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b14bb7-13f3-49ba-a694-39ecefa6b8e5", "sighting_of_ref": "indicator--1749c752-53a6-4ca7-a1a2-11b45694f18b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc66cd9-3832-4269-8625-2154a135467a", "sighting_of_ref": "indicator--1dae41e6-5471-40a3-82c5-335d76e28d21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cde114-f81b-4d8e-ac0e-2df059b00671", "sighting_of_ref": "indicator--1dae41e6-5471-40a3-82c5-335d76e28d21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dfb029-4229-4f1f-9915-5d30b5362d77", "sighting_of_ref": "indicator--6b2e8556-83f6-46a8-9cc5-3a894c5e34eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a9671e-b2f5-43df-bab0-4959acef9438", "sighting_of_ref": "indicator--6b2e8556-83f6-46a8-9cc5-3a894c5e34eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f6478e-85db-40a5-b8bc-90fbfc4acf2b", "sighting_of_ref": "indicator--dbe1d167-f653-4220-aaf4-5c0971e14e01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ede2e7f-261c-4112-b663-adea93a5e93f", "sighting_of_ref": "indicator--dbe1d167-f653-4220-aaf4-5c0971e14e01", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd475e49-a89f-4682-a20d-c5ef437a894a", "sighting_of_ref": "indicator--7367b8a7-e556-4da2-9ac5-2c9f89222200", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de5f921-0eb0-4c62-8012-84da0820730b", "sighting_of_ref": "indicator--7367b8a7-e556-4da2-9ac5-2c9f89222200", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a5cfe6-2f96-4e0e-a5f2-aa748f0013e8", "sighting_of_ref": "indicator--6c11a271-eb23-4d78-8a4c-f6f3c6af3645", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fe7b9c-1ee8-4828-a125-a189eddb872f", "sighting_of_ref": "indicator--6c11a271-eb23-4d78-8a4c-f6f3c6af3645", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16db4e60-5816-409e-9f6d-157b96e3a5fc", "sighting_of_ref": "indicator--18bb5495-f8b0-410c-89dd-1674a6f95878", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d285423-124b-4500-a080-62725883e05c", "sighting_of_ref": "indicator--afea39f1-b492-48b6-9a3f-427c0034ba80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf0fd05-f917-442e-a94a-6c4d91b56ce0", "sighting_of_ref": "indicator--afea39f1-b492-48b6-9a3f-427c0034ba80", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad03799c-acb5-44fa-8e5d-9a7ca8b492a5", "sighting_of_ref": "indicator--6ad9985e-1d9e-4c04-be7c-679694b5aab5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fccea88-a495-4759-8196-c61a2df39889", "sighting_of_ref": "indicator--8a7975e5-6619-4680-aa7f-2d0bc3dfbf86", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5cb720-3f8e-40d7-a473-181004984c16", "sighting_of_ref": "indicator--8a7975e5-6619-4680-aa7f-2d0bc3dfbf86", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0578b0-26cf-4005-aba2-cde7a373515e", "sighting_of_ref": "indicator--5550ec6f-8477-45fe-bd42-74898ee26faf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3b26d2-835b-4938-ad24-951034c0bd4a", "sighting_of_ref": "indicator--2e690957-f8a1-4ae4-a63c-e4c65f928259", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e5468e-4677-4b78-99f2-3654edf25f63", "sighting_of_ref": "indicator--a122bbfe-77ac-4fc0-a8a2-c4f2486c9f98", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64690bd0-778b-4084-8513-c969fbad6db6", "sighting_of_ref": "indicator--8e037193-6b16-4e3d-b9f5-6312ae85cbeb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dada8155-6cce-4317-b268-647cc75993d5", "sighting_of_ref": "indicator--029c6aeb-9233-47bc-b513-2828d9dfb5ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b9c586-6eb3-433f-9669-3663f3041cea", "sighting_of_ref": "indicator--d62fee9c-512d-48a7-abf4-3d5f73e96577", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a178ef13-04b5-45ee-9630-6cb78cf89294", "sighting_of_ref": "indicator--6e9fa8b5-5b53-43a3-b4f6-5f66e9d7255b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76e6f4d-8374-42fe-95d5-fa2bfd0f8726", "sighting_of_ref": "indicator--9bf70ec0-b2e9-4664-86ea-5f8ba2bad16e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a51476-7b69-42b0-8667-d1923c747e14", "sighting_of_ref": "indicator--0d39cbb4-0c3f-4346-bfb1-81db127b84b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5cd62e-d550-4d27-ab10-8327d4f01356", "sighting_of_ref": "indicator--a9037cae-7f62-4fd1-b0e7-f288fcc6b32d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f72fcdf-84fa-440c-9c28-79bb71fdf329", "sighting_of_ref": "indicator--7d06c3a2-0c17-40ac-944d-8093af525f14", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34999170-9978-4be3-8cba-800fa3a2dbb0", "sighting_of_ref": "indicator--5e90eaf5-e532-4ad1-ae75-e0a49de4a708", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03770d15-43a5-4b41-8c5b-4ea83a816657", "sighting_of_ref": "indicator--e8b24fe2-fc1a-4db7-85a9-15f314b40628", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddcf6b9-78e7-4a6c-ab11-d717b96b25a7", "sighting_of_ref": "indicator--e8b24fe2-fc1a-4db7-85a9-15f314b40628", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8511ef-3fc1-4887-9f69-37ee99109560", "sighting_of_ref": "indicator--13efe62d-002d-4e69-ad99-394efb772ac1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83600bf-e3df-4c38-bc5a-15c3b5d612f1", "sighting_of_ref": "indicator--49f47872-b54c-4f28-8e74-d2df82757c0b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f25ca9b-712e-4996-93a8-ac2300473223", "sighting_of_ref": "indicator--5a80f5ed-0ae6-4587-849b-0c8014e9212e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e858963-265c-428c-82a9-141901d217b2", "sighting_of_ref": "indicator--d5999b1b-69f7-4199-963d-01812f3eb26e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469c108b-fd74-4c4b-a401-4fb7b2aac9ab", "sighting_of_ref": "indicator--d5999b1b-69f7-4199-963d-01812f3eb26e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a18c2d-bf7c-4746-bae1-34e778958e83", "sighting_of_ref": "indicator--992a89ca-988b-4ebd-935c-1dfd1ab02175", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72d68f4-6643-4c74-99f9-f8c7fe2471b7", "sighting_of_ref": "indicator--992a89ca-988b-4ebd-935c-1dfd1ab02175", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d03071-435b-4227-9713-d4549bc57975", "sighting_of_ref": "indicator--dd089cac-9953-48d8-986b-5a2742c8c162", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956ae608-c0c0-4bcd-9b26-d8ebf3f8da33", "sighting_of_ref": "indicator--dd089cac-9953-48d8-986b-5a2742c8c162", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2888ceff-7031-4302-a9b0-57b42b3f66ec", "sighting_of_ref": "indicator--31c6763a-010c-4369-87b4-e8f0a92c292b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cbbd5b-0e6b-4917-9465-d0c54460275f", "sighting_of_ref": "indicator--52a96d89-d634-4d49-882b-37c6151120d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29724df5-9b88-4d04-8696-6ad3b37eddbf", "sighting_of_ref": "indicator--7ec7e430-dd67-4d82-bd48-c72151460a36", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4625998d-b956-4097-a6e7-eb2d2c57185c", "sighting_of_ref": "indicator--05db8972-3c59-4467-92df-73e90aab95f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f3cf33-5d59-4cf9-8210-03eb52933152", "sighting_of_ref": "indicator--05db8972-3c59-4467-92df-73e90aab95f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cf0de0-d46c-4b78-89fd-25c8ee8da643", "sighting_of_ref": "indicator--1085f982-7ca4-4e55-abd6-174ae6c46843", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae058e6f-09d7-46c0-9570-033ce37f0a80", "sighting_of_ref": "indicator--1085f982-7ca4-4e55-abd6-174ae6c46843", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877a1809-20c1-4cc8-8272-f0adb8709e82", "sighting_of_ref": "indicator--8313b2cb-5e69-479a-9211-6fdb1e390a1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2fc5e0-cf1e-414e-8400-83d54d0e7a33", "sighting_of_ref": "indicator--240bf20c-0693-4f97-b9f8-ad0fe32c17e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e04f9d-dceb-4e08-baa1-4773377ffe2b", "sighting_of_ref": "indicator--df10ef84-a9d3-435e-8b17-eb005eed7ec6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ca83d2-5a22-408e-9970-7a2dc19f4754", "sighting_of_ref": "indicator--df10ef84-a9d3-435e-8b17-eb005eed7ec6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699945a1-a901-4234-bb35-6ee26c9b12fd", "sighting_of_ref": "indicator--f441a6ee-c498-4413-ba66-ec9e584d8d93", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3397859-ebf5-4a9e-a997-8bf18925296b", "sighting_of_ref": "indicator--1c9fa4b3-dbd2-41a1-8e0a-68a1ec30afc0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1926a99c-fc3c-4f78-9ba0-d06f2e7c5a91", "sighting_of_ref": "indicator--1c9fa4b3-dbd2-41a1-8e0a-68a1ec30afc0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd3ac8b-db00-4820-aa1a-21043644dbd7", "sighting_of_ref": "indicator--5cdde3de-3a70-481b-a811-9583c6363e2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede84286-e25b-4e3f-afda-013b5916ec0b", "sighting_of_ref": "indicator--5cdde3de-3a70-481b-a811-9583c6363e2b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7177d22c-a25c-441c-af17-0df3801fcde3", "sighting_of_ref": "indicator--6c716c18-11b4-48b3-93f1-83732415d757", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b57255-5a88-4b29-8e96-0b20516254e3", "sighting_of_ref": "indicator--f1654c06-589f-4924-856c-179be777c0b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef19d82-3008-469b-8182-9b0fbf78be95", "sighting_of_ref": "indicator--2f3fbc64-82bd-4d57-b856-14b6694a95ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d33e8e0-8957-4412-bbbf-96167da6690e", "sighting_of_ref": "indicator--e6f9776d-232f-4402-982d-5a2d7dd3d097", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a47f97-b329-419e-b204-fd50303a455a", "sighting_of_ref": "indicator--e6f9776d-232f-4402-982d-5a2d7dd3d097", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e258829a-4536-4cbe-a023-4871849f90e3", "sighting_of_ref": "indicator--2bd9e462-db99-4db4-bfde-c7507510e96f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434cf3e4-13e2-4f5d-ba3b-8a8201ae5256", "sighting_of_ref": "indicator--64b5e134-3db4-4175-8b52-61582c2a101d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226467e0-1ea2-48e0-afa6-e852587c9557", "sighting_of_ref": "indicator--64b5e134-3db4-4175-8b52-61582c2a101d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e156ff-28ac-4e79-8745-b095fd068a99", "sighting_of_ref": "indicator--aa867eef-8370-48d7-b382-3b499ccfa015", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010d435c-5afa-4fac-b338-f212409be3f9", "sighting_of_ref": "indicator--aa867eef-8370-48d7-b382-3b499ccfa015", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3383c0cc-5d51-4ac9-be1a-747da0840712", "sighting_of_ref": "indicator--97d47314-5bf8-41a4-a242-25601e321144", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df89993-7258-4663-b0e2-8e947297dcb3", "sighting_of_ref": "indicator--d68dc7fd-9496-4cc5-a312-5007d16443a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07aa576a-9a72-4b95-baf9-b3bfbd829f88", "sighting_of_ref": "indicator--8ee6d1b9-0bb8-4458-b73e-10a8b7a5101e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d169c04d-72cd-47f0-a9e0-0c5de060116d", "sighting_of_ref": "indicator--80edb53e-a436-4936-8eee-c19790887b5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa95b95-a3fc-49e1-8597-ca6a5305d550", "sighting_of_ref": "indicator--80edb53e-a436-4936-8eee-c19790887b5c", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2206c819-56fe-4d3e-a141-6b10ffd75a80", "sighting_of_ref": "indicator--80edb53e-a436-4936-8eee-c19790887b5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5274685-2125-41fd-92b5-18ab6b6f11eb", "sighting_of_ref": "indicator--4c3dd28e-0c19-4049-a010-1e58fe1e3da9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1f23e8-7013-4daf-a963-958da57546a7", "sighting_of_ref": "indicator--4b1e1a4a-70d0-4ed9-bcbb-2799ca81dd0e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e657b8d2-0a10-4c34-9fe3-39ffd4e66db0", "sighting_of_ref": "indicator--6c88c6b1-821b-41fc-9356-6b0c8cbf374b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1dff7a-299b-4b8b-9106-f40525333aac", "sighting_of_ref": "indicator--35bc1f52-753d-4b7a-b946-078df54a3a55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdbeaac-2340-4c40-9c65-6eb9ede18c43", "sighting_of_ref": "indicator--8d8123fc-2d04-4a2c-ab18-5b80e8c7d0d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab38b14-87db-47e6-902e-bab72e5227dd", "sighting_of_ref": "indicator--782eb7d3-a585-4c2a-8589-5e7f2314e196", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80354540-fcc6-479c-b806-a10d3f4c2542", "sighting_of_ref": "indicator--949ff482-9d94-4160-973b-3b3c42f283ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e817d9-cbbd-42f3-b600-9879a1572511", "sighting_of_ref": "indicator--16aee340-dda5-4de1-b319-b8483737d3a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfcce09-4ce0-43d3-a9e4-e67b258b66e7", "sighting_of_ref": "indicator--6694be82-e658-4c39-8192-e6b6727a8602", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d008cf-0872-4265-975c-1e8da612d514", "sighting_of_ref": "indicator--317d789f-401c-447c-9241-bd9d36f3e265", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289fb5af-707b-4aba-a481-56f5ab4d85b0", "sighting_of_ref": "indicator--19cd953a-f2e0-4497-a843-f3eb1952005f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1825221-509f-4b80-886b-3800e2faef82", "sighting_of_ref": "indicator--f504387e-9203-470c-a9c5-45a8da49a8f7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55edd98d-8a51-4131-bfd1-eb3bd70328a1", "sighting_of_ref": "indicator--f504387e-9203-470c-a9c5-45a8da49a8f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc41cefc-d1ca-49a4-b920-f426c90291eb", "sighting_of_ref": "indicator--744a1081-6fb5-41e2-bee7-b1c2bbf0a56c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a479d8-8ecb-4e4a-9380-1f8fa39abf3d", "sighting_of_ref": "indicator--ff05c5fd-d5c3-4863-a8da-1fc88930db00", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbf73d4-ffe4-41ee-b2ff-b9c7674b73da", "sighting_of_ref": "indicator--398e0914-7fef-4983-ae98-9e13f41c6a4c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f56b79f-76a3-4db8-af74-f08f63e84371", "sighting_of_ref": "indicator--f833e873-54a6-4bec-9bba-148a2b6a48a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95809f13-7dd1-4fb3-9c71-c7040a82561a", "sighting_of_ref": "indicator--f833e873-54a6-4bec-9bba-148a2b6a48a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de44a42b-e40f-4f50-aa4e-f9fba6a046e6", "sighting_of_ref": "indicator--c0dd0722-c677-46df-9607-dfdec29f2ab9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5216fb78-99bc-4b49-ae25-b378dc9becfc", "sighting_of_ref": "indicator--041e375b-ada7-41e9-81c9-53c4771e4588", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba2cab5-46a0-474b-942b-e9159a143576", "sighting_of_ref": "indicator--041e375b-ada7-41e9-81c9-53c4771e4588", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d804ee-65f5-4e83-9909-a1783f0c59cf", "sighting_of_ref": "indicator--49985fe4-194d-4210-8a00-932ba7a9f7ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa30d031-baa2-4944-87e0-f4275af40609", "sighting_of_ref": "indicator--49985fe4-194d-4210-8a00-932ba7a9f7ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccc561c-de6a-4ee3-a8d4-8e3505cc67f0", "sighting_of_ref": "indicator--78d9fad1-caad-4926-86cb-6cff5a579abe", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d18d2a-ea48-4421-89cb-5e45272f1d95", "sighting_of_ref": "indicator--f24987cf-89a7-491c-8ec2-048672666f16", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01df09d4-a94c-4c86-8b44-52a8b77168c9", "sighting_of_ref": "indicator--d513e1f9-03a5-4edf-8031-9805b4504be4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2459b6-4195-4af3-9201-bca01000945a", "sighting_of_ref": "indicator--d513e1f9-03a5-4edf-8031-9805b4504be4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2403d624-3c78-42f5-ae74-fa2335adf894", "sighting_of_ref": "indicator--2cca3131-c369-48cd-b031-bfa565203846", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691abef8-8d73-465d-9aeb-34bbbc27600e", "sighting_of_ref": "indicator--2cca3131-c369-48cd-b031-bfa565203846", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf8cfe3-0c6b-406e-8d7c-8f29749b8243", "sighting_of_ref": "indicator--27782920-3a59-4a7b-92b9-3c89817f9a55", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c16c2b-24c1-40cb-8d98-5dec28abf466", "sighting_of_ref": "indicator--40c973f6-2981-4e75-824d-22361268ba59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8027b0bf-5bf1-43f7-889e-5f2efbf410d3", "sighting_of_ref": "indicator--40c973f6-2981-4e75-824d-22361268ba59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ba39bf-78db-4327-b156-6a00a094190a", "sighting_of_ref": "indicator--06935eee-d7a5-4540-b346-26c14223ea29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bc1c02-0e2d-446a-9d12-9edd6d33fccd", "sighting_of_ref": "indicator--fd2159a6-a436-4ce0-9544-d2ed24c6835b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e41e741-9b54-445d-8564-d269da2565bf", "sighting_of_ref": "indicator--fd2159a6-a436-4ce0-9544-d2ed24c6835b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c97371-b42e-44b9-86af-f96d439db458", "sighting_of_ref": "indicator--d4036db3-5acf-4503-9363-4153cbb52d40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d72b2c-c425-4a2a-b2dc-adcf632523ec", "sighting_of_ref": "indicator--8a15ef0f-ed5b-4afa-af7c-a1b06998334c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7655adc9-1bd0-4cd6-9000-86d849dec66f", "sighting_of_ref": "indicator--9417a73e-b133-4541-9b2e-7b4cda66b591", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44eb2eb-ba1a-4282-ad6e-2b3c562213e9", "sighting_of_ref": "indicator--cac2e2e5-d551-4c8b-b3db-8c53ffc64279", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e3b98b-2646-4221-99cd-28a6962e2bf5", "sighting_of_ref": "indicator--2e268988-61ef-428d-b623-4dd58c594f1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2b072a-5a20-49b7-9173-ea78c72f6101", "sighting_of_ref": "indicator--d90c176a-ed01-41ed-ad8f-4054fa81d2df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e218591a-d086-4363-84ae-ac7eea2bcf4f", "sighting_of_ref": "indicator--7c8dc123-c829-47e5-8250-d2606225e3ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d741bcb-3502-4c07-8562-ded00bca65b4", "sighting_of_ref": "indicator--11e94a8a-c987-4715-a066-b9cba90d0112", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476a4828-a8f8-496e-ab3a-2d7bb029cf2b", "sighting_of_ref": "indicator--64e700f6-0e72-49de-8ee9-21852382465d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40944f75-db92-4e64-8672-851fdaf133f9", "sighting_of_ref": "indicator--fb9a2a6c-f61d-43db-8824-b14929bae618", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336b3a65-2c88-4d6b-9fb1-3b3ed0759121", "sighting_of_ref": "indicator--3ba8b839-d77e-4934-8063-3e90e2ddb28e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41f3c77-4a0e-48b6-a5ad-30888cccf39c", "sighting_of_ref": "indicator--ba19e0cb-1c03-4a49-afce-39d750ee0521", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970cecd6-edcb-4177-8a68-48f5c27f5791", "sighting_of_ref": "indicator--f903c8e4-1b83-4ce4-8aa4-e7a2237ed540", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4ca691-c6e8-40f5-be1f-a97853b9837b", "sighting_of_ref": "indicator--d0a7f63b-348f-4074-8f69-cf21c8002870", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dac0ba-9a2c-4836-864f-0946caa40ad0", "sighting_of_ref": "indicator--e8d2ab5f-5d62-4c2e-b331-51475d2bbbc4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9ea9c4-5ff1-40c4-896d-22ec147630b4", "sighting_of_ref": "indicator--5c847486-21e9-4cc6-9196-b73965f5d3a4", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b942ed09-44aa-416a-ba4a-d5729336dde1", "sighting_of_ref": "indicator--25e776cb-ed0b-4803-abcf-8a6e70442390", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fabeb7-508b-4791-bfa1-d8ea7bb0b557", "sighting_of_ref": "indicator--7a62f4e0-c61f-48ec-9cc4-721ccb340e3a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e34030a-807e-443e-9ce3-742bb194056d", "sighting_of_ref": "indicator--8c2b3f83-e318-4868-95c9-7c9ed404c9b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130ac3ee-d593-46dc-8bcb-0801d24930ba", "sighting_of_ref": "indicator--f8b7acf4-2f73-4661-9ce8-b04eabd00b95", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7968a8b-47cc-4074-969a-83a31176ef37", "sighting_of_ref": "indicator--f8b7acf4-2f73-4661-9ce8-b04eabd00b95", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d190b080-64c7-49b8-a5ec-021fe8d2c889", "sighting_of_ref": "indicator--94bcff3d-1ce2-4aac-9e77-3b812e35d39e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bc8e76-af90-4488-82c7-d6dd7c7b7585", "sighting_of_ref": "indicator--1cf265d8-79f3-419b-9b10-c73177db647d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a084c2-984b-4115-9998-9473000fa517", "sighting_of_ref": "indicator--544559af-79eb-4212-95d0-4bd5cd9a0cf4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ead90b5-0c1b-4ce5-bb37-a2d67e5561f1", "sighting_of_ref": "indicator--bb16d4f3-c515-40d2-896b-944017388f03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c992cc27-b2b3-4a18-81f1-04e3d774b99a", "sighting_of_ref": "indicator--9a75876a-7824-4088-b296-b659aedc7911", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4408f9-01c2-4460-9bd1-5e0823fffeed", "sighting_of_ref": "indicator--399396da-f25c-42b6-b924-c6b03baf0f4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870caf4a-f308-46d0-806a-fda785e60d7d", "sighting_of_ref": "indicator--6baaaa95-4dc1-4477-ada5-16efb83c7f2e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfb71f6-8a61-4a13-8428-104a6ed6be7d", "sighting_of_ref": "indicator--6baaaa95-4dc1-4477-ada5-16efb83c7f2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf4940b-b96c-4785-8b75-d1b17d9e6056", "sighting_of_ref": "indicator--c6ec8a12-8163-4988-9421-92b45dc2f80b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64d8cd7-68b6-4077-9579-52408215102f", "sighting_of_ref": "indicator--bc77a4df-705e-426b-a064-fc72a5ce6c91", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e87d1c2-8944-4495-a8da-593ccb3862ad", "sighting_of_ref": "indicator--684f6793-4bec-49bf-97fb-442a610f5814", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0d2d45-3a6b-4333-b6ca-c29e8b384391", "sighting_of_ref": "indicator--684f6793-4bec-49bf-97fb-442a610f5814", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f92e89-1c5a-40c7-985d-5dff92f8314e", "sighting_of_ref": "indicator--583402cf-256f-4ae4-831a-927725aee717", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5337ae5-c941-4d60-8157-9d19812d1615", "sighting_of_ref": "indicator--066bc984-75db-4b9c-8f80-d828a42e1c27", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6791669d-6a0c-4c3b-84db-2d2362f14586", "sighting_of_ref": "indicator--39365c04-f90d-4b82-9188-18626dd566c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ee13f8-53d6-4ab1-adc1-11a2b810d05a", "sighting_of_ref": "indicator--e264668a-70af-40d1-bf6a-8d19b1e47c17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa06909e-c3a0-48c2-9e96-eabed10ff403", "sighting_of_ref": "indicator--e264668a-70af-40d1-bf6a-8d19b1e47c17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f200857b-9ec7-4dee-bf7c-5e6f9e0de770", "sighting_of_ref": "indicator--5f8d6fae-2334-4610-891f-b0dbe13e7de8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f26f61-e1d1-4b7e-9748-ee732832207f", "sighting_of_ref": "indicator--5f8d6fae-2334-4610-891f-b0dbe13e7de8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7562192a-99bc-4a81-96d2-1edfe2800717", "sighting_of_ref": "indicator--8a93bfc9-0cda-48cd-a83d-301c92d24330", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a420e21d-9924-425e-8b31-41931645bcbb", "sighting_of_ref": "indicator--ba8d33f2-318e-4429-96ad-24b9ecb75fff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a424af4-5f53-4b73-ad63-5ab5dba4dcb3", "sighting_of_ref": "indicator--2d4e4b11-a262-4acc-a4c6-777bd923e58e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb95a330-5530-4b7d-a686-095c32620cf6", "sighting_of_ref": "indicator--68c04b68-c68e-4b7c-a814-e47183572c96", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4581c2-a9e6-46d8-b9ad-1ab1a490d78c", "sighting_of_ref": "indicator--4602c91f-a5be-497f-81ef-54815c2c3345", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc778e7a-9c43-44d1-bff1-b12470b239a5", "sighting_of_ref": "indicator--6d61ba0b-5b16-4371-8347-80e2662dfa6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6224d8ee-94a3-4d6a-9b25-9bec285c9821", "sighting_of_ref": "indicator--24777b01-9340-446d-a607-32d23fe651c4", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03789472-98e3-4ab7-82e7-8acd4985657d", "sighting_of_ref": "indicator--d79b4d46-ac35-4e64-8332-7e8f6945b499", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11601a3d-8188-4227-be00-39320e0e6073", "sighting_of_ref": "indicator--d79b4d46-ac35-4e64-8332-7e8f6945b499", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460bb8cc-2b89-464a-a32c-81f418ca6f64", "sighting_of_ref": "indicator--0a649345-8c81-4a25-85d9-75536c75e43a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcc7a8a-fd5e-49af-9135-a01080dd4fb8", "sighting_of_ref": "indicator--50679401-22ba-456e-a047-13aa3b30b37e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec68de89-df3a-444e-ae45-097e536b963b", "sighting_of_ref": "indicator--68561b4e-3282-4ca9-9a54-84b96c932870", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25607884-5b85-4938-88e0-62abeda3d3f1", "sighting_of_ref": "indicator--2eccd5dd-f6ee-4339-a907-15e1c51bed85", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7780e99f-3c08-45ad-b595-f9b282515ef9", "sighting_of_ref": "indicator--7b7b49da-510b-4e55-b2d9-5d363f438c75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3e42ce-a9f6-4c2e-88cd-db82ba653036", "sighting_of_ref": "indicator--7b7b49da-510b-4e55-b2d9-5d363f438c75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df9235e-db78-46e2-91fe-3c4659f5eee0", "sighting_of_ref": "indicator--91adc92e-acae-4a50-bcc3-55dab0788d4a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725dfab0-72c0-410d-89b9-8014cac5b902", "sighting_of_ref": "indicator--91adc92e-acae-4a50-bcc3-55dab0788d4a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08219e6-db91-404c-9e1c-29b20fff3fc7", "sighting_of_ref": "indicator--3ec19c9c-0d1d-4c28-873f-87ad42ca8aa4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a4cb45-9b87-48d9-bd07-f94a4c72e757", "sighting_of_ref": "indicator--3ec19c9c-0d1d-4c28-873f-87ad42ca8aa4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb04e29e-7be8-4695-8942-224ee7734ec2", "sighting_of_ref": "indicator--2312f298-02ad-4b2b-9555-86a15cd0fcc4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf122843-ffe1-4214-ad4d-2126aae906d5", "sighting_of_ref": "indicator--79037b22-6395-417d-90e8-9524fa45180f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834ecb97-4279-45c3-9573-6d73f737432f", "sighting_of_ref": "indicator--fe634393-7b55-4a77-b677-d2f3a5f262d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694154ea-11c3-47fe-b75d-60b270d3db60", "sighting_of_ref": "indicator--9f205ea4-ba86-4dec-9696-0b09ba6d7054", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49991e70-a3ea-4edf-9475-30c323df1add", "sighting_of_ref": "indicator--9f205ea4-ba86-4dec-9696-0b09ba6d7054", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed89320-e196-4d77-9af9-34001258a675", "sighting_of_ref": "indicator--02c0939d-a7f5-4000-8a03-503724f1a8f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c142014-a949-4115-a3a1-065d29d493a0", "sighting_of_ref": "indicator--20c6a00c-477d-432b-8bae-67f82fed5d23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6320fe44-ede5-4d60-8c2e-12a6840d37d3", "sighting_of_ref": "indicator--c36fb0a0-474e-4554-b53a-108d79fe8a95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e04a38-fa19-4a06-a25e-6ad90b39abbc", "sighting_of_ref": "indicator--034f3037-2aa4-4baf-8f0b-2b16de389823", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8396e7b3-e5b2-4387-9920-c6abe2f1e645", "sighting_of_ref": "indicator--8df752b3-d99a-4047-9a1c-53c8bb5d7790", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f0b77e-e4fe-4096-b196-787fb6b6995e", "sighting_of_ref": "indicator--fa41fb97-8428-495e-bab8-868768b9aea1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0964ce38-4c0a-4161-9f36-887bdabe705f", "sighting_of_ref": "indicator--fb5a71f4-581e-4498-8fcc-0a59caa7e621", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3340a423-2e84-4042-a7d1-e3ef2a55e035", "sighting_of_ref": "indicator--b2e20e1f-2ee8-4a48-9983-8331785676d3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fe6d0e-11b6-4470-848e-8af669d66eca", "sighting_of_ref": "indicator--2ba21888-009c-4683-8982-b77760617fd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033c10ab-c167-4757-9b1f-c484dc1502dc", "sighting_of_ref": "indicator--f074c4db-4230-4b96-988c-d7eeb43e626a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44526cae-a8bb-49dd-a360-a4513d9c87dd", "sighting_of_ref": "indicator--10d43314-1116-4439-8da5-63c52b4bfa95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f5aa59-1091-4643-86e5-1f82b28ab503", "sighting_of_ref": "indicator--7f20fd9a-41c2-408e-82ec-dccf2dd80925", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfd022c-4f27-4d42-80d1-78ba547529ee", "sighting_of_ref": "indicator--cf84b88c-709e-4ff8-ad4c-f75d306d66ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabf6cf7-615c-47b8-b6e2-4d0210bdd0c5", "sighting_of_ref": "indicator--aca30edc-d331-4f77-a06d-fdd20d7b2dc8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed21e0bf-ea8c-4464-9d01-4316b92b792b", "sighting_of_ref": "indicator--bcfa03f3-9499-4202-95c2-c0b3ff622efa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b66023b-f224-428b-b247-a2270af026a4", "sighting_of_ref": "indicator--4d09a826-b590-4fb9-aab9-eaa8fd535a34", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0f0c84-5af1-41b9-9977-5cb833f058fc", "sighting_of_ref": "indicator--68cc9ad2-a67b-418b-bba5-78889e08e860", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c944911-4cc6-4831-95c9-5278adb9bde9", "sighting_of_ref": "indicator--77966d58-5bae-4a17-844f-d854f83b784a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfbd99c-f414-483d-8b7d-c626213f0563", "sighting_of_ref": "indicator--05da2242-116d-49b9-93de-f6e94de05025", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0374d13f-0dc5-47c8-9adb-f8a653b3d774", "sighting_of_ref": "indicator--7659f410-477b-4722-99fc-e25006ee5770", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13ee913-61ac-4eb0-be6b-4a27b5452b48", "sighting_of_ref": "indicator--7ce188f5-f607-447e-9394-5c991764452e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72950662-9c97-42fe-8711-401024215d8e", "sighting_of_ref": "indicator--3c524ea5-a5d2-486f-a76d-e8da20c43285", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab97cc3-339d-4618-9b3d-7ac8b5a46084", "sighting_of_ref": "indicator--9f6375bd-0282-432f-a28d-817d1148fedb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfd8eaa-678e-4103-97aa-7f29a7c2e00b", "sighting_of_ref": "indicator--e708705e-6cfc-46cc-bedd-cc0474d84f3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbda5f9-5f59-4b25-a416-43dcf855895e", "sighting_of_ref": "indicator--21559589-8880-4b46-93f2-000e6ba5ed3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3ea6e1-f765-46a4-8d81-4bb9922d02fb", "sighting_of_ref": "indicator--c96e6b2d-2757-4e0a-956a-74f7d7a6e4f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f723163-7ebb-4032-b74b-c4922f32dde8", "sighting_of_ref": "indicator--88a23a3a-e751-4da7-ac60-de8e322b11b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182b056e-816e-4362-8a36-11312ef0b130", "sighting_of_ref": "indicator--9af6df85-063f-468e-83ba-dbfa0c0946fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9519e8-ff37-4367-a721-8aae9506172b", "sighting_of_ref": "indicator--9af6df85-063f-468e-83ba-dbfa0c0946fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1e4b7b-21a0-42c5-ad2d-2dfaba9809c1", "sighting_of_ref": "indicator--6d29e3e9-2b11-4b6c-ac31-28267a7854f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83059b27-a2cc-439d-84c9-c949f833794f", "sighting_of_ref": "indicator--f54f8356-13ac-4945-8495-8864e4a065a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f6a2f3-ab43-46d3-84ed-0925f2af1e8c", "sighting_of_ref": "indicator--7ff243b5-a6a9-4e89-99af-b1df0f928777", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfbd711-8d85-41cd-9705-7f3c0133696a", "sighting_of_ref": "indicator--ec8f94d3-ab13-49b4-a523-c55c3a736764", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1556f7a8-9ab4-40f9-ac60-f0151ec654a8", "sighting_of_ref": "indicator--b51c1a30-d11b-4fa6-b0c3-773c6337521e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d434aa4-5871-4021-8566-2543d52c5f04", "sighting_of_ref": "indicator--fad637c5-bc5c-4048-993f-73d3301e5266", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5090d4fa-79c1-497d-8253-298dfd76e34c", "sighting_of_ref": "indicator--05913797-ba41-425c-8f2f-eb1045ad2d21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42196cb-abc4-44b6-bd31-5b909bb9a9e2", "sighting_of_ref": "indicator--726b7c92-603c-4df4-8264-5b24a5b8e26e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4c8d33-f392-4d9d-902c-622abda04918", "sighting_of_ref": "indicator--3c3f8b31-6e09-4483-8ebb-d4fb78f4e86b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ef892e-9383-42ff-9184-e63c35815c29", "sighting_of_ref": "indicator--f81157e7-c73f-4e98-96a9-e1d6fa61aa5b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46291593-f303-4bf6-813a-a417f30bd1ce", "sighting_of_ref": "indicator--d2fdbec1-1e2f-4179-bdcb-339807c08e7c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d1e02e-0b8a-4dc3-9b97-989ee651fc63", "sighting_of_ref": "indicator--d2fdbec1-1e2f-4179-bdcb-339807c08e7c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044fa80a-cae3-4346-a384-584ee0ed3195", "sighting_of_ref": "indicator--04722ba9-4825-45e8-8e5a-fac823cd91a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dafb39-36b5-4089-a6a1-3bbf327b60bf", "sighting_of_ref": "indicator--04722ba9-4825-45e8-8e5a-fac823cd91a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1192eb24-e85c-4d25-b2bd-89f793db1680", "sighting_of_ref": "indicator--86c04ef3-877c-4059-ba11-65daf4bc2977", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf2cbb0-d825-4c43-9900-81156969ae3c", "sighting_of_ref": "indicator--86c04ef3-877c-4059-ba11-65daf4bc2977", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11b2fdf-8b53-4af4-84ad-ae38448ba0e3", "sighting_of_ref": "indicator--73e693f1-3455-4e8b-a9c9-7f2175db6b3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77ecaa9-d6df-4435-9168-04a24e8f88e4", "sighting_of_ref": "indicator--23296cc6-cb12-4491-a2f1-f222384f7180", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42dba75-6511-40ec-b140-0a4b015dd645", "sighting_of_ref": "indicator--f8b0ab45-43a7-4b9d-8caa-d537dd247e3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063987f1-186d-4841-851a-68f25ea2593a", "sighting_of_ref": "indicator--2336b1cf-0fc4-41cb-aeec-e0b81ca840b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa54f6a6-524f-43dc-bf99-ee4347e70a66", "sighting_of_ref": "indicator--2336b1cf-0fc4-41cb-aeec-e0b81ca840b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2738d1d6-8887-430c-be09-7d80d1f04bcd", "sighting_of_ref": "indicator--e29bb77f-bfc3-4f17-a102-efb39fa94180", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f5b1ce-e363-4f7d-8083-4e810cd22b7c", "sighting_of_ref": "indicator--e29bb77f-bfc3-4f17-a102-efb39fa94180", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3dbf71-6b52-4319-bf0d-29dadbbaca9a", "sighting_of_ref": "indicator--72384b29-13ef-4654-9907-2cfb2016c30c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11de8c55-311c-4500-923b-3ed755aeee0e", "sighting_of_ref": "indicator--72384b29-13ef-4654-9907-2cfb2016c30c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75810b7-4b64-40d4-9e0a-044edb090bda", "sighting_of_ref": "indicator--f3584384-25a6-4856-b141-0048a3ff0da5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef86db7-f7e5-4ea0-9c36-a768767c1056", "sighting_of_ref": "indicator--f3584384-25a6-4856-b141-0048a3ff0da5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0281a97d-6501-4420-911f-121b0fcb2b7e", "sighting_of_ref": "indicator--b46b3a08-1739-46ec-821d-d2f2b0b13bf9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01b305b-0507-4abb-b2e5-6a58f9613597", "sighting_of_ref": "indicator--260e32c5-7cf1-4030-9f6a-2f116c9c207d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ae468f-a277-446f-8a1b-135f541facd3", "sighting_of_ref": "indicator--467133c4-265b-4f40-907f-2e4746680517", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564c36b3-7e50-4ba2-850e-1ebb48b17f9f", "sighting_of_ref": "indicator--b58eedfa-b28e-4cd6-b57f-5782571290d5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3196a62e-f760-443a-ad4e-05fad9721fee", "sighting_of_ref": "indicator--b58eedfa-b28e-4cd6-b57f-5782571290d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3ebf35-43c7-4d5e-b317-3870df51c8e3", "sighting_of_ref": "indicator--26ad8b55-fb48-4d33-996d-22521a354c0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfb463f-d758-47c8-8e10-3870e539433f", "sighting_of_ref": "indicator--26ad8b55-fb48-4d33-996d-22521a354c0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a352ad-28ac-4bb8-b16f-8baf023210c3", "sighting_of_ref": "indicator--2f8b6879-ec02-4e25-a905-22feb3795c9e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf5d8ce-67b6-46ba-b49e-2a71ebeafacb", "sighting_of_ref": "indicator--ab84294b-15e4-41c3-8b4c-b8b7c9b4828c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d62842-9ab7-4985-8089-fc49e640ffc9", "sighting_of_ref": "indicator--de3b121b-30c4-474f-a3ca-f2697c751fae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c167b974-a260-48e5-8861-ee692a54f9f3", "sighting_of_ref": "indicator--e9488486-8ed6-4437-8a84-cfc0b2a23d29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59faa4ef-581e-4f10-9445-f78b59a4c99f", "sighting_of_ref": "indicator--e9488486-8ed6-4437-8a84-cfc0b2a23d29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1a5df9-3d6f-4638-bdb1-22c27ef82d4a", "sighting_of_ref": "indicator--ea600308-9b1d-4a45-bf8e-7be3ef3d80e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02343e56-1696-44dc-92df-e98ddf2c296e", "sighting_of_ref": "indicator--4da3dd47-f2f8-4bcf-8563-81c251f8ac4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbc7808-41e6-4878-9fed-a14ca485c9cc", "sighting_of_ref": "indicator--eda27ad0-27b9-43a8-83bb-1c054edc24b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ca782d-451b-4937-ac50-199d9ea9724e", "sighting_of_ref": "indicator--320420e2-11bd-43c9-83a8-fb4d37fbb98f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e54bf1-471b-44d1-b588-f4d4efaf78ce", "sighting_of_ref": "indicator--04dc679c-1b46-44a4-8d2b-7badf45755ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb432416-73fc-45f0-a414-cf8f9ee49afc", "sighting_of_ref": "indicator--04dc679c-1b46-44a4-8d2b-7badf45755ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb74a2e-959e-4343-ade3-5b0500bd2789", "sighting_of_ref": "indicator--2b0444b2-f076-4c41-b5a1-5bc242046084", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ac3ac5-d236-4448-91a5-48a70c7252da", "sighting_of_ref": "indicator--e75470fd-424b-4858-8b97-35a28a3d0a4f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dc97fa-191c-4744-aabe-c088591c1ead", "sighting_of_ref": "indicator--7034913b-fa8a-4fe2-b633-3f8699e824b0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4919ec-96ca-416c-8317-ce354cbd570c", "sighting_of_ref": "indicator--7034913b-fa8a-4fe2-b633-3f8699e824b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba7bc98-bc2e-4228-96c9-cc64823f30f4", "sighting_of_ref": "indicator--bda43ad5-f025-4913-9c42-f96d8bbadfea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5926222c-bf64-40d7-9f33-e729810bacb6", "sighting_of_ref": "indicator--bda43ad5-f025-4913-9c42-f96d8bbadfea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69163d98-6c97-48c0-98be-a7c54bf2a452", "sighting_of_ref": "indicator--e88dfa87-cd18-4f74-9385-ab72d9a93bed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edbc7d5-8bd0-4e51-9c56-48711e58f905", "sighting_of_ref": "indicator--e88dfa87-cd18-4f74-9385-ab72d9a93bed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830b234e-9d46-4adf-9dd2-0db3f6520f52", "sighting_of_ref": "indicator--eff4aaad-8260-4890-b6f9-3406f55e63cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee514ef-e56f-4450-bb15-4ad1422bb283", "sighting_of_ref": "indicator--eff4aaad-8260-4890-b6f9-3406f55e63cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df49d4e-57a1-4e03-bfc6-8228ff535086", "sighting_of_ref": "indicator--9cfa079a-f996-413a-853c-95c54022010d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6b52e4-fb5d-467b-b167-af4d6ee66837", "sighting_of_ref": "indicator--9cfa079a-f996-413a-853c-95c54022010d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3693bb61-f1ee-4b61-94fa-510bac698661", "sighting_of_ref": "indicator--3fc52861-1b74-49e0-9300-225227793542", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af69060c-b4bd-45b4-b50f-4fa7ff41eda9", "sighting_of_ref": "indicator--3fc52861-1b74-49e0-9300-225227793542", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0988ad74-3e01-4ac9-b362-2350eea7dab3", "sighting_of_ref": "indicator--b80d4f98-f6fa-42fe-9696-db037a6ebf01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2024ce-c244-4af1-a6ad-e3db349efcf3", "sighting_of_ref": "indicator--b80d4f98-f6fa-42fe-9696-db037a6ebf01", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0470ed59-2578-4725-b563-3510d7363ee1", "sighting_of_ref": "indicator--2f94f2cf-c774-4553-99b2-a363027234d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7cf1c8-f4a6-4491-90f6-bb382f81738f", "sighting_of_ref": "indicator--2f94f2cf-c774-4553-99b2-a363027234d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e82a820-61bc-4fe0-9e3f-2b7dd3b1cc67", "sighting_of_ref": "indicator--49fa65fd-4090-4701-91d4-ca029d7ba13e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b12eac-e5ab-4b12-876a-7dd544c5a2fb", "sighting_of_ref": "indicator--49fa65fd-4090-4701-91d4-ca029d7ba13e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf30a47-05f7-4e54-bf10-a67fb79da23f", "sighting_of_ref": "indicator--d7435f61-2173-4902-88a2-9096d102f6cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5204f10-bcb5-496a-b018-b58287ea7d4c", "sighting_of_ref": "indicator--d7435f61-2173-4902-88a2-9096d102f6cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2577bdb8-8597-4849-ac17-f33893639f7e", "sighting_of_ref": "indicator--4f5acf8d-8992-4c68-b6d5-5a2fa08b4b12", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411788c4-bcfc-4129-a10a-297743f5f744", "sighting_of_ref": "indicator--4f5acf8d-8992-4c68-b6d5-5a2fa08b4b12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0ee614-4ada-410a-bed1-00f61aa30358", "sighting_of_ref": "indicator--7905d294-bc50-44f7-b574-98191f638cb7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757954b2-ffdf-47ef-bc58-07cc5156d4ff", "sighting_of_ref": "indicator--7905d294-bc50-44f7-b574-98191f638cb7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576e78f8-ca06-43e2-a2e1-3c340de34188", "sighting_of_ref": "indicator--f3c911f4-2b33-4dd2-88a0-d9b305eb64c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae314b28-90b1-43e2-8652-d7cd4c50a0ee", "sighting_of_ref": "indicator--f3c911f4-2b33-4dd2-88a0-d9b305eb64c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d5ef02-a3c1-4374-a2e8-86519ae667b7", "sighting_of_ref": "indicator--3721ede0-504c-4d90-a2aa-58e20c2afe90", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed9d3ed-1099-4081-a10b-89e044c4eb6d", "sighting_of_ref": "indicator--d4cc1158-5825-4547-b98e-d0ce756e9df7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7486a85-18e6-4337-9cbe-7a6883bb5f39", "sighting_of_ref": "indicator--477953df-0c70-4217-8283-94d75b293ddf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b2c3e3-2857-43b3-8ca3-23df95850df2", "sighting_of_ref": "indicator--65e5414e-c71f-432c-9db3-3b4f873ef7f7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e460c089-7248-48ff-a0bc-a4150599d419", "sighting_of_ref": "indicator--b249fc80-eb19-41e2-91c3-72423d5574a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e0ee00-4bd6-415a-aadf-af60ef013f80", "sighting_of_ref": "indicator--64c55410-ed87-4d8f-b50a-cd63f29ad04a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bff6b4d-ec32-4341-b311-9131de471bb8", "sighting_of_ref": "indicator--dd04ad7c-6961-4c64-974b-1b66c3c41b3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf16ddc-7e68-4444-969e-ec50db3a49b7", "sighting_of_ref": "indicator--cb5cda13-d5d0-4b6d-8e28-b52a84ee7387", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65646503-72ca-468b-867d-bd82fdd6fa6f", "sighting_of_ref": "indicator--49b6eda9-e608-4c04-bb31-c39469d872c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7a4520-2cfe-4d59-813b-8ded255e8545", "sighting_of_ref": "indicator--3942b9f3-9001-469b-b130-40a5082755a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5b451b-eca1-4e07-bf83-8051fc12220c", "sighting_of_ref": "indicator--3a3b805b-6d9f-4f2e-83be-10efff1c4612", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2142f29e-434a-412d-925d-8cb39cbcd7f8", "sighting_of_ref": "indicator--f0b3c134-55c0-4bab-b55a-c3e7fddc8e94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d215081c-137d-4834-adea-8277edb425ed", "sighting_of_ref": "indicator--679b68b2-3daf-464f-8bac-9c6a77dc87a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a8a435-18a0-471c-b48f-27f90f38275a", "sighting_of_ref": "indicator--ff9aa6cd-0c39-4e3f-8246-4e70b4b69125", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03858b56-e756-4b59-97dd-835fe155f31e", "sighting_of_ref": "indicator--54870799-5a7c-4f5f-984b-418b53e71117", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322bd03d-2b6d-40af-b171-9d21630ccd76", "sighting_of_ref": "indicator--e19e8f9e-5262-4b14-b82a-eec1ced216a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02faff1-9731-48a3-975a-7b19d1909ea6", "sighting_of_ref": "indicator--f5653a7e-9ddb-46a5-a5bd-adfb871b760a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009fed8a-2c04-4765-8371-d7f0faffcd32", "sighting_of_ref": "indicator--3c054593-aa7c-429a-b141-f25783d310ef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852b30f4-ec5c-4334-b6fe-d5f93ae8ad40", "sighting_of_ref": "indicator--d9f53b91-53f7-40ed-8a9d-19ae4aac0d08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e8fcc5-0624-4eb0-9a69-d9f7d60aba48", "sighting_of_ref": "indicator--af8e22bc-efe3-46ce-bec1-f922c8c86fa6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c4658f-4775-4995-8046-b76473425be9", "sighting_of_ref": "indicator--6b43baed-cec6-4321-b581-f44aac027304", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bd9e1b-9f9e-402f-8172-ba12b8b9c9f0", "sighting_of_ref": "indicator--92714df0-c09d-4a20-b36c-62dfb171003b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e0577a-11a6-4915-856a-d0fe5276654b", "sighting_of_ref": "indicator--7a254507-72cc-4f3c-9efa-1d5e374e43d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6abe0e-9c9b-4590-a2a1-0df56985cebb", "sighting_of_ref": "indicator--35e81fa0-3b23-4895-9491-1d8d28f1e453", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9594fb-148e-4449-aca9-bd758f84b235", "sighting_of_ref": "indicator--ec564d38-3c7b-41d3-aaf3-ee56d201dcd4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8deaad5-b230-4a1b-85e2-166ee670d490", "sighting_of_ref": "indicator--eeeb4bcd-ef4f-44f5-9ea3-93d658f8d22c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5bcaad-15db-4264-8dde-a82069e6b51f", "sighting_of_ref": "indicator--abef1af9-764b-4614-9ae1-b349271e5c8d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c19cf65-7ac7-4ec6-886b-2a0a3a59acb3", "sighting_of_ref": "indicator--56f2a0f1-3708-4045-8677-901377746ea6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fd5814-c362-47da-9831-4a4c601310da", "sighting_of_ref": "indicator--bf0a104f-6eb2-4060-ab06-ad87fc4785ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06fb2f5-bc1f-45a2-b93b-b7b423ea4974", "sighting_of_ref": "indicator--b05c44b2-1b00-4338-af56-232ef9a070cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeabf904-8e46-407b-b26d-a60c558dcde5", "sighting_of_ref": "indicator--0d988a98-0bf1-4104-a4d9-3c89de7d7815", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed50928-98da-4947-a06c-8d926d9a37c7", "sighting_of_ref": "indicator--40777d9c-ed8c-4b43-bcd4-0f0a7db12cc7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87eecd5a-5540-47a1-aa04-ffed2429cad8", "sighting_of_ref": "indicator--9881890f-f714-4409-8f77-f81e1d05ad5d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e7c754-0f06-4291-925a-6430293585be", "sighting_of_ref": "indicator--7d149e22-5f83-4b4a-8faa-faf00f477a69", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc3d274-9a59-45b0-977a-acef9c45d646", "sighting_of_ref": "indicator--07ff2dd8-9367-482f-bcfb-78719f567b34", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64b968a-e427-4609-9258-a1a9e3becc41", "sighting_of_ref": "indicator--e86c2e24-ae1e-41e3-ab50-ffaa997e390c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbe8596-bf51-4387-9e3f-035e144901bd", "sighting_of_ref": "indicator--673f06ee-f577-4863-bc4d-5ca622af1472", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf01ea5-3768-462c-ab5d-b97b6c8c14f9", "sighting_of_ref": "indicator--3ad7b246-9342-4cee-b1de-af8b55ed157c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e658fc-d22e-420f-bb79-bcf83c727090", "sighting_of_ref": "indicator--3f44dae0-6f69-41b0-a662-52d19b4fcb83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dade9e-c122-4705-9b48-68b9148b678b", "sighting_of_ref": "indicator--d357912f-72c0-4d11-a9ee-576f79fec0f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c34b764-9bb9-4a2b-99b4-e4223367628f", "sighting_of_ref": "indicator--7633097b-9598-47cc-9572-9338566fd2f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c60b86-5f02-4be0-bd66-14affeef0ed7", "sighting_of_ref": "indicator--396ae2f3-a079-4eae-861a-7c08239f2d64", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf815797-e9f9-4d59-8818-71cbeb17fe65", "sighting_of_ref": "indicator--b0cad94a-7899-4b26-848f-f8911b3c3019", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89586558-e71c-44de-abef-5daa03b32b80", "sighting_of_ref": "indicator--791622f5-d200-454d-ac26-eb96a2ec8fbe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc36abbe-46cd-4c40-9fba-0c5945de2b36", "sighting_of_ref": "indicator--e82ba164-8540-4fc8-89f9-eb5674812e2c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cd3db4-67da-412b-a157-9a52e0079e4b", "sighting_of_ref": "indicator--9b59e2f2-9b85-40d7-a39a-1797e59a12ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941e5386-a6d4-4a8c-954d-b362970c5236", "sighting_of_ref": "indicator--aba2ee3f-55b1-471c-8a3d-c82604684363", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8b68f5-bb7c-4364-8b05-45bf680bb47b", "sighting_of_ref": "indicator--5b9f9848-c2e7-44fd-aa7d-9d3a6eeb7a26", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d38d17-6f3c-4736-97e4-e757da247f94", "sighting_of_ref": "indicator--81a2fd1d-1be6-410c-b977-f64219a4b09b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9885b72-935c-4982-ab48-9dc50b50e0fb", "sighting_of_ref": "indicator--1597afa8-5a3c-4b77-8fbc-25817155fb9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a92697f-7a47-477f-94b8-37e77359fbfa", "sighting_of_ref": "indicator--5ad1d552-308e-4379-a730-073a5ebac952", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b190a21-1a69-45c8-8d70-2b347feab021", "sighting_of_ref": "indicator--8d1babd7-792d-413d-a4bf-1a1715cd3766", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fec7fdf-9592-4ac4-a292-3282bf7c2189", "sighting_of_ref": "indicator--02902d3c-c8d1-4282-81e3-4ce901936b47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46452e14-9b23-4bb5-bc9f-b3cff9fade49", "sighting_of_ref": "indicator--08b1daab-30ae-4fc5-8408-423213b8a325", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9da18d0-3f70-4f6d-96fa-c26175a238c5", "sighting_of_ref": "indicator--08b1daab-30ae-4fc5-8408-423213b8a325", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e6efb6-5e40-41ed-ad83-e31819dd0b18", "sighting_of_ref": "indicator--536435a5-a2ce-4501-a84d-9c41914e534f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7c4b3c-1668-45a2-95ec-cba20526a255", "sighting_of_ref": "indicator--4dd003ee-3a02-4a8e-ba3e-3e892f93b550", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c9b667-01fc-4566-be15-9fbe959a31af", "sighting_of_ref": "indicator--e14ed3e4-34ad-4dff-8182-0d822f2cdc0e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7eae3e-9e94-41fb-af93-ce0760ca0b0b", "sighting_of_ref": "indicator--a41f459b-5cdc-473e-afd1-74fcebb449b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea264fd-af92-4e41-a304-a99859214e1c", "sighting_of_ref": "indicator--781f4857-66b5-4fac-b73a-fa7d64f4b6fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac095a7-106d-4cbb-8cc8-2075bc963426", "sighting_of_ref": "indicator--86e28806-3808-43cf-89ec-f06e6cf39281", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15420e03-d5b6-4aca-b924-c3e51ac44f2f", "sighting_of_ref": "indicator--e78642b5-61e7-43be-92fb-2282844e8a98", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67f1e16-2f12-4249-a39c-436969d219f7", "sighting_of_ref": "indicator--c0a7bf44-4be6-4056-b42d-bd907fec53b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a146df-4004-40f7-b912-f1f445b74778", "sighting_of_ref": "indicator--ad32eb53-6e2f-4015-bb72-538745b3c7c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa5c6c1-078d-4098-91ce-0fdcd882c70f", "sighting_of_ref": "indicator--4c41e7b1-aa65-4b00-adc7-ed9aa874c662", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040a71c0-96e4-42d2-af51-5fcef8338e58", "sighting_of_ref": "indicator--c98714d5-5c14-49c3-91d8-5a1763de27cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5859cd-64f2-426a-a35c-d733c8b9a13a", "sighting_of_ref": "indicator--9ea5a62a-9ec8-4b38-af74-e0f7eaa09ce7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137db55b-1f05-44d0-bf96-e477c3ada7c9", "sighting_of_ref": "indicator--76838263-bac5-485e-9cf3-1569fd98e4f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c835921a-3ef4-4b68-8229-5bcf71919a49", "sighting_of_ref": "indicator--e95a3a46-5277-48e9-a630-31fb3e5c6808", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05ce8e9-e790-48a5-83db-837e16be5263", "sighting_of_ref": "indicator--f2c5261a-ce45-431d-ae17-86ee0c96870d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9261e8-a3d0-4eaf-bb38-9c94035ecb6a", "sighting_of_ref": "indicator--dc9ad6e6-3f45-482b-a938-06c33d042f41", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faaf5d4a-d9b4-44f1-8d8a-e5f6e86140a5", "sighting_of_ref": "indicator--8e54a85d-6326-4543-bee0-d482442a9786", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2663eeaa-1ea7-4bca-a2fe-315a4461e161", "sighting_of_ref": "indicator--61d30d7f-853a-4cc3-9e72-dd07fd78dcbd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9883ab1b-286b-4d6a-bd5c-fb2ef0b5e52d", "sighting_of_ref": "indicator--e854401a-7bed-4395-8410-ba261109c144", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af98a062-46a6-4caa-a9c7-e65c987a7bb3", "sighting_of_ref": "indicator--cf91d992-039b-4e3c-8106-db2a2e59c547", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e103c22-ac29-45ca-a6e3-a5637c365d30", "sighting_of_ref": "indicator--cf91d992-039b-4e3c-8106-db2a2e59c547", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc11fda-b5ae-47d0-bdff-803529611108", "sighting_of_ref": "indicator--67c0fff0-40ea-4785-9dc6-8d9773251010", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134076ba-c8f9-4e6f-a4ba-9461286a698d", "sighting_of_ref": "indicator--67c0fff0-40ea-4785-9dc6-8d9773251010", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e5c88d-b7e3-4eb0-a703-167bfdef9ed4", "sighting_of_ref": "indicator--2fbb2595-69d5-4341-8df1-bb5b467b2d01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69498aaa-4533-4c3c-9375-8179e90f2437", "sighting_of_ref": "indicator--b7039fbb-c5ed-4b7a-88dc-8af3aefbe26d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7842810-64f3-48ae-938c-3b6672dc3bd5", "sighting_of_ref": "indicator--b7039fbb-c5ed-4b7a-88dc-8af3aefbe26d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b341477d-fccc-4e63-9d00-184c0d61e4a0", "sighting_of_ref": "indicator--a9a9f644-2e82-4c58-b774-9895ff2966c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b6cea8-9109-428f-8162-ed0cc3ab4789", "sighting_of_ref": "indicator--a9a9f644-2e82-4c58-b774-9895ff2966c5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00f3e0e-ffa2-42bb-93f2-01c7a0acd12e", "sighting_of_ref": "indicator--713657a4-e845-45d2-840d-4d540730b024", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1216f3-c746-4cb0-8566-79e0e7bf2dc1", "sighting_of_ref": "indicator--713657a4-e845-45d2-840d-4d540730b024", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26245d7f-1159-4341-856b-68a858782dda", "sighting_of_ref": "indicator--14f13d80-b114-42da-a88c-5842c350c862", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9055e321-e377-46fe-8a3b-61b05a0ce391", "sighting_of_ref": "indicator--14f13d80-b114-42da-a88c-5842c350c862", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d26a01-8ee6-46cc-8120-98f274a32a17", "sighting_of_ref": "indicator--30ddb0bc-ad45-4d76-a703-e8b8b6e7b730", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685abb5e-c950-4017-b497-cb22ee886bc7", "sighting_of_ref": "indicator--30ddb0bc-ad45-4d76-a703-e8b8b6e7b730", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c89add-27f2-4875-b4b3-5d796b807eb8", "sighting_of_ref": "indicator--6fdf713e-9414-4546-9ad0-53723a2057d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c64fd4b-980c-4173-b4e0-ff2272e51229", "sighting_of_ref": "indicator--daddac90-2664-46a5-8655-6d81c87a6e5d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b855301-a068-46eb-b1f0-25a1f301c6eb", "sighting_of_ref": "indicator--d28a5ed7-628e-4f6c-a16e-2243b5e2c6f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6ec006-a93f-47bb-94b6-348bf4e3327c", "sighting_of_ref": "indicator--53118d3d-fc80-4e10-85e1-700ec2a2bae1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feffc11e-2555-48c1-83d1-e7cdefa058d7", "sighting_of_ref": "indicator--53118d3d-fc80-4e10-85e1-700ec2a2bae1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005bbf65-5b69-4d75-bdb2-3e26a8434705", "sighting_of_ref": "indicator--11c8b72f-ac13-432c-9aa2-3fac210d8b66", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62705ee7-113d-42f6-81c9-43a9713c9171", "sighting_of_ref": "indicator--11c8b72f-ac13-432c-9aa2-3fac210d8b66", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b063056b-5b93-4173-b418-5b493beff049", "sighting_of_ref": "indicator--b61cda75-73c6-4b09-b630-b1ebb1a75fbf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af30cf57-be01-4416-9d7c-f70d2753d3d2", "sighting_of_ref": "indicator--b61cda75-73c6-4b09-b630-b1ebb1a75fbf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105ee24e-4654-4ee7-81ec-6722526975ce", "sighting_of_ref": "indicator--81c4a920-d93f-4854-bbef-0556fc5fd9c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19eb847d-fe9f-4bcb-8539-3ee25b2a41e9", "sighting_of_ref": "indicator--980b7578-5a5a-4e08-a087-992a37aa25b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d149ef-9f14-4606-a104-a71b05b260c9", "sighting_of_ref": "indicator--980b7578-5a5a-4e08-a087-992a37aa25b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c32952-9bd1-4b73-a164-8af1bbd188a7", "sighting_of_ref": "indicator--a8638adc-bb44-4d46-a12a-afa4dcc7d607", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0677ac9-14d9-4b3d-a966-37bf26e51c12", "sighting_of_ref": "indicator--f174a5be-8719-49ac-a761-343f55e1d086", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31768caa-39c1-45e2-9852-20167b18a617", "sighting_of_ref": "indicator--c761b6e8-374d-4512-ac3a-73e84c33ea91", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671e6d78-e12f-4649-8715-aa11db6af5bc", "sighting_of_ref": "indicator--0d0d7aa7-9ecc-4b0f-9152-60d197c236d7", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6db2e2-a314-47ed-a6fa-a5625c0bc72b", "sighting_of_ref": "indicator--cc433480-2beb-4227-bcb8-cbb68e9efc06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201aad3d-2549-497a-93d1-fd54f44f7836", "sighting_of_ref": "indicator--4493ed14-1007-4d6c-a081-93f48127d2e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60468749-b30e-4662-84cb-8dc12ec64a55", "sighting_of_ref": "indicator--84b1fb79-7d4a-4221-9f83-79ce9c1d19c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9b65f0-4cdc-4539-81ec-c0d69f40fe08", "sighting_of_ref": "indicator--84b1fb79-7d4a-4221-9f83-79ce9c1d19c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f7a8f3-93e6-47e3-87ed-7d1c383fb9a3", "sighting_of_ref": "indicator--21b9a53e-fc3d-4ba2-91da-bcd49898272d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c8b7f2-4567-46d5-a789-2963d6caea6d", "sighting_of_ref": "indicator--21b9a53e-fc3d-4ba2-91da-bcd49898272d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749ef7f9-930b-4ba4-9581-f54f7e165f38", "sighting_of_ref": "indicator--a38bad22-c392-4ac7-a354-fc17d99da088", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5949e6f-8d99-4be7-9c89-c4a8d54cceb8", "sighting_of_ref": "indicator--d659a97e-e272-4f4f-aad4-cb5edc7b47b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810590fb-5b4a-4bb2-8885-5b6335fa3501", "sighting_of_ref": "indicator--d659a97e-e272-4f4f-aad4-cb5edc7b47b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a2e440-ef07-4399-a40c-f210069178c9", "sighting_of_ref": "indicator--4b92e34f-cda3-4402-86f5-16628fdf3414", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6fce4f-0774-46e9-b23c-069039820d22", "sighting_of_ref": "indicator--4b92e34f-cda3-4402-86f5-16628fdf3414", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f96f70-13e7-4c3f-828d-a9bd8d7587c6", "sighting_of_ref": "indicator--1554545b-0321-4922-9d8a-e244417bf57a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148cfbfb-e2e3-4d61-8d70-da7772eb4eea", "sighting_of_ref": "indicator--1554545b-0321-4922-9d8a-e244417bf57a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e1e9e7-c5b9-43b4-8738-a8ea8198995e", "sighting_of_ref": "indicator--db74a77a-f862-44c9-8930-ef8751d070e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b896a70d-00a6-48c0-b671-95bebb9f09c2", "sighting_of_ref": "indicator--dd3e0c1c-875d-473b-830c-e2f553f7f0a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85283c2-2e9f-47fd-a431-25c962a1da61", "sighting_of_ref": "indicator--d1a3423a-b566-49d3-9f9b-fab9a1c03243", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0181096d-6835-4e93-b9c9-6efe47354429", "sighting_of_ref": "indicator--69307064-a7b7-4b4f-9454-446684cf576d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3ce13c-4777-4ac3-a48f-695cb10acc27", "sighting_of_ref": "indicator--ae0c20fe-0750-4c79-b1e4-ab1d78962a88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30891f38-fdc3-4a54-970b-e96843e3e43d", "sighting_of_ref": "indicator--a7290ef9-fac3-4a94-bcea-e32197a38206", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d965d32-ba09-47c6-ae07-3ba9c49c4ae4", "sighting_of_ref": "indicator--e6de21d8-269c-46d4-8aa1-b196b5b28a77", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd792f71-4a3d-43b9-bbf4-8cc3091f6d67", "sighting_of_ref": "indicator--3310e674-32be-48ef-b84f-3a7e69572126", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e5b2d4-db7f-47a3-bee9-2dacd4091b18", "sighting_of_ref": "indicator--0402f084-3ad5-4d47-8bde-0bd2df3b1f64", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b88ef3-97bc-40b7-9edf-b4f5de179f2b", "sighting_of_ref": "indicator--0402f084-3ad5-4d47-8bde-0bd2df3b1f64", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905076d7-9aa7-4edf-bb6b-c39159b06694", "sighting_of_ref": "indicator--26b68d33-e0d5-43c4-9541-16ab222cf6a6", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7615d2c-c39a-49ee-a2f1-ba9421b07e61", "sighting_of_ref": "indicator--cb04934a-acb0-482c-a050-e88bf18a6d2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80a6da0-f0ff-426c-8462-8339042fc5c5", "sighting_of_ref": "indicator--ff9f41c1-c3bf-4a29-93f7-b0ffe3294b8a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7190426d-20f6-4050-876a-dc2cdda7c6fc", "sighting_of_ref": "indicator--e6ccece1-4e25-4a84-8d79-e83a4167284b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f9ff91-6ada-46d8-bbcb-513037f66335", "sighting_of_ref": "indicator--a8d83d6f-56cf-4ac3-87d7-189bc5ae15fd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd17fc57-67ce-408c-b7f1-aacbe6553ea2", "sighting_of_ref": "indicator--cc8f7c07-a0e0-48c4-99b8-7083a8451504", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c38c14-3519-44ff-ab16-dfe419617298", "sighting_of_ref": "indicator--117823a0-c3ad-4206-9c8e-9c4caf98dd5f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce6295a-5c25-4437-9609-c9e6d1e6408b", "sighting_of_ref": "indicator--26e3ee77-ce45-467e-bfbd-24ccd3328063", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df25ff0e-0290-459a-9a55-2efda2f05e03", "sighting_of_ref": "indicator--6686c8ea-0298-4faf-8fdf-91b624c4872d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909fd46a-328e-4244-976d-d7357dffb08d", "sighting_of_ref": "indicator--0ef3fe11-ffd5-4e93-95f4-aa4e13e8ffa5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e74c0f-aa29-43ea-b64b-1b077d502906", "sighting_of_ref": "indicator--87b4027f-3536-4b1a-979b-2fed0165aaf7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74ce244-41e3-4512-95b6-a690310b39b2", "sighting_of_ref": "indicator--8e5b3fe3-28c3-46d8-acc1-7889efef17e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f2557a-9dfb-4a0e-9cc3-06beedf7acf4", "sighting_of_ref": "indicator--270f3ae6-e35d-495b-9e55-7b94f9537fa8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497598a5-bd40-47b0-8081-d600872040f7", "sighting_of_ref": "indicator--6a8b7db9-1a44-48da-b9ea-3f70af0bee7a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd74b7bf-6f4b-4ffb-8456-d709eebb4b97", "sighting_of_ref": "indicator--7b6e5486-2181-4b78-a6de-d0f5520c26fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1408ba-3fe3-45a9-a85f-55bc2159bdc9", "sighting_of_ref": "indicator--954d2ccf-6e86-4dd4-b32a-7038c4c28bf3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409fdd30-6dde-4d49-8108-c68eea9d6987", "sighting_of_ref": "indicator--304f25af-9e81-45c4-b27f-1ec92aafcb69", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680c43e4-b3e0-40f6-a575-c37bdf09c689", "sighting_of_ref": "indicator--1326064d-4306-43e0-a0fe-85ecccff8d19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfc019a-4179-46b7-8609-22f4118f9cf2", "sighting_of_ref": "indicator--63b887f8-14c1-4b3a-99ef-b88ed3dbfb19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd9b010-5405-4378-86eb-221094dcad7f", "sighting_of_ref": "indicator--00dc229e-4c55-40e1-ab03-6197b9ced71b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfd9d75-f845-4b6f-b817-035af4bcb12e", "sighting_of_ref": "indicator--102dea82-01ca-4159-9ba0-c8ed4af177d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6a6bcb-7e59-4a99-a506-ebce782b5988", "sighting_of_ref": "indicator--9a497113-a45d-4cf1-82f1-e0d18ed8c95a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96819edd-5e71-4e65-a6aa-791c9c355cd5", "sighting_of_ref": "indicator--368aa922-9fd2-4e21-a516-59e8da7bc335", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0e5faf-b689-47b6-871e-5f62e4d5f5ff", "sighting_of_ref": "indicator--f538544b-ebb8-4d8a-90bb-79fff13d34c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33322e8-0a8b-4d97-989a-c92ba6298342", "sighting_of_ref": "indicator--dc67445e-27b0-4785-9481-d259a2ec98b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3dc2f3-abdb-474d-bf38-681256c5ffe7", "sighting_of_ref": "indicator--852d974c-8b2d-45ab-a483-38d64744e5c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2667ec-2127-46c2-bc9e-3e8862aa6d73", "sighting_of_ref": "indicator--a4af51cc-54f0-4480-8804-cc5e5d0b3d19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f04cba5-bccb-458a-b644-47d4506549ea", "sighting_of_ref": "indicator--2a09cb92-4832-40c6-a63c-a611e7e8a703", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fe2e43-1f99-4998-a624-1e24411a3d70", "sighting_of_ref": "indicator--153acbd9-b352-4c87-b224-6b84f5d8d619", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688b75fd-4486-4fc7-910a-2e7cce3970d5", "sighting_of_ref": "indicator--3b811faa-4e06-43c7-bd8e-087bc2e1663e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8446576f-e085-455c-848d-1e311d662552", "sighting_of_ref": "indicator--382cbc9c-a606-4c72-8b61-3acde6b865b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2424d42-30c7-4106-999c-346b0732bff2", "sighting_of_ref": "indicator--445252be-a052-4258-92e2-e58493033400", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7fc5d3-679d-4243-bfac-92ffbe6ec873", "sighting_of_ref": "indicator--c64d5a65-5b46-4af3-a755-bbe01221bd30", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290bbd23-661e-49c6-9b4c-1c10615d69a5", "sighting_of_ref": "indicator--316d1f38-390c-4ed9-8267-afb807d72689", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dc3a8f-246f-44ad-9769-b2b3e2a43099", "sighting_of_ref": "indicator--316d1f38-390c-4ed9-8267-afb807d72689", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824e42ac-5a01-419b-94cf-c20aa82ae524", "sighting_of_ref": "indicator--cd05a8e5-43a7-43cf-a3a2-899dc0f2bb70", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da19c03-9060-4fbf-a11c-66628af056cc", "sighting_of_ref": "indicator--338662c9-227a-4336-aef7-7bbe1f79de2d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8efc03-0e28-4588-9826-7ff7f77406b1", "sighting_of_ref": "indicator--f3e82d98-e7e9-4e8c-84ff-f1b9c9cb8bdd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3845c9-e181-4c41-ba00-aa7d3e84c538", "sighting_of_ref": "indicator--b12d2a49-a9ac-4e79-aa69-049a132b89a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e44320-9f2b-403c-968b-5765b8ded9e1", "sighting_of_ref": "indicator--cfaa66da-3c0e-4f47-a8ff-a55bb3fc7a3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d0a5cf-154c-42ab-a9c5-9be62b81b6a6", "sighting_of_ref": "indicator--6bbe4a30-f554-4fc4-934a-db2c357f1c25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a0b211-3e09-442b-94ff-c48fe3f3d201", "sighting_of_ref": "indicator--35c4eab4-609d-41e8-a694-7bbe8a25106e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1764771-968f-49ed-b83c-4f5ac529a8ff", "sighting_of_ref": "indicator--2cd97854-d845-48ac-b40e-4572d0b0e1d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bd47b3-16a8-4042-aab2-dfac62a1b13a", "sighting_of_ref": "indicator--d40f878e-7f42-4cd9-b9bb-bb1c5b00a647", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7375038-db2f-4608-9fa1-39d3c5f4812e", "sighting_of_ref": "indicator--767a62fa-ecff-4bac-bd60-8348247a670a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed61dd77-f8e3-4490-b735-1067c83b6b02", "sighting_of_ref": "indicator--b99f1dcd-ee38-41d0-bc27-83c61e0a3bb1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b183ad-25af-42c3-a663-87f856e4206a", "sighting_of_ref": "indicator--cd2110dc-2521-4e13-9e1e-028b7e153b93", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8a09fe-e04a-4e03-8eeb-7c3d1524aa91", "sighting_of_ref": "indicator--cd2110dc-2521-4e13-9e1e-028b7e153b93", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2510b0-98e9-4c29-80c2-723f45b03b54", "sighting_of_ref": "indicator--32804078-707b-46a4-b1b9-e46e3a2d13f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e970bd2-c7a2-485c-8808-ab4e8c69bee9", "sighting_of_ref": "indicator--ebdfe81e-2e8d-4f05-8215-ec7f3ddce17d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c6fb54-b458-44e7-acb7-0785b3b73803", "sighting_of_ref": "indicator--a38db051-c3f0-4033-a779-d7128523d2a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5371fda-c01b-4b04-9e8f-ab250094b0b6", "sighting_of_ref": "indicator--de1e522c-ebb0-4693-a2e2-cc590efe4a6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71514592-bd6f-4a8f-9c87-6947fd4e3d5e", "sighting_of_ref": "indicator--c12fab05-8668-431a-a27e-d19c8877833c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f9abfe-925a-427f-87d4-9ea2376ac7f8", "sighting_of_ref": "indicator--d3aed5c2-6369-4837-ae80-5220202ad187", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57434041-3730-4b4e-9309-374924ad1793", "sighting_of_ref": "indicator--8b63ae5f-4944-4e0d-92d5-29b0f777b4fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7fd0c1-ab6e-4671-8b1d-e9762f0c6106", "sighting_of_ref": "indicator--e891ae77-5408-4b4a-b37d-7768d7b21c60", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f529d87a-5d2a-4630-aa1c-13f25223f81a", "sighting_of_ref": "indicator--e891ae77-5408-4b4a-b37d-7768d7b21c60", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1175133e-f2f7-43fe-8c78-92f7f0c048ec", "sighting_of_ref": "indicator--8d320c40-b9a0-468d-9608-dce3cd50cd9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70055f8-6ec0-4942-a982-75b6cf38ff86", "sighting_of_ref": "indicator--352296c7-b485-46af-ba44-9be630b4b48d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecad4c4-7d7b-4c60-8a33-f683e7d58e23", "sighting_of_ref": "indicator--cb0f11ea-fc27-481e-b419-c444ff830afa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebb8131-02b7-4516-bacc-4b029cdada4c", "sighting_of_ref": "indicator--cb0f11ea-fc27-481e-b419-c444ff830afa", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548e3199-fbfd-4de3-bad5-8b9769f00ed1", "sighting_of_ref": "indicator--cb0f11ea-fc27-481e-b419-c444ff830afa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b88ac2f-2848-4cc4-b756-b643629bf301", "sighting_of_ref": "indicator--43a5e152-ee94-4bcf-b78a-5bb349baf70d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b50a710-6d41-4a2d-8b5f-9def6a53dce5", "sighting_of_ref": "indicator--810f5e6d-5f96-42bf-9e9c-9023831e4622", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf60add0-1430-44d9-8e06-d451519f6984", "sighting_of_ref": "indicator--d18d5cdb-48a3-4187-be1c-cbebfcc93549", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2320e417-0a76-4f90-aa30-8e21dd48fc5d", "sighting_of_ref": "indicator--fe2425fc-ea86-4ed2-8823-9425ce901237", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab49d6e8-4b4e-4cae-8ad9-cfcb59df7f52", "sighting_of_ref": "indicator--2f3d2b80-0c5c-47db-ab8d-f064bdc4d3fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c0ab80-8ea7-4fcf-b410-4d00bf29d1ed", "sighting_of_ref": "indicator--2f3d2b80-0c5c-47db-ab8d-f064bdc4d3fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6162b6-8624-4001-b06b-da41b76cfe4f", "sighting_of_ref": "indicator--1353cb2d-c02e-4f30-bbcc-91d4e0a65b5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9995ffa9-aea8-4034-be63-d8e7343bd8f8", "sighting_of_ref": "indicator--1353cb2d-c02e-4f30-bbcc-91d4e0a65b5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22ab779-31d9-438c-a956-6ff7811f05cf", "sighting_of_ref": "indicator--33159b4a-2bf6-482d-84ba-296dd16ccbd0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332858e5-efa2-4355-9c02-40011cc0a4ca", "sighting_of_ref": "indicator--33159b4a-2bf6-482d-84ba-296dd16ccbd0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589421bd-f6f7-4c44-994e-8f87f871b2b6", "sighting_of_ref": "indicator--0101fde1-abd4-41a7-afea-4c6f4fc38fd5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19caa6eb-88e3-425e-8e20-214a0d873194", "sighting_of_ref": "indicator--0101fde1-abd4-41a7-afea-4c6f4fc38fd5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f9160d-6e12-4255-8f11-92ccdfc05792", "sighting_of_ref": "indicator--b722005e-0039-4421-82a0-9998bf81fd75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc462c8-86f8-4985-8979-3c31242f5be3", "sighting_of_ref": "indicator--e72f2cb8-106f-4034-adfc-cea569d26f14", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4e360d-8aa7-4562-92a0-e091c668c6bf", "sighting_of_ref": "indicator--c0472e0c-afb4-4679-92d6-b21cf2729957", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc9daf4-5113-4d1f-9378-00e8882c1040", "sighting_of_ref": "indicator--3864175c-d18b-44d4-824a-5b775be05ddb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cec8dd9-c8e1-4ca9-9a86-11f8c06b945c", "sighting_of_ref": "indicator--2ceab1ed-4810-4459-ae0a-afa8926e72e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcfdb55-8d5e-46fa-a2fa-73e7028acd8c", "sighting_of_ref": "indicator--cb7e2ae9-83b8-468c-b617-fdfa0b54f920", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1185af2-557c-4e27-b219-290edaf3aa1b", "sighting_of_ref": "indicator--ff5daa94-fbfc-4c1f-931f-7c36ab1fbc18", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab4fcae-5605-4c5a-8d49-7dd98b1f41d7", "sighting_of_ref": "indicator--2c789ee6-fa9d-4dd3-ba0f-6f238cf59742", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945b428b-7d21-4b83-a707-f972a31e5188", "sighting_of_ref": "indicator--14baf222-328d-4deb-acab-e2d991c6b628", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ba7491-74e6-45e3-8b4c-7501e2ab6556", "sighting_of_ref": "indicator--1ea13e13-7091-4361-a387-c9dd6f61f9d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b39789c-500a-4eb8-9fe2-15feb5ef8372", "sighting_of_ref": "indicator--eba88a3c-258b-4c95-8b16-db28f583f3f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa35045-0d31-48d9-8383-df06ad758c57", "sighting_of_ref": "indicator--0f97a3d0-d3ac-43c8-b32e-84c7bb7ad453", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c4b75a-ea1b-49e2-98b6-ee25a6e72955", "sighting_of_ref": "indicator--53cf3475-4a66-44c4-a5e2-c69d5eb5ce68", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d480d584-39ab-4ea9-bb86-d6534b36cd77", "sighting_of_ref": "indicator--972db347-4db1-48c5-8a59-c5e2898e9928", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d147845b-9b68-42fc-9321-b5df228a4f49", "sighting_of_ref": "indicator--e2e8308c-d491-4a52-8ade-b242f6bcd892", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3657ba-85b2-4e7d-b049-20f6fcdfdfdd", "sighting_of_ref": "indicator--868ca74f-a4b9-4d30-8292-a95d772088b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5951a4d-636b-442d-aa5e-7f098164c30f", "sighting_of_ref": "indicator--afd617df-2f0a-4439-842f-eec2e8f62a43", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5ba5fa-7ee3-42f5-bacf-bd0a44c42195", "sighting_of_ref": "indicator--5bc793ba-5a91-4622-a574-13f6bb7f98d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9d4194-aa86-411f-a732-0c39bc1d184b", "sighting_of_ref": "indicator--6d30fb79-e226-402d-a3f1-064a62c711fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa45bef9-67fe-4ff2-892d-0f32d69f471a", "sighting_of_ref": "indicator--496d39b2-3c8c-457a-9999-3a92a71e9d69", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978a7c07-9e71-4fac-b499-6cac5eb816d4", "sighting_of_ref": "indicator--37fa929a-544e-4e95-8a46-0234c0e4376b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdc7353-2d8e-4e37-b87d-af94d74234a8", "sighting_of_ref": "indicator--553c5299-b824-4c33-8b61-20834d497744", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0f49f1-4f9a-4a42-afd1-a28ef5c6f648", "sighting_of_ref": "indicator--5542710d-11f3-460f-ad8f-fdd421ec4f97", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e81d49-898b-4963-a173-b18029d7f547", "sighting_of_ref": "indicator--9d988f0b-af48-49af-9850-a96c0a00f2a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a913c6c3-2565-4c86-8446-ea7a0c35b46d", "sighting_of_ref": "indicator--973092d7-7511-4f12-a6bb-8a47052f9171", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28df5486-532c-4739-9d51-ba6a4dc1c691", "sighting_of_ref": "indicator--a6fa378f-6151-4ca9-996e-6b69dc5233b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5603c8-de55-440a-91db-feeb7429bd33", "sighting_of_ref": "indicator--e0b95587-5b46-4eb4-95f8-4cd9d3f28842", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f878d2f3-ed50-458b-b139-8331e6a0ae52", "sighting_of_ref": "indicator--77a7e87f-5147-4e2b-b858-363d1b80ca33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffed845-18e5-4fbf-b4c9-2973033b529c", "sighting_of_ref": "indicator--09e540f2-acd7-48c9-997b-80bc6c7dee5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85048585-63a4-4608-97a8-948fa6f7a116", "sighting_of_ref": "indicator--4baa4888-47c2-4843-813d-70ac8dfc6229", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3643f33d-8f5a-4c3a-86e8-2160a1621c04", "sighting_of_ref": "indicator--4ab27e23-ca0a-443f-b60f-b0b3b6987cab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15a7203-aad3-4c1c-973a-26ebbc5997f9", "sighting_of_ref": "indicator--7977cd53-fdca-4dc3-b5c9-780c169b912b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de654f1e-ac43-4220-b98e-077094b44e0f", "sighting_of_ref": "indicator--2d62f657-ae5a-4847-a251-f1d70da42f96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b022f5e1-0ded-4a73-8609-b459ec2cddb3", "sighting_of_ref": "indicator--0966898c-9f2c-4f4f-9efa-c5e67a97d01e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f75c720-cc1e-44f1-86a6-ab38aa2d46b7", "sighting_of_ref": "indicator--b6e81f62-b206-4b06-92f1-7e30ad8ac94e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f225e43-c110-4ea8-9839-d12ac3beee90", "sighting_of_ref": "indicator--60940e08-4cbb-437d-a657-466d14c9bc3d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4b89cf-674f-4d71-9df3-ed9388912e57", "sighting_of_ref": "indicator--60940e08-4cbb-437d-a657-466d14c9bc3d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49569339-7e0b-4096-a46d-6d9ecb46860d", "sighting_of_ref": "indicator--ac29117d-eb88-490e-be1d-64954b872d6c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c40293-fb58-45c3-82b8-359aa4c731d6", "sighting_of_ref": "indicator--4abb0ab5-423e-4f03-990d-4efac5d9dda4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4913d3e7-42eb-4e79-937e-2944647276af", "sighting_of_ref": "indicator--d84fb9db-ccc2-436e-b2be-554540485afc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3646ab-ad06-4398-8699-f56829a6c210", "sighting_of_ref": "indicator--9bfa444e-44bc-4d5b-8bb5-174574403b50", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30856af-a7e9-4195-a033-6a8ca70335b2", "sighting_of_ref": "indicator--5f3f1d99-d065-4be3-8770-ce8a06826c46", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42b4f7c-6577-4cd5-9d49-259ed944b084", "sighting_of_ref": "indicator--46dd8748-8efc-43c4-9b3b-547509057031", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff409f1-5402-4712-aff6-f98a25ab7ad5", "sighting_of_ref": "indicator--46dd8748-8efc-43c4-9b3b-547509057031", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05c0227-67ac-45e1-8d1e-9a347b417c94", "sighting_of_ref": "indicator--053a0cab-f585-4763-9532-2bd91c8c99c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367f3fb0-9c6d-4db9-a2c4-b0e7ab2c7d5f", "sighting_of_ref": "indicator--934d199b-49ba-49f1-8bad-9923bae99d97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91420226-bfea-4b60-a9cb-365052ec5f0c", "sighting_of_ref": "indicator--daa03441-fc28-492e-ab2c-79b8a6b4c171", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5124cc-94f7-43e8-acdf-3a12f069e22d", "sighting_of_ref": "indicator--b4754cce-f9f7-425c-abee-1e419bcc5279", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bdce4e-3aa5-4796-9daa-0c5ef969dbdf", "sighting_of_ref": "indicator--37c8556e-a672-4654-a1f3-3110b894754e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ce0b08-6f81-46c9-aa4a-d1190578e5a2", "sighting_of_ref": "indicator--928ae098-9802-48a2-a532-ebaed934405b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0193d0a-37dc-4102-9e0f-eb8605d2fd9b", "sighting_of_ref": "indicator--d0f21ccf-1dbc-453e-a463-65c002501abc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f57dacd-1455-4824-bb7b-0ee8975d0785", "sighting_of_ref": "indicator--81037bd2-f068-4a9f-a8d6-b509eebf32bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db00997-2293-4187-9f82-dff1af096de6", "sighting_of_ref": "indicator--3b7c2489-37a7-4f41-ad50-99860a4874fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9febd669-b0b6-4c96-9097-e9c05a46fd84", "sighting_of_ref": "indicator--80a7412c-607a-49cb-80e5-65321e0dfacb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68aee2be-68e8-4fee-a370-cf8264fe0230", "sighting_of_ref": "indicator--8b44312c-380c-4c00-ba76-e282304da50e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1af567-7452-4572-b1e1-c9740228805e", "sighting_of_ref": "indicator--93b472db-4130-4bd6-b60b-08df578807d8", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddec8c02-9411-418f-9503-8ca596061093", "sighting_of_ref": "indicator--f886ffea-3426-40e5-b15f-00d633be49d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0218a35f-db72-4bff-8ce3-e022930ab735", "sighting_of_ref": "indicator--f886ffea-3426-40e5-b15f-00d633be49d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e27c6d0-1e3d-4013-a46f-08373a45a19e", "sighting_of_ref": "indicator--40517a04-82b6-496f-8ae8-d457d58145f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecdb93c-ba95-40bd-aea4-2cf5308643d5", "sighting_of_ref": "indicator--c21afd76-b635-4d9c-94c3-182fbd726e2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68a7e00-dca1-42c1-85ff-be913113a69b", "sighting_of_ref": "indicator--da17d896-0689-4ca8-9743-8c0f185e2070", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3269d51e-71a6-49e8-afb1-7230a581d271", "sighting_of_ref": "indicator--da17d896-0689-4ca8-9743-8c0f185e2070", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fedab1-b99d-49bc-b761-2320c09e6c79", "sighting_of_ref": "indicator--4248ab99-c861-4204-a00b-c6ba12bdda0e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6cfd10-e28c-4daf-8fbb-633280294dae", "sighting_of_ref": "indicator--4248ab99-c861-4204-a00b-c6ba12bdda0e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f48f99-18d5-4130-9ef4-82e463c1a799", "sighting_of_ref": "indicator--0d0f0085-0fec-4f3e-abad-029dd3ee3869", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26897d0-9567-409a-ba73-e0368a363be6", "sighting_of_ref": "indicator--0d0f0085-0fec-4f3e-abad-029dd3ee3869", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57290b9c-725c-4d4c-b77c-9bf51de7d6df", "sighting_of_ref": "indicator--7cab61c8-fdad-42f4-b90b-707c4474fe77", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf84acd-a102-4e9d-81ca-f861ffb1bd8d", "sighting_of_ref": "indicator--7cab61c8-fdad-42f4-b90b-707c4474fe77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd655af0-b83f-4e1d-9dac-95e21d2a4461", "sighting_of_ref": "indicator--db05d54b-a3ae-4c42-84d3-ec64ebc70d72", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec73d176-2ed6-4720-939f-810cedafbaf3", "sighting_of_ref": "indicator--db05d54b-a3ae-4c42-84d3-ec64ebc70d72", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2ecacb-0a7b-49f2-99e0-9f82e6048d1f", "sighting_of_ref": "indicator--20f05eae-5171-4ca7-a041-b2fd8b5a9940", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a142e862-5b29-40d3-878f-18ce205bda53", "sighting_of_ref": "indicator--20f05eae-5171-4ca7-a041-b2fd8b5a9940", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7d43b4-283d-4b8c-92b4-dc0b8a899f67", "sighting_of_ref": "indicator--f760bf54-08d2-4dce-8678-852dfd9b630a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33971be-fe91-43b9-898b-7f26d9a4e48b", "sighting_of_ref": "indicator--f760bf54-08d2-4dce-8678-852dfd9b630a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd4ab27-a412-420a-93be-6bd4bf6d50ea", "sighting_of_ref": "indicator--d06ce0e4-0c65-4a86-8e7c-5c1742f0cb83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0584c404-832d-4404-92fb-3e2cea1e979b", "sighting_of_ref": "indicator--d06ce0e4-0c65-4a86-8e7c-5c1742f0cb83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb92263-456f-4a6d-9fa0-9655bdc43bea", "sighting_of_ref": "indicator--3da00cf6-368f-4e27-a30d-28ab61b4d90e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f086c46-a848-4bd7-bbc0-736bde044091", "sighting_of_ref": "indicator--3cf0c905-6974-43f5-ae08-60490d18069e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da94bd1-c352-4b4b-899f-c0897bd65334", "sighting_of_ref": "indicator--3cf0c905-6974-43f5-ae08-60490d18069e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85b3475-c1b6-4e24-afa9-06927a0db6be", "sighting_of_ref": "indicator--9fea9ae2-704a-4620-b689-2e84ebffc624", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d88f7e4-b798-4753-b586-fd6ca75238f5", "sighting_of_ref": "indicator--9fea9ae2-704a-4620-b689-2e84ebffc624", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0422251e-52e3-446f-8c52-f67c9747ae50", "sighting_of_ref": "indicator--921173fe-fba5-4b9b-acf2-4650d3de8cd9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a6fdf0-0a46-4827-bd48-638feb3dc301", "sighting_of_ref": "indicator--921173fe-fba5-4b9b-acf2-4650d3de8cd9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b357aa0-7ad2-47e0-9a94-6f3e8f318386", "sighting_of_ref": "indicator--13af6467-3c92-4b86-8db2-478cf3acc8d5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e21fe3-1fdc-4d5b-9311-694775cfbd47", "sighting_of_ref": "indicator--13af6467-3c92-4b86-8db2-478cf3acc8d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1d1aef-ee0d-484d-813b-b2e019183748", "sighting_of_ref": "indicator--0d0f3ac1-12a8-48b4-af19-0e6bc2a0e719", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88859c2-1ab3-4b39-8858-4c332e291268", "sighting_of_ref": "indicator--6e4dde13-f3cd-4be5-a649-d5e536e5c094", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6120ca71-4eb7-4055-b843-d2754d30abeb", "sighting_of_ref": "indicator--6e4dde13-f3cd-4be5-a649-d5e536e5c094", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9464d9e3-2d9b-430c-b1c3-415cb7872938", "sighting_of_ref": "indicator--a6832fcd-8419-4bc1-bb48-089e18e77ef0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9817fde9-a6cf-44c9-9ac3-022e39038751", "sighting_of_ref": "indicator--a6832fcd-8419-4bc1-bb48-089e18e77ef0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28febae2-3d02-4589-b970-075b41d0eac7", "sighting_of_ref": "indicator--a6832fcd-8419-4bc1-bb48-089e18e77ef0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cf8c73-ad0b-4c5c-8b0a-22b032f53ed7", "sighting_of_ref": "indicator--955d1965-2f94-4df3-b543-8b5a93c922f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed21cadc-3cdd-4dca-96dc-a388ba2571dd", "sighting_of_ref": "indicator--ae731436-3467-4ac3-af32-c7399349fc12", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a162ff0b-b887-4902-ab6d-cb0a4dd86714", "sighting_of_ref": "indicator--a2dcfdb6-de07-46ca-a411-2770f47d1ad5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28a6ca9-9b82-47ec-a5de-12f66933da26", "sighting_of_ref": "indicator--98369830-e31a-4b45-8f85-70d508b91c1e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a99deb-0ed9-4e5e-b2d0-29f34a21bb4d", "sighting_of_ref": "indicator--98369830-e31a-4b45-8f85-70d508b91c1e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335591f8-f737-4f1d-a067-c0d07bd174f3", "sighting_of_ref": "indicator--a5c315b8-9685-4c2e-8041-9cfbae05c255", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66440304-b148-4eb2-a8c9-40ad5fd10afb", "sighting_of_ref": "indicator--fc568abe-57fa-4a31-a535-6c04ceb14bed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd95f2d-e1fb-422a-b232-61aba35ec010", "sighting_of_ref": "indicator--4b7c594d-c4a5-4833-8493-064c9b53ba44", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3924ae-157d-4039-b103-44d3170149b1", "sighting_of_ref": "indicator--b36a6017-6b76-4770-980d-c19624a9dad9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3856347d-e510-4606-bb14-7f43e2e426f7", "sighting_of_ref": "indicator--ff81c474-d70c-4d3f-91d7-9d2995032416", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c35aff-bfa3-426f-8a24-d9e7d706c3f0", "sighting_of_ref": "indicator--3b75fb0d-e0e8-4e41-84a8-6e77213fd65e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f859602f-b168-4bed-b433-619454681617", "sighting_of_ref": "indicator--12c53716-9b68-4edc-afd8-24f781895dfa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb377500-ef20-4285-8d94-eaabc1541350", "sighting_of_ref": "indicator--0ffa1034-3547-4719-811e-42c168227c1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf98f8e1-a60b-4407-8ecd-bbb1fa2ffdd8", "sighting_of_ref": "indicator--389d0952-8dc4-44a1-b000-d329c138f209", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22323cd4-0f7c-4e46-bee2-3fc7ecdc0cfc", "sighting_of_ref": "indicator--37bf3699-3325-4bdb-a110-9e44405ca14e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d062ed4-da71-4a00-a3ae-493627eb2aa2", "sighting_of_ref": "indicator--51a478ea-faac-4320-9791-ac2a019fbb9c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049f4c19-ffa1-4f19-afaa-c40a856163dd", "sighting_of_ref": "indicator--e3171ac4-c147-4f33-9501-70ff1aebb44d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc81f77-f407-47d0-94cb-fa15f4e51447", "sighting_of_ref": "indicator--1196832a-0b81-4003-bb5e-7e237103596f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2eecb5-966a-4cf0-8450-5abaf282fdf4", "sighting_of_ref": "indicator--d3c1b5a0-c574-412f-b5b2-c8da90d739a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ffe51b-b4ef-46e6-8976-c6cf3d3ccea3", "sighting_of_ref": "indicator--14617476-bf14-4aea-b5d4-561c6fa3d524", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3794f2e1-595d-472a-b1a2-fecb9410bac3", "sighting_of_ref": "indicator--14617476-bf14-4aea-b5d4-561c6fa3d524", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd0a3b5-6506-423e-9a61-a6ccb9c71674", "sighting_of_ref": "indicator--c0eb4e60-5507-4183-82c3-ef65f559df80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc6118b-2429-4ea0-8d84-831a959697d5", "sighting_of_ref": "indicator--c0eb4e60-5507-4183-82c3-ef65f559df80", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65588660-0302-4fee-98a0-866254e39293", "sighting_of_ref": "indicator--f0b48218-24e2-456a-aed6-b7cc9a52686d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5657345f-ac3e-438a-b751-7edc8b63dc55", "sighting_of_ref": "indicator--f0b48218-24e2-456a-aed6-b7cc9a52686d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2443e255-d5fa-40d5-a4e3-14f43b9452ed", "sighting_of_ref": "indicator--e336e0fd-9d60-4dad-b70f-4a02934616d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934d4e53-1add-4187-9447-8e0dde4e2f1b", "sighting_of_ref": "indicator--e336e0fd-9d60-4dad-b70f-4a02934616d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e070b69c-646a-43b7-803d-9c61f28bffff", "sighting_of_ref": "indicator--23a88a62-7cb4-467b-8e4e-d4a414d30fdd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa782c81-5252-4017-a1a2-ba3955f05239", "sighting_of_ref": "indicator--509ea57f-3a66-42e8-93a3-6ce4b5f368cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc33082-00af-40ae-8900-d9680a808796", "sighting_of_ref": "indicator--3ccf2e36-dea7-4d59-8b64-5b43016cc399", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73964bfe-92c0-4995-81e9-306bde225ded", "sighting_of_ref": "indicator--3ccf2e36-dea7-4d59-8b64-5b43016cc399", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455b38e3-8f0f-4eae-b46c-021b48615634", "sighting_of_ref": "indicator--63e833ce-6c75-43bc-bbd3-0046a0f4ebcc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fc8dff-ac50-4e5a-806f-78cd11f25202", "sighting_of_ref": "indicator--bd284464-e767-4b0d-901d-84e7f5774ec5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5601e500-7f5b-441b-b83b-bbb70754fb34", "sighting_of_ref": "indicator--975863a1-9d72-41cc-86c7-a9a4c1e8abe9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ea1f6e-7ac0-43cb-a1c6-671a00aa3423", "sighting_of_ref": "indicator--01d69b75-4955-4dad-a874-e2f427098d02", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c7cbd1-1baf-4be3-84e5-28ecf293ebbf", "sighting_of_ref": "indicator--a7a4c3cd-1f10-4b9c-8d29-e2f66b3e6ef7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf41e1b-2551-4cbe-8510-65b771613210", "sighting_of_ref": "indicator--826e6ff1-4e0a-421d-a0be-d5da3f893c97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eec6320-07e9-4712-864b-16a7c9cf7b69", "sighting_of_ref": "indicator--08904d5a-6264-4808-b735-c00908188c1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9894f9-eca5-4f3d-a3fa-381d78231139", "sighting_of_ref": "indicator--9a144ca9-cff2-48f1-bc74-2024844993e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4f2451-689a-4bbd-bde5-c9a7065878c7", "sighting_of_ref": "indicator--39d711d3-39c0-4d4b-9297-41f25e79337b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2772aa6-d777-4cef-bead-bce7f1d21183", "sighting_of_ref": "indicator--bc2a806b-fc3a-47fa-a80e-9a8bccbe88b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b615bc-889d-48e5-b31a-dfdefc7f2ce6", "sighting_of_ref": "indicator--68982719-5dcf-4f19-a413-bd0ba6a1a153", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e7b711-f7ad-460d-928f-43b9036ceb41", "sighting_of_ref": "indicator--f610d356-8a1f-4fb7-a12a-cf8bd4032973", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1058fd31-a7f0-4386-8883-e1a2115b06a6", "sighting_of_ref": "indicator--2b7c64e3-2e5b-43fa-b3d9-ea0da1a16efa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901d283f-d394-4409-b73e-d4e0fb8e5c42", "sighting_of_ref": "indicator--7c8ea291-853e-40f6-b231-78e70aa18771", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba0ac87-3484-4aa6-a718-c6b6c8f05032", "sighting_of_ref": "indicator--aa30826f-2702-4d55-88c1-59f248ac3fc0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b83cbf0-4e26-4fa4-a9ba-3ffebb9e80e2", "sighting_of_ref": "indicator--aa30826f-2702-4d55-88c1-59f248ac3fc0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccaa996-7974-403a-92e8-7ec79b594f5b", "sighting_of_ref": "indicator--4b5d0bf3-b5bc-4403-b321-5d01522a0827", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042df363-ad22-4715-8bc0-deae3d2f54ac", "sighting_of_ref": "indicator--2bb96972-9eaf-4b6c-84f6-92b3e201abae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acba19ed-2b93-4ad9-a21d-2a0c7ed698a1", "sighting_of_ref": "indicator--d8200364-556f-4607-bfcf-f1f82404ccc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50732ab-070b-4618-9e93-5ae4db640db1", "sighting_of_ref": "indicator--427b905a-89a1-455d-90f7-e4106ad40a13", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea2f507-bf2a-4d6c-b7bb-8d66d7aa4d41", "sighting_of_ref": "indicator--7339882a-9342-4991-bc87-77708b7f2dd9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278da2e8-bb44-4272-aba4-2a46df867ef3", "sighting_of_ref": "indicator--7339882a-9342-4991-bc87-77708b7f2dd9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca95bad-c352-463f-a480-0f3d94d5c049", "sighting_of_ref": "indicator--7c246196-f226-4b92-96d1-778c0f0bdba5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644e5927-6e3a-417a-96be-08a3acd1faa0", "sighting_of_ref": "indicator--7c246196-f226-4b92-96d1-778c0f0bdba5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7102bca7-8750-4972-ae1c-a92d9857bd7d", "sighting_of_ref": "indicator--d441f04c-ca19-44f6-b7d1-287a72246bc5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdbb1d1-e2cb-41a8-96be-ad9f98e5794c", "sighting_of_ref": "indicator--d441f04c-ca19-44f6-b7d1-287a72246bc5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db06414c-9c44-4957-a417-83df5e2d043e", "sighting_of_ref": "indicator--938cbf91-1237-4fd7-860b-42b28b1ccbf0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccbce4e-e6d6-4d8c-8891-669b00fae6e9", "sighting_of_ref": "indicator--938cbf91-1237-4fd7-860b-42b28b1ccbf0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd9a66f-23cb-439b-b9a5-a8d1aa59d8f6", "sighting_of_ref": "indicator--4bf653ec-f903-4144-82d3-1fe36a55b00d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e497675-ec5b-427c-93f2-987c4136100d", "sighting_of_ref": "indicator--f806de82-d525-4bdc-8cfc-4bb3488a3c1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485a061a-b0af-47e5-a9d0-499bc6bda684", "sighting_of_ref": "indicator--23287963-7ceb-49f7-b6d9-4fcae78552a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73de9702-cd1e-4528-94e0-d94cadde96e9", "sighting_of_ref": "indicator--83e00a9b-52f4-4098-86de-0e513bb06887", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db9eae6-f4e8-46f5-92ed-745b7a139f95", "sighting_of_ref": "indicator--4aa02171-4689-474a-b7d8-f35ab1eacd41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6416e42-92f0-469e-a1c9-9439e5422a19", "sighting_of_ref": "indicator--7fc73c14-66de-43d7-9ced-6f02bad7ab3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3385f7f-5153-4539-8857-7851fd96d00f", "sighting_of_ref": "indicator--ac191a30-d876-46ee-ab37-f4d72b7a5924", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef95fe37-a669-4edd-bb87-ea9e92ef4a03", "sighting_of_ref": "indicator--e0c6a59f-50de-4092-9205-0183714501ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2741ca60-44c3-4d4a-bb7c-b973f5c4f7da", "sighting_of_ref": "indicator--8528f6cf-abda-4ac3-a79e-f71d4f74208f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad9e869-5b39-4f36-90ab-7d269d5ad80f", "sighting_of_ref": "indicator--8528f6cf-abda-4ac3-a79e-f71d4f74208f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cb65ad-fe21-4822-b8e9-c6edda22a037", "sighting_of_ref": "indicator--23767f89-56a5-4bc9-bb50-012a0dee86f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bb151f-9812-4b75-b07f-a3dd393afdc4", "sighting_of_ref": "indicator--23767f89-56a5-4bc9-bb50-012a0dee86f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08845f0-ff0c-46a8-8e51-4d4c76cffa96", "sighting_of_ref": "indicator--5bb6e3c8-177e-4e54-80a4-cbf5838505da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da80ccce-ffbb-4777-adca-daf2911b7927", "sighting_of_ref": "indicator--5bb6e3c8-177e-4e54-80a4-cbf5838505da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12e343a-fc9c-4f6e-a91e-f6f4c7dcce20", "sighting_of_ref": "indicator--c0315641-48b3-4223-8e5c-dfcca632d56d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fd5dbc-aa9f-4fda-b53d-102ca26a46fa", "sighting_of_ref": "indicator--c0315641-48b3-4223-8e5c-dfcca632d56d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356dabc7-e795-4e99-a234-82014df18c6e", "sighting_of_ref": "indicator--ecb601ef-07e8-4ae0-9ef4-11fa17c8c1a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c074e8-b533-43a7-ad41-608e105036c0", "sighting_of_ref": "indicator--ecb601ef-07e8-4ae0-9ef4-11fa17c8c1a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddeecb3-e69a-4a30-904d-1635d8242f13", "sighting_of_ref": "indicator--382c62f1-0879-49f4-bc8a-99f9334db08e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fd01d9-6b99-4ae6-9615-90060e572cc1", "sighting_of_ref": "indicator--382c62f1-0879-49f4-bc8a-99f9334db08e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a01c39c-0c37-41bf-ae49-3d949f7b90ea", "sighting_of_ref": "indicator--22f7a06e-38bf-4040-8db8-4df0c99eca21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba516b1f-98e2-47bb-98a5-e77db5fe4e23", "sighting_of_ref": "indicator--22f7a06e-38bf-4040-8db8-4df0c99eca21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f752ffbc-8835-45b2-87b7-026fd722d3aa", "sighting_of_ref": "indicator--17e1220a-4cf8-4aef-a05d-961785b998f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871e6b7b-86f4-40b3-ba49-573826eb23f6", "sighting_of_ref": "indicator--17e1220a-4cf8-4aef-a05d-961785b998f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42822e72-a1be-4aed-9f47-3815a41c24aa", "sighting_of_ref": "indicator--72783db1-b09d-41af-9b50-dcb752407700", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a128fe4-8fa3-4ea8-a93b-827073989228", "sighting_of_ref": "indicator--72783db1-b09d-41af-9b50-dcb752407700", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc9cf2e-fbfc-4a67-9df0-3815becbe27a", "sighting_of_ref": "indicator--a627d882-f7e9-4b04-828f-91c6a6e0d5e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bda4ce9-26a9-4703-8b6c-de966588ebf2", "sighting_of_ref": "indicator--537cd212-2f87-49d8-a771-ab028eea4ed6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f519c23c-d271-44d1-9edd-89e1b5aa0521", "sighting_of_ref": "indicator--11af3b2c-41b2-4279-927d-d6d5270085b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef855376-5829-4ed4-922f-74998671daa7", "sighting_of_ref": "indicator--1c364d13-025f-4147-ab3c-0ad67d3908bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f25002b-6762-4808-9710-eec5d9f686fe", "sighting_of_ref": "indicator--4f16325f-66e4-4253-bd57-93665b2a91f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61884261-8814-4bb5-a650-d4d95dda3d7c", "sighting_of_ref": "indicator--c3994849-c8e9-4e9d-9239-95c7bf24d156", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b380d3db-0edc-45c5-8098-24d57b0cd209", "sighting_of_ref": "indicator--fd7700d4-8811-4836-bcf5-59fa87d6b3ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfded39-41a4-4a01-baf1-f46a798fb0e5", "sighting_of_ref": "indicator--fd7700d4-8811-4836-bcf5-59fa87d6b3ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef47593-e61b-45c8-a447-5bceb871ba24", "sighting_of_ref": "indicator--06a7a206-5cfe-45b3-99bb-29a6eaba4980", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc3e089-b494-4f22-8e2f-e72ec7eb98ca", "sighting_of_ref": "indicator--2259fdf2-02e0-41c1-ac90-02b243295db1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedb1f3d-5a40-4147-ae2c-5cea9c872839", "sighting_of_ref": "indicator--4be592cd-d5bb-4ea1-94b2-daa8538b6256", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d26e60-1126-4cea-94c2-1304e3e8e815", "sighting_of_ref": "indicator--5210eb06-f3d0-415a-85ee-690822e240cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c029e52-8701-4102-a017-ed91cec8378a", "sighting_of_ref": "indicator--8e2b41a3-4533-4a24-88ed-048e0fe0b189", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b50543-2654-4f46-85b8-7cb68f84f1a0", "sighting_of_ref": "indicator--a84791db-379d-483f-8d0b-0b76c3f6060b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467f0bb0-fb4c-4e86-9ec9-8a244b7fd0d6", "sighting_of_ref": "indicator--a84791db-379d-483f-8d0b-0b76c3f6060b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e835ebf-1192-44b7-8bd1-d4b3b905ef65", "sighting_of_ref": "indicator--3630c996-5bf7-4cd0-b8ed-2e70de28a9a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd9c5f2-c285-451c-94af-569fa380c1e4", "sighting_of_ref": "indicator--3630c996-5bf7-4cd0-b8ed-2e70de28a9a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e752763b-537c-410e-a0aa-bcf4c0743c65", "sighting_of_ref": "indicator--d7ee97d0-6613-40ab-8e27-e507a4810473", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fec2bb9-434a-4a89-9f16-d6a8331afab3", "sighting_of_ref": "indicator--0ba544e7-c9c2-4453-9ca0-ec3d6a8798d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc515add-dadc-4ec0-a3ad-4c8072164d10", "sighting_of_ref": "indicator--aad55912-aac7-4ab0-bbe5-ec86ff5bd596", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e424a5-c4cf-4444-bfe3-b60d27399f22", "sighting_of_ref": "indicator--d0ee2415-f421-41d5-836d-3c1162c1ef9b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9d42ec-464b-49f6-99a5-37ce1f65183e", "sighting_of_ref": "indicator--a5754b35-55a5-42f4-81ba-4915dfc24413", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff191d80-5adc-4bf4-a431-7a230669bcd7", "sighting_of_ref": "indicator--a5754b35-55a5-42f4-81ba-4915dfc24413", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a79d97c-95f2-450b-90b0-535ce3d871ed", "sighting_of_ref": "indicator--f489af56-d9ca-4d78-86c5-4531b41d4853", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15db3860-3563-4676-9b61-8026215b3a74", "sighting_of_ref": "indicator--f489af56-d9ca-4d78-86c5-4531b41d4853", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf6c494-7b2c-43ec-aa3e-e858268f3328", "sighting_of_ref": "indicator--509cadb2-96c2-4002-ba65-3527447d8d59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee22391-75fb-48b1-bff9-de29ce6383bc", "sighting_of_ref": "indicator--b8472378-924b-4fc6-85f4-d87f4c5e5ad0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bbb352-cbf4-4ab8-8a55-ad2ecadf6b0d", "sighting_of_ref": "indicator--b8472378-924b-4fc6-85f4-d87f4c5e5ad0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c37496-4c5f-41e1-9e20-9dc0486d6314", "sighting_of_ref": "indicator--2d2769ba-c3b0-4539-a546-e534f40a309b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75dd402-efe0-46f5-8679-2a3d44056607", "sighting_of_ref": "indicator--2d2769ba-c3b0-4539-a546-e534f40a309b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6439a110-458e-4ce3-ab76-ce17f1538b1e", "sighting_of_ref": "indicator--cf4e853a-4eb8-4644-8ef4-e7460105c5e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd583fb-0f72-4075-9867-fe6b98b8a5b6", "sighting_of_ref": "indicator--eabf8010-3153-4308-b341-e0f1d6425265", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ed94bb-a81b-4ff2-8f7a-9d680fb79563", "sighting_of_ref": "indicator--d188daf5-6bdd-4f93-9626-f13a7f29174d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0813a8-1d5d-40a2-a24e-4d931bd0541b", "sighting_of_ref": "indicator--8a21f5f7-7768-46ad-940f-67e06ebb5017", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3821683c-6c73-400c-a8a5-b92ea54e8ee9", "sighting_of_ref": "indicator--b7a79abb-2b12-4acc-bb86-91cbf3fa7b2a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a881d63-af0f-44d1-a928-75d16d87055f", "sighting_of_ref": "indicator--6abe0224-b34b-4973-8b39-64641c1583be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1ab1b7-caac-407a-afd0-e3b2819b5251", "sighting_of_ref": "indicator--3f82d643-f19b-413e-9c01-670a0e821849", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df0dc89-91f7-4706-bce6-8bcda034d15b", "sighting_of_ref": "indicator--0154396b-0bf8-4e65-b9d6-800604fd5070", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855bf99f-92e4-4bdf-a58d-50bbbae4d095", "sighting_of_ref": "indicator--2eec9cd7-981d-438d-8b78-5cdce5da77af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c4ac49-43af-4add-99ae-c4f94a67ac99", "sighting_of_ref": "indicator--f029c9ab-3e39-4212-9c61-66b4c836d1c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d61007-e33a-4219-971e-427ac4d5c922", "sighting_of_ref": "indicator--a242d317-c0d7-49f0-8832-70c266001772", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda4f4cc-1c46-4711-aef2-7343186dffe9", "sighting_of_ref": "indicator--9d085790-e6f7-4c7e-b7c2-0b7139ff5949", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560178ba-1a35-4edc-8076-4b3850edccaf", "sighting_of_ref": "indicator--4c1e27b5-00a5-491d-af08-c94c8c679e26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c46ad2-9344-41cc-af54-f51379044c12", "sighting_of_ref": "indicator--4c1e27b5-00a5-491d-af08-c94c8c679e26", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4433d72-4946-4d54-9f57-3ef154a52daf", "sighting_of_ref": "indicator--612e17d6-00d2-4506-ac40-82b44980d10a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8f3ef8-85d2-4e72-866f-b0a172027d5d", "sighting_of_ref": "indicator--612e17d6-00d2-4506-ac40-82b44980d10a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221bb3a5-e55c-4521-be31-2777287b8e31", "sighting_of_ref": "indicator--d52a5de7-b6f6-4186-a2da-e8b54d2d0255", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59485591-4800-4ead-b31e-607aca7180f0", "sighting_of_ref": "indicator--d52a5de7-b6f6-4186-a2da-e8b54d2d0255", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442bb1bc-3dc1-484b-a5b6-0441ae55392a", "sighting_of_ref": "indicator--7dd7f667-7ffd-4a9e-bfa6-9471037d7137", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bff2648-2e3e-4876-b821-01d2bcc0b5cf", "sighting_of_ref": "indicator--717e03d9-268f-4910-a1a3-ea41d355fda0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79af158-49e8-4d8e-ae16-083c5b47bca8", "sighting_of_ref": "indicator--591bfebb-01ad-47b3-b74d-b49c43bb5d91", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8fad91-94a5-4c28-a3db-11e99d2258b7", "sighting_of_ref": "indicator--c4674b22-19bd-42df-8e7d-3d748eb21eb9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9eca9d9-948a-4b95-8547-9b7816635e70", "sighting_of_ref": "indicator--cb348c1d-bcf1-4e6f-807e-0f1d91c42434", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edd5aed-08bf-4a37-82dc-a0f07759e7af", "sighting_of_ref": "indicator--a84d7bb5-4c98-408c-a998-e5fab53e7676", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a22c1b-4858-48d0-8263-26e2e03407f4", "sighting_of_ref": "indicator--a84d7bb5-4c98-408c-a998-e5fab53e7676", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d9a560-56ee-43c1-8fab-a873f7f2bb48", "sighting_of_ref": "indicator--4a9a557c-59c3-49cc-a270-aaf606de741f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1f8097-b6d1-41a5-8fe7-312392a8e6fa", "sighting_of_ref": "indicator--4a9a557c-59c3-49cc-a270-aaf606de741f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24efa084-d2d4-464b-9f6c-133f02e32161", "sighting_of_ref": "indicator--61e60b0e-5d84-41fb-a248-cd77b22e51b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cedc294-cbf7-4fce-8835-6c2405de54bb", "sighting_of_ref": "indicator--8dfd61f5-8eb2-4fa0-acc4-e18203bffabd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db7a66e-2435-4ecf-adbb-995dc1bf64db", "sighting_of_ref": "indicator--884cfa74-038d-40d4-a488-92f1b47b97e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31ede2e-9098-4e13-9ab8-9fc751c67fe6", "sighting_of_ref": "indicator--fb01624a-2aa3-4239-91cc-24c937c72545", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e915d4-faf9-48b5-a727-ea17a7931a66", "sighting_of_ref": "indicator--fb01624a-2aa3-4239-91cc-24c937c72545", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cac8777-74c2-4f70-8c72-822dde92c25a", "sighting_of_ref": "indicator--1efd02ab-7f2b-4802-8c91-d07b26b3f6ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d7cdea-5ea5-4f98-8771-67d96d01f162", "sighting_of_ref": "indicator--1efd02ab-7f2b-4802-8c91-d07b26b3f6ca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5d57ec-6447-4c0d-95d5-8afe1ed85587", "sighting_of_ref": "indicator--0df47a73-020e-4bb2-afdb-d43460ce2935", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def96d93-2b0f-4a5a-b399-66083a132728", "sighting_of_ref": "indicator--7a816526-d1e2-4600-b371-0ac4052711b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03aee20-2849-44d2-afa3-51fba55a286a", "sighting_of_ref": "indicator--7a816526-d1e2-4600-b371-0ac4052711b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff1e27e-9a80-4856-ac0d-e4b9e5d456bb", "sighting_of_ref": "indicator--ed5feb0d-8e52-4bd7-97a3-3d2ea3d81a29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c6e9d4-f76c-48bd-9526-2b8199d87599", "sighting_of_ref": "indicator--ed5feb0d-8e52-4bd7-97a3-3d2ea3d81a29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a3e1fe-0827-4018-a8a0-8bc476685e58", "sighting_of_ref": "indicator--147263db-8b24-490b-bdfe-db807b5ac030", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bd089a-8f56-49f7-909d-641a13eac1d8", "sighting_of_ref": "indicator--361ea2bf-ef12-4484-b0f8-5274bb74d9b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03dc8b3b-2483-4b29-954b-255a483f63ed", "sighting_of_ref": "indicator--361ea2bf-ef12-4484-b0f8-5274bb74d9b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869557b4-c3e7-436d-9909-2f975c910aef", "sighting_of_ref": "indicator--562e667f-fb10-4369-af2e-4f6d7e373863", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74e977a-1039-460c-9637-58673e8634e8", "sighting_of_ref": "indicator--562e667f-fb10-4369-af2e-4f6d7e373863", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247f40d3-6705-4dee-8974-97b074295a50", "sighting_of_ref": "indicator--279fbda8-09f4-4ae8-84f0-deaaec941ec3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9f37a1-6e61-4b37-987f-7fed3e7f835d", "sighting_of_ref": "indicator--9d420557-2239-415d-94b1-97fa66f68b09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7991aeb8-c93d-4e3a-b54b-ce83973c2d53", "sighting_of_ref": "indicator--9d420557-2239-415d-94b1-97fa66f68b09", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb4385a-e30b-4928-812b-3f6a569b5b8f", "sighting_of_ref": "indicator--b3eb68f7-b9f2-4f62-a15e-ca41272df298", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60a7c70-e372-4b02-85b6-8f1f52420b70", "sighting_of_ref": "indicator--ae4fbfa7-31a5-4f93-8cfb-e0417d7cb327", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d6fbaa-70c3-460b-b94f-3ced3d819fb8", "sighting_of_ref": "indicator--1e470dd4-bcb0-428a-8a73-6f4303f79fd9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0e4295-bf81-469b-b2e3-53839483a99a", "sighting_of_ref": "indicator--e0641d0d-af48-434f-b9ec-ea2dc849c1de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783adc70-109b-44dc-b187-20668da76644", "sighting_of_ref": "indicator--28b9b7d9-5e67-4c87-b36c-6d7de91e241e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c20ac7f-f0f8-49d2-aa36-30f75ea120e9", "sighting_of_ref": "indicator--2ad7edcc-72f3-4bc2-9718-16f786a00cb6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb108f9-c003-47d4-81ac-47935b93a0bc", "sighting_of_ref": "indicator--a264af3c-d2cc-456d-8e04-2ecf580a8e8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d1bad4-1118-49a4-b745-7b7037d35caa", "sighting_of_ref": "indicator--3e72da13-e57b-431c-8716-f80a2ed80487", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4f0fce-bbff-46ad-9d79-6d3cef51b830", "sighting_of_ref": "indicator--3e72da13-e57b-431c-8716-f80a2ed80487", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a59c2f-6d0c-4903-86cb-7908f888b9bc", "sighting_of_ref": "indicator--f2e4ccc8-ec4b-4ffd-94ee-5bbf04b689a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fed1dd-bfb5-4def-b82c-058049d59a35", "sighting_of_ref": "indicator--576022c3-7619-44b9-8bca-be43807b52cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e98f36-b681-4a82-b204-38ffc9e35c4d", "sighting_of_ref": "indicator--906f0a7b-70ac-43b5-a9a0-f3eb4b85f5db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9556918-aa50-4bbc-833f-f7c93cb8b29f", "sighting_of_ref": "indicator--906f0a7b-70ac-43b5-a9a0-f3eb4b85f5db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3632f6c7-3a0b-4db2-83da-cbbb3477b919", "sighting_of_ref": "indicator--6c5526ab-b601-460f-a9ca-a71ea7b8e131", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bac4db7-878e-47a6-b34a-83f7b13bf326", "sighting_of_ref": "indicator--6c5526ab-b601-460f-a9ca-a71ea7b8e131", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7955e102-ca2d-42c5-af3f-30c1b711fe20", "sighting_of_ref": "indicator--582591d5-79f6-48dc-a929-aeb90017ed5d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cb8eb5-f43b-4053-a69a-3204ba5fe18a", "sighting_of_ref": "indicator--b01612be-57dc-465c-95db-25ceb080b5b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccd3fc0-39f6-431a-b4be-6fd09d9b7cd1", "sighting_of_ref": "indicator--b01612be-57dc-465c-95db-25ceb080b5b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b5dac4-ac5b-44a7-85ab-ebe587e1b7b0", "sighting_of_ref": "indicator--dc3ae268-d465-490b-9813-3e06dd2402bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ac7f01-817f-429d-a47d-eee3b8996b84", "sighting_of_ref": "indicator--d215d103-f21b-47f7-a2b8-aa0d16bdbed7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3808fef-7d5f-40cb-987e-f7a31c2ef82d", "sighting_of_ref": "indicator--d215d103-f21b-47f7-a2b8-aa0d16bdbed7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8514280f-0191-49cb-befd-9ab1f5f07b69", "sighting_of_ref": "indicator--36e45078-aa43-48f1-8752-7e861c6aed93", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2c902d-7288-431e-baa9-579d39bd8343", "sighting_of_ref": "indicator--15c82dac-da2b-4f55-a1f1-6c42ff4cda94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e1ad8d-1bc5-4eb6-b5a8-79ddfdcb963e", "sighting_of_ref": "indicator--bcf16de2-abab-490c-959c-213279f80f3c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2781999-0d9e-49a7-89ed-71032e22b0ac", "sighting_of_ref": "indicator--838197ff-8d7b-40eb-b070-6466242bb28f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21371d82-a5dc-4aee-a877-9f31c659babf", "sighting_of_ref": "indicator--79c2c5cd-60fd-4f72-80c7-22415b04a7e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a757e3e8-e47d-4895-8bbe-96cd3a124005", "sighting_of_ref": "indicator--7c4bae3b-6a05-4f54-be0e-d8512e0963e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810930e2-d31d-434b-a7a0-dffc32b8ab66", "sighting_of_ref": "indicator--af59bd95-6f9d-4f0f-9769-d4f80a410ef0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9fa58f-c118-4a7f-99c0-b18e55698581", "sighting_of_ref": "indicator--f77d868c-ed5c-418d-a1e5-6a55934930a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2008a9-af0c-419b-b21a-a08195d0855b", "sighting_of_ref": "indicator--f77d868c-ed5c-418d-a1e5-6a55934930a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6181512a-68ce-47cb-89e8-d07be56b2b83", "sighting_of_ref": "indicator--e7ab62d8-0332-48fd-9aff-3f13552f4bab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a957b36-102a-4485-be05-f35cec781d78", "sighting_of_ref": "indicator--e7ab62d8-0332-48fd-9aff-3f13552f4bab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307bdc7a-7edb-4a93-bf21-b0482d0a1f21", "sighting_of_ref": "indicator--29ed448d-cfe2-47af-846b-a79791172d8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fdbefe-22ce-4859-b8f3-05594f57eb7e", "sighting_of_ref": "indicator--29ed448d-cfe2-47af-846b-a79791172d8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa33aa8-fcbd-4aae-9fb4-cbf9bf0ef547", "sighting_of_ref": "indicator--4ab9c5aa-d9e2-4589-b878-d87bb5847ac6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1030a621-5986-4076-b66c-2f514d927679", "sighting_of_ref": "indicator--4ab9c5aa-d9e2-4589-b878-d87bb5847ac6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3460147-1ab9-426f-95c1-99a3e0672ba5", "sighting_of_ref": "indicator--f43e3937-42cd-4f55-862d-2cb7c07ecdd2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4317edd-6129-445f-8f0e-0e3b08906b1c", "sighting_of_ref": "indicator--f43e3937-42cd-4f55-862d-2cb7c07ecdd2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a556c47-a6a6-483f-aefc-0b75233bb856", "sighting_of_ref": "indicator--b91dbb86-89c2-47f6-b199-e68e3c20c1fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bd8878-00f8-4210-a0fc-8ac069811805", "sighting_of_ref": "indicator--b91dbb86-89c2-47f6-b199-e68e3c20c1fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf839c1-5c34-4fee-a36b-3890cbbf3689", "sighting_of_ref": "indicator--791688bf-dea8-4301-b023-41e8676a7a96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef8e8d1-2cea-44e8-8e16-5d95221c6867", "sighting_of_ref": "indicator--add058e6-b9d9-43f8-a090-0c07fb922f99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0b2edd-572d-4d36-a791-2021033cafee", "sighting_of_ref": "indicator--083f6c2f-096b-457f-ac28-430d5de15bc8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a83309-225c-40b1-b432-f354f42f1fe2", "sighting_of_ref": "indicator--083f6c2f-096b-457f-ac28-430d5de15bc8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4ce935-8019-4101-9d77-3b2922ad2edd", "sighting_of_ref": "indicator--719937d9-2658-48ec-a792-9d7fc249668c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15741898-662b-494d-afbb-356412981ad2", "sighting_of_ref": "indicator--68f4a7fb-754b-43ab-a78a-730e16e039f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7e67a1-1689-4c3e-a65b-f7ccac2e3669", "sighting_of_ref": "indicator--e61dad0d-c131-496e-b1a1-f5ca4e8074b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c46c2cd-617b-438b-82ae-7e14915f96d1", "sighting_of_ref": "indicator--be45aa53-15a7-4fd8-b542-724e118455dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1704bd8c-e5af-4914-8ce1-d756d76a3832", "sighting_of_ref": "indicator--c621ae27-87bc-47a4-8244-84dfc559e006", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b90d39-3d99-44b5-8450-b72f46c74afa", "sighting_of_ref": "indicator--c621ae27-87bc-47a4-8244-84dfc559e006", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b72baa-e63d-46f4-91d9-da3d567c2137", "sighting_of_ref": "indicator--1e30f1d0-a364-42e2-a6fc-34b738da5180", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bff2181-7378-4709-b343-768a69761bb0", "sighting_of_ref": "indicator--610fe809-ea92-40b7-bba1-1a7778a4acc0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091b6f3b-631a-4926-ae72-575812586242", "sighting_of_ref": "indicator--610fe809-ea92-40b7-bba1-1a7778a4acc0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4751981e-dc6b-4bce-b5c8-51a6d85a8c19", "sighting_of_ref": "indicator--dd428216-8c4a-44d5-a7b8-08ea029286db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f8bfa5-3a2f-4eae-8f15-786684496557", "sighting_of_ref": "indicator--ba38a697-e251-4e6e-a0f2-b69f73af0fe6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8100fcd9-4a4c-43eb-81cf-a99b2e9ac0a4", "sighting_of_ref": "indicator--b47b0261-e099-48f3-9d2b-80d2bfee4ce9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6e6c3f-26ec-449f-9adc-e13a2cf4734e", "sighting_of_ref": "indicator--3737078e-4716-4ec6-beab-c42de9f4571b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1898b4f4-f265-498f-a706-fee173fdad05", "sighting_of_ref": "indicator--310683b4-b2f4-410b-9dc2-6664967c11fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0a01f2-12ec-4f39-af56-fcc71cd5f0e2", "sighting_of_ref": "indicator--70080c75-65af-41ed-991e-4ec9a2aa3938", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a1edc9-ea21-4c43-8623-bd4cd1d5610d", "sighting_of_ref": "indicator--70080c75-65af-41ed-991e-4ec9a2aa3938", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42554ae-3c11-4ed6-8d31-e6bb82a9c390", "sighting_of_ref": "indicator--f8a6eb99-6fdf-45e0-8999-9e0521d65854", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830ba4b6-dc2e-486a-8a5a-09b10567c034", "sighting_of_ref": "indicator--f8a6eb99-6fdf-45e0-8999-9e0521d65854", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae901478-d4de-4828-8685-6adee82d07a6", "sighting_of_ref": "indicator--198b74db-c0ff-4904-b9ff-a58719f19110", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5387ce7-0be1-4028-91ca-6dec39df4258", "sighting_of_ref": "indicator--cc62a78e-f245-448c-9047-1e3660072876", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d352a375-1685-4ec4-8b99-18293ffe2164", "sighting_of_ref": "indicator--cc62a78e-f245-448c-9047-1e3660072876", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e17024-2567-476b-a67e-c18e6015c4bb", "sighting_of_ref": "indicator--47c6ece4-6a83-4f2c-83f2-995b3de2518f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364362c4-1fcb-46e5-912c-a15b58740b6a", "sighting_of_ref": "indicator--0bac19fe-84b1-477d-a6ed-23d6e29afe41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d28bb1-6c6a-40c2-baf4-e3a6facd6206", "sighting_of_ref": "indicator--0cd96403-1871-46ee-9884-a19bac27ddf2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa4dd50-1237-427e-b7bb-a381f827460c", "sighting_of_ref": "indicator--0cd96403-1871-46ee-9884-a19bac27ddf2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aee78dd-8874-4d86-8c78-dbb0e6e215ac", "sighting_of_ref": "indicator--33fa687b-43c0-4bf5-8a79-8785284b9800", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df1f672-ab6c-4dda-b64c-9c3eea2544cc", "sighting_of_ref": "indicator--33fa687b-43c0-4bf5-8a79-8785284b9800", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff24972f-785e-4716-8505-f44d0e6c1b00", "sighting_of_ref": "indicator--de306716-7084-417a-8e02-7e2043c5c2b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a18577-3543-4def-b785-727d01e28dfb", "sighting_of_ref": "indicator--f911e22f-7155-4510-af3b-082c78eff22d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d382ff2-444a-4587-9eda-db19d0ba546b", "sighting_of_ref": "indicator--91c27fb7-04b3-4e4a-9778-068ae93d6172", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcd0744-25a4-4e57-a75a-05b18bfb2846", "sighting_of_ref": "indicator--91c27fb7-04b3-4e4a-9778-068ae93d6172", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ace9029-2c8c-48cb-b3b7-14076514117f", "sighting_of_ref": "indicator--d4f401f4-3de8-4765-84c1-cfd0ff1f613d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038a946b-a8f6-4f48-83ef-80db1a708885", "sighting_of_ref": "indicator--1607b482-077a-4cab-b627-63d5a7b44d6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bdaac0-7a1d-4e51-be6f-ea4a7aca6e23", "sighting_of_ref": "indicator--74d60893-7ff5-460c-85d3-1911fe52602f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc591a4-a1a6-4821-b598-f7c013428903", "sighting_of_ref": "indicator--cfe3293b-9aec-497f-bcf2-9bf1077eba27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8cbb57-0610-448e-9496-878b478d6459", "sighting_of_ref": "indicator--b1ea4445-55fd-4ef0-ac76-400bbabce92a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e83f58-5c3d-43c1-aa02-9e33c768af0c", "sighting_of_ref": "indicator--b1ea4445-55fd-4ef0-ac76-400bbabce92a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50ef117-2368-4f43-b49a-3d9b9d0f294d", "sighting_of_ref": "indicator--13ddc090-7825-41b0-b101-ecf53afcc9cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a583cf-3d19-400e-a76a-af7c434689b2", "sighting_of_ref": "indicator--46a822a9-e3ac-46b2-afec-3643690bac10", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cb6663-7bde-492e-8c48-db49fa7b7567", "sighting_of_ref": "indicator--af7daf6f-1a54-499c-ad87-0b36658e9a79", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcf68e8-4ec2-40af-9442-d21cddecbf35", "sighting_of_ref": "indicator--47332d05-33aa-4d04-a7b7-15415a009d95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8846bafa-2aad-4ebb-ad14-7549aff922ea", "sighting_of_ref": "indicator--d4672a7c-4474-4eb5-9bc9-ccc2b0900945", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0405e9b-02b1-40fc-94d1-6ca69a3cad41", "sighting_of_ref": "indicator--d2032173-217c-481b-bdac-b7a1bfdd0104", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbf533e-92fb-4cde-8446-79a71cbc7fa9", "sighting_of_ref": "indicator--a8c7eae5-403c-4917-a0e4-d6c7df11885c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b66da9-1328-488c-a5f2-1dc0d842ef9d", "sighting_of_ref": "indicator--a8c7eae5-403c-4917-a0e4-d6c7df11885c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f09094-6cdb-4ecc-8b80-205771349102", "sighting_of_ref": "indicator--81e455f6-c63c-428d-bb61-35a1cea8bda8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2423e8a0-1d86-4244-b5e2-0e765c36aa3f", "sighting_of_ref": "indicator--d090f68a-427a-4eed-b27e-4cdbad0593b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b536d78-2f50-4d2b-9d94-390bffec1dc5", "sighting_of_ref": "indicator--d090f68a-427a-4eed-b27e-4cdbad0593b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f9014c-8a13-48a0-98b4-a61fe81584b7", "sighting_of_ref": "indicator--532f4b29-74ad-4871-af68-8d802c715761", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc409bbc-5ac9-4c4b-a1b7-9d172d7e6aba", "sighting_of_ref": "indicator--e6197e25-400f-4cf6-b078-d097ca728784", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71813b69-ab3e-4f6b-9d31-0f0001d892f4", "sighting_of_ref": "indicator--e6197e25-400f-4cf6-b078-d097ca728784", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc5532a-bc31-4227-9272-5906cbd975ea", "sighting_of_ref": "indicator--4d033123-4bf8-483a-ae45-69dd3a09a214", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b33dfe-f010-4cd7-9a22-4a140730cf4a", "sighting_of_ref": "indicator--6a04b3c5-c2bb-49b9-a0e8-3698f7ed4dc3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734a2e96-d083-4bfb-a247-c16723e6c6af", "sighting_of_ref": "indicator--36655528-fb11-4769-a12f-907e11ac0b99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f918bf-2d55-467f-b97b-c76442e206f7", "sighting_of_ref": "indicator--36655528-fb11-4769-a12f-907e11ac0b99", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3bd8cb-50b5-4010-ba0c-0e9c7aafd9e1", "sighting_of_ref": "indicator--c53ecd9a-cf6f-4a42-b0dc-fd5722a725c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107fb00b-8ca5-4071-b569-f821b8285f4c", "sighting_of_ref": "indicator--02066699-95ce-481b-9730-b69501b06f59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2e68a3-a886-401d-a90e-481d0a2c6de1", "sighting_of_ref": "indicator--473f36fc-572a-4170-98b3-3b873c0c19db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e035ad-a917-455d-a2fb-5d0e347b451c", "sighting_of_ref": "indicator--4a1823b5-fe0c-4335-8dc0-5eac50cf55ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f039ffa-e039-4ca4-abe8-834bfeb257f5", "sighting_of_ref": "indicator--313d51d1-29de-4e7d-87f7-815e80e3997e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01c6671-0ee9-4e6c-9de5-7a0a397554da", "sighting_of_ref": "indicator--e444958e-b9a8-48f1-b99b-4398745e5187", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2f0246-6a6c-4c87-b44f-55d3d2c40755", "sighting_of_ref": "indicator--62b9dd1b-dc2d-40aa-ad1d-096602bc0884", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa380cc1-e545-434d-9d8d-df5647012f3a", "sighting_of_ref": "indicator--38aab87d-1999-4d97-b289-a9796d3c38fa", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15a8022-4d97-4afd-9d8b-2b9b8f37660e", "sighting_of_ref": "indicator--87b005a6-3096-42b4-975d-ab4e04180d43", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a17024a-6b65-418b-8962-7742e65ad97e", "sighting_of_ref": "indicator--3c309342-a860-42b7-9a3c-79883eeab754", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f5a1b3-9e1f-4515-9656-990cf8a63065", "sighting_of_ref": "indicator--94e1a386-bfe2-4c56-8bfa-222b437b1918", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47148d72-5020-4dc4-895b-65230a9faa73", "sighting_of_ref": "indicator--b8b455c8-9d02-4aa7-80cd-834beca0d353", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae259ba-27e3-490d-bed2-6fc563b557c6", "sighting_of_ref": "indicator--b8b455c8-9d02-4aa7-80cd-834beca0d353", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17de3dbe-14e4-4ec3-83c0-0e1fa3e78a89", "sighting_of_ref": "indicator--bf530c51-ad74-42d8-8e59-0a099e296500", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7808ce27-3a6a-4331-b515-2a1470e99966", "sighting_of_ref": "indicator--c97d11b0-5608-4147-8097-70e482e0ace1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8c83ec-0fb4-4cd0-af4f-2e5325291028", "sighting_of_ref": "indicator--3d73a244-1ba6-466b-a85d-23bd036fa241", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6047a527-2619-46b6-96d9-afce3ce28857", "sighting_of_ref": "indicator--3d73a244-1ba6-466b-a85d-23bd036fa241", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fef762e-4cbc-4f76-8976-4afbcbc3a80c", "sighting_of_ref": "indicator--839b4237-6f78-4636-8441-28b20a76bff2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74634f2-fc1b-4533-8b2f-e3a42a7fb7eb", "sighting_of_ref": "indicator--c0cf657c-5b88-4a9e-bc0f-9bb2498043e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e517ff3e-16c5-40ac-a28a-c434a5b18849", "sighting_of_ref": "indicator--c0cf657c-5b88-4a9e-bc0f-9bb2498043e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbe04e3-3ef3-4482-923b-6ceced720a9f", "sighting_of_ref": "indicator--1d8fb0ad-ba99-4f03-b5e3-d5bdfc9e1941", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28601e5-4337-41a9-9079-56b8b8fcd190", "sighting_of_ref": "indicator--1d8fb0ad-ba99-4f03-b5e3-d5bdfc9e1941", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243ce071-d18f-4abd-840c-4295d2981b04", "sighting_of_ref": "indicator--af22e7e3-3017-44f2-a2b9-9bd8c27c25c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697cac95-0a3e-401b-9688-22c7fc89fd92", "sighting_of_ref": "indicator--a66fba2a-7160-4d1c-8e04-50fe7d4abe49", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c522cb2d-a243-407e-a5bb-b224e8f19f01", "sighting_of_ref": "indicator--a66fba2a-7160-4d1c-8e04-50fe7d4abe49", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80f05ef-adf0-48ad-b9ae-5810e74cb22a", "sighting_of_ref": "indicator--9a88983d-123c-4b91-9246-4a93f311eca4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74582185-7cd8-4b87-a812-56a4ed9227bc", "sighting_of_ref": "indicator--9a88983d-123c-4b91-9246-4a93f311eca4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8c9c8d-451d-485a-a7c3-e99edd955a51", "sighting_of_ref": "indicator--03c64bdb-614a-49c8-8759-7eabd57d7102", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb83a3d1-deb4-4262-9174-503bebbcec1c", "sighting_of_ref": "indicator--03c64bdb-614a-49c8-8759-7eabd57d7102", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bea605-5f3a-4a6f-a982-0e2a2ec45e13", "sighting_of_ref": "indicator--0459d723-a9e1-4724-8eac-1c92a97e9efa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f050dd-d1a5-4693-bd7a-6aeb501df395", "sighting_of_ref": "indicator--3721f306-f87b-4d33-b3f7-95c8e96a7b2d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7680d94b-cf54-486a-a1fe-ffeedbde16d9", "sighting_of_ref": "indicator--81f43988-324c-4818-bebe-c3371cb81551", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442fdfb9-a5f7-491c-bcea-5ec33e572a8c", "sighting_of_ref": "indicator--81f43988-324c-4818-bebe-c3371cb81551", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113e6b57-1dd7-4256-ba21-6db4fd47e78c", "sighting_of_ref": "indicator--0b87dec4-a887-46f6-bd09-c6e9773cf57b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a12eda-c92a-4a85-a727-71ad37d2e924", "sighting_of_ref": "indicator--4bd018dc-4623-4e34-ad41-93c5e966291b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da9b5e4-9bde-4847-8fb7-a05c7a753e90", "sighting_of_ref": "indicator--4bd018dc-4623-4e34-ad41-93c5e966291b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f674b572-0226-41e8-b2e9-66eb4fd69c7e", "sighting_of_ref": "indicator--bf0c5207-ba74-46c1-98f6-e8356e4d8b0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df6798a-ae0d-49cd-b72a-4cfd378b914c", "sighting_of_ref": "indicator--3f6c24ed-bb83-42bb-90a0-b1f7e62be487", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39e2180-1979-49e5-88d4-63714b24546b", "sighting_of_ref": "indicator--3f6c24ed-bb83-42bb-90a0-b1f7e62be487", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec1336e-4fde-4e3e-a9b9-c020f04282ee", "sighting_of_ref": "indicator--3a9fe368-2117-492b-8bdb-f09cf32a16d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e08281-7239-460b-8f18-0fbfd4dd61f2", "sighting_of_ref": "indicator--6d546349-9efb-4172-9fb4-a626e1f3c71f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3391b9f3-b2d5-45e7-b4d7-fa537b2f903a", "sighting_of_ref": "indicator--42c5d559-c967-4c20-a974-537cddf32638", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20be4773-72d2-44f0-99b6-524ad94a3cb7", "sighting_of_ref": "indicator--4cad92ee-d777-4ec4-87fc-1cc81afe3000", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702a291c-bf91-45c6-bf28-63d839dc180d", "sighting_of_ref": "indicator--4cad92ee-d777-4ec4-87fc-1cc81afe3000", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ac73d5-1c03-4417-a581-641ebbb00fc1", "sighting_of_ref": "indicator--b231acbc-6952-4ea4-8ad6-d33051628236", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862fde49-05f9-4941-864d-8c0fec689cec", "sighting_of_ref": "indicator--833ca776-1eee-4f8d-b5a5-a49124ccb1eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f25ef1-41af-477a-aa05-caa39bf400a9", "sighting_of_ref": "indicator--d010c4e7-8301-481c-b79e-898187bf491a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e01e7e0-788f-49b2-8bbf-f1b4b0e63463", "sighting_of_ref": "indicator--d010c4e7-8301-481c-b79e-898187bf491a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469d3876-d9ad-4f5d-b612-5881143bf8f7", "sighting_of_ref": "indicator--2204055f-4371-444d-bd34-59e7e377bbe4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9acb3e-8921-4e3d-8e06-c2ed2f39d2ca", "sighting_of_ref": "indicator--c8de198f-7fb3-4b49-aee1-207b25c08587", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724df406-e841-441f-a4e0-c34f4ec80004", "sighting_of_ref": "indicator--634d8be1-f362-47d8-91c5-b0700ffed8e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fc11f4-497a-47e1-bbd5-c5c7e81c13c0", "sighting_of_ref": "indicator--c649a777-c3c6-442b-b1d1-3bb03367ea5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479373ac-c87f-4a87-9f0f-a4f1ca143fd8", "sighting_of_ref": "indicator--67a08453-2510-48b9-a2e4-eb4f2a95192d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41910754-ba0c-4c70-b2f6-b3604becc71e", "sighting_of_ref": "indicator--a774633e-71e1-4eee-85b1-efc2ce9fa108", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa104cb-f58f-4811-9fdb-e0042339479d", "sighting_of_ref": "indicator--32b6ba4b-5b69-4eb8-85b2-2ed1dd9a3c0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9993d00d-a114-410a-bf30-2d346585a39f", "sighting_of_ref": "indicator--77aa879e-5e7e-4657-aa61-61dfd9ac08ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038af7ee-f778-4721-91f0-8383ab33e304", "sighting_of_ref": "indicator--c14ae92c-aa66-4b38-bfaf-4fdf16b25fac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74ccc3f-292c-4a3c-be0e-b34301a67f0d", "sighting_of_ref": "indicator--006674c5-40c5-43fe-9c98-77c4e7230bad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab29940-4c7e-4a96-ac65-bb3da676dced", "sighting_of_ref": "indicator--878369bf-5800-4661-961c-e13500279fa7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a819eca-f6ac-4b71-a999-c9f02a3a38cb", "sighting_of_ref": "indicator--ef8ae083-7267-4cd2-8efb-43ef4ae36f7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efe6867-44d2-4bf1-920a-58d8def5b4e6", "sighting_of_ref": "indicator--6c03452d-7c00-4cc3-83e5-fa4da9e1dabd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34e9193-bd92-4041-948f-c2ce942bd689", "sighting_of_ref": "indicator--96ed473a-6a30-4976-b80f-4857c430bc2d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b97b82-bfbb-4bfa-b65d-8272cd92ba47", "sighting_of_ref": "indicator--b6c1864f-cca6-48e8-80e1-887fd5708f33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e450998f-4c72-48d7-878b-e0662b7e4649", "sighting_of_ref": "indicator--80fd7b3c-3684-47bf-9d48-2eea14939e0e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950f6668-adc8-4693-8507-77b30006d3d5", "sighting_of_ref": "indicator--1074bc12-9407-48f9-861e-73a62fcd5938", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c477719-4cd0-40f5-baae-9100bcdeb619", "sighting_of_ref": "indicator--da9a59bc-e57e-41bc-87dd-ceeac0e41647", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7f7044-def3-4947-abed-c07b95b085b2", "sighting_of_ref": "indicator--90f13d26-a840-4274-adad-7be4d9a3bd00", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf7ac34-3360-4ffb-b958-7890070d624b", "sighting_of_ref": "indicator--b9d01d80-34d0-47ed-a80a-d2c3c89e4125", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bb6ef1-3715-433e-ba8b-df3675c173b6", "sighting_of_ref": "indicator--6067838c-dc14-4927-82dc-4b62f6577289", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbe1c60-bc4a-4f1e-928f-22ca353fa980", "sighting_of_ref": "indicator--6067838c-dc14-4927-82dc-4b62f6577289", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2f0992-c011-4769-a3b9-b2a8cca483df", "sighting_of_ref": "indicator--cb7e5263-12fa-4d57-91e0-7a5f60048885", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67abc34-1450-4a7e-94be-8c8f62e17f3a", "sighting_of_ref": "indicator--cb7e5263-12fa-4d57-91e0-7a5f60048885", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cc693d-97a2-4e5e-8b27-06e9085e8c46", "sighting_of_ref": "indicator--e697a9cb-0beb-48d1-a496-28633f7c3152", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e806e7-22a5-4f54-82bc-80b7719ecb53", "sighting_of_ref": "indicator--5a6549ab-c34e-41b6-99d7-0fef77960135", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a82507-662f-435e-9877-d8f2f53bec6f", "sighting_of_ref": "indicator--5a6549ab-c34e-41b6-99d7-0fef77960135", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672a0e28-303a-48fe-839b-d23605047e9c", "sighting_of_ref": "indicator--eb7893af-2f61-4d77-a1cf-56eabfee842e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16ec40c-89a3-4159-8c2f-af0d8dfe22c4", "sighting_of_ref": "indicator--d4a1032b-f8ad-4bc7-a138-49d2619eed14", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45622617-b448-46b6-bd54-9fd5ca1df4a8", "sighting_of_ref": "indicator--d4a1032b-f8ad-4bc7-a138-49d2619eed14", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca792d41-ee5b-4279-87c8-d7d9891e8a9b", "sighting_of_ref": "indicator--37167238-6333-4df9-ab52-07b6c8759408", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41726be7-41c7-4a9c-9692-3ba610443c92", "sighting_of_ref": "indicator--37167238-6333-4df9-ab52-07b6c8759408", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0052f79e-67ac-4e43-98ba-51cd85ef45d0", "sighting_of_ref": "indicator--7bbb1c4c-07aa-41ec-8a9d-f3f5f910979e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ad1873-4db2-43d1-8dae-c36f060a9b54", "sighting_of_ref": "indicator--7bbb1c4c-07aa-41ec-8a9d-f3f5f910979e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc7260e-e124-40fa-b08e-a159a809d803", "sighting_of_ref": "indicator--2ad1037c-61b1-49b0-9cc2-37d71892c42d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc55c128-1f4e-4774-bf96-1eb4035aeb91", "sighting_of_ref": "indicator--2ad1037c-61b1-49b0-9cc2-37d71892c42d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ab5c30-1593-4af5-9931-15d98146bf79", "sighting_of_ref": "indicator--09e2e5f8-25b7-4623-9734-024f79692ab8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e92146-5156-44d7-8cfa-2d7762d96763", "sighting_of_ref": "indicator--09e2e5f8-25b7-4623-9734-024f79692ab8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e31dea-7c1f-458b-9052-590549e2191a", "sighting_of_ref": "indicator--0c2c7432-889a-4492-9eff-210e6371d66c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998d5cf7-fd2f-4aaf-8282-7a84b5e5281c", "sighting_of_ref": "indicator--0c2c7432-889a-4492-9eff-210e6371d66c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79e1f0a-8213-417e-9245-8c2166bf4a1e", "sighting_of_ref": "indicator--35e73908-bb35-49d6-bf6a-c23cd90df866", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f21799-fd90-4396-8598-9ddabe48c2b0", "sighting_of_ref": "indicator--35e73908-bb35-49d6-bf6a-c23cd90df866", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b2e1de-20e6-42b5-8ee0-bee7e7e61963", "sighting_of_ref": "indicator--a634b6a5-33b9-43f1-a467-79363616059e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc4278a-abc7-4cdd-8e4f-d1706d40d30a", "sighting_of_ref": "indicator--a634b6a5-33b9-43f1-a467-79363616059e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ffbbe7-6ad9-4293-9b58-e22059134abd", "sighting_of_ref": "indicator--d73149bc-b42e-4be9-969b-63d33941a515", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7b6622-63d7-4402-a9c4-39d5b8f5db8b", "sighting_of_ref": "indicator--d73149bc-b42e-4be9-969b-63d33941a515", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cc67db-33c8-4c9d-aeca-df38f1d5b0ea", "sighting_of_ref": "indicator--61f0e636-a99b-4415-9a10-edb0a57cabc3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db9a18c-7a24-4fb4-bb8f-f32a31b99a58", "sighting_of_ref": "indicator--61f0e636-a99b-4415-9a10-edb0a57cabc3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f3115b-9861-45ee-9a3a-d1f311563ac9", "sighting_of_ref": "indicator--587f6523-242a-4169-9365-7ef9a9f0e91b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a161b12-0067-4f12-ba29-82d6ea0a4a05", "sighting_of_ref": "indicator--587f6523-242a-4169-9365-7ef9a9f0e91b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4f64eb-3c14-4369-b1f2-8b6d2c2844b4", "sighting_of_ref": "indicator--f131f36e-d3d1-427c-aa49-c839f16d821a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad515b8-032e-42ea-bd4b-1e2aab343075", "sighting_of_ref": "indicator--f131f36e-d3d1-427c-aa49-c839f16d821a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b92b37-6380-449e-88ab-d518a1a861ad", "sighting_of_ref": "indicator--7c0cf8e3-1657-4e51-aa9c-f1b9151ec152", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3791cd4-1720-41a3-8ccd-31b93207f192", "sighting_of_ref": "indicator--19c416d0-0c76-4fb3-bc88-373f0336cd40", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415c7d5d-4a26-4da6-adf2-8337232cd850", "sighting_of_ref": "indicator--dc91bc8f-bb00-4deb-b8f3-75d6850a3fd4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5df2be0-51ee-434f-abfe-f5b229525df2", "sighting_of_ref": "indicator--cbabc970-b529-4ebb-b1c0-aa024b8423f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5252dd-5d1e-4ac5-afe1-b9d3ad6a7d65", "sighting_of_ref": "indicator--c5f8344f-8600-4761-9386-ae1b3d38c60b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6152b366-8153-4d14-b8c7-7d0d40757a37", "sighting_of_ref": "indicator--b33e0881-3e2b-4488-a27d-d44172f33a2a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368787dd-a7b7-41df-bf4d-25c7f156c01d", "sighting_of_ref": "indicator--b33e0881-3e2b-4488-a27d-d44172f33a2a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bc4c57-b5d0-44f6-86ff-ff06f4ba0939", "sighting_of_ref": "indicator--4554e63e-eb3e-48e3-bb3d-ee0ea79d6e54", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda6c1a9-c214-4c0b-9e41-739ca444c9bf", "sighting_of_ref": "indicator--69efab40-5ab3-4a36-a852-f59e9e5302a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a85f85-5d1e-4eac-a63b-946d19067e1d", "sighting_of_ref": "indicator--c1a754d6-3986-4813-ae6d-a9147b7b295a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6e6c26-86a5-45be-a9fe-f7779c2b5019", "sighting_of_ref": "indicator--2d22b628-badb-4852-ad58-82ea9f890a8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a99619-d465-419b-ad13-c31d6d404a16", "sighting_of_ref": "indicator--60e997d9-6fd7-45ac-acbd-cbd626dbca7f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640e450e-634c-4120-b726-432f2e310966", "sighting_of_ref": "indicator--19270701-0f5a-48cd-8cae-8b08ba648c42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14021ff-7cdb-4006-9e57-b69d1a08f871", "sighting_of_ref": "indicator--9fc5f4b2-926e-4696-8b10-69e66e43d7e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2178832-42f7-461d-9ff4-f63ec97d15d5", "sighting_of_ref": "indicator--8f39ac7a-b5db-43ba-a40b-0eda82fc63fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c844958-bc0e-4bce-b0c5-15004098c806", "sighting_of_ref": "indicator--119ff812-be97-443d-8466-b0c1b1a2f97c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1566b37c-846e-44da-bcab-bf9ad7e94bf0", "sighting_of_ref": "indicator--f0418175-7e60-4e4a-9447-151e056c15e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529c5048-8cdf-4c3c-8487-6777d8a03df1", "sighting_of_ref": "indicator--51e2f5e3-d89d-4388-9c0e-9542470e1578", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76cedb0-20c3-4ff7-b07d-8826fed15b31", "sighting_of_ref": "indicator--51e2f5e3-d89d-4388-9c0e-9542470e1578", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc13abed-c9f4-4fe1-be3c-0724459c06a7", "sighting_of_ref": "indicator--b236079e-2363-4d0c-8422-7667ef9fe397", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5f2e7e-55c6-4706-81b9-3f0246dc091a", "sighting_of_ref": "indicator--46f53dc0-4ebb-48a8-b28d-5a81de0f881e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02ef878-4713-46b3-ba17-8d2b81a8df90", "sighting_of_ref": "indicator--fd886b06-1536-461e-9e7b-72abe06f1514", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69476eb2-3ba6-4df7-a767-dc3317898db9", "sighting_of_ref": "indicator--44427cdd-3860-447f-bbf7-2febd9eeeb6c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de43269-7d5c-4bfa-9c47-c03103fe20b1", "sighting_of_ref": "indicator--eab95aea-aa1e-40c9-a996-20a6013c0f78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b60f42d-760e-4dfd-878b-659a1a602294", "sighting_of_ref": "indicator--49625fc4-59da-49f0-9db9-5649b1cc71ca", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e230ac80-d69d-4bed-bb30-c7d3aa81054c", "sighting_of_ref": "indicator--56a2dc50-2b3c-43dc-b987-2f880abd9428", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2db5f2f-5213-4878-be47-9b2af0aeabcb", "sighting_of_ref": "indicator--56a2dc50-2b3c-43dc-b987-2f880abd9428", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b22db2-8dd9-48e6-b7e2-26c8870cbfaf", "sighting_of_ref": "indicator--13adcb40-00ec-4f80-be95-ecbcf9d739c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c09a42a-d657-4d9e-a724-890919e6d782", "sighting_of_ref": "indicator--126fec85-8d63-4e37-9c70-fa2b25f3ef3a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d4f0ac-482d-4d35-a853-b1edf7e756ef", "sighting_of_ref": "indicator--126fec85-8d63-4e37-9c70-fa2b25f3ef3a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dcbebb-14ab-4ebc-86a0-9b91f40f5b31", "sighting_of_ref": "indicator--126fec85-8d63-4e37-9c70-fa2b25f3ef3a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374c1fda-3ea0-41e1-b6ea-9b6d84238f96", "sighting_of_ref": "indicator--c0ca9e7e-b093-486c-9b86-3c7f368a7838", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeddd83-bf7a-4100-a6c5-8c7338043a27", "sighting_of_ref": "indicator--ac40217e-25e2-483d-a334-adfc0d1234d4", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c87262f-7490-40ff-aba3-8aeaf2387175", "sighting_of_ref": "indicator--a2613d43-b72e-485b-94b4-6d384d7f9066", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6b6393-14e0-45aa-bc4a-ce18db341d55", "sighting_of_ref": "indicator--a2613d43-b72e-485b-94b4-6d384d7f9066", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556041d0-86c1-41b1-8069-7eda7362f0ef", "sighting_of_ref": "indicator--4678d789-da20-47fc-8fab-83d38c02fa58", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a1f97b-b241-4888-9375-c430b5788ff0", "sighting_of_ref": "indicator--4678d789-da20-47fc-8fab-83d38c02fa58", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f78df8f-87ab-4cf6-948e-d279829e1b9a", "sighting_of_ref": "indicator--fe23ba98-e6bc-44c3-aaaa-799585ee2cb3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f78680-f8af-40df-bb27-447760362269", "sighting_of_ref": "indicator--fe23ba98-e6bc-44c3-aaaa-799585ee2cb3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7121385a-a453-4fea-bfe4-1f533a692004", "sighting_of_ref": "indicator--9cc26b93-3a7d-43c6-a589-b0955b263d2d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ea8aae-908e-4fdc-912b-529c29e0c070", "sighting_of_ref": "indicator--9cc26b93-3a7d-43c6-a589-b0955b263d2d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fd68a8-6f96-49c4-8098-4311fc6c9306", "sighting_of_ref": "indicator--854b940c-4b97-4e53-af12-a95a462215e3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139a9c70-bb77-43ba-ae2a-07bde744267b", "sighting_of_ref": "indicator--854b940c-4b97-4e53-af12-a95a462215e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8bfbf2-ad93-4a6f-b9bd-da1196894ed4", "sighting_of_ref": "indicator--be2b76eb-049f-4731-a265-42e9ea890874", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a514b3-44db-4631-b93a-af2c2595c8a8", "sighting_of_ref": "indicator--be2b76eb-049f-4731-a265-42e9ea890874", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0710ef-4688-49ef-b7da-11595ae7b6a9", "sighting_of_ref": "indicator--fb4f11db-a587-46f0-8ffc-fe44c00c88bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4184073-6d6b-4574-930c-7e260b91b55b", "sighting_of_ref": "indicator--fb4f11db-a587-46f0-8ffc-fe44c00c88bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fff1233-a921-45a0-a5bb-6135a0d8c44e", "sighting_of_ref": "indicator--700cd4d0-32d6-47dd-ad62-8497cd10479a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78d59cc-5a93-40f3-ab4b-7cb24a83a874", "sighting_of_ref": "indicator--700cd4d0-32d6-47dd-ad62-8497cd10479a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e5588a-5a0a-4982-959e-253679d6e6c7", "sighting_of_ref": "indicator--26cc2b06-980a-4b92-9af0-95bfcf0dd77e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255d9fe4-d28d-46c4-9d7d-ab0e02d94201", "sighting_of_ref": "indicator--26cc2b06-980a-4b92-9af0-95bfcf0dd77e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd867674-9eae-4910-a5e7-7fc5df23f488", "sighting_of_ref": "indicator--dfb536f9-d9f4-43df-952c-78ecfc189132", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcab92f-4ab1-4cf6-851e-a626a9670285", "sighting_of_ref": "indicator--3cfb041b-383b-4d0a-88e0-3a4b3d8da830", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3913b6-cd86-471f-a4aa-216491dec3cd", "sighting_of_ref": "indicator--26d73c64-ae4b-4370-a06c-063078471d70", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c38a9d-502a-4d08-b4a0-7841ccfbeb9f", "sighting_of_ref": "indicator--26d73c64-ae4b-4370-a06c-063078471d70", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4a8348-f746-4d2f-9f96-019eb1be0c7d", "sighting_of_ref": "indicator--1a5b0690-a7f1-4330-a305-3638b4267435", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f49b91-2338-45fe-876f-f91022c5ceb2", "sighting_of_ref": "indicator--1a5b0690-a7f1-4330-a305-3638b4267435", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951b97ea-a687-4159-ada4-420393678f60", "sighting_of_ref": "indicator--36c43c7e-e5a9-4011-b2a8-ba25de6ebfd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823c0afd-d3d5-49fb-8fa3-1212ece20a3e", "sighting_of_ref": "indicator--4bd027f6-df7b-4eec-88fc-17c7dd9e6ab7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f98c423-7a42-4885-9e01-fe38c930974f", "sighting_of_ref": "indicator--9819774b-891f-417d-9b9c-82cfde94577f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a754575-dd7d-470e-ac5b-ecae36a77fa4", "sighting_of_ref": "indicator--411e7722-0da3-4308-94c2-31971175fa56", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f29aede-47a0-4d58-bc82-3ebe5fdd69f0", "sighting_of_ref": "indicator--2720da36-6956-4d90-949e-93b033a03509", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a097ce80-cf23-45f6-a4cd-468bdf8a1911", "sighting_of_ref": "indicator--650bbbdc-67b2-4aa5-9584-59095cbcefe3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bfd3fe-0e37-4539-90ba-ca15a96f0d42", "sighting_of_ref": "indicator--05efae16-1f1e-4633-9809-3f5959e2f4f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be202a4-d809-414e-b817-354283e950dd", "sighting_of_ref": "indicator--58fc3f3d-a033-4b85-afb0-2cb82f64a5dd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4c1596-f8c3-497d-a0b3-410f2e8841e6", "sighting_of_ref": "indicator--58fc3f3d-a033-4b85-afb0-2cb82f64a5dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204eb4ff-176d-4450-95a9-c07f6f035cd3", "sighting_of_ref": "indicator--9ff882ed-f0c2-4b0b-93c8-72987dd8a00d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe98473a-a67b-4432-98e5-a5cecc26af05", "sighting_of_ref": "indicator--eef520c0-63cd-472d-a7c5-c82523639062", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efa599e-e2bc-406e-8286-b20ff84f5779", "sighting_of_ref": "indicator--1172e337-bc16-4b84-8316-5fa41e747508", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450e483b-f3f1-4d83-af5b-f767f57f951d", "sighting_of_ref": "indicator--7a0df79e-10d0-476f-8cb2-8666cc202cb6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c653654-e55e-453b-81f8-654279c1f135", "sighting_of_ref": "indicator--cad42b7a-e81c-44c8-94aa-e5a2fe0f702c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1495a239-25bf-4138-92f9-17abe9bad4b6", "sighting_of_ref": "indicator--2fafdbfd-4b20-4ec4-9dd9-cb146bb1d5d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9345e873-cabe-4728-bb66-e147032b8ad5", "sighting_of_ref": "indicator--2fafdbfd-4b20-4ec4-9dd9-cb146bb1d5d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf17f9c-b937-4fa9-89ba-1e42acc951af", "sighting_of_ref": "indicator--9ac01a55-6b13-41a7-bb75-4553c45cb9b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b46e30-2292-433d-97a2-79b953f3d10e", "sighting_of_ref": "indicator--9ac01a55-6b13-41a7-bb75-4553c45cb9b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3588070-a6a5-46da-b614-2d04f9831eb4", "sighting_of_ref": "indicator--60819664-fab3-4d93-a216-b0d2cb420225", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e537195-ba40-4bc9-ae03-810d00a931a2", "sighting_of_ref": "indicator--60dac2ae-0ed1-4833-8671-36d6541ea661", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a64ca08-8594-4468-8b26-2fdea96d1543", "sighting_of_ref": "indicator--60dac2ae-0ed1-4833-8671-36d6541ea661", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108cb07c-f039-4b4f-a8bb-a69a58f1a50b", "sighting_of_ref": "indicator--bdb248a9-a393-4c0e-8656-b2f11d9cb9c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e41eb55-6a64-4d0f-bc46-2bed7860d67f", "sighting_of_ref": "indicator--bdb248a9-a393-4c0e-8656-b2f11d9cb9c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ef9358-2090-4272-9766-1ab88f1bd25a", "sighting_of_ref": "indicator--8a4e2f09-0bca-4418-b446-5cdca9d5c884", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0759b16-19e7-4223-873d-a48bc4fd7984", "sighting_of_ref": "indicator--88fc6b25-2138-4da8-a202-ec0a135254a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de51b60-d9af-414d-868c-e5aff16d309f", "sighting_of_ref": "indicator--7cc556bd-1f14-4785-aad3-dd3544da3a50", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9273744b-a32f-487d-a7f9-09f47f24f5f3", "sighting_of_ref": "indicator--7cefbf08-cd29-4f41-a45c-ee60beb2dd4c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881bafa0-98f6-431c-b9c7-7f0add1e1a14", "sighting_of_ref": "indicator--3d593ab5-289c-4e9b-bfdb-da3e92f2a559", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321d8a35-f8b4-4e94-b9e1-515f616d1fdf", "sighting_of_ref": "indicator--3d593ab5-289c-4e9b-bfdb-da3e92f2a559", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbc3f5b-9e9d-474d-b2f7-764f412f927f", "sighting_of_ref": "indicator--bce98971-3ce5-42ec-82a0-9b410ec29219", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882988ce-7e59-4d95-97dd-7932f70f1dab", "sighting_of_ref": "indicator--e294ecbd-959a-4a77-b7b0-c9c9bc8eed6b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ff60a2-47c0-4000-abda-f3932c8ae4a7", "sighting_of_ref": "indicator--e294ecbd-959a-4a77-b7b0-c9c9bc8eed6b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694d5ea2-1550-4179-9738-49a939616e5a", "sighting_of_ref": "indicator--721ada76-47b4-44ec-b53a-fe67db452dd5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530ce355-4a62-4dd4-b3d4-99887e39782a", "sighting_of_ref": "indicator--1cc7badc-06fe-4db3-adbb-d4c1e50627d2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6826678c-3d30-4b7c-8b8b-996407efdf59", "sighting_of_ref": "indicator--b9e50932-b205-4046-af6a-fe10b1d8296d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a759b1b8-f956-4ab8-b771-7878f5641ec7", "sighting_of_ref": "indicator--1a15eec8-0a0c-418e-b180-8032625ab0e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec67d4e-957f-4b61-bac6-d00e43f341d4", "sighting_of_ref": "indicator--c44c869d-0d5f-4c8d-b844-f28f2e03ae6d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e04b0b-d456-457e-b5c3-25f6c69b6c84", "sighting_of_ref": "indicator--c44c869d-0d5f-4c8d-b844-f28f2e03ae6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08c383d-acfc-4a36-9510-817e97ee374f", "sighting_of_ref": "indicator--9c41ed16-cd04-4e4f-86af-e3465e62677a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4e6658-8ede-43c0-ba17-3f3dacf466f2", "sighting_of_ref": "indicator--c3ee1bc0-1bc3-4208-97f0-0aed4d1e431c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f690fbb-66d2-4694-8df7-559e6245841e", "sighting_of_ref": "indicator--dece2d20-61cc-4e96-bfb2-64d756d86195", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c705d0f2-21e4-4edf-aa16-c84f272d7c07", "sighting_of_ref": "indicator--0e54bf1b-0770-4566-b31b-f3712fc994a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28d4e55-c60d-476e-a128-8de026cc2210", "sighting_of_ref": "indicator--f2e90d86-9215-4379-9b82-fea5097d7abc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816399ad-5cb1-41d1-a64d-25dfc0ace414", "sighting_of_ref": "indicator--f2e90d86-9215-4379-9b82-fea5097d7abc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395f061e-a5f2-4002-87e1-ab33909ff089", "sighting_of_ref": "indicator--bf27dfca-896f-49a5-badf-9c059952fa2c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a1ae6e-45c4-4708-8ce5-8f99bc8bafe5", "sighting_of_ref": "indicator--b724eb56-38ba-4e26-9fcc-b85e682f32f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc119cf-20f8-44d9-a7ae-fd335e88c2ee", "sighting_of_ref": "indicator--9183eef0-51ba-4243-8a4d-573830d19fa1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b53abe-9190-4322-a166-b32cd49c50a9", "sighting_of_ref": "indicator--9183eef0-51ba-4243-8a4d-573830d19fa1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d297132-5765-4d54-8ec5-88076be5a880", "sighting_of_ref": "indicator--f6477bfd-ef8f-4e20-ad5b-a7a3743ce511", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1622cad-8976-4fca-b41b-895267c735fa", "sighting_of_ref": "indicator--56fc64c3-2c7c-418d-be7f-8ee46be6407f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f9f8d5-dfd6-4bfd-a91f-b26d8e42bf61", "sighting_of_ref": "indicator--56fc64c3-2c7c-418d-be7f-8ee46be6407f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e023f0-e3bd-410c-a7a0-3be91ba0e5d5", "sighting_of_ref": "indicator--aeb529cd-4cea-461b-ac3c-f3d688907078", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbb2b0e-dbce-4bc4-88c9-635546c5d6f3", "sighting_of_ref": "indicator--b902408c-c27c-461a-a8b2-794f67b8a3c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db75c1e5-5491-4b66-9a68-3397999d68d5", "sighting_of_ref": "indicator--2ecc749e-3c6b-4dbb-bac2-ae527ce21a1c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f1afc1-d2da-4297-996b-82b6b74c6c4b", "sighting_of_ref": "indicator--3388b876-2198-4072-9c1c-f1d44fbbdc19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edba721e-dda2-48bc-b85d-333ea480bb90", "sighting_of_ref": "indicator--3388b876-2198-4072-9c1c-f1d44fbbdc19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d54ce40-14ea-4aee-8d37-88f654c0cbc2", "sighting_of_ref": "indicator--60c080db-7849-4f64-8133-12ad2eba15e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f40893-bb08-42e3-864d-f646e6341530", "sighting_of_ref": "indicator--21a7288d-33a9-4296-92f3-3108b1c163a4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a373f9-5b78-4302-9b2f-06f4a4048251", "sighting_of_ref": "indicator--41504b7d-f965-4021-a09a-6f5ec0dee688", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5a7a3b-f820-4162-bce3-c5be02f6af85", "sighting_of_ref": "indicator--cd16550b-7819-4254-86e3-bd4a355ce696", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797ce19d-e0a9-452f-bba3-4a7c604fcf9f", "sighting_of_ref": "indicator--b392f4e9-ca34-463b-bafa-8ddba1884120", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b02b69-3090-43f4-b973-79deb21c116e", "sighting_of_ref": "indicator--1fb8193d-489b-4b7b-863e-45aa377aa702", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eee3d3a-8577-4053-8c94-c993810444e1", "sighting_of_ref": "indicator--cedb260a-e04c-47f4-93f4-637a59872741", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d372f461-2454-4bee-9bd6-164975e89456", "sighting_of_ref": "indicator--2e5552b8-c05a-4e95-a27f-461efe0e8b96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f29fa1f-42b3-48ee-9ab8-6fc97bc78724", "sighting_of_ref": "indicator--5f6e5c87-0509-4bf9-b32c-783be86cc16a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8e8ccb-de29-4645-8407-4475b25683cb", "sighting_of_ref": "indicator--96ff200e-c170-4d3a-b0b3-56defcada0b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a65b4-ce0e-4a3a-94a3-5d5856e77d86", "sighting_of_ref": "indicator--96ff200e-c170-4d3a-b0b3-56defcada0b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e509dae-f227-4103-8596-5ad080855e7f", "sighting_of_ref": "indicator--16bbaf08-5b38-4b38-9262-633b5492243c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357ae9b0-71a7-42aa-bd52-ffc85869ee2e", "sighting_of_ref": "indicator--16bbaf08-5b38-4b38-9262-633b5492243c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a839cea7-c2a9-45e7-9ece-a0a0620e6abb", "sighting_of_ref": "indicator--01a8efa9-c16f-43bc-aca1-85175636cb35", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cba922-0eab-4903-b655-5126f1dafd9c", "sighting_of_ref": "indicator--9e8c6038-0b62-473f-8841-9fcf1e1e6bc7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb3bf2d-c5e0-4c6a-8f91-47d20848c733", "sighting_of_ref": "indicator--36aa8ea4-5ef5-4ad9-9407-e95e0435636c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a088e0f0-8834-4c18-aba4-ad582556947e", "sighting_of_ref": "indicator--36aa8ea4-5ef5-4ad9-9407-e95e0435636c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca87254-528e-4d32-abe8-93898e912f69", "sighting_of_ref": "indicator--921a3915-b7ba-481e-bd51-b25611b57e26", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8550acf2-7991-46fd-8e51-9b4c1f56aeb6", "sighting_of_ref": "indicator--c82b2fbc-867e-42df-b653-b108cc67a3aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ec65dd-c636-41d2-b195-ee93e4bd9644", "sighting_of_ref": "indicator--57f08003-8faa-476c-b426-e907894bf542", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d434b73-2ca9-49e0-ba3e-180f40c23d90", "sighting_of_ref": "indicator--acf85a17-7a31-45e6-be8c-c8c15d2d6ed8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d5818e-4703-4a3c-8015-1f0b96ef254a", "sighting_of_ref": "indicator--d64a918b-871a-45bb-9f45-d8d55948aa9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066ae5e0-51a9-4544-9905-1d8a1cb851d8", "sighting_of_ref": "indicator--0aaf994d-0e3f-4eb6-9959-4393def49a50", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f420de7e-4986-46f8-9de0-c7b8772715bd", "sighting_of_ref": "indicator--8544a251-8c1f-49dc-90d0-7ad4f59e1c5d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bc636e-ee04-4289-94f5-45e10428eccf", "sighting_of_ref": "indicator--57807fe3-0b95-4261-83f7-4fd7c6d37af2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadfc77e-5b6d-41ee-a360-55117590dbfe", "sighting_of_ref": "indicator--5468f5a0-3303-43a0-be31-249461924ea8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9295b615-5be7-4911-9b22-a0d76bb57637", "sighting_of_ref": "indicator--a9bd00fd-4d95-44f8-a2f6-9441263201a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b8f65e-b719-46c9-848f-d3231fe5f40c", "sighting_of_ref": "indicator--0d7f7ada-596c-49bc-ba83-a9be7e9bdb8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a28181-d58d-4ad6-af9d-a379e0d07a85", "sighting_of_ref": "indicator--4b7e12f9-6855-49f3-ab7a-890d079b6a7c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f96389-b0e4-4d44-a49f-b4d447476377", "sighting_of_ref": "indicator--672bf57b-0370-4911-8a2c-6349b46c03d7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e48e5fe-9f34-45e5-9711-4c346b17f35f", "sighting_of_ref": "indicator--0fb6202d-244d-4b07-bdec-2bf5312fc480", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ee4c7a-cf3b-49c4-abaf-8e1babcbd6f3", "sighting_of_ref": "indicator--55ecf767-275b-4a89-8cd4-ffbc72657bb7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8797883-d16c-4345-ac0a-d9d31e13c415", "sighting_of_ref": "indicator--b324706f-0443-4af7-b879-e3409705c418", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c8cac3-b7f8-4f88-a63d-890032832978", "sighting_of_ref": "indicator--709c7222-3c27-4324-ac39-4d83ec775f8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896f40e2-413d-416a-8fde-f85f944cb5bf", "sighting_of_ref": "indicator--fe7c84c9-68b7-415b-a229-678a4bb7d5d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61e77bb-0b20-4211-87e6-6260552df440", "sighting_of_ref": "indicator--fe7c84c9-68b7-415b-a229-678a4bb7d5d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24b667f-eca3-4906-8f40-1d046736af54", "sighting_of_ref": "indicator--9053210c-6f09-4121-aebc-860ff5a1b9b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa09ebf-baf6-4b57-8600-eee22c49beb5", "sighting_of_ref": "indicator--f24b0cf3-397a-4832-9606-abce85f17833", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb7bfc9-53a8-42c5-86ca-8406517e0d1b", "sighting_of_ref": "indicator--b6d61a4e-bf77-4730-bd0d-cf8fcf8502db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9571d5-029d-43c5-99ad-b8b4fea2aad7", "sighting_of_ref": "indicator--47ed1412-26d4-4089-bb2e-768599cf410f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53da69af-0768-4511-8cbd-9ec492a8b949", "sighting_of_ref": "indicator--44744bdf-b73b-4bd2-bb13-32763b04da7b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f267c0-d7eb-4c37-9041-35a1e71985af", "sighting_of_ref": "indicator--832bc34c-95a8-4e36-bf2a-cd12a89a06be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e28997-96a8-4ee5-a413-0c84946c9bff", "sighting_of_ref": "indicator--536aac2f-0a5a-48ae-91a5-3836c8789465", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207bf4ff-59e6-4ee6-aa5c-30a9db94e1fb", "sighting_of_ref": "indicator--5fbe0634-b5a3-476b-b5bc-33763d84c5eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b873e8f9-2691-4682-82be-d68b91bcf936", "sighting_of_ref": "indicator--0c11fd58-c7bf-4046-a2ae-0bcd2bbb0e68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ba9c77-9223-4301-b51e-06062d8e3c52", "sighting_of_ref": "indicator--fd3dfee3-6bab-4b29-a8b8-c2007d4cb5ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b668732-4d26-4f77-adf0-4abb41c0446c", "sighting_of_ref": "indicator--e025227f-4424-4695-a0f6-9953ca145c88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09c5c59-c63a-499c-abac-12388e9b5e4d", "sighting_of_ref": "indicator--f3dc2465-0225-45ea-a715-79baae5232ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976da966-3909-44dd-85b4-470b635582bd", "sighting_of_ref": "indicator--dbc52945-7098-4822-9bd9-00cb5e59e709", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad218735-065a-440c-9c85-f7d2aa2927e7", "sighting_of_ref": "indicator--a1c896d3-3865-4177-a49b-328d5de29847", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbf59c8-3fda-4b71-8764-b0b3b9e2d6cf", "sighting_of_ref": "indicator--793d8bb7-29f8-451c-8b6b-72984938e3c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e9e66e-e115-4785-aa17-6241e537ce65", "sighting_of_ref": "indicator--793d8bb7-29f8-451c-8b6b-72984938e3c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9be4c0-b6a1-4465-912c-7d821f310c11", "sighting_of_ref": "indicator--39e49677-6f9f-443e-8876-caab8a9361ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ed4105-3fef-4056-9c71-7d11cad0b7e8", "sighting_of_ref": "indicator--33c2296a-5ec6-4d4f-a444-4d3306ee9a3d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4bae85-5d42-4ba1-b179-1ff4a1831121", "sighting_of_ref": "indicator--c200149e-15bf-4380-90c8-cd19fbd88da8", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22cea9a-9f10-4fbd-a65d-b8a83e0a96f7", "sighting_of_ref": "indicator--6d89e5f3-f8fe-49e3-8691-20e26d087f4f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4daac106-5d85-4602-a63c-f549b16d74da", "sighting_of_ref": "indicator--83d58524-2714-4eec-b40d-c1db32959983", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7346a3d-316e-441a-8a0e-a793f396b484", "sighting_of_ref": "indicator--83d58524-2714-4eec-b40d-c1db32959983", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87f87e2-e1c5-4874-8391-0b0123af16a3", "sighting_of_ref": "indicator--f9846897-5367-4fb3-a4cf-d7374abb5eb8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9759db51-86af-4ead-bdb0-c5a622f2ab3b", "sighting_of_ref": "indicator--5c7ba86c-8c33-42a1-abe1-fb0a2fc70c93", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6aac621-1593-4c9b-bb6e-da86ef028389", "sighting_of_ref": "indicator--5c7ba86c-8c33-42a1-abe1-fb0a2fc70c93", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b7a96b-f94e-41d4-81a0-08f329dec082", "sighting_of_ref": "indicator--2a44f479-f19a-49c7-8daa-69d59dd386de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e09a952-96d8-4aa9-a76f-2e797ef9b19f", "sighting_of_ref": "indicator--83a9dec2-d83d-4e79-82a1-4f8d8a1e18b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaea66f-153d-4546-a743-a6f0b223291e", "sighting_of_ref": "indicator--83a9dec2-d83d-4e79-82a1-4f8d8a1e18b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64e4847-a03a-4d68-8508-f4dd2c597b22", "sighting_of_ref": "indicator--b0038def-bd0a-4cb3-a0ab-da7dbbe18e26", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd63293-73a8-4aa4-b858-b100f62391aa", "sighting_of_ref": "indicator--0f992e94-bbf5-43be-933f-e496519ea5a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2255ea3a-5fb3-4438-b75d-2346940d0111", "sighting_of_ref": "indicator--a24c6628-39b8-495d-bd5c-9dcf69698cd6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98db4fe-7059-46e9-8773-34d3583c46b2", "sighting_of_ref": "indicator--a198543d-0e9b-4d5d-a7a9-f9a330e4a5ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50b15a1-2e93-4e77-8954-a86d7efac0bc", "sighting_of_ref": "indicator--145f930e-54d3-4731-bfcf-104b4ef6ff15", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ef4264-948b-458a-8133-ca24e97e86e6", "sighting_of_ref": "indicator--e808ecca-c0ce-402e-b23d-1e2fde63c0df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df1ac67-5825-495d-a9b1-6ada6975aab8", "sighting_of_ref": "indicator--3feb1c67-b548-41b2-baef-6d6772bb8245", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0afe255-aec6-49b7-bdce-b05965167759", "sighting_of_ref": "indicator--ba37e42d-a582-4563-9d36-e2a66a5f76e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9724ecc7-aef7-45fc-9091-d09baf0ce049", "sighting_of_ref": "indicator--e8e3a861-ca1f-4264-a745-0b25fee30bd3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5769c32e-d9c2-4711-abff-1716ecf09e75", "sighting_of_ref": "indicator--71d36517-07ba-4ebe-95f4-9a228963010c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e631ee7-561f-4d87-b7eb-1ccc67ae99f0", "sighting_of_ref": "indicator--b51dea35-2cdc-4fc1-af67-1d19bc856347", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98025948-2a34-4663-b31e-8c6b544cd000", "sighting_of_ref": "indicator--0318b727-1161-417d-a5ed-ac465330a68b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f2e4fa-e1a6-4d04-b2cf-5fa8ca52ce40", "sighting_of_ref": "indicator--0ec6c415-e246-433b-884d-bf6f6e439486", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf705b4-6e8d-4ca1-b2d1-0a3c5dea180e", "sighting_of_ref": "indicator--41d67753-3efe-4d33-87f5-7d519cf42ffb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb0ab10-c579-437f-a230-ba2857135fce", "sighting_of_ref": "indicator--43ffad2e-ad0c-4739-ba70-7f7991cae9c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9e172c-2131-405d-b916-57f8b5a857ae", "sighting_of_ref": "indicator--61848772-8396-497c-bbdc-2ba2b8c71f91", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fd666d-0eb5-4355-b9d2-4a96494addb6", "sighting_of_ref": "indicator--1c7d367f-8b11-482e-8bda-89152514937a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56c3ea2-17e1-4458-afb6-a05d09d728a0", "sighting_of_ref": "indicator--71dd1bcb-c0ac-4205-b0d5-18297aab6696", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09cbdb9-3d78-4ec4-a2ec-86774330d3ed", "sighting_of_ref": "indicator--32015bbf-ba74-40af-85b4-cd99cdaeb7c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61566f2-1ae3-43ae-8471-5d6b8ea56341", "sighting_of_ref": "indicator--d175e6da-705b-49d0-8912-ac8a010493d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1a21d4-a15a-4468-8334-30e7d5d4e826", "sighting_of_ref": "indicator--21e5be1b-3458-4938-b3b6-6adde19b4ec2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffc42ed-a7d2-443c-aac8-74b2f3f457f9", "sighting_of_ref": "indicator--3f3b91ad-458c-43ba-9d1a-35642209646e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9162a46c-508a-4eca-9c4b-47b52b5a7b48", "sighting_of_ref": "indicator--849ca695-bb7b-4cbb-8d05-f468029c0d5d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0829c1d-22a9-4770-9b2f-1c3104d31d67", "sighting_of_ref": "indicator--23fcb73c-a4fd-4e9c-8260-eb02e4352fdc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2d22e6-d164-44d7-9ac2-2d68ee165397", "sighting_of_ref": "indicator--4d7c4672-b44c-4800-8857-8aeaa3d6d28a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df5dc8b-f82c-48d7-862e-660f896eb0cd", "sighting_of_ref": "indicator--4d7c4672-b44c-4800-8857-8aeaa3d6d28a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926418bb-5c74-4f09-9bc6-01fc77f87e6d", "sighting_of_ref": "indicator--33b76cd6-7223-487f-a3fe-a61568647223", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489239eb-7368-4218-8527-f19904f51ba2", "sighting_of_ref": "indicator--e96517ef-dd82-4b0f-9376-5236d95db77f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b89c82-8036-478d-985d-1a5b58f6306d", "sighting_of_ref": "indicator--24e4d77b-eae6-462e-a06d-f6bc781fa498", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca342e9-3208-459b-ae8d-f1478abc46d6", "sighting_of_ref": "indicator--abaf6bf0-6754-4b00-b242-fe79ce381390", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3510b8b9-befd-43b1-a55a-c9d0f9063b83", "sighting_of_ref": "indicator--26678775-9f6f-4933-9032-bf6b28406860", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0676ecc5-7f1f-4965-a99d-630b61e5d434", "sighting_of_ref": "indicator--db64c2a3-aaf5-4e79-8fcf-55674b16a61b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1029c0-35c3-480b-95aa-901bf5770f1d", "sighting_of_ref": "indicator--61c7ae72-e673-4663-a96f-59c7fb9ad87b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10194e9e-fada-4c10-9c02-07efd6e7f092", "sighting_of_ref": "indicator--043e91fa-78e8-4e1d-ba3f-d0d62ed4c16b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cb71b5-4568-414d-96b2-6c6631ec157e", "sighting_of_ref": "indicator--68fa5d19-461e-4799-85e6-781724e1a016", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f71bef7-832e-4150-9c0f-95e17f56ac06", "sighting_of_ref": "indicator--b39981e8-8979-4b3b-b160-26557c727699", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c5ee34-cb7b-4883-87c0-f725a2aaa5c5", "sighting_of_ref": "indicator--c768cc77-4b70-4384-9064-dd7fd4be4e77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437fdf2d-79b3-4c05-9a25-242dd1d25aa0", "sighting_of_ref": "indicator--10846262-6b65-4adb-a6fa-92a9112ee354", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ed8b1a-3fcb-46eb-b981-43f5a095ed31", "sighting_of_ref": "indicator--b614fc25-5cee-4b19-a834-2e64f005f179", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fb7bb2-2b99-48db-b64d-4077748003c1", "sighting_of_ref": "indicator--2db1e8ae-87f1-4cbb-8580-bb2d6224fff5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285b2c3d-81f2-4152-a7dc-c18c04af3e82", "sighting_of_ref": "indicator--8ff31c36-4a20-45c3-ab08-576aa4c4d7df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7756c49f-89c6-44a3-94bc-fd450fc51189", "sighting_of_ref": "indicator--a434f94f-4bc4-4fa4-86d7-5570155d844b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7ae5c9-fdf3-4c09-9247-a229d18a9713", "sighting_of_ref": "indicator--f87ecb3a-b58e-4e4b-a9ea-1fa3952b31a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34091d1-5f72-4972-bbf0-a7b087259617", "sighting_of_ref": "indicator--dc607d9c-1cf8-4789-aee1-5ecd8efa177c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3db9a44-581a-4bb4-8489-fa3429ac3ccc", "sighting_of_ref": "indicator--a5725223-95b2-4cc6-87de-2f5a111073f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae16114-8074-41fb-a5b1-b77affb00a12", "sighting_of_ref": "indicator--a568f2f8-570c-4cd6-9a0c-19f4797ec578", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61d0f37-6793-4828-833f-d67b9014c11a", "sighting_of_ref": "indicator--85fb8ba8-5d97-4d42-8bf8-7689b27672ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3822fb14-fc29-4647-8d3d-05fefcef9919", "sighting_of_ref": "indicator--07409131-3499-4daa-a979-51878469ca4c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d814311b-0340-40b8-a4bb-c6d6d09bf792", "sighting_of_ref": "indicator--f912a223-9435-4685-8812-194d3a90239f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f3f8f6-e2f2-46ea-ae08-9af4f66af564", "sighting_of_ref": "indicator--3d5cdffb-afbc-49bc-8e88-8854a858385b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5987be-cf96-423c-ba9d-3825e8c0684d", "sighting_of_ref": "indicator--9578e067-44e6-44da-8056-b9bf0c2d2d96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ce974b-dd8d-4199-b147-bdc0273b53a9", "sighting_of_ref": "indicator--63ea4637-55e0-4b51-8a5c-6e1afef42cc5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e6bec5-996b-4b8a-a25c-237b9d3e9367", "sighting_of_ref": "indicator--e3e2548f-6af6-4c0b-b5b8-145ab5e174cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64f0f3b-4e78-4c06-9b91-362064fa695f", "sighting_of_ref": "indicator--9fa234e0-c74a-47b2-a12a-aaa0c0b58d66", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0735b8f7-6971-4855-a999-68c419afd55c", "sighting_of_ref": "indicator--5aba89b6-83b3-4d9b-9bb0-777e143c2bf9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b93dc81-66d5-4c44-905b-a22eb7d50c4e", "sighting_of_ref": "indicator--45c5e7af-553f-41f0-996b-864ba2084f0e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e12209-25d7-4288-ba4e-ab5f37a07ce7", "sighting_of_ref": "indicator--cfc56692-e67f-485f-8bba-72c3245b8caa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb84d7d3-8dbd-49ea-869f-06183edf6b95", "sighting_of_ref": "indicator--3ce88ebb-2d54-48a0-b05a-1932e27ea26b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2fc142-070f-4894-b7ea-db6866f985c8", "sighting_of_ref": "indicator--4c5dd005-0643-4afd-af88-c4de7ff93637", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a572f53c-3846-4eeb-a1a4-8124f15f9e16", "sighting_of_ref": "indicator--7d6dfdd5-40f9-4a3a-986c-02247d4d2f75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f788771b-3a38-4e91-ac8c-54506a88c294", "sighting_of_ref": "indicator--ac65f8b8-4b3a-4b7f-bc0b-a2ce549e4214", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d264f933-6c7d-4b91-80e9-b1bb596b5877", "sighting_of_ref": "indicator--c6cf2c7b-0f24-480b-a435-b32e673ce722", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaad0430-dccc-407b-a42c-ce5b1a9e9a2b", "sighting_of_ref": "indicator--1440df79-2f2b-4273-974c-85eba40b2335", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f533db59-abf8-49ef-b665-967773f79a6e", "sighting_of_ref": "indicator--41ab02fe-0638-4949-9468-10e0a53b81c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed551182-cef7-4abb-9487-c076640d9500", "sighting_of_ref": "indicator--acad8cde-d1ad-4a53-9fd4-f6c968bf56ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da88f03-7bc0-43fa-a7d4-f524d1a9ac2d", "sighting_of_ref": "indicator--89126dd4-cf60-455f-abe2-e422e0dcc3b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbd8f1b-38e1-46f2-b67d-3f57d7d95984", "sighting_of_ref": "indicator--913a2032-9d4b-4607-8e7a-6b81e6b09a2d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1da4844-cdf4-4054-be61-559bac74749f", "sighting_of_ref": "indicator--8839dfd5-f200-4b97-9238-21e96f475b94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c167ef74-3979-44c4-9aa5-7b7ee22842b2", "sighting_of_ref": "indicator--f85c8042-b346-4910-b9f5-0ca2d7b49372", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483c5074-d8bd-479f-8144-3f23119b35bd", "sighting_of_ref": "indicator--d5c4559d-0c3d-4599-bd3b-e194b363d5af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61232638-3c62-4e74-9650-4172d18ba839", "sighting_of_ref": "indicator--4578095b-5131-4116-830c-83f0bf1943a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69097deb-d4d8-4501-9344-6fee0ba0e72c", "sighting_of_ref": "indicator--d156ca0e-c10f-4873-9f74-32f96414a7f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dea801a-05bd-4795-bcd6-ca81fe9c8cf0", "sighting_of_ref": "indicator--eeb624e2-d92c-4502-9962-7d29bb9b21b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59e3134-ddae-40b2-94a4-98ea12d738a3", "sighting_of_ref": "indicator--9d2a049d-bbea-4bfa-a6c7-651c8a828cef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d81bbcb-3ab2-469e-9721-c01cbeee2ba2", "sighting_of_ref": "indicator--9d2a049d-bbea-4bfa-a6c7-651c8a828cef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54189644-7cfc-4022-adbd-113b619d6820", "sighting_of_ref": "indicator--eff5e1a7-bcae-4be8-8a7e-3cedecbe3420", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0454df-f7d0-4e75-930f-2b090a13edef", "sighting_of_ref": "indicator--eff5e1a7-bcae-4be8-8a7e-3cedecbe3420", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72218b8e-d2a0-4814-92ef-1d51d4921ec3", "sighting_of_ref": "indicator--6d9ef742-e2e6-45c0-a246-e090b2594584", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8380dfd8-9776-4482-92bf-db8c8da73cc8", "sighting_of_ref": "indicator--9f449974-4041-4719-8fbf-633144e49fc0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92bfe97-a448-48a6-a83d-fdb5b7420d24", "sighting_of_ref": "indicator--de261c3b-3db2-4d35-b16c-f06c5fa9444f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6ddca3-1839-4033-a4f5-0d896dea5a95", "sighting_of_ref": "indicator--de261c3b-3db2-4d35-b16c-f06c5fa9444f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27411240-1259-464a-8c61-5ea7203c2ec8", "sighting_of_ref": "indicator--b8edba8c-06ea-40ab-801d-1e6d0cdcce63", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca008141-7857-4ee5-a078-1be7e0d5c537", "sighting_of_ref": "indicator--45be0ba1-0fca-4a98-99d9-61ce81c4b543", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3efc4e3-d742-4085-8b66-1e0b3aa47026", "sighting_of_ref": "indicator--45be0ba1-0fca-4a98-99d9-61ce81c4b543", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225b789b-bf82-45dd-8a89-37dccae13834", "sighting_of_ref": "indicator--d216f142-0911-4f43-b410-7ba6b2e5d878", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2527eebc-a298-43c1-9ead-a01cde35104f", "sighting_of_ref": "indicator--effff210-c7d1-4e17-8076-4fd6bdd3b0a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903ed531-1856-466a-aa9e-9ed6e8e7fd7e", "sighting_of_ref": "indicator--effff210-c7d1-4e17-8076-4fd6bdd3b0a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9e10cc-4e4e-4af3-90bb-741bef3f0184", "sighting_of_ref": "indicator--c38a2e29-8e8d-45b2-9d8c-6dadac747b9e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e876d40-1243-4f8d-8a1c-e9bfb16bda3b", "sighting_of_ref": "indicator--c38a2e29-8e8d-45b2-9d8c-6dadac747b9e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af68db6-0117-4f2a-888e-328cbe02099d", "sighting_of_ref": "indicator--22a13835-4167-4f37-89a6-4c060ce131d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69769cf8-ee35-4931-9c6f-6b207097d4d9", "sighting_of_ref": "indicator--02b06942-16f0-4836-82fd-a4877ecfadcb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cc0f73-94e4-4a02-9d5e-ea6cb715bcb4", "sighting_of_ref": "indicator--02b06942-16f0-4836-82fd-a4877ecfadcb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a08e6a-dfac-4893-8d7b-cea30c4f9bbd", "sighting_of_ref": "indicator--73f780bf-8843-4c5d-ae81-09b931ce0cca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ada77c5-a96e-4f95-9e53-3ee6fdbf3bdf", "sighting_of_ref": "indicator--73f780bf-8843-4c5d-ae81-09b931ce0cca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0d0d8b-03fc-4fe4-8bdd-1ff328476be1", "sighting_of_ref": "indicator--78371116-dbee-4dc4-bb1f-f111bf742267", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a733d769-f6ad-4c30-86ab-43673adc0fe1", "sighting_of_ref": "indicator--7510ffe4-258c-4484-a2e9-2fae72da76be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2e5c82-73f7-4ea0-8682-efd5d8f33b10", "sighting_of_ref": "indicator--7510ffe4-258c-4484-a2e9-2fae72da76be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d958184-f914-4c29-b987-1a1adb29c407", "sighting_of_ref": "indicator--64320b1b-ca74-4645-906d-78bf011b9d91", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6ae26c-ed24-45cc-9e9d-5758b7ec5fca", "sighting_of_ref": "indicator--d008218d-29ee-492e-b283-61362f41a352", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f886c4-0ffe-4575-81c8-7e26db065372", "sighting_of_ref": "indicator--d008218d-29ee-492e-b283-61362f41a352", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb0f3ba-6813-4f7a-82e8-44d8ba2957e7", "sighting_of_ref": "indicator--01860a28-5fae-46c2-9894-99f38824c42e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25e7247-cc07-4858-9e37-c7739d9c6b96", "sighting_of_ref": "indicator--de6083c2-d134-44ea-9162-d78a67b43df8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1faa9b27-db21-4622-93e2-b87bb5a13988", "sighting_of_ref": "indicator--29b2be07-641f-4a47-97bf-9a80745a537d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0c808a-782a-49f3-8015-ca503e7ed4d2", "sighting_of_ref": "indicator--110fca1b-6869-4947-a718-76d02781d28b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f997729d-a2c2-465a-a70a-ccf57fff6414", "sighting_of_ref": "indicator--110fca1b-6869-4947-a718-76d02781d28b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62d0c5b-aeb4-4d0a-9518-a9c99ca7d350", "sighting_of_ref": "indicator--7dcaf3fd-84d6-4881-86db-df52c168e9b0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7202a5b5-81ca-4313-82ca-86771c4f939b", "sighting_of_ref": "indicator--7dcaf3fd-84d6-4881-86db-df52c168e9b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8327ae30-1545-4832-9f7a-01a3f15fd59b", "sighting_of_ref": "indicator--2a2f028b-37ef-47d5-ba60-53822fbd001a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f7f906-e257-4a58-9b5f-eec30ba9b55e", "sighting_of_ref": "indicator--2a2f028b-37ef-47d5-ba60-53822fbd001a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72e0b70-4c0d-443a-9713-7150925fbbb7", "sighting_of_ref": "indicator--2e21415b-3adb-4846-b45c-1ab8bc4a542b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5aed206-d182-4a0e-b1f7-afb94651b2fd", "sighting_of_ref": "indicator--2e21415b-3adb-4846-b45c-1ab8bc4a542b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3303a8fb-8a28-4f4e-acc1-3bcc136677b3", "sighting_of_ref": "indicator--fe7fc1fe-02fd-4552-a6b1-925b15bb3a0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83b613a-5748-48b9-a126-05eba2a4f05c", "sighting_of_ref": "indicator--fe7fc1fe-02fd-4552-a6b1-925b15bb3a0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e406e68-98fa-42ff-941a-0425765deef1", "sighting_of_ref": "indicator--d33fc874-e5d7-4e96-98b9-f6b852623c9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93a720f-7b92-4c6c-809f-a57734f09018", "sighting_of_ref": "indicator--d33fc874-e5d7-4e96-98b9-f6b852623c9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c797332d-250b-47be-9b1c-15112fe219a8", "sighting_of_ref": "indicator--abb16ae3-19df-4101-bbc1-391b2d610ef5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cb70fa-af73-4783-9d02-e286e01b4b86", "sighting_of_ref": "indicator--7ad9e314-5191-4cc4-88cc-b94fe799f420", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1469ac4a-cbbd-4fff-b0ef-02e8f23dbe70", "sighting_of_ref": "indicator--24c32c29-5f69-4291-a144-4cf6b42b91ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2647d15-4972-45b3-a5b0-967ceddd52ce", "sighting_of_ref": "indicator--24c32c29-5f69-4291-a144-4cf6b42b91ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55ccab6-5be1-4217-8a7c-6591c00f1a58", "sighting_of_ref": "indicator--254158c2-d608-4149-ba45-2eb4529fa3af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b58e426-7e4a-45f6-ae15-324fbbd890b9", "sighting_of_ref": "indicator--d7a46c82-5ed2-4521-961a-08329a5dcfca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c480eb14-a483-4d11-8bee-08a4d758ca63", "sighting_of_ref": "indicator--d7a46c82-5ed2-4521-961a-08329a5dcfca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6696c25b-3d76-42a0-8554-392abe29b505", "sighting_of_ref": "indicator--bbddd117-81c2-4b30-89a4-684b702920ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcb6f95-5eea-4c2c-a6c5-adcc41144090", "sighting_of_ref": "indicator--bbddd117-81c2-4b30-89a4-684b702920ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1eccb0e-dc38-4828-986a-167620676651", "sighting_of_ref": "indicator--1d06b8c6-23d5-4c39-bb58-fac0c9a41d2d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ee3b3f-69ad-40b4-b124-7410e8c9e478", "sighting_of_ref": "indicator--b76e1b28-2adc-4194-b035-d9d2d9b16354", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf43c51-2a63-45ff-a04a-055d8e88b1eb", "sighting_of_ref": "indicator--832ec9a6-e58a-4152-b9f9-60d7a908915e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671fa3e9-3c9b-4242-8dda-8ad32d6fcbc6", "sighting_of_ref": "indicator--c6c78c4e-10d3-4d25-abe6-b69d8ddfabff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5043ef-a4ff-4718-a2af-77d057687e12", "sighting_of_ref": "indicator--ce49de79-81ae-4b2a-a41b-20ee28f0d934", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3344c2d6-38a0-4139-83fa-2f0965a8c1ba", "sighting_of_ref": "indicator--b674714b-bd8f-492f-922f-4fd6c89c7453", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6e4196-85be-4aa6-9a11-6e8f50440ebf", "sighting_of_ref": "indicator--b674714b-bd8f-492f-922f-4fd6c89c7453", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b27c332-16e1-4680-80d4-668f8cd920d7", "sighting_of_ref": "indicator--b5f2cc65-a348-4847-9d8c-bd6a33966c3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8853ea-6b0b-4584-8451-5ade32838cca", "sighting_of_ref": "indicator--b5f2cc65-a348-4847-9d8c-bd6a33966c3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afadbef1-ce2c-40a6-8ca3-e3d1aeea18ca", "sighting_of_ref": "indicator--0ed47b5f-c1b3-4cc4-9958-d72f00c175ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a2746d-27e3-4ee8-a23b-15d6976ce4ce", "sighting_of_ref": "indicator--fbbba1de-531e-44ad-ad59-78b875be4fdc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b4d18e-3e62-4fc6-a624-623fab8a14dd", "sighting_of_ref": "indicator--4921ccda-e944-4a75-b500-4de23b6fe104", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6be56fe-046f-4e79-8493-72add58cd2dc", "sighting_of_ref": "indicator--9ce00194-8148-45fe-a938-4110055075a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89514421-6239-4d05-9902-7bbb7785d6f8", "sighting_of_ref": "indicator--f7770034-ca2a-4477-be14-32ded7331617", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008762ae-8619-4df0-94c8-fe46ac6f00dd", "sighting_of_ref": "indicator--1c0320e1-2553-4f8e-8092-e02fe60338dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bb8c73-caf1-4fb4-a4f4-da8b815aad77", "sighting_of_ref": "indicator--7169e172-168a-49c7-ab09-f27276be6193", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39debe0e-029d-403b-a99b-66a911302bfa", "sighting_of_ref": "indicator--ebeab474-bac9-40da-b91d-67dd61391157", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46408f7e-2c11-4591-908b-f563226514aa", "sighting_of_ref": "indicator--948ee420-8b24-47f3-832c-88f8948aa552", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a872714-e07f-4c45-a1a3-dc574817302d", "sighting_of_ref": "indicator--948ee420-8b24-47f3-832c-88f8948aa552", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cb607d-4eb4-4f8b-93bc-de727a8f2c8a", "sighting_of_ref": "indicator--1bbcd79e-d3f0-461b-abc3-c8a58893fd3f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8021d6b1-23d4-46ee-8236-0ca4eb77a37a", "sighting_of_ref": "indicator--bb1957bc-b62c-4635-bbf0-432817b09c62", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2d5c70-e0ff-4450-9c24-c04e9ff30b13", "sighting_of_ref": "indicator--bb1957bc-b62c-4635-bbf0-432817b09c62", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3e1a0b-e008-4355-85b0-87e630f2c5ba", "sighting_of_ref": "indicator--8f64cfae-0ab7-4a4d-a9dd-add19d1eed6b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10413ac6-4271-477d-9ca2-3f27ceb03265", "sighting_of_ref": "indicator--6cd220f5-904a-4498-9ba8-1ef86c2498be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2287716-def8-424d-adbb-0ece407bc5ff", "sighting_of_ref": "indicator--6cd220f5-904a-4498-9ba8-1ef86c2498be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9aa78c-3b53-4b3f-912a-b18acf2ace06", "sighting_of_ref": "indicator--0eafa998-cac4-4ee7-a1eb-e9c29be0132f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe2aa4a-e625-41a7-b49d-7bc4226bf4c1", "sighting_of_ref": "indicator--9acf932a-e520-44c1-92c7-dad6867037e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085ca0b2-f6d7-47fd-9b01-4bd0b0ae2366", "sighting_of_ref": "indicator--9acf932a-e520-44c1-92c7-dad6867037e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd866fd-496d-4f4b-8e8b-d9ee47844651", "sighting_of_ref": "indicator--513a0c1f-6d7b-4b74-8ebb-f4caaf63ece2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0062e388-7a94-45ba-bdb0-5153f725d470", "sighting_of_ref": "indicator--6aa0a301-0743-42a4-b761-37fe02407797", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbdbccc-b022-4a64-a5b5-03a213b5b7b3", "sighting_of_ref": "indicator--80203739-9a0b-4c29-8a54-30595d6ec3a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8921dd-dfaf-4c20-afee-cb42152addc3", "sighting_of_ref": "indicator--80203739-9a0b-4c29-8a54-30595d6ec3a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d877fa0-d26c-4006-bccb-a050a8a04c99", "sighting_of_ref": "indicator--0bac0220-a2aa-45ff-9e29-0ae31edc3205", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d5a677-bd07-49f6-9461-d3e084e7ead3", "sighting_of_ref": "indicator--e01428ea-a43d-4258-9a22-3cc18e3c95e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ffbe16-3b2c-408a-b25d-8eff46d123f3", "sighting_of_ref": "indicator--e01428ea-a43d-4258-9a22-3cc18e3c95e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2740d564-0966-40c4-a17a-081e540e9549", "sighting_of_ref": "indicator--a1fe7b26-0617-4fb4-972d-95314eb2142e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff30cda8-f570-40b5-8ecb-fc0f8c8d614b", "sighting_of_ref": "indicator--291b3ab7-4a17-43d5-b165-3cfe37e8490e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33a50a8-f361-4dbb-bbc2-508f2bc0c58a", "sighting_of_ref": "indicator--c96b21d4-82bc-448c-bd1f-b745b405b0de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0104df-c645-4660-8479-f7c51d38be91", "sighting_of_ref": "indicator--17083d91-49ce-41a5-8fc3-e87a4f79de7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca722078-f502-4b75-bfdc-5f5b917b5234", "sighting_of_ref": "indicator--65c61177-386e-45ad-9288-c6d6dffb81f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93ea270-b282-4f72-b2fc-9d4a3e2ea385", "sighting_of_ref": "indicator--65c61177-386e-45ad-9288-c6d6dffb81f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b32a77-bb2b-4b41-8bbd-6a5571b034b8", "sighting_of_ref": "indicator--7a6f2eee-32e2-4cd6-9a9d-756f10e4050a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ecf5b5-589d-40da-b22e-b8f5b0bc391b", "sighting_of_ref": "indicator--7a6f2eee-32e2-4cd6-9a9d-756f10e4050a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0501e6f9-4623-4d04-aaea-43c0c46a4b22", "sighting_of_ref": "indicator--84dbb793-660a-43a4-ba75-251e430a98c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b968229f-1040-45ce-99fb-b6c30d85323f", "sighting_of_ref": "indicator--159317e6-5ef1-436e-97d8-652df9289d16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5258700d-729b-4172-8bb3-7356d676deee", "sighting_of_ref": "indicator--d5454bdb-93a4-4c54-b13c-ffe9d17f81be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d222339f-016c-4281-9ffd-dc7b98a4154e", "sighting_of_ref": "indicator--f56531b7-19dc-427a-bb53-aa7c9f3ad6d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0541b67e-8a3d-40fd-a4c2-f672f9cd08b4", "sighting_of_ref": "indicator--f40d6980-5056-4bbe-babc-86cc038bed2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e324d3-8545-4f88-8aa6-2688f1c96849", "sighting_of_ref": "indicator--2dcca329-2683-4b6b-8251-7bfc7801e7f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd1c009-46b5-4377-9588-985d7695750e", "sighting_of_ref": "indicator--f7f3c2d1-bf48-4a60-8a93-8b343c3d5397", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6a4cbd-3818-4cdf-a07a-1a469d3889e7", "sighting_of_ref": "indicator--f7f3c2d1-bf48-4a60-8a93-8b343c3d5397", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e028a7-6347-4bdf-b173-41d253e03222", "sighting_of_ref": "indicator--f8017e97-c502-440f-a672-44d9cf69649a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94b4ca6-401e-481e-b651-a1daf0ea69c7", "sighting_of_ref": "indicator--12440753-9c9d-4fdb-9dd9-96c9e3f28df6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edcbddd-97eb-4330-abc6-483e93cf77e4", "sighting_of_ref": "indicator--2f2de229-cbb5-43e1-aaea-c3d663f21701", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5eaa8c-866b-4350-a634-cdda810449e1", "sighting_of_ref": "indicator--d5571b9c-3f47-46ae-a814-a0dd174b1bf5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db9f4bd-d5f5-49f3-b19f-641e73325be6", "sighting_of_ref": "indicator--a3d23d49-32e7-4742-a54b-d0768a583aaa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf2625d-f3e2-4f7a-8b94-ab8934d3de8e", "sighting_of_ref": "indicator--7a7ab07c-165c-4857-83a1-be3d0d96ae7f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdb335d-a803-4b3f-812c-e31b66a29c35", "sighting_of_ref": "indicator--26a843b9-e5ea-433f-94b7-92c040f0731e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1de8e8-7d25-408c-873e-5a72f75e13d9", "sighting_of_ref": "indicator--972f732d-f09a-4f1e-ae69-f2ebcd3be3e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab628458-4b5b-40b9-bc99-9ad44ef7fe89", "sighting_of_ref": "indicator--972f732d-f09a-4f1e-ae69-f2ebcd3be3e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9291fff5-f045-4af9-8e6f-ab7f97298ce6", "sighting_of_ref": "indicator--4dee55e8-f293-496b-ac2f-e4434ec809e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b289b9-2047-4365-b82b-96741dc66359", "sighting_of_ref": "indicator--4dee55e8-f293-496b-ac2f-e4434ec809e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a436fb-45df-4245-9157-8f3efd74233b", "sighting_of_ref": "indicator--786a28e6-fc2d-4ae1-8473-fc81bf6c0ff3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b50628-361c-421d-b477-c2252db8cc97", "sighting_of_ref": "indicator--87ff98b5-d6e8-42cb-92fb-1deb8d6a8e19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227bc426-238c-431c-b95f-410beec363e7", "sighting_of_ref": "indicator--8bdbbb37-73bf-4f29-be3a-3400575e0b5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637251d2-1a8b-431f-8cfc-7b352c936d8b", "sighting_of_ref": "indicator--a9f6a3f2-d76a-46d9-89dd-59f34088aa37", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea9c757-3fba-4365-ac25-31bdb4ad829b", "sighting_of_ref": "indicator--b0ba347a-ad9e-4d44-b6f8-61bd059317eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e069a360-7198-4a7a-8f29-27f577cbb39e", "sighting_of_ref": "indicator--0f857eba-6a4f-45bc-8b09-ca9babaad1a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b08658-139f-4c2a-b963-d86d05631fa2", "sighting_of_ref": "indicator--0f857eba-6a4f-45bc-8b09-ca9babaad1a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e4a8d5-4987-43fe-b46a-805c62cac73c", "sighting_of_ref": "indicator--c5ad2c93-f551-4c2a-98e1-43ebeb626b70", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fae4a3-e166-4362-9c31-907786633597", "sighting_of_ref": "indicator--26b4dcbb-4d74-489b-b3b1-7284e9eb0b54", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09803c05-79dc-49e7-86f2-57b0ada7bab7", "sighting_of_ref": "indicator--26b4dcbb-4d74-489b-b3b1-7284e9eb0b54", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e8fc1a-090f-4fe8-96c4-3069b4b4ae51", "sighting_of_ref": "indicator--83680474-d30c-4a87-8319-d85b092e2de8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b965c8d-da3d-4f0b-bda9-6bef3d29d393", "sighting_of_ref": "indicator--83680474-d30c-4a87-8319-d85b092e2de8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2823a68-d960-49ec-9138-5cbc441a9fe2", "sighting_of_ref": "indicator--23fd9ca0-f843-4302-9459-b899b044fa33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6638676-a9bb-4c24-a118-e067be10170b", "sighting_of_ref": "indicator--d0f1a744-8c0f-4082-864b-d829562d7431", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e3b8f8-ab7e-4158-8542-7168b055238f", "sighting_of_ref": "indicator--acb69c21-dc9d-418d-b88a-3e1356465299", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816a494b-6b61-48ab-aa7b-0f5ee72e1da3", "sighting_of_ref": "indicator--ff30a21a-8425-4f8a-bc2d-974abba79c96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70f0b70-236a-4700-8869-c7d89349e00f", "sighting_of_ref": "indicator--ff30a21a-8425-4f8a-bc2d-974abba79c96", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e8dffa-80b0-498c-87de-b125701631b6", "sighting_of_ref": "indicator--2d1452d6-86ab-4bac-849e-737fe3d23985", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9647c2d-3af3-4099-974f-96e492c7a790", "sighting_of_ref": "indicator--8a7b40aa-18c1-4094-af81-d52c0136f1e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19a0467-184b-4572-95d3-7fbf65a854db", "sighting_of_ref": "indicator--31022fc5-c03f-4b1f-babc-b773f3366209", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce512e33-fb11-460a-b133-3312017dca78", "sighting_of_ref": "indicator--31022fc5-c03f-4b1f-babc-b773f3366209", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e42dd9-0ce4-4442-a080-ac9a2cde54eb", "sighting_of_ref": "indicator--51067c74-f962-486e-b980-ebeec6fa69d5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d949396e-6845-4652-a575-5ed318448e6b", "sighting_of_ref": "indicator--992414d9-fa97-4284-9977-53096ba8cfcc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a19a89-eff3-461f-b025-8a14660c7b9d", "sighting_of_ref": "indicator--992414d9-fa97-4284-9977-53096ba8cfcc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4b2ca9-a190-4041-b958-d3672591a4c2", "sighting_of_ref": "indicator--9f208997-a850-4e87-917d-dc9dbc82b756", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62e10d1-1493-4822-b816-7ca2bd25830a", "sighting_of_ref": "indicator--19d4f7f0-c381-468b-88f9-05356dddd5ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0fdd0c-000d-4400-a32a-10e88f363292", "sighting_of_ref": "indicator--88ad603c-ef48-4eea-b119-364632230dcf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4541ec6b-107f-4384-ae80-03e6c5a6238f", "sighting_of_ref": "indicator--f078f456-bad5-4b61-bddc-6c6acaaf923a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42629dd-ea83-43a8-b1e8-7f5cd505e83a", "sighting_of_ref": "indicator--607f7160-e760-415b-b49d-1f80a450c4ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3007a670-8b0f-4551-af89-4981f8333548", "sighting_of_ref": "indicator--607f7160-e760-415b-b49d-1f80a450c4ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0957d39-a7f5-401d-863e-ab6af97f43e2", "sighting_of_ref": "indicator--3fc90f0e-6db1-4d4a-a798-7916b7b03f63", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db8947d-e41c-4120-b609-be2ddd912a6b", "sighting_of_ref": "indicator--3f567b9d-ecf5-4034-b8cf-ead69f698fbb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38662e1-bd33-45f1-a298-ae635d66d46a", "sighting_of_ref": "indicator--5828ef9e-7f9a-4a6f-860c-098e97d88cef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea347ea6-db8d-4e0c-847c-1c82a859a171", "sighting_of_ref": "indicator--50775a04-e806-4d5b-938e-31869371673b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4d1dba-1b96-4998-9c63-7039418bfe13", "sighting_of_ref": "indicator--f5cfc633-02cf-4fb0-ae77-dc2c5f660eac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23e7d07-72d5-40af-8532-2b8368647b14", "sighting_of_ref": "indicator--f5cfc633-02cf-4fb0-ae77-dc2c5f660eac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449082e7-f9e8-4af1-a43a-31073a96f123", "sighting_of_ref": "indicator--10a4ffec-dae7-4686-8130-fbd61473bea1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b212fd2-3412-4b6c-ad5b-8bd2f303883e", "sighting_of_ref": "indicator--10a4ffec-dae7-4686-8130-fbd61473bea1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa56e8e-fc1f-435c-83a5-3483e7f80c1b", "sighting_of_ref": "indicator--7fe91708-ed56-49fd-a51d-acb0e68549c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d67c912-bfc4-4e49-8c61-60165e56730e", "sighting_of_ref": "indicator--98a0ba4b-ba31-445a-9521-377cce8cdc59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b248e4c0-f494-40ea-8b7c-cf2659fc6718", "sighting_of_ref": "indicator--b0d6b113-adad-4090-b996-3f08e001ad59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c056ec-c398-40f5-a464-604b8e935f7f", "sighting_of_ref": "indicator--b0d6b113-adad-4090-b996-3f08e001ad59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b17534-2c12-4a58-874d-a187292d9047", "sighting_of_ref": "indicator--c5a45c71-1de4-487c-b686-7b9a74e71750", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18aa3b3-54ae-4047-8b8a-77d5cd7b3517", "sighting_of_ref": "indicator--f702cb29-dfe5-4bdb-8489-9f367ef1628f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5db1536-e837-4dce-b932-bafd94a3f8bb", "sighting_of_ref": "indicator--82f0bca0-fc3f-4512-a1e1-778c195cb22c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77b0a9d-f09d-40cb-9132-62f0e2f63170", "sighting_of_ref": "indicator--7daec3cd-2a65-4760-8b3d-7a623e6a0bab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acea5947-afd6-4fa0-993d-6492389c5471", "sighting_of_ref": "indicator--63239618-4cf6-42be-a50b-3b727983e8dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e2e47f-aef5-48a2-bc07-82209f96968d", "sighting_of_ref": "indicator--63239618-4cf6-42be-a50b-3b727983e8dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e869ea0-8ad7-4538-b957-ebc7fba1f942", "sighting_of_ref": "indicator--1b24ae58-862a-4817-8716-059c82211d8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88caa89e-aec1-4f67-b9ac-039b7e20a91f", "sighting_of_ref": "indicator--995ba71e-636f-4a6c-a0a9-192de0a7ea00", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fdc8b7-8aeb-41d0-ad50-1bf79bbe9ce2", "sighting_of_ref": "indicator--995ba71e-636f-4a6c-a0a9-192de0a7ea00", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c874f5-ee33-4b18-a9b2-4f8659085682", "sighting_of_ref": "indicator--78fc57fc-fc93-4b16-aed0-fe0c8b2f50b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f326b65a-ea11-4e51-b9c7-5474bb4df4bd", "sighting_of_ref": "indicator--e78161b7-b480-402b-91c1-4c68dc0937ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2047ea33-3bf1-4d41-9760-1f3fce50b014", "sighting_of_ref": "indicator--3bf7212b-6689-4cfa-af98-91b4b32c9bcb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13de7f1-afe6-4f8c-a1a6-4aa3e6c747ca", "sighting_of_ref": "indicator--8a3182f2-5cff-42cb-9122-c6c5222357fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5a960b-1e6d-47b0-b94d-64e79d619720", "sighting_of_ref": "indicator--0e215cc3-0814-48b6-a232-d38a64048a08", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a489b0f-a7fd-486a-a570-71cacf704e87", "sighting_of_ref": "indicator--e3abfeef-792c-43aa-b62f-750eaba1f086", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac63e395-1820-40f9-95bc-25a4e916824a", "sighting_of_ref": "indicator--d81d409b-4d36-4cd6-993c-1b87a6baac76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba61361-7b1e-4f1e-b168-b3e0d9770a35", "sighting_of_ref": "indicator--6515d49e-4643-4230-a8b9-02aa8a16f161", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a259369d-e92c-40c4-90a1-1a1258805575", "sighting_of_ref": "indicator--d28e6102-878b-4450-bad2-63334416c8c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2eb043-240b-425a-b916-496453b8a0b1", "sighting_of_ref": "indicator--1ac9a70d-ff39-43ab-89c6-eeb68b2c5587", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc01d7f-485e-4229-aafe-6fd9b3d25fd2", "sighting_of_ref": "indicator--23dd8dc5-5860-4afb-8b20-f20ab37133dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea45c1fa-9122-4747-8eee-455916da3832", "sighting_of_ref": "indicator--0ba63c2f-d750-47f8-9fa9-41426b934f54", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b605d66-2c92-4710-9baa-d841696e5344", "sighting_of_ref": "indicator--1e5ccd7b-852c-470b-b16f-5f5f87469f5d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627c6b2c-fc0f-4d2c-8268-5411949c62e8", "sighting_of_ref": "indicator--23d237fc-2ad6-4359-ba2e-4a0242e47d36", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d28c0c-14ed-46cf-a692-e64e2fd1decc", "sighting_of_ref": "indicator--7900d8b8-31b7-46c9-951f-988ff0bc9eda", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99159fa-b0ca-4a45-b860-d7dbd899aeb9", "sighting_of_ref": "indicator--ff049cb9-3474-431e-9fa5-33698fcd22b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0c9b45-b989-418a-80ee-24fcfa4cc560", "sighting_of_ref": "indicator--8d0a694d-f321-4887-a212-cb2c2fbdf396", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e87731-621f-475a-b3dd-8f8c3f57e8a4", "sighting_of_ref": "indicator--0c62e6a2-956d-4370-8667-0989ac931714", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0feb5c09-30fd-42c1-a287-d380f074fff1", "sighting_of_ref": "indicator--95f7a661-ba80-4567-936e-645368d6b691", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbb9cb5-33cf-4dc1-847b-845fe1ed2749", "sighting_of_ref": "indicator--b2eb346b-5310-4df1-bb35-558caf50d486", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdc9a4c-e559-45e5-9a6c-8c2cae5416c5", "sighting_of_ref": "indicator--c2d64cd9-2627-4fbf-a1af-dbf31fe3022f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808dcf17-2ede-48c4-8e7b-f2d1532f7bec", "sighting_of_ref": "indicator--69b69732-d3f5-441f-921a-e74289d00c02", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1a0a1c-e32d-4f91-8c91-4bd13b1fbb14", "sighting_of_ref": "indicator--acd54966-a295-40c9-83cf-9c0bcbe388ad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30df075-191d-468d-8d73-5634bc6b8611", "sighting_of_ref": "indicator--97229bea-8684-4334-9bcd-56c87b2fe521", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec917cbb-752c-46d6-a827-9a76ad925b89", "sighting_of_ref": "indicator--9563c0b5-8cf5-4b38-864c-1ea5c0052db1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f389ac67-ccd1-4941-b17a-37c5df590232", "sighting_of_ref": "indicator--8c5901af-a1f0-4242-b7a2-f0af25803a23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bd57c6-432e-4c1d-b9cd-2075ab28ff96", "sighting_of_ref": "indicator--fe951c0e-38dd-46e7-8e7f-002c09dc336c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84737a68-90fc-4d84-a263-57b3aba5d9ba", "sighting_of_ref": "indicator--fe951c0e-38dd-46e7-8e7f-002c09dc336c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea0da2f-1b1f-4f13-9de2-f0e71933bc48", "sighting_of_ref": "indicator--3971000d-e76e-4183-bb2e-17210af4a714", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f023e501-473e-4ccf-904f-083527f00a0d", "sighting_of_ref": "indicator--775a46ec-5458-46f8-820f-07350c37cc46", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907962db-43e3-4eb3-ad85-7a9e516e4476", "sighting_of_ref": "indicator--e9a6158b-171f-4fe8-b508-5721a747ad2d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97505adf-df85-4098-a4d4-b143003d2708", "sighting_of_ref": "indicator--16c594c2-f141-4f09-9c08-bf6dbfc67e31", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd7163b-1162-41c8-acfd-65434ee9dc44", "sighting_of_ref": "indicator--831b2148-d0ec-4bf9-9b98-879826994bd7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6e4f3e-9894-4655-be2c-2353ed8a61ce", "sighting_of_ref": "indicator--4b550aba-92ce-41bd-a745-185362a4c961", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8aeeed0-5215-43f4-b231-331b1890f40a", "sighting_of_ref": "indicator--4b550aba-92ce-41bd-a745-185362a4c961", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ec52df-c2f3-4593-9b33-21e65022e6c0", "sighting_of_ref": "indicator--bc6bf665-e266-43f0-ab6c-66803767105e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7f602f-5810-4bf9-a1ed-5be10d048f60", "sighting_of_ref": "indicator--18b5f9a7-d802-4b48-84fa-b93cf0288fad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e10d97-151a-48d6-ae03-1d9a83499ca6", "sighting_of_ref": "indicator--817acc39-d545-47e5-b43f-710c37445d4f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ccf511-b678-4238-9b47-09f90d4d4d4a", "sighting_of_ref": "indicator--0c55e66d-4474-4842-b046-22b7ce6bee24", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83aef737-452a-40b2-9b88-c68529e4b7fd", "sighting_of_ref": "indicator--ed47992d-9b30-456f-aaed-0870e4917e00", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2125a1-31bd-4acb-82ba-c3716ad914f6", "sighting_of_ref": "indicator--0121ac7b-0ca9-40f4-befa-5944d0da28ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61997d7-73bb-4ec4-a6da-bbe56cc0525e", "sighting_of_ref": "indicator--753f1ccd-e745-4790-a8d6-95e72bcd34a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39740c6d-e98d-4a59-9d98-778a8f3f6291", "sighting_of_ref": "indicator--5412ee1d-0441-4b43-a13c-fda9cc241f06", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b374c5-43c5-4ef9-af5b-74d3fc06d1f4", "sighting_of_ref": "indicator--5325a4cc-78cd-42b9-bfd2-be76dba6a5b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad223ace-dd1b-40c2-af2e-f219dd6b80d7", "sighting_of_ref": "indicator--11d02a6e-2c8f-4824-b3b9-9904a994a2f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef2dbd1-ec0c-4780-a121-a3f7358bd03d", "sighting_of_ref": "indicator--11d02a6e-2c8f-4824-b3b9-9904a994a2f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f11b49-4e38-4ab4-a26a-e497ea6554c1", "sighting_of_ref": "indicator--53ffaf06-d53d-4fcb-a6f1-e575b60ee536", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8df1ce3-4107-46c5-ad8d-524f486b71f1", "sighting_of_ref": "indicator--9f341f9f-5c68-4cde-90c4-e7c77db26e13", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf5a448-e542-4943-84e0-321dc27988cb", "sighting_of_ref": "indicator--b3351f19-e3d0-4540-97f3-7a6467016e3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650d9837-3293-4754-b098-f577ea5c7451", "sighting_of_ref": "indicator--87d9bcf7-18f3-4aec-a9b4-cd4df27c776a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0fa095-afcc-4dea-8e3d-3dc2e9e14de7", "sighting_of_ref": "indicator--2c1c327f-6df7-4de7-9b93-c1e81b74ea93", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9bde06-bc10-4eb1-ad23-98c08fb8fe7f", "sighting_of_ref": "indicator--83e4861a-324e-45f6-bbfb-4239548473b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed31391-1d57-4821-b529-d3b684c63f74", "sighting_of_ref": "indicator--d85f9940-2be8-4561-b32c-d537c8751c2e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52fd54d-113b-451d-a606-5b4565b3c4d6", "sighting_of_ref": "indicator--e165dd3c-26dc-40b6-8a97-52eb12325a5e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f36f73-d0fa-460f-8e8e-91bbabaa4c23", "sighting_of_ref": "indicator--4973c4bd-941f-4fdb-b085-a96d6460e24d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3301d3a6-f9c8-45a8-b313-5abfa2495bc6", "sighting_of_ref": "indicator--56624093-e29f-4dbe-b136-c680b14a79a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97b8822-2e5b-493e-a6fc-3bc50bfc0b1e", "sighting_of_ref": "indicator--af185437-6c47-4461-b045-b284fbad545a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8938eec3-4981-4c9c-ba16-c3c25fc59f7f", "sighting_of_ref": "indicator--5554e1ef-5502-4c67-a4db-06458457dc6f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d724d86b-0f21-43b2-ac2a-3ebff6efa9be", "sighting_of_ref": "indicator--113cb450-75fa-48df-b629-9e7328581158", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3129e4-bfcc-4a3c-a2d1-bdb26b37af74", "sighting_of_ref": "indicator--4810b29b-6edd-4ae8-b035-434e3175e877", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6403be05-b03d-41cd-b288-6a1d34ad230c", "sighting_of_ref": "indicator--af6973aa-c053-4a16-b9ea-18d8e1102400", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7058d7c3-c8eb-4185-afd2-8f864dc16145", "sighting_of_ref": "indicator--7c56cf1a-c08c-41d0-b441-e373056b4d08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef5268f-713b-4270-b933-2d84d0107325", "sighting_of_ref": "indicator--f3956399-edb5-4a33-ab14-c4112a643d53", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1885cf16-ccfb-45a6-b960-65e028b3a6d9", "sighting_of_ref": "indicator--1ec7c976-881f-4fa4-b990-57b81acff043", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a204dc85-2481-4b82-8c93-f41df1d6a227", "sighting_of_ref": "indicator--c65c3307-fe6e-4cf3-8e56-368638c4dc29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7660ada-8d71-4268-8c32-21f4fbbdaeea", "sighting_of_ref": "indicator--8120c82d-f21c-49bd-b246-205fd0cd728f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920b6115-e9f8-4112-a0ac-206385794420", "sighting_of_ref": "indicator--117ff4aa-c05b-4882-b616-908a2fc914c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa2b8f7-f39a-47e7-8bb1-ae585dcd324c", "sighting_of_ref": "indicator--b3f8d23d-b5c0-4456-b1ac-08ad73d6697d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce0e91d-186e-4710-bbda-cce5dbf488d9", "sighting_of_ref": "indicator--edf59dce-2b21-4904-b0fb-02107ac7bbf6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91768eb6-f2d0-4651-ab60-5b15b8b337ab", "sighting_of_ref": "indicator--62d4b012-34d6-42b8-8edf-cae040fdd275", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14755aa-30d6-4efe-a37c-50ca38019d23", "sighting_of_ref": "indicator--115d551d-152b-4d41-8a0f-f4bb98e51b76", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f748eb8b-c949-4046-84c8-f6ff19b3bcd4", "sighting_of_ref": "indicator--b1301bee-1ec2-49c5-8ae6-8abf0500ae44", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69648a88-5600-4d2a-aad0-817c68c5c4f3", "sighting_of_ref": "indicator--a9a817c6-fb73-41c9-b447-4fb0c07ee109", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6fcba5-919c-4bbd-bf5b-f8eda4e38de4", "sighting_of_ref": "indicator--454102a9-c241-43bb-9e21-c543fec403f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a53d01-22d1-4a59-a043-5166a670ca52", "sighting_of_ref": "indicator--92f79362-aba0-4033-942f-ccf83c3d4ad4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172aeff7-4820-47ad-98d2-5246196e09f1", "sighting_of_ref": "indicator--c1457048-ee67-4da8-af1a-de9740007519", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f65d14-8859-4584-b926-26974d63e7dd", "sighting_of_ref": "indicator--166bfdd0-53ec-4798-803a-6bb3f3bf5933", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4070304-e48d-40b2-84de-bf8912e1307b", "sighting_of_ref": "indicator--766d2a11-d5bb-4ecd-9d2b-473735031daf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa1458e-b644-49c0-b202-a9f82994c1bd", "sighting_of_ref": "indicator--766d2a11-d5bb-4ecd-9d2b-473735031daf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970d8bd8-1510-42d5-ac87-4f5a21f3ca0c", "sighting_of_ref": "indicator--3224e0f2-52a9-4298-a0df-e0d2dab88126", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687b9b08-90aa-4146-980e-8b795f42577c", "sighting_of_ref": "indicator--b92ed134-6ab5-4158-8760-e9365a02ea3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a284b3e3-57d5-49bd-b666-e0d231a0e667", "sighting_of_ref": "indicator--784d3660-2c54-4769-89cf-4b15dcccdcec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202dbb12-9143-4c5a-9e75-43e829ac7fd2", "sighting_of_ref": "indicator--71bc23fd-dbe4-4119-a6b1-f1840f68f791", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f4b63c-71af-4f29-8fbe-fd73698e4314", "sighting_of_ref": "indicator--7f6a8303-aa90-468f-8892-aa8902aef767", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a65885-c656-4077-ad9f-e3c536e02a79", "sighting_of_ref": "indicator--8b493a13-dad6-4029-981a-3f1aa2f5e7e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4c0fd9-3f91-437d-b544-dcfd8e30ed5a", "sighting_of_ref": "indicator--0287aa58-768c-48c6-80ad-366fbe6b7461", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9cb93d-40d6-4806-85b5-e8176999f05e", "sighting_of_ref": "indicator--0287aa58-768c-48c6-80ad-366fbe6b7461", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d54f93-d6ff-4aac-adfc-59ecd5e7321a", "sighting_of_ref": "indicator--feca0c76-dbef-4ed5-9fd1-77427c329d2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f39c629-a9df-4fb0-9e06-274ca5572a30", "sighting_of_ref": "indicator--c661e4f7-e09a-4503-8664-395884584158", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a812f50d-7b71-4f50-97c1-854f65f3a03b", "sighting_of_ref": "indicator--dac71de8-ce42-496e-922e-605e6528a510", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157ac239-8185-4700-a749-312ac7dad24d", "sighting_of_ref": "indicator--04e325ae-2434-4aad-8de0-6d302822b6f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21c543d-4402-457f-8519-924a5bd650af", "sighting_of_ref": "indicator--d1075113-382b-4a74-8497-e31c7e05be8a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd45a7d8-0833-42dc-90d2-ce67d49378d6", "sighting_of_ref": "indicator--2d9a16c1-6bf7-4c64-94f6-519f6c980722", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f641b60-7ef1-4463-9162-5c8dcd61d010", "sighting_of_ref": "indicator--2d9a16c1-6bf7-4c64-94f6-519f6c980722", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d025e2-8b12-4e76-9ded-660fd00a42a0", "sighting_of_ref": "indicator--0fdcd5f3-aaf4-4b64-8f16-01362530a607", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2378a3d5-86ef-4b84-90e0-dd0cc73c0933", "sighting_of_ref": "indicator--8c1d978f-2ddc-4c88-a0c1-e86d13471721", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f83f584-83ec-451f-b72a-37bb15390c7b", "sighting_of_ref": "indicator--3aac7f91-cfc2-46d8-a1f8-5d8cdfc20661", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2594da-dc2a-4905-8516-456e5fa680e4", "sighting_of_ref": "indicator--689eb88c-e040-4f40-b9a2-94c0ff7821e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6b28c8-3660-4045-acc0-a8a6b329f084", "sighting_of_ref": "indicator--689eb88c-e040-4f40-b9a2-94c0ff7821e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584c121d-9c69-4fc6-bff1-b64119a5fb9c", "sighting_of_ref": "indicator--201afe06-8b82-4c8d-aac4-c5ed1aa77146", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552bda54-2971-43b5-ad33-f60e169c1b29", "sighting_of_ref": "indicator--334aaea6-0bf2-44ff-98de-48cbc5bd25f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3190b55a-fc48-4f07-9a15-c7f57566824f", "sighting_of_ref": "indicator--102cf01e-4122-4105-80ca-c49711390527", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c78722f-5f6d-454d-a4c5-bfcbfe7181fa", "sighting_of_ref": "indicator--94591a53-20cd-401c-874d-e9011da21263", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e45bec-989f-4b31-bf83-f9684a7c6c49", "sighting_of_ref": "indicator--94591a53-20cd-401c-874d-e9011da21263", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd973610-e214-4034-900d-0681770135d9", "sighting_of_ref": "indicator--4ffa9b33-e87a-47f0-9b62-a0fdb067335b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d78f800-b3b8-4ecd-8b41-b2fb7b5b0a79", "sighting_of_ref": "indicator--9ac436e2-7c18-4493-8d26-1f9e4e6d012b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accdcc91-68d8-4de0-a621-5c509a1693a3", "sighting_of_ref": "indicator--b2cb544e-80a8-4ca9-ab31-eec460b17b23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e1d01b-befa-4c67-9bd5-a7b37e6c226c", "sighting_of_ref": "indicator--78cb7a2a-39a1-45d6-8761-3d13799cf409", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5453deaf-e611-4089-9e2d-993cacd473d7", "sighting_of_ref": "indicator--cbabdf35-0a03-4998-a024-c2a1f8736ebf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfc1592-e10c-479c-a2a8-c33342710ed0", "sighting_of_ref": "indicator--ba6e7f86-f7c6-4706-9ac9-25dc5831966f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed61ee8-4e08-477e-92e9-bc7541c8de6e", "sighting_of_ref": "indicator--60b3407e-61aa-40d6-8005-7216911ab8bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cf1962-16c2-4c07-837a-17a6dd1e29e9", "sighting_of_ref": "indicator--2eb1c0d9-51aa-430c-a9ef-343d7211d50c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9037f12-f2f6-4dfc-95ef-f0cc172a7b34", "sighting_of_ref": "indicator--2eb1c0d9-51aa-430c-a9ef-343d7211d50c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0a606a-1326-43ca-a6c2-7f1bf62551ee", "sighting_of_ref": "indicator--894a921a-ee28-40ea-ac93-956beaee871a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171dfbeb-772f-4de7-9344-c52eb7e00d22", "sighting_of_ref": "indicator--88c63a95-a89e-4927-a834-5d76a203bdd7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd884d4-5279-485f-850d-b5f6847d500e", "sighting_of_ref": "indicator--bc64caab-5350-4417-b6af-a0ab2e38edc3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24652ad7-c11c-4b13-a733-09c2ed430f9b", "sighting_of_ref": "indicator--2cc8c375-a7ba-4708-87f3-6899b008ba37", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea09642-41af-4c8c-8a84-ac089c844a97", "sighting_of_ref": "indicator--6f2f0bb8-442c-4182-b10a-d5fa15f38852", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2f80d4-e1b0-4e6e-bfce-db001afa844e", "sighting_of_ref": "indicator--6f2f0bb8-442c-4182-b10a-d5fa15f38852", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcec09b-89ab-47f4-88db-4e5dc67c6758", "sighting_of_ref": "indicator--99322838-bf3e-46ad-b04c-d8b211c9acb7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e120a8-19af-44a2-9766-f55ea77a8636", "sighting_of_ref": "indicator--2d56b900-3900-42c5-a5b1-736f921e40c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e872c4-1c8d-4d4e-9c9d-0ed0b726d1aa", "sighting_of_ref": "indicator--c9be5998-429b-4717-a884-906fc071a432", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83280082-1115-4f0c-9091-c4c5b5461e10", "sighting_of_ref": "indicator--94a9cd85-a3b9-4301-b40b-204169ca726c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d5396f-6d80-4f9e-b412-961e825e14cd", "sighting_of_ref": "indicator--418d6d3e-a030-45ac-95b6-e8e0fad7e311", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5991c3f5-f486-41e0-b014-1557adb22083", "sighting_of_ref": "indicator--53b64f57-10a8-4235-a428-e19812296f81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a773e443-55fc-49c1-959e-3fa880587987", "sighting_of_ref": "indicator--e94e6a63-87e3-40a0-a0c1-ff8917cfe239", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89ae020-efbf-40ba-a538-9eb86e8036ca", "sighting_of_ref": "indicator--433b206c-8c7b-4c98-8d0f-d56f70c0adf1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a905d6-15b8-467d-84a4-c2c55e76dd66", "sighting_of_ref": "indicator--c6d9b6e9-42f7-42d8-80cc-8b73532a763d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca477ca4-db01-4672-aeb6-e8758fc4f844", "sighting_of_ref": "indicator--55c1f5d0-5367-4462-9489-a9490fef9ca4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af272ed-c457-4511-a126-2cc1f6ee986c", "sighting_of_ref": "indicator--26889849-6b88-4877-b6cb-e8c9565128a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f875d1f7-8eb8-4f54-95a7-fb162877e3d2", "sighting_of_ref": "indicator--4092f7c0-5700-4175-b30e-77e4f5ad4c31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca3496f-aea4-4611-9657-5b7aaf723303", "sighting_of_ref": "indicator--a1f205da-0cef-454b-a821-10ce7829d779", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eabd353-692d-4977-abe6-0ea2579232e1", "sighting_of_ref": "indicator--6d51cb14-7a38-4eaf-ab90-e5848f08e10b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abbd880-7f76-409b-8ff5-8c8045a79704", "sighting_of_ref": "indicator--21d3f4f5-ce38-4cc5-8d19-0d158bdee4fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd88cf3-f0aa-48a8-a358-245b7d28788d", "sighting_of_ref": "indicator--ba1fd45b-0a0a-422b-b803-f014fea5fea6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd89c27-df12-4c65-b4b5-4ce1fbf0fb1a", "sighting_of_ref": "indicator--825c0989-4045-4723-afad-88af725d32d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1208f2bb-b45a-4b48-ab80-01f651a095fd", "sighting_of_ref": "indicator--825c0989-4045-4723-afad-88af725d32d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a91cd6-55e6-4a77-9949-46f4ec6e6930", "sighting_of_ref": "indicator--bd0aacbf-1601-4c93-81c9-517f56b56429", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e5c70b-dfe6-4ca4-8dd8-d8ad384a8631", "sighting_of_ref": "indicator--43da97e8-addd-4dce-8868-398c2e11b5f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddd24c1-c1c4-41fc-b85d-420ea8bd4f78", "sighting_of_ref": "indicator--20a22568-9793-4f0d-9657-509dfe0d822d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78927d49-865d-43bb-941e-c33131c9f47a", "sighting_of_ref": "indicator--9345da89-59d8-4bb4-b369-268965c7edfd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674a5458-02fd-4140-803d-452085fdd145", "sighting_of_ref": "indicator--89cbc8de-3ac5-4476-86b7-ef5e6f476f9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598f7966-cd75-4c08-a09a-7e3c19ee71bd", "sighting_of_ref": "indicator--d439cd32-e289-40b3-8cfb-393240ff797a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dca50f-9b65-4682-aad1-041dff57d867", "sighting_of_ref": "indicator--ea9f3ac1-3536-4f05-8076-8de5e978709d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab651c5-3e7a-4d0e-a2e6-e9d06f751ab1", "sighting_of_ref": "indicator--8b63dafc-e60a-42db-9f2b-b97b67f070d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951a5e8c-7417-4a7e-b306-1afc7b96399b", "sighting_of_ref": "indicator--8b63dafc-e60a-42db-9f2b-b97b67f070d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692b89a6-ed60-440a-bd04-72f3ca4b34fa", "sighting_of_ref": "indicator--c0c02b33-acde-40d5-857a-82add71909d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdd7a87-630f-4fb6-8051-9ec8c54bc7cd", "sighting_of_ref": "indicator--d009eae4-dd15-4c12-ad57-98e3534295f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a317008f-f67e-473c-be2e-ed25b4917283", "sighting_of_ref": "indicator--468412ad-8400-45fc-a2b9-bcaa69bd4977", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541c5d93-9d20-426d-ab09-ee0ec73d27a8", "sighting_of_ref": "indicator--e75221d9-4354-4b66-a59a-ac98bbb820c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35ef234-dce5-4728-a850-94770ab21e6e", "sighting_of_ref": "indicator--27ff8811-6c41-4a0d-a877-478daf6306ad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff3cc7a-08fa-43c1-b7bf-5db2bdb52d1e", "sighting_of_ref": "indicator--27ff8811-6c41-4a0d-a877-478daf6306ad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2402b905-c819-4f6a-b6cc-fb7cf0153a46", "sighting_of_ref": "indicator--baf7b0e6-f90f-479a-8adf-f448749f13c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33355dd7-c2cf-4319-b6c6-35aaf07f0a6e", "sighting_of_ref": "indicator--a357e58e-6353-46bd-8f85-39f2f6b2e374", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65887926-342f-4bec-9a53-2d66e3e8f74a", "sighting_of_ref": "indicator--a357e58e-6353-46bd-8f85-39f2f6b2e374", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba00da0-9051-4a67-a961-9bcf86c72b0c", "sighting_of_ref": "indicator--5508b541-25da-447f-95a6-8c33907f59a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedd7e28-a7a8-456c-ab22-595f68cb5f74", "sighting_of_ref": "indicator--5508b541-25da-447f-95a6-8c33907f59a5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d68709-f506-4e7c-a65f-3a065e79f2d9", "sighting_of_ref": "indicator--5f0d3697-67e2-419a-9e19-bf8d35e3ef11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67065608-cc47-49a8-a4b9-792ac93381fd", "sighting_of_ref": "indicator--dd4b5aeb-89d1-4d2f-b519-3e27aaef526b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f06878-8671-4a03-9c9b-332239778f15", "sighting_of_ref": "indicator--331638d0-0d65-4c3c-a11b-5c6c26686be1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a15a96-48a0-4eae-854f-c7d91ba66288", "sighting_of_ref": "indicator--331638d0-0d65-4c3c-a11b-5c6c26686be1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8595a9-3370-42c9-84ad-4d42afa45ca7", "sighting_of_ref": "indicator--902a679d-6ac6-4ce8-9cb8-3050b3d45c3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149d1920-5919-45a5-9e12-00d2e3a22b77", "sighting_of_ref": "indicator--c2da556c-bee1-4d70-931d-d092c72a4750", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732b8843-e9f7-47a0-80a5-274b9cbd5756", "sighting_of_ref": "indicator--c9bd5c96-d31d-4f9f-9aeb-d4290ce715fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2f5d35-cb72-451c-9e3c-0aef009755ab", "sighting_of_ref": "indicator--c9bd5c96-d31d-4f9f-9aeb-d4290ce715fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ec0e75-531e-48fe-82d8-14018cc7d375", "sighting_of_ref": "indicator--e2150326-d793-4be6-a0dd-f22f2c910f51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36d94c4-4b82-471b-9b51-39227d0b1348", "sighting_of_ref": "indicator--e2150326-d793-4be6-a0dd-f22f2c910f51", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd6caa9-ef12-4fa9-9ff1-baa922eb1751", "sighting_of_ref": "indicator--88614cfd-407a-4e4d-8091-06a666a24b9b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca59570-5490-4950-801b-64142fe916cf", "sighting_of_ref": "indicator--4d13b030-8e8b-4a9c-aa86-9cef366dc5b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f901478-6fea-482a-b888-d7d5cd2f00a3", "sighting_of_ref": "indicator--c7eaeb32-f05f-44ae-8258-397fe8be5c4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec197383-94e2-4f77-bff2-e21f26535d59", "sighting_of_ref": "indicator--125368c5-727c-4aba-85f5-a5689a512a01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fe6206-2009-4f05-9950-839b91d27204", "sighting_of_ref": "indicator--972607fc-e16e-4e7e-8e47-f0db32f3e97b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f9bfb1-45ee-41d5-af09-e444e47e772d", "sighting_of_ref": "indicator--972607fc-e16e-4e7e-8e47-f0db32f3e97b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8a6203-d1aa-413e-b3e4-01262733e806", "sighting_of_ref": "indicator--022b0d6c-541f-4f94-bfe5-98f77a752ecf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0cb175-026b-4e25-9d1d-a10350eba6f1", "sighting_of_ref": "indicator--b2d777bd-e7b2-4c2f-a702-8383b8649fbb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86afab60-c484-4b46-83f8-ec5d2538f1ea", "sighting_of_ref": "indicator--b2d777bd-e7b2-4c2f-a702-8383b8649fbb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76504273-2d2a-4d54-9c24-368302ac8619", "sighting_of_ref": "indicator--f26a5d4b-2c2f-4f51-ac5c-b5d208b757bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c84a79a-c494-4eb6-aaed-18783e5d5883", "sighting_of_ref": "indicator--3314d680-701e-4ecb-8dc0-bd093db873fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a711a8-957d-4bf4-85b7-e288b76d06e0", "sighting_of_ref": "indicator--c840036a-4551-40c2-b259-d5c498ffecb9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bca18f-719b-4698-a0c1-97609ce95369", "sighting_of_ref": "indicator--c840036a-4551-40c2-b259-d5c498ffecb9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f20c93-1659-423c-88c5-2589f8cdfacb", "sighting_of_ref": "indicator--909741a7-8202-4094-8145-215ebe6b6a9d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60251f57-64a1-492d-99af-34a68eef8ac8", "sighting_of_ref": "indicator--9801f286-6c20-45e4-8321-d4fae4c63bef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6869c886-3b55-4970-88a3-a09da52a7598", "sighting_of_ref": "indicator--daa9f973-ffc5-4629-abd7-4cbb145f2a74", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2917ad3-d528-486b-b2b9-6d35bd039241", "sighting_of_ref": "indicator--7bce6a9f-beec-4903-9f5a-3a73d641356e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570bd4e1-25dc-4404-be4f-65e8a4d9aee6", "sighting_of_ref": "indicator--6ef31486-40c7-4fea-893e-aa0ef97afa6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808a4e46-14d4-40d6-88a3-3dcac5abc254", "sighting_of_ref": "indicator--91ce990f-5d1a-40c5-873d-fa93bdfbf568", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b05843-7374-4969-b79f-45f85f24c220", "sighting_of_ref": "indicator--d732ddd5-6dba-483c-adea-34ebafc5f8b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f871d3e1-f5a1-4d57-a101-0fc072ce6ade", "sighting_of_ref": "indicator--5bf53c7c-d69a-4015-8f37-cd5630594ca7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fe8a67-f05f-4d4e-924e-ccd407f553e2", "sighting_of_ref": "indicator--8bc3de38-5f69-4d66-87a6-3db26e46000c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb6bce9-3e06-499f-937a-7c5d620fbce6", "sighting_of_ref": "indicator--2f50165d-f7a1-476a-a5cf-de67259e49f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f34f44-2f2c-455a-92f8-f7ce15d87a93", "sighting_of_ref": "indicator--b7ab140f-bbe6-4c47-9349-48790f7cb1fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347a299e-d318-4e66-a06f-2fa94c3f3b38", "sighting_of_ref": "indicator--dd0844f9-e7c4-499d-90e0-89df2a7fb9fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102ad066-d22e-427f-ae6b-be03addc67a9", "sighting_of_ref": "indicator--dd0844f9-e7c4-499d-90e0-89df2a7fb9fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cececb30-886e-484d-8c10-55bd9cc73d34", "sighting_of_ref": "indicator--516e8c90-a0cb-4dac-b7c2-3f7c2f413d2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c90de4-c908-43dc-bec1-55368c389d53", "sighting_of_ref": "indicator--516e8c90-a0cb-4dac-b7c2-3f7c2f413d2b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc1e1e3-88c9-472e-a4e5-b13566c4d8ab", "sighting_of_ref": "indicator--2f712a2a-085a-43bb-af34-fe726a2580f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbaa84e-5c12-488f-ba48-863238e66e1f", "sighting_of_ref": "indicator--86ecedf9-cca4-4ca9-b679-d77ded80e9dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f77c70-de75-485c-9a1e-c25c21ef637a", "sighting_of_ref": "indicator--57b6565c-0cea-4a4d-8b9a-fb8b425ea8f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2586e16-36e1-49ff-91e7-d532d768cc11", "sighting_of_ref": "indicator--58f884aa-e716-4468-ac80-c15d10499ea7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18f1ed2-ad91-4abd-8601-f97b0cf72b7c", "sighting_of_ref": "indicator--a6253e94-4a37-4d62-93fb-3766ac6f50f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0212b5e8-539e-44f8-84b0-a522630a9ba9", "sighting_of_ref": "indicator--190d882c-d064-4854-a4a7-fc3e59bd5b9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868e01b4-c33f-49c4-9044-cbafc628eff0", "sighting_of_ref": "indicator--190d882c-d064-4854-a4a7-fc3e59bd5b9a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407f22ad-0bbf-4858-b1d2-d9d40cf1ae78", "sighting_of_ref": "indicator--0e88f587-1641-4407-aa99-2143a2b5418d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2875bae8-090c-4f9b-bac3-2bf6a5846c3a", "sighting_of_ref": "indicator--613b2c35-d900-48dc-ab15-cb35c614abe3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38b0128-3810-4377-9959-92ddaf00d9e4", "sighting_of_ref": "indicator--4395c2d3-6fba-4af9-b534-67ae2dfa7feb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8aba7ed-2be9-4946-98ff-fa61d5a024d8", "sighting_of_ref": "indicator--478c0968-12a1-4690-a302-31c256c6a335", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d23536-56df-44c2-94f0-322a66fac86f", "sighting_of_ref": "indicator--a2684bcb-a47a-4d62-aab0-c6fb7bdf454f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a946f8ee-0180-4839-a880-7fb871ea53f5", "sighting_of_ref": "indicator--a2684bcb-a47a-4d62-aab0-c6fb7bdf454f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1347fe-4446-4d68-a727-88a0e0dd942c", "sighting_of_ref": "indicator--a2460ee3-4118-4a3a-ba43-0ed35f142af9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc06f3a4-1b1f-4890-a010-eb04e3482ee3", "sighting_of_ref": "indicator--a2460ee3-4118-4a3a-ba43-0ed35f142af9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49afb91b-6ce6-468c-858b-b459058fb9bc", "sighting_of_ref": "indicator--f2438dec-edc8-431b-b440-a9a8992e6d97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e097fa-b052-43e3-bf3d-1df92aa30faa", "sighting_of_ref": "indicator--1f208c17-a240-43f2-814d-1a0caf790cda", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a515b8-91d3-41bc-b21a-dd409ae1339e", "sighting_of_ref": "indicator--1f208c17-a240-43f2-814d-1a0caf790cda", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db658d2-2d87-49b5-8489-323dadb6283b", "sighting_of_ref": "indicator--5459aae3-2610-4045-b42b-f959558f1e01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f060ef8f-ff75-408a-87bb-d5024f908b89", "sighting_of_ref": "indicator--d0a99195-7a7d-47ef-a219-d4930f8a5272", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9585e561-59ae-4dbb-8180-95d4824e6954", "sighting_of_ref": "indicator--d0a99195-7a7d-47ef-a219-d4930f8a5272", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b9ad53-e277-4d86-9c18-6137bc5ce2c1", "sighting_of_ref": "indicator--0f725c1d-de72-4b70-98e3-ab03532b8583", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cfb47b-f36f-449c-8e04-7405e055b852", "sighting_of_ref": "indicator--0f725c1d-de72-4b70-98e3-ab03532b8583", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c5d0be-2d88-474e-9993-17f4c2afe5b2", "sighting_of_ref": "indicator--8d274a11-7d08-4d0d-8107-394338730455", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6355eb03-9e96-41fb-9dd7-d301f5d82fc1", "sighting_of_ref": "indicator--8d274a11-7d08-4d0d-8107-394338730455", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6a5954-8920-446b-99a4-c5b0aa09e4df", "sighting_of_ref": "indicator--49440d8d-cad0-4362-bcc4-a16dab743716", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0546ba47-2697-4e6a-824d-4e21c63354f1", "sighting_of_ref": "indicator--d3340980-4e2a-481f-a781-cd44ce233a83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6941f7-feb3-4a20-861d-9211dfe71e84", "sighting_of_ref": "indicator--fc419b0f-0db3-46be-8fa4-248198fdf9bc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f5c6a9-7dc0-4166-89e8-51eec416005a", "sighting_of_ref": "indicator--fc419b0f-0db3-46be-8fa4-248198fdf9bc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54837214-9abd-4b5d-a0bc-36d8c387c5eb", "sighting_of_ref": "indicator--db20e9c0-b4ed-4407-bf80-932d28c39293", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6a83ba-2b74-4698-9afe-2702fd440b87", "sighting_of_ref": "indicator--db20e9c0-b4ed-4407-bf80-932d28c39293", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc7466b-feaa-4de5-b6f2-976077b9e02a", "sighting_of_ref": "indicator--a1194cc3-303c-4895-ab0b-703ed5cd985c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6c5f68-70e2-496d-846f-d86553f5c730", "sighting_of_ref": "indicator--d096f2f0-cde9-4c4d-bb18-4a6d9cf11b6c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021a945a-290e-4ff6-a338-fe15099bf94f", "sighting_of_ref": "indicator--d096f2f0-cde9-4c4d-bb18-4a6d9cf11b6c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fab1f5-5f6d-4e59-83e8-4abd9dc3efb7", "sighting_of_ref": "indicator--96f4f24f-2d1d-453a-8614-15cfee320ff4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95569e6-2322-482c-a6f9-e9f78f93216d", "sighting_of_ref": "indicator--96f4f24f-2d1d-453a-8614-15cfee320ff4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da753564-2726-432f-818c-26a5053ae573", "sighting_of_ref": "indicator--56091263-f478-4e36-bd5b-40cde679833f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b82a8b-ea61-46e1-b09b-896d2b631490", "sighting_of_ref": "indicator--56091263-f478-4e36-bd5b-40cde679833f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18885a49-706c-4605-9c81-347f96b1f056", "sighting_of_ref": "indicator--4e0c9297-b52a-4274-a3b0-f4b1112fb197", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95161771-bb47-4197-bb1c-49fb2660633f", "sighting_of_ref": "indicator--ceb97656-35a2-48f0-8914-117fe17f5e77", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00de9ea-0fb9-4b40-bc77-c45b0838a040", "sighting_of_ref": "indicator--55d8e530-dc95-4f30-8b6c-e15afe91f5f7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e8039b-61a2-476e-befa-0eae93a1a5c0", "sighting_of_ref": "indicator--08f1fdc2-1886-44e5-a0cd-9e4f9b007a6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026953f8-f367-4b90-9b95-ac834513e6f9", "sighting_of_ref": "indicator--867a90bf-f3ac-4125-ba79-27e66ab3ea74", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cbe4db-a92e-4125-a4e9-40c60fca91a9", "sighting_of_ref": "indicator--7c9c80da-5d72-4d98-8b18-e54390273535", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62228742-6933-4df5-ad72-fc8a2c55437d", "sighting_of_ref": "indicator--e7ae1325-e630-407d-b4cf-408f2e3092d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d2ef68-be1e-451b-bfbc-dd907fe0c138", "sighting_of_ref": "indicator--e7ae1325-e630-407d-b4cf-408f2e3092d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af3a897-e489-4308-a6ac-e2a1b87444b6", "sighting_of_ref": "indicator--9c91c418-7a38-4f9f-b522-d7ad826da8be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2739fe45-aef3-4d57-864f-bcb465a7c1be", "sighting_of_ref": "indicator--e7928271-c42b-409d-bb2d-85b5a4466ffd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7304f301-bca2-4a05-a187-718dd487cad5", "sighting_of_ref": "indicator--75d03950-5aab-487d-bc1b-9fb1ac67fcf1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b366b0-e342-4156-bf9b-dee0f5511a21", "sighting_of_ref": "indicator--9d85eb7a-e4d0-4901-bac1-f71df609122f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9beae88-06f3-4ff7-908b-c6d209b2727f", "sighting_of_ref": "indicator--da5d3fec-4341-4e4c-baff-558980d2dd55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245d7004-2002-4a81-8f2a-6c5ba73db665", "sighting_of_ref": "indicator--859957e1-3df6-4e78-b349-25c88bab574d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69fb26a-f1d1-4ee3-a914-f4f048c4e60e", "sighting_of_ref": "indicator--cd67da05-b6f3-411d-934b-833ab8e691f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cc4ff7-f8e3-4487-b4be-766fa84c0548", "sighting_of_ref": "indicator--8340a36f-b0ed-4a62-9ffb-65392b8cd578", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748012f3-31ac-4a21-a525-66545732be3e", "sighting_of_ref": "indicator--0cb1456a-7f15-4346-bee1-d8efefb51caf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5e5f44-1052-48d1-a91f-2c4178667ce4", "sighting_of_ref": "indicator--0cb1456a-7f15-4346-bee1-d8efefb51caf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69836a74-6641-456e-bd0d-d775214fdd16", "sighting_of_ref": "indicator--d76d5954-7d97-42b8-b73e-26925dba77ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854618ef-6deb-4d37-a5d6-b2b5be598c87", "sighting_of_ref": "indicator--f622979e-dfd4-4e0c-b27b-240496485ac7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d376ed-1e77-4d8f-aceb-5454b03af35b", "sighting_of_ref": "indicator--f622979e-dfd4-4e0c-b27b-240496485ac7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4468813d-49f8-4269-ac22-6ca8a3fa4ea1", "sighting_of_ref": "indicator--436432be-12f7-4dca-9364-ae8496aa65e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3295571-d7fc-4971-8e2a-69b9b22fbf06", "sighting_of_ref": "indicator--0f361666-882a-41a0-94bb-c84175c177f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2244d951-b53d-4b1c-97dc-be523146a057", "sighting_of_ref": "indicator--6fcff553-951f-43e8-98d9-251954d0c72d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6905c1-2ec3-4e65-ad81-e55e42bef7b1", "sighting_of_ref": "indicator--23eccc36-01e7-4bb4-85b3-94cea4ee0245", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543a44bb-eda9-48bb-adc9-7844527fe6d7", "sighting_of_ref": "indicator--23eccc36-01e7-4bb4-85b3-94cea4ee0245", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd5b3b5-4934-45fa-a841-e17dec3dc802", "sighting_of_ref": "indicator--40c91e84-bd35-45fe-8e62-5e115329ea64", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96e8de3-b250-4658-9d8d-845e83217953", "sighting_of_ref": "indicator--40c91e84-bd35-45fe-8e62-5e115329ea64", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad14fdf-5484-480c-a061-85c7831e5783", "sighting_of_ref": "indicator--45a09794-6e51-477e-a435-520ec1b8c646", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210c5070-0976-424c-b1d5-5aa7aeff53bd", "sighting_of_ref": "indicator--42fbe5e5-a683-4b8e-8a63-b4315823b370", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156781a2-5567-4edb-a4f1-914e525d2fb1", "sighting_of_ref": "indicator--42fbe5e5-a683-4b8e-8a63-b4315823b370", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2020b4-03ff-454d-a598-216616ef6285", "sighting_of_ref": "indicator--d67c0006-1987-45ea-9ab8-75309c8d3ed6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97993795-5ebe-4c14-83c6-3aef3db7a0d5", "sighting_of_ref": "indicator--d67c0006-1987-45ea-9ab8-75309c8d3ed6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7067e9f-7e8a-46de-9222-94976beb5ce3", "sighting_of_ref": "indicator--23def433-73b2-4bfa-a02c-6f5846e93ce6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997188db-7707-4098-8141-cc078c3d913a", "sighting_of_ref": "indicator--23def433-73b2-4bfa-a02c-6f5846e93ce6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae94c87f-8a12-4bf5-8b4e-b89aa91b43e7", "sighting_of_ref": "indicator--41f5fc11-f844-465d-8ead-41484a15a658", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a05e46a-3472-4a02-8efe-e92cc7464f6c", "sighting_of_ref": "indicator--41f5fc11-f844-465d-8ead-41484a15a658", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446d929b-80b2-45a7-8a13-d0ff88b43142", "sighting_of_ref": "indicator--da29c026-f335-40d3-9c97-ec3d1c342d96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2880be-ec9b-4d2c-907f-27d9ed1326fe", "sighting_of_ref": "indicator--aaf26d66-7e6d-470a-9507-e6baac4fec2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9dd869-b969-4487-867b-08ae5bb1fb9f", "sighting_of_ref": "indicator--54ffa2fd-f830-4776-8aae-763ae301814f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51057cc-dff0-41a5-ba6a-c80b99b32c8f", "sighting_of_ref": "indicator--54ffa2fd-f830-4776-8aae-763ae301814f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f62bef-1561-4d39-bc40-52ed31d21cc0", "sighting_of_ref": "indicator--d3340059-1a99-443b-84cb-02c05eae6a61", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef25616-af96-4b99-a762-e8538245da2f", "sighting_of_ref": "indicator--0cb7e124-05cc-42a0-95a7-63aac34383aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a2bdac-8ffd-4779-970e-bfce598b061c", "sighting_of_ref": "indicator--0cb7e124-05cc-42a0-95a7-63aac34383aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd9a8ea-4dc0-43cb-9c58-f47396bacd1d", "sighting_of_ref": "indicator--6e87758c-5685-49ee-85e1-790ee447b0b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641d6d36-d617-4f5a-8cec-f62ed666b7ba", "sighting_of_ref": "indicator--6e87758c-5685-49ee-85e1-790ee447b0b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0d7082-2882-43fd-88e3-53a567c85b33", "sighting_of_ref": "indicator--24a4e8fd-1759-4ff5-8c78-cedee65903a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9758607d-c13d-44d1-b47b-de686a30690e", "sighting_of_ref": "indicator--24a4e8fd-1759-4ff5-8c78-cedee65903a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcc678e-e2f3-4446-8175-2589bbc0f619", "sighting_of_ref": "indicator--ac86a4a3-6459-40ee-92de-ab8a6cbcfd57", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebed70b6-ca27-4466-a009-021899657d42", "sighting_of_ref": "indicator--5f50d9c0-4757-47e2-847a-5bdd1797660c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28655c2e-a012-4fce-a73b-dc45a99881eb", "sighting_of_ref": "indicator--4bc864f1-7f2a-4382-83e5-ce8118391101", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6635852e-f163-4daf-9729-10899ae4f226", "sighting_of_ref": "indicator--e96f8c35-1baf-4802-bb95-eabd68409afe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832eaf7e-10ab-4ee8-91c5-b6b309ed4feb", "sighting_of_ref": "indicator--e96f8c35-1baf-4802-bb95-eabd68409afe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0a68d4-9f00-4ef0-988d-6f826a8e93ee", "sighting_of_ref": "indicator--637b5834-1ffe-474a-9ac3-6a02271131a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01da2a4c-8730-450b-98e2-cfe6c1607890", "sighting_of_ref": "indicator--951ab672-cba0-4242-b3e7-dcf3172bd523", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dea6be-9bf7-43f5-9c5f-9c71e74b4f45", "sighting_of_ref": "indicator--a750a924-0696-48a5-a39f-ea747cb6d480", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0d2222-45ab-4d5f-a950-2438c9b3bd2b", "sighting_of_ref": "indicator--a750a924-0696-48a5-a39f-ea747cb6d480", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffd8951-b7dc-420b-a2bf-eb5d4712d427", "sighting_of_ref": "indicator--c4b236e7-4463-4de9-be57-191d15b4a5d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5cdac4-20b3-4d24-a083-80761982af8a", "sighting_of_ref": "indicator--a9ec1c8f-f186-4d2c-86f9-e6a25245eab0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d99eead-201a-40ea-97f8-ada543d8cbd1", "sighting_of_ref": "indicator--7804e0de-4f7b-4db9-a001-cd4f873bf901", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1e6f7c-42a1-4547-af60-9eb402a53692", "sighting_of_ref": "indicator--ddf17ae6-0883-4e22-874a-cef93eca4c81", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bec6fd-925c-4ba2-97b6-0e01ecc17a71", "sighting_of_ref": "indicator--9df2d50f-8d60-4017-a44b-2a45d0723bf4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f544b80b-3cd8-48f2-a485-1983c3184d6c", "sighting_of_ref": "indicator--9df2d50f-8d60-4017-a44b-2a45d0723bf4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9b38e7-dbfb-4688-af2d-165c0adb1ee2", "sighting_of_ref": "indicator--860e8a81-5587-4869-afbf-dddf256b33bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67aaa79e-7a6b-423e-b910-3c19a2b66b34", "sighting_of_ref": "indicator--83810318-afbc-4b25-9192-d8417f16f40b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860449ae-d403-42ca-ba8a-db11b93ac328", "sighting_of_ref": "indicator--e3f1b8b5-0520-48d1-ad64-78b9a95f45c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b317953-daa7-4a9b-9884-df4c3e113015", "sighting_of_ref": "indicator--3e24e990-0f5f-4c39-9796-e8ccf4b1d1a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737e2fbf-683c-48a1-8acb-5d99cf6f9876", "sighting_of_ref": "indicator--2397ea84-9c60-442c-8de4-d928c1b85cf3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954401c1-37f7-42cc-8507-462ebb908412", "sighting_of_ref": "indicator--028a4de0-c09a-4fc8-a618-6b019fd0621f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da521f6-3449-4a8c-baae-0a975e295957", "sighting_of_ref": "indicator--028a4de0-c09a-4fc8-a618-6b019fd0621f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7a5fef-8774-45e2-8701-c1336004755a", "sighting_of_ref": "indicator--34bae9a8-e315-4cca-a629-9db27d9afd6c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b3f9bc-5b46-4a8b-8c9f-b711d5c5fc65", "sighting_of_ref": "indicator--4cd804eb-50e9-4dec-894a-3394979bc584", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a7ceaf-ee2a-4adf-801c-53fc24affe81", "sighting_of_ref": "indicator--2cbc4cce-3663-48ca-b5b8-31dbfdb8d142", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68653ac9-5eb9-4860-bfa1-8559a31c3143", "sighting_of_ref": "indicator--bacdc958-9695-4eb8-9362-d6dee17b65d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d7147a-36b8-4e99-9d0f-2b62d7fa77f1", "sighting_of_ref": "indicator--2c2b8d76-423f-4db6-8397-70d62c48316a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12b9189-bd39-4c1d-8871-c8e21e531fcc", "sighting_of_ref": "indicator--2c2b8d76-423f-4db6-8397-70d62c48316a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de0310a-f3f7-4cf1-a563-fcf4ec891bd3", "sighting_of_ref": "indicator--63d01001-c052-49cc-ad36-87c52f87ba40", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c720dab-51cb-4266-8d67-2d61d8cf062d", "sighting_of_ref": "indicator--6e517cf0-f9dc-4117-90cc-fcefb1e718e3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293a6be6-f5fb-44f4-a557-f274d58ed340", "sighting_of_ref": "indicator--0b531b15-99d8-4c9f-b5ef-c1f3ee1e25a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571042ea-b029-4265-9a3c-66c2fe88c647", "sighting_of_ref": "indicator--a6180539-6f78-4901-a29f-e25056b3c7fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0087158-36cb-4bf7-971f-4c5c9f1dbee7", "sighting_of_ref": "indicator--ba447647-ef2d-4d91-927c-38aa247a4f04", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627d356b-8c5f-4b29-81ea-da556cdaccab", "sighting_of_ref": "indicator--ba447647-ef2d-4d91-927c-38aa247a4f04", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a620b9f2-8237-4bed-af67-5a178a6e0da8", "sighting_of_ref": "indicator--b6ed080c-7bf7-41cf-90b0-1553c310513b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039c96bb-1f02-4608-b769-7bf3ae66d135", "sighting_of_ref": "indicator--37ffaa9e-c431-4dc5-ac05-79f9467e3dc8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0863c4e-6e41-4cc9-a4d0-61f3156d2067", "sighting_of_ref": "indicator--f2e9dfed-87a9-4887-beb6-86fa45063d58", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d559e285-9d8c-4967-932c-b1b4cef50245", "sighting_of_ref": "indicator--6b969435-29f4-4642-9e81-074e83463e23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8ad3bd-e682-4136-8196-3e930909f0a2", "sighting_of_ref": "indicator--6b969435-29f4-4642-9e81-074e83463e23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391592d6-4e3f-4808-862a-01009d0cc061", "sighting_of_ref": "indicator--6f0ab763-5955-4e37-b937-7b707ac8e2bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603d7c2b-5783-43e5-825e-63ffa9c2698b", "sighting_of_ref": "indicator--6f0ab763-5955-4e37-b937-7b707ac8e2bc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6d0dd7-d55a-422e-9750-7193e24e1d22", "sighting_of_ref": "indicator--56a8e7fa-ac7c-4e8b-9f5a-a22d950e5ad3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f601fc64-fcbb-47e9-a25c-127914bd4f80", "sighting_of_ref": "indicator--ed056b2c-d58e-4af5-8793-c38d9f7c82a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274f615d-ea3e-4c61-bc64-e723717575b4", "sighting_of_ref": "indicator--ed056b2c-d58e-4af5-8793-c38d9f7c82a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5ca2f5-7e76-4d09-bdd9-90e71714a538", "sighting_of_ref": "indicator--83f98a78-4e44-48eb-b951-6a791e94debb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a81c30a-4dc7-44dd-810c-118842402242", "sighting_of_ref": "indicator--5a92606b-e4f6-48ae-81cf-bdb2086eab32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b25ed5-e27f-4979-abb4-b0f89dfcf8bc", "sighting_of_ref": "indicator--63c44a26-d25a-42f1-a801-8a4887cadee9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2813e1-60b1-4d8f-8de6-79487b12d011", "sighting_of_ref": "indicator--14655b1f-a5f0-4548-868d-22bf7e423695", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4c17b3-e627-41f0-8b3f-9efc65c74921", "sighting_of_ref": "indicator--14655b1f-a5f0-4548-868d-22bf7e423695", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e0c186-7b33-48f3-8854-ab9b73f68a44", "sighting_of_ref": "indicator--620f95c0-189b-401d-b929-c1c8b4332456", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5ab48c-a86f-4cfa-8cbd-42292a6d9c6a", "sighting_of_ref": "indicator--620f95c0-189b-401d-b929-c1c8b4332456", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e993b100-6c01-4d3b-a0a3-c1951e933829", "sighting_of_ref": "indicator--88823db8-9e4b-4e78-a649-0d6e2de19823", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c5bee2-f56f-4880-846f-b106c5eb57a3", "sighting_of_ref": "indicator--88823db8-9e4b-4e78-a649-0d6e2de19823", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f6b6df-b0c4-4070-bd07-3314eb59161d", "sighting_of_ref": "indicator--34e95717-dd5f-4e98-8006-9af01c1415f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05649ac7-074d-4e4c-9039-ea58d205b90d", "sighting_of_ref": "indicator--004926eb-8f3f-4c44-bbc3-56533b0fdc92", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e99ae90-73b5-4c4f-9495-9ed410a8c060", "sighting_of_ref": "indicator--92ecb43b-bf16-4768-8014-99a0174d85c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7990c39a-04a3-4c64-a694-77b9ee719351", "sighting_of_ref": "indicator--92ecb43b-bf16-4768-8014-99a0174d85c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e548c2-44e3-47ba-8092-95da15f99300", "sighting_of_ref": "indicator--bd67b68f-b1ec-40b9-a5d0-2d326d7568ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e16112-405c-44cd-ab50-2cfd0fbb2dcb", "sighting_of_ref": "indicator--dd2d5072-96d4-4263-a7c1-e291a8aab2e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7397c0-de1d-4d24-9185-082a37d96e3d", "sighting_of_ref": "indicator--c47b1f40-4e04-4090-86f2-865a1e5d383e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dde859-9592-47f7-a791-c196b7fcf4d9", "sighting_of_ref": "indicator--f1015cda-5976-4e09-8b79-50e0c0738c6f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5481edf-47dd-4b01-8c3a-3a82f3014786", "sighting_of_ref": "indicator--0a261b10-857a-4613-8b4b-090da883bab4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009f6669-991c-40ab-8ba4-b90f4c47b660", "sighting_of_ref": "indicator--e1421f43-0ff4-401c-8c4f-4ce023549336", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2eac33c-c948-4dc7-a302-a9d801068437", "sighting_of_ref": "indicator--b485509f-34ea-4aea-856f-1f8893e1ab0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722d57bf-866f-42d7-9899-ffd83b34fb52", "sighting_of_ref": "indicator--0972bff7-0eb9-4fea-bee0-af76e5c96ce4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bd748d-fdd2-4733-ac55-9f69e369357e", "sighting_of_ref": "indicator--0972bff7-0eb9-4fea-bee0-af76e5c96ce4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58974b38-2eff-4806-924a-57d5e5f668cd", "sighting_of_ref": "indicator--daeac037-fe3d-4d34-9c80-c1df42b1f29c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4725ef1b-36f2-4853-a298-424515c48b22", "sighting_of_ref": "indicator--d506f96d-dc32-4fc4-8e70-f90fb48b0e19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33e7a7e-814a-495a-ae04-94ab665d9784", "sighting_of_ref": "indicator--7665461e-2e89-4504-96cb-89d31e88a46e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea64d47b-fade-4f64-b4b8-1d3e8f123804", "sighting_of_ref": "indicator--7665461e-2e89-4504-96cb-89d31e88a46e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a24deb-878d-445d-9e12-d6c2444e50ac", "sighting_of_ref": "indicator--376682ec-61f0-4c51-85dd-6e116bfae210", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d475840-f705-474f-90a8-2b11df1a333b", "sighting_of_ref": "indicator--48e7b7f8-945f-4ff0-b481-222e977b0bda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e535f2-3028-4873-bac8-f31e6d9d1d3d", "sighting_of_ref": "indicator--ee80954e-9f6d-494d-81d2-afc778fa68fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ee9769-ae36-4fb8-899f-aacd9ddf82d5", "sighting_of_ref": "indicator--ee80954e-9f6d-494d-81d2-afc778fa68fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f01033-46b0-4b37-9047-0d320a473271", "sighting_of_ref": "indicator--6bbe1f28-45b5-4c00-a066-71dc5ff78bbd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881dcdb1-938d-4f9c-9588-ab6e9ae1b7c2", "sighting_of_ref": "indicator--6bbe1f28-45b5-4c00-a066-71dc5ff78bbd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136bd985-0559-4a9a-9b67-3d720387a41e", "sighting_of_ref": "indicator--cb09d473-7aa2-4738-807e-7ab44dd9a35f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7537ba-62ba-42b1-9ade-077bd3e1e9bf", "sighting_of_ref": "indicator--3991d143-1041-40d1-982f-f32e2d69f80d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b44530-faa1-4e75-ac3a-7fbb764b0fe4", "sighting_of_ref": "indicator--dc648132-cb80-402f-b147-e59ea78d95bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdd17f9-ec45-4ff7-9622-e69051655daa", "sighting_of_ref": "indicator--3eb8a0d7-9a6b-4d30-a116-003c1263298a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69160847-6805-4476-bde6-ec0ad77644ec", "sighting_of_ref": "indicator--892bfe0f-f828-4e43-9785-3103e34f3e38", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82283bd-cf30-4c25-b6cc-95d4ed4c84a9", "sighting_of_ref": "indicator--892bfe0f-f828-4e43-9785-3103e34f3e38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4b4419-af5a-4e69-acd7-182b99d9d878", "sighting_of_ref": "indicator--973d573f-ffd0-4e42-b736-1b71c9f3a1a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c446d2-4e9e-4ff5-852c-c47490787328", "sighting_of_ref": "indicator--800b2fb9-19cc-4b6e-86ca-fc4cd6ed178b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fc4634-505c-4435-8f45-940aba436fbf", "sighting_of_ref": "indicator--800b2fb9-19cc-4b6e-86ca-fc4cd6ed178b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2845b417-5cc7-4be9-b7b6-14fa94fcc6ab", "sighting_of_ref": "indicator--da559505-901a-46d3-9fb0-e9f7bcca4727", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e10310-b079-40ef-84e2-7784a344824a", "sighting_of_ref": "indicator--da559505-901a-46d3-9fb0-e9f7bcca4727", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30e6681-aa70-45d7-bcfa-1f4e7e8cae7f", "sighting_of_ref": "indicator--67904f9f-0a92-495e-98f2-d5249add44a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4872b78a-1388-4fd2-95fb-629aab68c814", "sighting_of_ref": "indicator--897f61a7-14b5-49b6-a4c9-b44773547ce8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08017df7-0956-47df-9c7d-de11d1f87c00", "sighting_of_ref": "indicator--26f58fbf-3d1d-4337-be52-58df1d1ae843", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e14417-2aa2-40a1-af1c-fe5641ad9555", "sighting_of_ref": "indicator--26f58fbf-3d1d-4337-be52-58df1d1ae843", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a85a032-f90d-48b6-8527-7cb16dcc1cc9", "sighting_of_ref": "indicator--9a5874d4-78dc-4c31-8c75-39a450077496", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f683bf9d-faec-40d5-9f15-910d0d8df3a1", "sighting_of_ref": "indicator--e8074306-9b17-4856-9a86-83a8de26f20b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395ae5a7-5411-463e-b260-152d07e1c79b", "sighting_of_ref": "indicator--3399519d-9b62-48dd-a6f0-0f331a2e8a89", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da31980-a8d2-4c54-b1a3-59705c241438", "sighting_of_ref": "indicator--cbf95387-2972-4f4d-8297-1892ab2cd7b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd59f37-2519-4841-8b74-b7a6e60b33c3", "sighting_of_ref": "indicator--cbf95387-2972-4f4d-8297-1892ab2cd7b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07ab269-f7a2-4b17-a0b2-1c3bcbce764e", "sighting_of_ref": "indicator--3610d2e4-cc0c-41bd-84d4-eaa316f2ee68", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567c5be9-4a99-4c25-b0f0-c49fe737f624", "sighting_of_ref": "indicator--3610d2e4-cc0c-41bd-84d4-eaa316f2ee68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45fd9aa-4156-45ed-9e55-9573486c7e4d", "sighting_of_ref": "indicator--90648670-93ea-4c70-80f3-5ad95d5055b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166d5d59-a2a2-45b4-92d7-c42005f8f968", "sighting_of_ref": "indicator--5982c1f9-dcf2-4379-83d9-bdb8a8be88c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effb8b66-0c93-414e-a4a6-5d7cb64414da", "sighting_of_ref": "indicator--d34fcd45-2e48-4960-91e1-7f0470973248", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d00a48-ecd0-4562-9aca-cd79c9fc3063", "sighting_of_ref": "indicator--d1a05945-be57-4543-bc48-c3244f5f90ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84f417a-a6f1-4d83-bff2-7208af0386cc", "sighting_of_ref": "indicator--d1a05945-be57-4543-bc48-c3244f5f90ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458520ca-34a1-4d95-b4ad-95757562551f", "sighting_of_ref": "indicator--5ba269d6-ae02-4716-ac8b-0b60a5fde124", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8b0507-dfd4-4bf0-826b-37a78fd97a07", "sighting_of_ref": "indicator--61d6c26d-3966-4729-bb5c-8b830524b251", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff53419-4b5f-4f90-9739-8e3f8408ffc1", "sighting_of_ref": "indicator--15c37b82-0e14-45ad-9655-b9ceb429f47a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c6acb6-059f-4736-aecb-4f2234580877", "sighting_of_ref": "indicator--15c37b82-0e14-45ad-9655-b9ceb429f47a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb86ca3d-832f-423f-989a-cd89e60b2fcb", "sighting_of_ref": "indicator--437df29e-07d8-4d86-9e54-8047e84d44c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d039fa3-f5b0-4ffe-8bce-1ec4669bdbd3", "sighting_of_ref": "indicator--4e288a35-4909-4372-a4b3-61cf203698a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb596f8-cff8-406a-a47f-a32e171628eb", "sighting_of_ref": "indicator--9fd702ca-994a-4dba-9f46-0f9b85853f5f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10b5353-d4f6-464e-981d-b4f6f917d3f7", "sighting_of_ref": "indicator--839f0ced-bb83-46a9-9ff8-aac5e686cb1d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7de2d2-09ee-4da8-985c-9d3566be1977", "sighting_of_ref": "indicator--72ddcd78-ab19-46e7-958e-416af3a2c90e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ef2061-57b3-423e-9af8-fdba5124b304", "sighting_of_ref": "indicator--72ddcd78-ab19-46e7-958e-416af3a2c90e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7989a22-e599-488d-b282-cdf9849a17e1", "sighting_of_ref": "indicator--7ab9948e-aa55-4a00-a335-8fc8e3129b4a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b028dc2-52a3-47ee-9218-73a45f03b804", "sighting_of_ref": "indicator--326e250b-e8e8-4128-825e-48a086ecabf1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0871123-9611-4551-a1d7-98a20a37be7b", "sighting_of_ref": "indicator--f399f9c1-fb4e-4c82-94ce-afd150778560", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf105ff-e791-4e32-8fe2-87e59f33ffa9", "sighting_of_ref": "indicator--f399f9c1-fb4e-4c82-94ce-afd150778560", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69adc8d-2d5b-4f7c-a5e5-a89d33cb450c", "sighting_of_ref": "indicator--e5a0dcf4-c42a-4062-b53a-172f44d5cad2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca6fddc-d9d2-4481-9422-ed8dec724c8d", "sighting_of_ref": "indicator--e5a0dcf4-c42a-4062-b53a-172f44d5cad2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72de82f6-e606-463d-a318-1a0c061550eb", "sighting_of_ref": "indicator--585d0f3f-0d98-4a31-851c-415a1ad0c385", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6539e596-9895-48ff-9935-ecbcb593db70", "sighting_of_ref": "indicator--585d0f3f-0d98-4a31-851c-415a1ad0c385", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bcfeb7-55bd-4e60-be48-95340ff669d4", "sighting_of_ref": "indicator--0b5206dc-4407-4322-8744-986a24d6215e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c138c66-a488-4d38-8e6e-0d6e7efd0fde", "sighting_of_ref": "indicator--0b5206dc-4407-4322-8744-986a24d6215e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c711c8d2-0fc3-45f3-a7ba-739ca14864bb", "sighting_of_ref": "indicator--48d622fe-c83d-4a7f-b235-d2a9e3b89bcb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48f3d69-5d85-4f4e-97d2-6003cda8230c", "sighting_of_ref": "indicator--48d622fe-c83d-4a7f-b235-d2a9e3b89bcb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e60c83-f95a-4d9f-9947-770b03e750c4", "sighting_of_ref": "indicator--611df30a-8802-4afe-b79b-5db864fb11ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14431644-03a8-4fa0-93d2-de049b223cec", "sighting_of_ref": "indicator--7fa4e588-3f14-4138-a851-4ea38e4ebb5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3439b34e-5305-4eb0-9016-50233f6bfce7", "sighting_of_ref": "indicator--5b695943-4af1-4ffa-89a3-fbd8b88f9da2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2a7c58-3c49-42a8-b79a-df38af6f971e", "sighting_of_ref": "indicator--57e0f75c-85c7-47ce-9f58-436fd8de9740", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990c1dc0-5fe3-420e-be26-5393e0ad35e0", "sighting_of_ref": "indicator--1e29931b-86dd-4ca5-b3cd-2c01fffc9ab8", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3946ecf-bd92-49d2-8b39-0efadcf9f51c", "sighting_of_ref": "indicator--f963c70f-e28a-4828-8894-0cdc554459b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ddcf78-be43-43fd-9d75-0e3033fb2f06", "sighting_of_ref": "indicator--f963c70f-e28a-4828-8894-0cdc554459b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de857bb2-81c3-47cd-ac09-580d9dd69e87", "sighting_of_ref": "indicator--223c0d08-ba06-4bc2-9d9d-9ee45dbc2c02", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25779192-5c02-47f7-9f63-e4f0522c25a1", "sighting_of_ref": "indicator--fa8d981c-570d-4fca-9cce-bdee15bf07c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5345b8-f8ac-4a2f-87f3-d5965357d330", "sighting_of_ref": "indicator--810911f8-16a3-4550-b13d-c935402deafe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4adc92-f573-4a78-bec5-cbd84e88ff26", "sighting_of_ref": "indicator--05fb6c8e-5020-410b-a4fb-c59fc05608d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4236be-2d0a-4b3b-b6b5-c9ead6eb9fb9", "sighting_of_ref": "indicator--05fb6c8e-5020-410b-a4fb-c59fc05608d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc1c6bc-eed5-4932-a760-feeb42855504", "sighting_of_ref": "indicator--4a62464c-cecf-422e-9462-8b6789dfe589", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf52470-ae7b-432d-b793-b74c54ee7700", "sighting_of_ref": "indicator--a7bfd8c2-db9f-4007-88ef-08507ef7dd87", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8963ab8-232f-4006-9409-982c1132a522", "sighting_of_ref": "indicator--299fb717-8e13-4801-9892-017025cdad58", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2c13ee-0c46-450e-a5c6-67c16d187b1a", "sighting_of_ref": "indicator--b0ada4bb-c7cb-4abf-85b0-f0df745a954b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaf140e-a184-4ccf-a8c1-a7ebe8c05c14", "sighting_of_ref": "indicator--b0ada4bb-c7cb-4abf-85b0-f0df745a954b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da3cbc0-7525-4353-9046-26abadb54e41", "sighting_of_ref": "indicator--de0f9768-674d-4f55-a316-8d68ab035a70", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbab0bf-9be1-403b-ba0c-32e5ce26b668", "sighting_of_ref": "indicator--582543fb-7b05-4d8c-9115-f41a9684bff5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5c35ed-3d0b-4bad-8316-dec761db2663", "sighting_of_ref": "indicator--054beb2f-62ab-4ec2-9909-b9c132e523f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea0cae4-c55d-418f-a941-f955ec0e9769", "sighting_of_ref": "indicator--93fa445f-795c-4164-949b-bf41aac258c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015fbfce-ef41-4516-a5b8-4a256e17a6dd", "sighting_of_ref": "indicator--32bc4c10-5537-4b9c-b5df-105ddf76b355", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899a4787-36f9-40ed-a3bc-2c46109f6dac", "sighting_of_ref": "indicator--3daed2cb-19b7-426d-a012-ef50288ac0f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7dd50d-db81-4ac5-a818-2147d158055a", "sighting_of_ref": "indicator--3daed2cb-19b7-426d-a012-ef50288ac0f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c8c385-ccb9-4811-8056-da52f145fee2", "sighting_of_ref": "indicator--d103906e-534c-40b9-a536-3df6f032cb40", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f86bc2-eade-4651-ad29-c66cbf99dbe5", "sighting_of_ref": "indicator--ba4736a9-6e70-48e3-86fa-9ee9f923972f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f6f85f-1c48-49ea-82c5-c3a0bf54da79", "sighting_of_ref": "indicator--3ac756b6-a48b-49e2-a322-cfcdd29bd521", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779129d5-3215-46e2-9e7b-fc8acbb8820b", "sighting_of_ref": "indicator--8043ead1-20b3-4e09-b38d-ba9edceabb72", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf934b31-eabd-468d-ba36-74672643765a", "sighting_of_ref": "indicator--91e869c8-645a-4fa3-a419-af83ade8d6cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37590641-351d-413f-8cab-8bde70905d8e", "sighting_of_ref": "indicator--cc7078da-a060-4191-8ace-ba918715c068", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae2c5cd-ecc4-4877-b87c-19d416a773a0", "sighting_of_ref": "indicator--cc7078da-a060-4191-8ace-ba918715c068", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37706a18-73fd-463f-9573-3036a035e765", "sighting_of_ref": "indicator--89c7ad92-072a-42af-8702-0f418ea9f93b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217f1d9a-5848-457d-8dc0-33a0643df843", "sighting_of_ref": "indicator--89c7ad92-072a-42af-8702-0f418ea9f93b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51159a6c-5865-4174-94f5-0b2427977e12", "sighting_of_ref": "indicator--adac2c49-0bfa-40e8-ba50-aede135e6123", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af204c3e-6d41-4003-9c45-009699b6c6ac", "sighting_of_ref": "indicator--56de0881-4447-4b6a-8aa6-bee7751725a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1e3d55-cd92-4fa8-ba84-52b5669b86ec", "sighting_of_ref": "indicator--49084456-e566-4690-926b-3401a197a9f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef97b0a4-eff8-4a1b-af34-46a9c587033c", "sighting_of_ref": "indicator--8edc2af9-aee0-4330-ab3a-dfaa1c6a0ed5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b99a791-7f3d-434e-98f8-f90fb5df7564", "sighting_of_ref": "indicator--8edc2af9-aee0-4330-ab3a-dfaa1c6a0ed5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01f1cc6-d6cf-4b1b-89c7-9e18dc0b3dc6", "sighting_of_ref": "indicator--51da0471-0428-456c-985f-33ee5f931051", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6a1667-6a88-4d88-8c84-74ba13eb103e", "sighting_of_ref": "indicator--f1b9527c-b67b-461c-93fe-3ee571ee5429", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb68561-0bd8-4bde-b2b7-69a9cc5819b0", "sighting_of_ref": "indicator--fd76521e-18fc-4d28-9e01-2a038d607993", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3a4556-630c-493b-8d7e-ccdd2da6bd7d", "sighting_of_ref": "indicator--fd76521e-18fc-4d28-9e01-2a038d607993", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555def56-3567-4901-ae95-2af5168851b1", "sighting_of_ref": "indicator--daf24e15-665b-4633-a58f-2c7f2474f15f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9990841-f8bf-49f8-bd76-ba99b76a6ce3", "sighting_of_ref": "indicator--daf24e15-665b-4633-a58f-2c7f2474f15f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c01bbb-ebbe-40f2-ad6c-0051321393b3", "sighting_of_ref": "indicator--1c504e48-4572-4f51-8e6a-6cd240e6db3c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6359a014-21ea-4091-af4b-f9a1f99b75a7", "sighting_of_ref": "indicator--01486e80-ade5-4f91-bde5-0b74a2ddb9d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcaad09-4127-4e86-9b93-195c44184ce6", "sighting_of_ref": "indicator--e81c55b2-1fc3-4e38-81f6-de9169ef3c4e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cc1862-6a09-4155-a16a-baef3797868c", "sighting_of_ref": "indicator--8c7e50f2-8ea8-4e67-8422-1bc244ebb974", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c5ec46-dd06-41b7-9cc6-58de4199bb73", "sighting_of_ref": "indicator--e01152c7-6e22-41fc-a80e-c270f897dc8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00c66f0-1a90-423c-ad28-b8298388d827", "sighting_of_ref": "indicator--c2e54049-be46-4cc7-b242-0cdc5b0ce153", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a49c44-33c9-4c24-a879-e91ba7c8e8d3", "sighting_of_ref": "indicator--dbc8ca19-b6b0-4654-bec8-5ae2267971a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a5499e-68ab-4be6-b259-3a70581a2fd5", "sighting_of_ref": "indicator--dbc8ca19-b6b0-4654-bec8-5ae2267971a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d353cf6a-fd0c-4353-abef-a7d2bc7bb863", "sighting_of_ref": "indicator--4346a0e8-a3b6-4a4c-88bc-74be2eba58cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9c9185-1cf0-4634-8e28-77b0b90f9ecc", "sighting_of_ref": "indicator--fd22e508-ec61-4e4e-845e-4827d41f9638", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80366b22-7a14-4089-98f1-782d81b76079", "sighting_of_ref": "indicator--da5db5ae-cc0c-43e6-a86b-2682e38098b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b314ff75-3ebb-45c5-9704-5c54a8effad3", "sighting_of_ref": "indicator--da5db5ae-cc0c-43e6-a86b-2682e38098b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310a46af-1834-4848-949f-54401eb9d807", "sighting_of_ref": "indicator--a05e0a5b-470f-467f-9eae-3fa302505e0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf38faf7-05e5-4db6-9eaa-65da1a2a5f47", "sighting_of_ref": "indicator--00af0f6d-3383-466f-8be8-0f06dbc3b862", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7084367-7580-42c8-921e-6fd6de5f3b34", "sighting_of_ref": "indicator--00af0f6d-3383-466f-8be8-0f06dbc3b862", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaff47d2-6f60-4f60-9996-2c6b02e6cbb5", "sighting_of_ref": "indicator--f69d369f-6616-4d15-8071-d3ff7591920a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcc205d-9468-4ead-849c-3e578a4c73a7", "sighting_of_ref": "indicator--2e83f3f4-86cd-4b5e-bab4-44db98fc9339", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e624a908-7bf3-422a-be87-93814945d04a", "sighting_of_ref": "indicator--2e83f3f4-86cd-4b5e-bab4-44db98fc9339", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e90225-9dd6-4307-9a91-e72d8cbaf155", "sighting_of_ref": "indicator--315232e1-9684-4fca-9210-6647ba320c4a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc68037-1fc0-4723-bca7-dafce3cdbdc1", "sighting_of_ref": "indicator--315232e1-9684-4fca-9210-6647ba320c4a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0c5f60-e220-43cc-b9b2-0f1b592436e2", "sighting_of_ref": "indicator--89e1949a-9b95-41d7-9ea0-037fa2bee19a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1298a321-b30a-4acf-b1c4-54869abbbecf", "sighting_of_ref": "indicator--89e1949a-9b95-41d7-9ea0-037fa2bee19a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bb8b87-a863-46c2-8637-319c58da0d5a", "sighting_of_ref": "indicator--9e0f1f3c-8f9e-47d5-b6e3-7ff08579ce81", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bbf1d1-c48e-4232-a2e9-31b9c05ae681", "sighting_of_ref": "indicator--95ca7303-e800-4c74-b3fc-dad2cd920a21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d5af15-1003-4f11-a6db-ea29211dff52", "sighting_of_ref": "indicator--a5e3ed48-1edd-460c-a6d9-250fcbfb2535", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8c8a26-a00c-4c8a-b119-01c5fabb5b55", "sighting_of_ref": "indicator--3ea8436c-d4d8-46c3-a0f4-c7f7905e530f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b49ba6f-6112-4ce3-a432-eb47ab425b88", "sighting_of_ref": "indicator--3ea8436c-d4d8-46c3-a0f4-c7f7905e530f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b51dfd-335f-4323-9290-96a7bfc25d7c", "sighting_of_ref": "indicator--556de51b-4591-4204-9cb2-484a08883b56", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fafc9a-8064-437e-8471-e1caaeecfa11", "sighting_of_ref": "indicator--05b29f5f-e2ed-4564-9fcd-ee5036239ab0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dc2b87-74b2-4fdf-a77e-10a14796c6a9", "sighting_of_ref": "indicator--b0a1041c-7b31-45f3-a13d-bc2090d0d445", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24bdc2a-0708-46b7-900c-08a50a23a038", "sighting_of_ref": "indicator--2c5c46b0-1c15-499b-ba29-52352bc5e746", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1826578b-d43e-4f73-a561-7e585fdcef06", "sighting_of_ref": "indicator--c10c797d-63e8-4d9f-97f3-edba83be3b0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9efc888-fe81-4d7a-baa1-2e4c6e7f6065", "sighting_of_ref": "indicator--5ac35fa2-5896-4ff6-a987-564c124e8148", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3feaade-a873-4a66-880e-ea895cdfdbd1", "sighting_of_ref": "indicator--eda607c7-09f1-4f45-b43e-0e89c8fdb06f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4266f0-8dc4-4757-8b19-b8cd2913775b", "sighting_of_ref": "indicator--1997f8aa-ade1-4869-99c7-fbc6e240482e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35630b65-d027-40ba-a1e1-0552fdb6392e", "sighting_of_ref": "indicator--1997f8aa-ade1-4869-99c7-fbc6e240482e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b97583-4e2a-4be5-8749-d6937e918009", "sighting_of_ref": "indicator--2a08d12a-ad23-4fad-963b-979b30116926", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0954135-3ce0-4253-8fc2-0745729d1e1a", "sighting_of_ref": "indicator--70a23ea2-013b-476b-92ea-87f9cff7f099", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191b000e-a5a1-4ac5-9a0c-46138f5d1783", "sighting_of_ref": "indicator--70a23ea2-013b-476b-92ea-87f9cff7f099", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f4d416-1b1b-4961-9d83-f498e7d9d5a1", "sighting_of_ref": "indicator--a604edf5-5c4d-4e33-90e6-0c3729e29303", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47129acf-ef87-4310-865a-c10e058af0d5", "sighting_of_ref": "indicator--af626f29-8f1c-453d-b4c9-37d6d1284211", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c892671e-5144-4716-a638-42f960b6bcbb", "sighting_of_ref": "indicator--36983c7f-78c0-462c-88ca-9c9a54cc91f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d0fd9f-a668-4a23-b0f0-90329e87f518", "sighting_of_ref": "indicator--1c6c5cb0-9f69-4410-841b-961673c547ca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a4106e-9911-415d-8356-3799048506ba", "sighting_of_ref": "indicator--0c48c5ed-8cb7-4530-92be-846a4e9843c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e919f148-64ee-4a29-a05e-4e384410dd2c", "sighting_of_ref": "indicator--6dc61c34-a568-452f-93c3-dcb059f96a48", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143bd06e-6f34-4855-be01-b7aaee5c260a", "sighting_of_ref": "indicator--3acac42c-da95-4907-830d-0bd4f6dc2dfd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d3086f-503b-4c9c-86ab-0bd4bf4b8ba9", "sighting_of_ref": "indicator--3acac42c-da95-4907-830d-0bd4f6dc2dfd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a8e4a8-db20-47dc-884f-d066fa2085dd", "sighting_of_ref": "indicator--1a1b5fe2-9997-4ab5-88d8-2aaa353571c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0dbf38-e69c-4ce9-adcc-3aa679979c39", "sighting_of_ref": "indicator--0a1eb327-a417-4ba9-ba4d-d353c48040c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413b4cc8-1e7b-4a4c-b268-4a7b7ddbe2da", "sighting_of_ref": "indicator--eff76dd7-517d-4c47-a4ef-7dd4dc5635bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f23198d-e7ec-495f-9cc0-6c1c618f3f91", "sighting_of_ref": "indicator--29743638-cb3f-4b64-8da9-15f33b512ca9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8d204c-58b6-4eae-8710-230b2cec8a27", "sighting_of_ref": "indicator--bce22a01-a6f5-4b32-b196-0fd68a831337", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0786dffc-4912-4159-9941-2ef2c46b3a71", "sighting_of_ref": "indicator--7bd2702b-5bba-498c-8f40-23a25a8fdda7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21958d53-349a-4702-a90d-d1db1f0d8611", "sighting_of_ref": "indicator--7bd2702b-5bba-498c-8f40-23a25a8fdda7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6742fb-79d0-48ae-8128-58de6ed4dd81", "sighting_of_ref": "indicator--a4435cf6-b966-41e9-9111-d7008c917c46", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b272634c-49a0-4614-a89b-b57552f8f91e", "sighting_of_ref": "indicator--3237bfa3-c6cf-46da-b3cd-2e38b59b7526", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f7d067-d3d6-4178-9da8-0216a913656c", "sighting_of_ref": "indicator--7afc7ea2-d85b-4647-a6f0-ef393bb0ff33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfba7e0-ad94-4c71-b5f8-ca65b0199329", "sighting_of_ref": "indicator--7afc7ea2-d85b-4647-a6f0-ef393bb0ff33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8522c95c-8284-41fc-b874-d4d451f1180d", "sighting_of_ref": "indicator--9128e66c-e9b3-40f8-975c-b5fe9d6cc346", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6afa9e-af9d-4034-bed9-c2ac9305a7f9", "sighting_of_ref": "indicator--8047523d-5635-4b1b-b4ab-00931393e5a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1abb3f-a105-4b7b-b83d-1ea5fcb19774", "sighting_of_ref": "indicator--4ffb979f-187b-453c-807a-04df7068fd79", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea41da1-8c18-49da-b62f-cc1d9b7fd54f", "sighting_of_ref": "indicator--43447bc7-a3b0-4953-a588-f12e6e8a361e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaee878-675a-42e5-bb00-2e48727948af", "sighting_of_ref": "indicator--18b47475-b3fe-468d-9f9e-e183c2523493", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7025883-f790-4ef0-8534-3605a64cf147", "sighting_of_ref": "indicator--f76d433e-b729-420c-a98c-84c5d046ff56", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e46a436-d049-4e93-9f02-8b1b884a591d", "sighting_of_ref": "indicator--9dbe76f8-ce3e-4574-940d-1f03f8100f88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d5e6a3-f44f-48f8-8994-d1775d24a044", "sighting_of_ref": "indicator--7eae22f0-7f9f-4f63-a42b-961cb30040a4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a277c01-c026-4810-923f-dfb62cc315fc", "sighting_of_ref": "indicator--539c0515-b878-4e18-9bbb-2e4d0bd8956b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708e3afd-03cf-4bfc-8509-0ef8f883a2ea", "sighting_of_ref": "indicator--b0b90c8e-1aab-4892-8be1-6a4606c7c555", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1546e2f5-fdb1-4c62-aa67-7af58197eb10", "sighting_of_ref": "indicator--51a946da-cd14-45fe-bcda-e5f6eac2b755", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965eb89a-3bc6-4e63-8c34-833b0dccc595", "sighting_of_ref": "indicator--63628131-b9cd-407a-bd57-cc53f8a746d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8575b8-00ac-44a5-8376-a6d6791fcb8f", "sighting_of_ref": "indicator--759d1d6f-7d21-4db6-8b2d-f3a73068f859", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30b0e1c-03e4-447b-95fe-04d391013105", "sighting_of_ref": "indicator--60b0b43a-86dc-4c86-9c3a-0ac679f6d688", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19d0fa8-9372-4b71-a6c6-d117035053c1", "sighting_of_ref": "indicator--994d1661-3203-40c6-bb5b-cd14f34a6e31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738ae67c-8c9a-4931-8c43-a08b8c23a3e9", "sighting_of_ref": "indicator--626553ff-cdca-422b-b746-08fc8a6f2811", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58331716-4d82-4f1a-b065-7aaca7488c70", "sighting_of_ref": "indicator--8b267b08-89de-4038-83c6-e0175e77d99f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536a1e40-c45e-4397-af17-545c0edddee5", "sighting_of_ref": "indicator--5506b141-b1e2-4a80-94d1-ae744394530b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a7c814-70bc-47c3-90f0-be9f8913f2e4", "sighting_of_ref": "indicator--a0f523e4-7318-4765-a80f-9e602f042aed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33393f2a-2179-46cd-8dba-368786513873", "sighting_of_ref": "indicator--03bf1cc7-11e6-4bad-94fb-fb9243325fd2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81836104-c1b9-4e77-90f5-9f45a979a659", "sighting_of_ref": "indicator--9dd2509a-a615-41f4-9cd6-301bbb013d82", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8efb274-4415-4f26-b4c6-3484533072d4", "sighting_of_ref": "indicator--5da54953-109f-4e46-8446-a494c68b7478", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190fd06e-a626-4b6a-96f0-72a6cafa0cc8", "sighting_of_ref": "indicator--5afd057b-df8c-452c-b43d-5b87b50b82b6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3e2b0a-ee31-488b-8e1c-0aad7f2a765e", "sighting_of_ref": "indicator--7de1f50e-3b2b-4439-b885-176db16f4d76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27c4193-92c9-48e8-af14-cd3709d62f62", "sighting_of_ref": "indicator--2abcfc69-d7fe-45e3-bd3c-69868cac29cd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbb1fb8-5c93-461a-a6c4-0401098659f2", "sighting_of_ref": "indicator--bc3c89d4-32fb-4be3-abec-f3e7bdf70103", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba54db4-325c-45b7-92bb-ef8dadbdbc6a", "sighting_of_ref": "indicator--49b6fe74-c1db-46e3-90b0-4b3cf1107489", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb058600-4431-4123-afbe-f905aa520e9f", "sighting_of_ref": "indicator--e0b8cd23-8765-480b-89bc-79636c09a6b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cb1d7a-6dea-4788-bba1-e132d056076b", "sighting_of_ref": "indicator--824f5d02-fc2b-49b1-a0b2-b0048e928721", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5071ea18-dca2-42fd-81c5-5e408fa354cc", "sighting_of_ref": "indicator--a86555d4-157d-4699-a36c-62db234413d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa47c3a-e8e5-4f16-b62a-26d6f3ccef9d", "sighting_of_ref": "indicator--84143c69-e60e-423d-bfa9-569fc71ecf55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcaca41-6ec0-4a33-b525-eec5d5506e32", "sighting_of_ref": "indicator--a0e50a8a-f250-4ebe-a8fa-08ed3d5fe29a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77742a54-5e37-4d39-9ff3-4d7523b73272", "sighting_of_ref": "indicator--a12baf56-24c6-4b17-9aea-c5cb82db4fc3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f309ed-296c-45fa-92fd-f4a2cf5a359b", "sighting_of_ref": "indicator--8608bc3d-790e-4687-8f76-26ffd9cb5cbc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af04d5b2-7213-48a9-bdee-fbd0c2caee9a", "sighting_of_ref": "indicator--18e76780-0584-45c8-8ebc-97542bb33892", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595c1b28-f28b-4a2b-b1b1-636bb216c758", "sighting_of_ref": "indicator--df9031cc-360a-45cc-8269-dac92b3972b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cca55b5-ab6b-40a2-bd5e-2f6ef7d58b75", "sighting_of_ref": "indicator--23015e77-f801-4e70-9f17-d7bed7e3503a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528b5356-1e32-4b33-a518-13b4d7561662", "sighting_of_ref": "indicator--b6f7c240-e5dd-43dc-8172-b8089e552ff8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d35649f-4699-4fac-b189-d11aabeb42b9", "sighting_of_ref": "indicator--a51e85b1-bb13-43ec-8100-15f7952ab572", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a44cf4b-16a5-4368-8c5a-301b30b406ac", "sighting_of_ref": "indicator--52625053-071f-4a99-bf37-7b80635e921c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af53533c-c267-45ff-8d85-1eb043b2047c", "sighting_of_ref": "indicator--0c9932e7-0c82-4e28-afb9-0b6021b93247", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4aa3503-6538-47c4-b521-41bf63de5a65", "sighting_of_ref": "indicator--554f7257-7463-441c-b8f1-6448e2c69db0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a1bc5d-3d27-4035-9cff-31e702e12fab", "sighting_of_ref": "indicator--71b3f933-d257-47e7-bae5-de235dde4f13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a64913-4b20-4d03-9024-5a4e4ba1dfb8", "sighting_of_ref": "indicator--0ebcf528-db8e-4304-80c2-6d7a33216828", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb4502a-fe17-4edb-b1fb-8dfbe2ce1db9", "sighting_of_ref": "indicator--b14ae71c-7257-4931-b009-55fc78c721f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98157d07-c0ff-498b-afa0-ae1ecc4dd10e", "sighting_of_ref": "indicator--ec81e10f-b6af-4834-9f8b-0f013527481d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb65cc8-a941-4ff1-ba51-593ca101598a", "sighting_of_ref": "indicator--ec81e10f-b6af-4834-9f8b-0f013527481d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c125d46-c865-4538-8a8f-6b5e925ea232", "sighting_of_ref": "indicator--63df8cf8-c9c7-47a3-a61f-6eb28ea91701", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486e9902-7635-43e3-8414-0cef66b84e02", "sighting_of_ref": "indicator--77379b03-c42d-4836-98a6-9819a29f47c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c93940-7c8e-47e7-b749-8610853ed5a5", "sighting_of_ref": "indicator--77379b03-c42d-4836-98a6-9819a29f47c6", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6645f99d-0f81-4e34-bfaf-34547bdb817f", "sighting_of_ref": "indicator--77379b03-c42d-4836-98a6-9819a29f47c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04c4996-3f60-4271-9bc8-38cff8152188", "sighting_of_ref": "indicator--bfb0007c-1011-41c0-8af6-e45a1c5eb98e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a12c5d0-7d38-4a1b-a8e6-223d69e4729d", "sighting_of_ref": "indicator--07b16c4a-b749-4178-99c5-f63b999ba183", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16121e62-6286-4e34-bc33-871e652c0064", "sighting_of_ref": "indicator--299b9804-2437-469a-b816-55f527a7eaab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110850dd-4dfb-4450-aeae-d5d9264a2bbb", "sighting_of_ref": "indicator--299b9804-2437-469a-b816-55f527a7eaab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c965025-76be-472f-a4bc-d6ea84431186", "sighting_of_ref": "indicator--0816afb7-d52a-46ec-b85f-99574469f7d7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba14f3cc-162e-4a93-a2ab-9a5b9d929ee0", "sighting_of_ref": "indicator--0816afb7-d52a-46ec-b85f-99574469f7d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f899c6c4-0cb4-473e-a34b-b50d5f06f66a", "sighting_of_ref": "indicator--aa720d77-42e3-4143-a9b6-fda3fede2b3a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1557fc1-c8c3-43ad-98d4-6765df7b8714", "sighting_of_ref": "indicator--673726c6-4144-4711-ad7b-fbd6946ed03e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7a3e4e-c551-4bc2-b89c-5c81f59876c7", "sighting_of_ref": "indicator--673726c6-4144-4711-ad7b-fbd6946ed03e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bcb4e0-8319-4778-bf46-50e6623ea62d", "sighting_of_ref": "indicator--53d5478a-6f12-4db4-96b4-46e693eb4ea7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fba2235-0467-45a9-b95b-e8ac7afe569b", "sighting_of_ref": "indicator--d35f2e34-c22a-4476-a08f-adf654588538", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5768bf-36cf-461c-a0cc-f64beab5bca2", "sighting_of_ref": "indicator--54c0b7ab-eee3-40eb-9938-75751fcc65d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d08b2d-592a-4687-abb6-ee64c0be0b7d", "sighting_of_ref": "indicator--74afddd3-f1be-415c-a198-203dac7d6fe1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52039d14-5f8e-4929-a89f-762e8e7fc1dd", "sighting_of_ref": "indicator--74afddd3-f1be-415c-a198-203dac7d6fe1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c686c2dc-6e14-424f-952c-71e9b95933b9", "sighting_of_ref": "indicator--51ec3539-ce3e-4be7-aadf-ecd9379d63d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38443997-912c-407c-bb76-2d6b8c8a379b", "sighting_of_ref": "indicator--51ec3539-ce3e-4be7-aadf-ecd9379d63d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ab39f3-b81e-4d3c-90dc-fbea5e72b6dd", "sighting_of_ref": "indicator--5a6a0b52-4e1b-47ce-91bb-166966001fc1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcf2355-62cb-4de8-b416-3f7e7d93edf7", "sighting_of_ref": "indicator--5a6a0b52-4e1b-47ce-91bb-166966001fc1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b418441-a841-43f1-b7c5-84b0dd73aa61", "sighting_of_ref": "indicator--54b36eda-6ce6-440c-95c8-3b6c8ee561d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2f7201-2ac3-4086-9ac4-fc266146b91c", "sighting_of_ref": "indicator--1ed71cfc-9516-4129-82a7-75b99692f3cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afc5b9b-78e5-47a9-9e9f-54eb4c96898b", "sighting_of_ref": "indicator--74999cef-0ef9-4ad1-9ff3-044007f5c7fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e08876-b4dc-4ed4-81d6-d36ccd199dc1", "sighting_of_ref": "indicator--3801f400-f596-455b-a585-b5789b6b70ce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46fa647-ae0c-406a-9fc2-04a5e49a71f8", "sighting_of_ref": "indicator--3b4667d2-c7f0-4e8a-86fd-ef636ac8d1db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e35a64-3c68-48f7-a8bb-6b6a8bc1512c", "sighting_of_ref": "indicator--a23af410-c096-4203-a073-5c07a568e034", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55e0eb1-aa17-41e3-aa74-11f56b97b133", "sighting_of_ref": "indicator--c595d3d9-68b7-4698-b8a4-9d83f2a7693c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a973b4-1757-497c-91b3-e1cd134bd8e0", "sighting_of_ref": "indicator--184bd054-716b-489f-a5df-4194464d20ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441198a2-a80f-4c8e-80c2-52079072413c", "sighting_of_ref": "indicator--e6f898c0-6786-493a-9cbb-4b299cf31908", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bf690b-c22a-46ae-9289-bed8994711fa", "sighting_of_ref": "indicator--f426b146-91ba-4521-ab93-fb7314a26341", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d73b200-fd4a-4bfb-b446-ad896aeeb238", "sighting_of_ref": "indicator--1cef52dd-3620-4270-a2d0-0dffce87300f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fc818b-1625-4c91-bf78-f6d3d099f75c", "sighting_of_ref": "indicator--edb3ca99-1a21-4189-a29a-4e821d0f65d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c2ffb8-a562-4d60-bfa2-59137c56234d", "sighting_of_ref": "indicator--87b358ba-400b-4e12-ac07-2fcc6bd8b143", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e411ef0c-b0bd-49cd-8d77-3752b2f7280b", "sighting_of_ref": "indicator--87b358ba-400b-4e12-ac07-2fcc6bd8b143", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827f865f-b081-433e-92cd-0b6a7b76071f", "sighting_of_ref": "indicator--c2c11f0b-5b2d-47f0-9700-30016163122e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef89d65-0578-432b-8913-11bb157b229e", "sighting_of_ref": "indicator--a964131d-c209-4641-99bc-2e920c7ab629", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8680dc62-3165-4562-9942-62ff15ee4d5e", "sighting_of_ref": "indicator--fbd8eb51-a4a6-45da-b4cd-73baf3aa1dc1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e89436c-8ff4-4690-ab5b-5371a3602aaa", "sighting_of_ref": "indicator--f6671be8-18e2-415d-b10e-9ed0336fe9d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393ba14b-163b-4db9-8608-809def96d297", "sighting_of_ref": "indicator--a549cee5-6d97-425d-928f-8ac72367abf0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561c0738-d7ed-41ef-8e10-dfddddbb5221", "sighting_of_ref": "indicator--6759ffb7-6cd3-4351-830d-8ad9defb921a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de70ba1-e121-450c-b875-f3b344a0b163", "sighting_of_ref": "indicator--6b5e125a-a52f-49bf-9d69-04a07a95500b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2906d07e-57a7-4af5-8c6c-0be7331b46da", "sighting_of_ref": "indicator--301002a9-af15-4f69-9bbf-1609f942b32a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2cb849-4161-4255-b7ba-bbbac51c11c8", "sighting_of_ref": "indicator--14599510-a306-46ae-a054-d2a070bb65c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbf1517-7bb5-4b40-af88-ce991f96ebc2", "sighting_of_ref": "indicator--2d31a02a-fbef-4116-9a85-4fb392161c8d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd0650f-57fb-4523-99bd-35b1b32593c1", "sighting_of_ref": "indicator--50174de2-00b8-42a4-b8c5-296759a504d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22616efe-ccd5-4c09-8721-340b984d4370", "sighting_of_ref": "indicator--94c5cd6a-0701-42f2-bc76-25cf0200146e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8075e63a-7103-4376-84de-efad7865a053", "sighting_of_ref": "indicator--eba2e029-1c2e-4915-a10d-df6f61b985f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252785a1-956c-427e-bac8-d68ad37d395a", "sighting_of_ref": "indicator--0cd67e97-56e5-4c2d-b834-8b98c05f4027", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4616f4e5-62d0-4523-a0b0-5a4e603d0f5c", "sighting_of_ref": "indicator--ff6704b5-0c27-489d-a5fb-427945b4bfca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb517eb-6697-4576-8f6d-4dba344f2f42", "sighting_of_ref": "indicator--ff6704b5-0c27-489d-a5fb-427945b4bfca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826d96cb-87e2-45af-b92a-76cefbade118", "sighting_of_ref": "indicator--20e3067c-1d9a-44a3-b645-53395941f920", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede0d816-9b29-4267-ab7b-6f398dd94f06", "sighting_of_ref": "indicator--20e3067c-1d9a-44a3-b645-53395941f920", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4a6212-6284-46cf-93eb-db58e28b4991", "sighting_of_ref": "indicator--b452a9ef-a40c-4aba-9515-717e84687ad7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13a65a8-7d91-4963-b634-21c0fa497114", "sighting_of_ref": "indicator--388623f8-b557-4a83-ae08-7f0d7fe1af33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32b1dd3-2946-425f-a5d4-a15cb8671e09", "sighting_of_ref": "indicator--1f4783e7-2d23-48a3-ba3e-8d93692f23ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c43e1e-1ce8-4c4d-b7dc-b9f5fd4f3320", "sighting_of_ref": "indicator--db6294cc-1c78-4260-95a5-d1f8f37131f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb12ba4-3ad3-4ce7-bc27-6826bfefb6ae", "sighting_of_ref": "indicator--3a9ddee4-eb59-4e46-a518-adbcc2ade89d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e3cf57-df85-4445-8fc1-bdfffe8538b1", "sighting_of_ref": "indicator--3a9ddee4-eb59-4e46-a518-adbcc2ade89d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3facddd3-92ae-40b8-a652-4ec09997decb", "sighting_of_ref": "indicator--98a60220-5465-4653-826c-1dff3d8821cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad89182f-4038-4443-8802-5bcf88acf9ab", "sighting_of_ref": "indicator--7810e737-6671-4018-87aa-30f61b940142", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba98a050-fbe0-4f4d-88a5-039d01686367", "sighting_of_ref": "indicator--87bdff63-a946-4f14-9969-2f408d4bd8fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baff7e9-166d-4af3-bbde-389944851559", "sighting_of_ref": "indicator--a049b652-271a-47c5-b3f7-3f4803d144e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1264cba-1d1b-44b2-ad3c-ecb6c599e1ca", "sighting_of_ref": "indicator--941a7a6a-7539-413c-9a6a-0e8d0604d503", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b3e3b0-7b93-4c44-bd81-86bd3c58c280", "sighting_of_ref": "indicator--941a7a6a-7539-413c-9a6a-0e8d0604d503", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76f1fab-9b59-4716-a52a-fb3d83f603d5", "sighting_of_ref": "indicator--51dc5d76-522c-4101-8874-f505a6c5a1ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5c283e-fdf9-4ce2-b3cc-62486b8c6663", "sighting_of_ref": "indicator--2cbeade9-69d8-454a-8b94-f6edc51b9738", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85cdf07-f510-43fc-b538-32fa474e64a7", "sighting_of_ref": "indicator--2cbeade9-69d8-454a-8b94-f6edc51b9738", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cfbad1-5ed7-4cea-86ea-abc84f1b542e", "sighting_of_ref": "indicator--3ebad500-6889-4e54-8f36-6a8f6492b512", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847b3082-4c70-4d12-99e5-20d484417455", "sighting_of_ref": "indicator--3ebad500-6889-4e54-8f36-6a8f6492b512", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415f178d-9074-4f9e-9ccb-f71f0e70d504", "sighting_of_ref": "indicator--a6a7b264-9a0d-425b-a39a-fdbc0a9171be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e500b2-9b1d-4b3a-b112-40db077a09c2", "sighting_of_ref": "indicator--a6a7b264-9a0d-425b-a39a-fdbc0a9171be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98794235-9842-49f2-b7dd-43a9c768d64b", "sighting_of_ref": "indicator--6036740a-0bc4-47cf-886e-c00836aa81a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57643a07-e88f-4d75-810c-0ee92de1edbf", "sighting_of_ref": "indicator--6036740a-0bc4-47cf-886e-c00836aa81a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4805c331-b566-436e-a5b9-f00b84e9fe3a", "sighting_of_ref": "indicator--1895e0c0-7a15-42ff-ab7a-47217d58702f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681762be-55f1-44ce-b3f8-c27544d70650", "sighting_of_ref": "indicator--098e7e74-e69b-4eb3-b18b-2d25fe7bae52", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5a5192-0f06-46c4-a514-9e78ef448c03", "sighting_of_ref": "indicator--eb730e69-62f5-492f-b971-1693f890f54b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc3c92d-0f55-483e-9752-784ba7811409", "sighting_of_ref": "indicator--eb730e69-62f5-492f-b971-1693f890f54b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7da6c33-24f7-4b4f-82b3-114d7945c305", "sighting_of_ref": "indicator--32afb38f-2aa7-432b-8f20-2b57c9c4c357", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b846d3-5d06-4683-9ed7-9cd19b44443a", "sighting_of_ref": "indicator--32afb38f-2aa7-432b-8f20-2b57c9c4c357", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328fc55a-9778-4044-9e12-a2476c6570e5", "sighting_of_ref": "indicator--a776dce3-a5d1-40c3-b5e8-3f45afe87fb2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b1e751-d283-4a3d-a106-0c885237312d", "sighting_of_ref": "indicator--30e10207-29d7-47b3-801a-3415400b4fef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4f33eb-8337-415e-9f48-221dda655e7a", "sighting_of_ref": "indicator--b53c6b17-dc2a-46d3-92bb-6580aca780c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23965473-f2b1-40dd-ae66-8b4453324174", "sighting_of_ref": "indicator--40419d82-979c-4261-8523-c554d2100b4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963d2027-92a2-4abb-83ea-d47c160bc6dd", "sighting_of_ref": "indicator--0c4f9c6e-6f75-40e4-8701-e729a875466b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed5e93a-816e-4e71-a9af-bcae5afb8a95", "sighting_of_ref": "indicator--0c4f9c6e-6f75-40e4-8701-e729a875466b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a4c3c2-eba2-43de-afc7-df2b6ae27758", "sighting_of_ref": "indicator--6cafc4d7-48be-41de-927e-159bbaa9b44c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12932322-157b-4809-8868-2b5bc9a87e20", "sighting_of_ref": "indicator--ef73cc31-cdda-42a6-9ea4-df96539b66a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f7e545-c667-4bef-bf2a-dd924bc77aec", "sighting_of_ref": "indicator--ef960997-e7da-49cf-9602-856205d39101", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1051fd8d-b270-4540-a5e9-3e6d882e6210", "sighting_of_ref": "indicator--ef960997-e7da-49cf-9602-856205d39101", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c95c28c-74ce-4797-b632-e4c511fe480c", "sighting_of_ref": "indicator--ce860d72-fd97-4e45-a883-959019583703", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f8a2b8-e01a-4594-9052-b8c896c87248", "sighting_of_ref": "indicator--ce860d72-fd97-4e45-a883-959019583703", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3e5797-dc68-4f8a-9f6c-8a105019204c", "sighting_of_ref": "indicator--02492f91-7f55-40e6-8cd9-b505b6a5933d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e417156-6938-403f-a050-02bf9a5a6f11", "sighting_of_ref": "indicator--09b7d53d-6067-4bcc-92a8-d3b05cf3b778", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5770bd8c-4b73-4b41-a345-be04bcc1002f", "sighting_of_ref": "indicator--09b7d53d-6067-4bcc-92a8-d3b05cf3b778", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222e05ca-4b5c-424c-a3a1-3e1918ff2c1b", "sighting_of_ref": "indicator--4be9355c-e065-4e96-b0d5-a91d4a343ed0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68ac367-7034-449e-9ba2-e72ebc8a7268", "sighting_of_ref": "indicator--b0ed8785-0961-4bb7-8400-023f73846ba4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d3204a-c650-4a66-a7e0-97b2c4bb5507", "sighting_of_ref": "indicator--9a638b98-b33f-40e2-bc3e-61aa82493425", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f83d41-85d0-43df-87cb-62631a0592a9", "sighting_of_ref": "indicator--9a638b98-b33f-40e2-bc3e-61aa82493425", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58ff3a6-efc2-4d13-a9c6-fdf57b2878c3", "sighting_of_ref": "indicator--57931477-521b-4d48-bc99-93c1110cf616", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd26406-54bc-4726-a19a-5eb69fd275b6", "sighting_of_ref": "indicator--127deaeb-9748-42a2-85a0-dc4484b43581", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fcbfa1-da9f-41a8-a1f3-332841646166", "sighting_of_ref": "indicator--8c435f4b-ef9e-4ce8-a026-0d928df81556", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dcb94b-0a80-43fa-a756-12d3917f06f5", "sighting_of_ref": "indicator--8c435f4b-ef9e-4ce8-a026-0d928df81556", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec9279d-2da3-40eb-83c3-56554b17acd5", "sighting_of_ref": "indicator--9a61c578-9eb1-47c2-a9d1-ac0857b4b32b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61f8904-3a23-4bfd-b536-334ecea1889a", "sighting_of_ref": "indicator--da22bcb6-0c2e-4945-9838-5632ccb5b8a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6dbacf-e160-4e97-851b-7ca42b9ef4bc", "sighting_of_ref": "indicator--41076044-90a6-437d-8994-a00ce9a51923", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b361cc-b809-4fbd-9e85-e102efbb3ff3", "sighting_of_ref": "indicator--41076044-90a6-437d-8994-a00ce9a51923", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce221801-984f-4937-86d3-95ae6a8b9c5c", "sighting_of_ref": "indicator--fc3443a5-e7f5-48e4-a538-db040e1b8820", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd733a31-dc3b-4d95-bd3c-ab36de698b97", "sighting_of_ref": "indicator--fc3443a5-e7f5-48e4-a538-db040e1b8820", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca607e2-35a0-4fa5-8546-cd8d8d57fc0e", "sighting_of_ref": "indicator--7fa0da9d-66e3-412b-8ceb-86bfbae4556a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05f1cd9-ffb6-422c-be66-0e4d44482a36", "sighting_of_ref": "indicator--7fa0da9d-66e3-412b-8ceb-86bfbae4556a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7c0013-1e08-4db7-8128-ccac5e2c6794", "sighting_of_ref": "indicator--53b0bba7-0342-48de-8084-fd8240cb3aa2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8873e5d5-f878-44d1-ae0a-2eec0ba3039e", "sighting_of_ref": "indicator--53b0bba7-0342-48de-8084-fd8240cb3aa2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685df438-a1a5-46df-a155-32081b23e9b1", "sighting_of_ref": "indicator--f0c14158-5443-486d-a531-44459fcb7886", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137f6ca9-1902-404f-b27c-7d17b9a5499e", "sighting_of_ref": "indicator--87ed22ef-8fbd-431c-becf-ebfb2a74a6e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf90a61-9836-4a6e-baa4-9bd9ff365e3b", "sighting_of_ref": "indicator--9ac32dd5-249f-4cc2-ab1d-b87aa5b04d8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb50777-0ede-43c0-87ba-8361bee33dca", "sighting_of_ref": "indicator--9e4d0132-58a5-4012-a976-57a17456f0af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebf402a-0597-44dd-9926-6ba2800248ce", "sighting_of_ref": "indicator--ba591964-bcd8-4adb-90db-830394bf6011", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac1e9cf-f6cb-442c-a766-8b671feb67ce", "sighting_of_ref": "indicator--ba591964-bcd8-4adb-90db-830394bf6011", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f92dd4d-6e15-452d-aa84-dc5ccae11cc3", "sighting_of_ref": "indicator--1bedf782-6c6e-4686-862c-e53bdd80967f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135f64c3-b076-4d9a-9b2d-f397c7383f60", "sighting_of_ref": "indicator--184794e8-24e0-48d7-87be-e8ab313578a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4243dbfd-7270-4e04-97ab-12b715850752", "sighting_of_ref": "indicator--35daf297-cf20-4160-8d7a-56b765c4794a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1979cb5-3da6-4fd6-9956-6fc6d1f8cdfb", "sighting_of_ref": "indicator--35daf297-cf20-4160-8d7a-56b765c4794a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985af77e-92f9-4fda-ace9-f4470a161911", "sighting_of_ref": "indicator--c87a1f03-81e5-4987-bd06-888e3ed3b87c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7516894a-0df8-43ab-bc65-255dc3ead30b", "sighting_of_ref": "indicator--c87a1f03-81e5-4987-bd06-888e3ed3b87c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238ddece-9cad-45d8-a985-faef4edb0a67", "sighting_of_ref": "indicator--fdc798e6-5c45-4e48-b2b7-c86b8ccbee8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c06f5d-eb82-4843-a8c3-d2b4c4ddf4e7", "sighting_of_ref": "indicator--fdc798e6-5c45-4e48-b2b7-c86b8ccbee8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb7457d-23c7-40ec-8764-d52d4060efa6", "sighting_of_ref": "indicator--b93a622f-d773-4169-b56a-30ed99dc5464", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fff6bf-0170-44bf-bb7e-3f547fa730de", "sighting_of_ref": "indicator--23987ff5-1a2a-452c-82d4-e80d7686d5f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076a3e6c-5054-47dd-9f97-c48d656f5391", "sighting_of_ref": "indicator--23987ff5-1a2a-452c-82d4-e80d7686d5f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9016b9d-e5f5-49bc-842a-aeafcdcf82d2", "sighting_of_ref": "indicator--2c5c2f0d-070a-47bc-a430-9f739ff07b27", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cde8bc-39c6-43d8-b62e-69f9a2c5fd95", "sighting_of_ref": "indicator--2c5c2f0d-070a-47bc-a430-9f739ff07b27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59311a19-7853-471e-bf15-c1fc18f5e9f4", "sighting_of_ref": "indicator--8260ac75-d3ab-4b4e-a3d3-cd0b2f22a25f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebef269-1680-4e90-ae00-07dbfc3eb857", "sighting_of_ref": "indicator--8260ac75-d3ab-4b4e-a3d3-cd0b2f22a25f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1cce0d-6147-4388-9951-1f20b76797b7", "sighting_of_ref": "indicator--bc621377-d2ff-481c-85c5-5525a10261ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703ce693-a471-46a4-94aa-a97f5e5f52fe", "sighting_of_ref": "indicator--a0368db0-d3af-46a2-b7cf-37d73a73a579", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f608daf8-2bc8-4f08-9521-3184109ac25e", "sighting_of_ref": "indicator--165c2226-4292-4f51-a8a3-4fa8c51b159b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f08f47b-b1a7-41d4-b3e0-57e25f27848e", "sighting_of_ref": "indicator--69bbfc06-4bae-4dc8-93f6-ffe8830a231b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c26a98-a880-4d09-a6d4-e033a8b7a74d", "sighting_of_ref": "indicator--f69e3130-c767-41a1-9e96-e1e93bcea879", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5329f66-8e5f-451e-bb5a-452a239fb261", "sighting_of_ref": "indicator--f69e3130-c767-41a1-9e96-e1e93bcea879", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90f78b3-62d3-465d-b569-8bac727e5a33", "sighting_of_ref": "indicator--8105a10d-5e8e-4d7f-9dec-c64e7471f3ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcef957-87b2-4186-a5ca-c2c17f0ba4ef", "sighting_of_ref": "indicator--598434a0-3524-4430-8d2f-303ee5678d6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c36caf4-efa2-45a4-8500-9e9549704d73", "sighting_of_ref": "indicator--598434a0-3524-4430-8d2f-303ee5678d6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6408d39a-2d23-4368-a5e4-284c99bc50c8", "sighting_of_ref": "indicator--ff4d026e-0362-4c7a-8d23-75ef6b7547ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe5e793-cc25-4f18-a552-381cc423700d", "sighting_of_ref": "indicator--ff4d026e-0362-4c7a-8d23-75ef6b7547ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43387395-be01-438f-94a5-eb22ac64d8b6", "sighting_of_ref": "indicator--13cd1bc8-960a-4aad-9266-247754f74416", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5479376-0899-45f6-a3ab-f255c73c2b2f", "sighting_of_ref": "indicator--02936eaa-0ed3-4767-84f3-b5d82ec80feb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d87099-bbc7-4096-8835-d594fa76d63b", "sighting_of_ref": "indicator--77bb5551-b279-410b-a55f-f0bd0734ecf1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19dfb1a-747a-46a8-989d-3272c7a6db63", "sighting_of_ref": "indicator--77bb5551-b279-410b-a55f-f0bd0734ecf1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e704e3-3bed-48ef-be45-f5a73f5dfc46", "sighting_of_ref": "indicator--111ed771-12aa-4031-94ed-7134ae46e314", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de1f55a-9695-4ce7-99b9-a4892f02366f", "sighting_of_ref": "indicator--15b6bf3e-a120-40b3-921b-bf10d98309ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590484ea-11e2-48ec-be32-d15cc3b747c9", "sighting_of_ref": "indicator--15b6bf3e-a120-40b3-921b-bf10d98309ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fd49af-52f6-4704-9426-4a404bcaf876", "sighting_of_ref": "indicator--01732226-ba15-41b7-ab5a-51fc2cc2a6aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f05c1c-d1da-4791-87ac-033305fc63d5", "sighting_of_ref": "indicator--01732226-ba15-41b7-ab5a-51fc2cc2a6aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb2d471-50fd-4e4a-bb66-3a27227a5acb", "sighting_of_ref": "indicator--c132d5e1-460d-4c54-9f54-f88f0bb6b80c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072d2fdf-2aaa-4d29-bff1-54804101f182", "sighting_of_ref": "indicator--27d409a6-7376-45a3-90ec-b4968bab6462", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41aeaee4-2e60-468a-9d34-40f13cfb463a", "sighting_of_ref": "indicator--7a749a39-813a-4813-b9ec-060441160118", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7894bdc9-42a5-41e3-8287-afc2a7e26d23", "sighting_of_ref": "indicator--7a749a39-813a-4813-b9ec-060441160118", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9879315-7063-4eaa-82cb-8a4a7f34cccf", "sighting_of_ref": "indicator--12c460a0-84a5-4576-aba5-6e76ecfaa861", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9166afff-a43d-4e69-95f2-685e56e7018f", "sighting_of_ref": "indicator--12c460a0-84a5-4576-aba5-6e76ecfaa861", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8eac36-746e-4367-b4e5-3a911d01925a", "sighting_of_ref": "indicator--2046e681-5af2-4a3b-a66f-857adc963dcf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2851dfbc-2039-4250-af83-f8e0cbf91ea0", "sighting_of_ref": "indicator--6e6bd7a5-7916-46ce-8342-11e367a22498", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f938f9-3d93-4d02-942e-57653782e99a", "sighting_of_ref": "indicator--e7504dec-4e1f-4ba6-bf3c-e37f3d97910f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727152f8-402b-4f41-b294-0dba53c45d6f", "sighting_of_ref": "indicator--a57be5a6-0a6f-4178-b8eb-99e3e87dab78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998b6415-da0e-4a84-9f1d-920e95acb971", "sighting_of_ref": "indicator--ea4b8606-ba88-474b-a7ca-084f9a302e11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af224176-4641-4070-8ac2-ca1296aab5a8", "sighting_of_ref": "indicator--8616c51f-5a86-4aaf-8416-d39234f0e612", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d20dbde-5758-4b86-bcc3-e6a27b8acf77", "sighting_of_ref": "indicator--fe3c63a0-b1d9-4806-96ff-752484a44b81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aef19b-0815-4f3d-8017-94a8e10a466e", "sighting_of_ref": "indicator--874340f9-9176-4757-93ef-65bbe4ad6a8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111e5d73-3aad-4a43-802a-0f4e44a55685", "sighting_of_ref": "indicator--ab5838ac-9e1d-4291-9cc3-e25ff7854ba3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db769e3f-27ab-48eb-99c2-6271d88b33f7", "sighting_of_ref": "indicator--fca1d19c-4c8f-472a-ad2c-078abc6a0365", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8529a4e6-6a83-44cd-b2e3-999b0c9fd318", "sighting_of_ref": "indicator--eb7af617-f0bc-4d18-a28e-3c192bab1e60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3653ce1-0dc6-4e52-b271-c0a22c2fcd5c", "sighting_of_ref": "indicator--e5dc2a70-a078-4062-98ea-6dbca653ea67", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaa771d-9cee-4e3f-90d4-0d9d08f85f39", "sighting_of_ref": "indicator--bccaba3c-13ce-4ad5-a3c9-a046b5684650", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d49b3c7-c1a4-41d8-8a5f-2253663a94d8", "sighting_of_ref": "indicator--5cbe84a4-608a-45af-98cb-3e21b9300fc5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3875e8a-82ae-4da4-b785-9d1048a985dc", "sighting_of_ref": "indicator--a5a5c7e0-729f-44ca-91cd-881c1faa848d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8664f83c-ed5d-41e1-9b9f-cc50f6fc81f5", "sighting_of_ref": "indicator--a5a5c7e0-729f-44ca-91cd-881c1faa848d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3478fabc-82c1-4b95-bbae-ac5feddd70aa", "sighting_of_ref": "indicator--a0be1d16-2397-4adf-80c4-8fdebc78af0b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9b8e16-5211-4b53-a6ea-0bb0252ce60a", "sighting_of_ref": "indicator--a0be1d16-2397-4adf-80c4-8fdebc78af0b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dd7493-dffb-4a6c-8e9e-1c7b4a57899a", "sighting_of_ref": "indicator--b4e252da-211d-472a-a2e4-0cdc5d36faad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d36687c-575a-43f7-81c5-e37385596169", "sighting_of_ref": "indicator--0de74edb-fbec-454c-8eea-d4f85631143d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817f873d-3a31-4d78-83f2-fad0e8418e0f", "sighting_of_ref": "indicator--0de74edb-fbec-454c-8eea-d4f85631143d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a21b92-b404-4b3d-955e-062f196692bb", "sighting_of_ref": "indicator--c4da3745-007b-4eaf-8f94-c2a8c66a5d5f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff14f0f-ef75-4407-832d-c76bf3a399b0", "sighting_of_ref": "indicator--2db36830-b0a5-40cb-9a4e-7fe3d3c8dc6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc587b2b-fb95-4890-8408-2ac29cd4e19d", "sighting_of_ref": "indicator--51776777-81a0-483d-9bda-4c13307df23e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce02216-0cfd-4d43-a258-b408ef72ba20", "sighting_of_ref": "indicator--51776777-81a0-483d-9bda-4c13307df23e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8c24fb-5384-44d9-869f-2f80638fd0ab", "sighting_of_ref": "indicator--a4ba9bde-2add-4185-af78-2bed21c05ba0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d890521-10bd-4b55-928b-54ab9ff5468f", "sighting_of_ref": "indicator--a4ba9bde-2add-4185-af78-2bed21c05ba0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966cc6d5-ac19-41a8-b62e-ce5b65884619", "sighting_of_ref": "indicator--4cc54ca2-82ad-4ec3-b9aa-c5536442ecb6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b997aa-4b36-43af-9208-8966ba2a6989", "sighting_of_ref": "indicator--04610e85-e0e3-44c8-b11f-6f3fcebe797f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48801886-7ffe-49d9-a525-d6a77b58468e", "sighting_of_ref": "indicator--b5ba9f60-4f03-48b1-bae1-1e8228de7f47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797081fe-7c2c-4dcd-9784-0e18f0166b5a", "sighting_of_ref": "indicator--f627e52c-e392-4f66-bb56-cf80316c9e91", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52473b42-024e-43bf-85fb-796884bfaed6", "sighting_of_ref": "indicator--82bccf5c-4bd1-4b53-8ede-cd612942e4f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492078fc-89fb-4207-8cd4-c7052e0b2845", "sighting_of_ref": "indicator--82bccf5c-4bd1-4b53-8ede-cd612942e4f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a54dfc-8ffb-49e3-ad9e-90698d2e1ba0", "sighting_of_ref": "indicator--168492ed-46ea-4023-ba1f-5ff170745f20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a968f304-0601-4c17-8adc-ae4a3b9040ff", "sighting_of_ref": "indicator--168492ed-46ea-4023-ba1f-5ff170745f20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9696d81b-1351-4823-9227-ee9a8114fd4d", "sighting_of_ref": "indicator--7b01b97c-7f74-4c96-962a-5651a12de7b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5997599f-8b1a-48eb-81ee-c6e3506edb24", "sighting_of_ref": "indicator--691ae59a-8fba-473c-b253-7c56825954ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ed60c6-ba3a-4abd-b486-72b979d8762b", "sighting_of_ref": "indicator--18bf2e5d-421c-40bc-9a3a-c25d72e65ad0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a927e003-876a-4682-afe9-d7967679f839", "sighting_of_ref": "indicator--18bf2e5d-421c-40bc-9a3a-c25d72e65ad0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b9523f-2246-4566-b5bf-064395939a77", "sighting_of_ref": "indicator--c5e85b7a-2aff-4381-841f-93de605fd40f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc676c3-d7cc-437c-bd18-c6e7832fd4cb", "sighting_of_ref": "indicator--2a927d5f-0045-4985-8ebd-0f9f50e92cf7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6ca9a4-1ddf-4a06-9fda-1801f17707e5", "sighting_of_ref": "indicator--07e1c043-8acf-4c45-ae1f-a94ed24eebbb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4f18f6-75a4-4e45-8ac8-79fb01f41627", "sighting_of_ref": "indicator--07e1c043-8acf-4c45-ae1f-a94ed24eebbb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6ac5bf-b6bc-45e3-8f25-a86f53e3bd45", "sighting_of_ref": "indicator--8dec3f05-de15-430d-8aec-6c630613a272", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd89da4-a700-44fa-9ab7-36bd1e7ac0af", "sighting_of_ref": "indicator--8dec3f05-de15-430d-8aec-6c630613a272", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851698a6-516e-42f9-8a6a-792f5097b0ee", "sighting_of_ref": "indicator--acacd604-d7d0-445e-aa85-e192fbc8ebef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f66af52-a05e-441b-a5e0-42584c210f9e", "sighting_of_ref": "indicator--5318b0d7-0ed8-4e7c-88ab-200cf5a87950", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e490a48c-e34c-402b-bb30-89ae5d436617", "sighting_of_ref": "indicator--aeac9211-6e41-445f-8862-b2307d0c534a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b723701-6f6e-4ed7-baa7-12c20f3d0c9a", "sighting_of_ref": "indicator--39ba7cbe-34f4-4816-a692-60b9f2347fa5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182f0a77-2a72-4601-906d-0d7b8ba7ff6c", "sighting_of_ref": "indicator--d138f7f2-30ee-40ad-b746-d0c92a87e799", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e652e34-97e0-4c4f-bdbd-34af4e2b663d", "sighting_of_ref": "indicator--7e118eb6-1b24-47b7-b39e-6d3dd5533b08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ad38c7-a5db-4d32-b8a3-f632ce9e8fa4", "sighting_of_ref": "indicator--6d875585-39dc-483d-8f54-02f4dd9037e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca59ec8d-f98c-4a0e-8f3a-8bdee6919ac8", "sighting_of_ref": "indicator--b516954a-2de3-4b3d-b1d6-a4fbbc70ef74", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d814922-e17c-4465-9020-a328b04bdcad", "sighting_of_ref": "indicator--6e6f45c5-2991-4072-ae55-1f9863bec955", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16c5f12-9156-4c65-8edd-48b686496d85", "sighting_of_ref": "indicator--6e6f45c5-2991-4072-ae55-1f9863bec955", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17875ebe-2dd3-45ac-831a-280f30b70f43", "sighting_of_ref": "indicator--e4495a8c-4166-4a5f-85b5-ba31e40a5e2e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c4dcdb-ca09-4c10-b56b-b6d8bcca4771", "sighting_of_ref": "indicator--c6bf9507-1f97-434f-a273-fc343282f1c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e735b4d4-c466-452e-83df-661a7e821c07", "sighting_of_ref": "indicator--e9cc62c2-8696-4168-9265-c1480d0f1768", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86751377-ae0b-4038-95e4-482814cc5937", "sighting_of_ref": "indicator--c54f4b0f-9e6b-4934-bc23-4617ce46d28a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435f5ba3-98c6-4771-99df-d0fed9617191", "sighting_of_ref": "indicator--c54f4b0f-9e6b-4934-bc23-4617ce46d28a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd1ad23-b010-4039-a11a-b2065c87e3f3", "sighting_of_ref": "indicator--057e6193-575b-4ce2-90dd-96b7f776e2cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475228ef-96f6-44ab-86d2-76b5ac96f35f", "sighting_of_ref": "indicator--2ea0b096-ca96-43f7-a65c-32d69df029cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b90183-0e11-4351-b608-6591d99ddf00", "sighting_of_ref": "indicator--2ea0b096-ca96-43f7-a65c-32d69df029cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6d128d-39d1-4f73-b3cd-67db7bcb3ce6", "sighting_of_ref": "indicator--6ac6e9d8-2c0e-4323-8575-56d860cd80fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a583c5c-39fb-4d62-be57-408ab3553155", "sighting_of_ref": "indicator--c8fa3321-752a-4a3e-814b-a924d8764332", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a636e0-e816-4d33-bb44-53462ce863d1", "sighting_of_ref": "indicator--c8fa3321-752a-4a3e-814b-a924d8764332", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0765f0a-2555-483a-9d98-c0a2c49d2273", "sighting_of_ref": "indicator--b1816396-c1dc-422b-a029-4e5f4ecf9858", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dff05f5-4e4f-43f7-9cde-05402e6538ac", "sighting_of_ref": "indicator--b1816396-c1dc-422b-a029-4e5f4ecf9858", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263fa709-d17f-4cbb-842c-5ac9d3921c84", "sighting_of_ref": "indicator--9db044d0-200a-4916-a0ba-f86bd88f52ad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c9e986-4b97-4cc6-af7d-570c61c7de39", "sighting_of_ref": "indicator--7d6d7c30-9596-492c-9fa6-795f9ca1ba65", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ab5e17-ff97-46e0-9785-61a9c9226b72", "sighting_of_ref": "indicator--10a6d7ae-7706-4f31-ae79-d0863dc948a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40f6a22-7739-4d76-91c5-7060551a8e6d", "sighting_of_ref": "indicator--7f9d52df-c1bb-4b42-97f8-c0bf9de4721c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b400231-eb42-4eeb-b6b8-95080c18d19a", "sighting_of_ref": "indicator--7f9d52df-c1bb-4b42-97f8-c0bf9de4721c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fec8c4-03cc-46e2-961c-bb28867f2221", "sighting_of_ref": "indicator--9132de6b-5a1e-4134-b3e0-e878787d6364", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40181a28-e6d1-4277-b6b9-257ddd6d76ff", "sighting_of_ref": "indicator--854f7ef6-a26e-48aa-be60-ef8a7582dc24", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e3a3d3-46f5-46d9-ae86-cd77c8cba3a2", "sighting_of_ref": "indicator--854f7ef6-a26e-48aa-be60-ef8a7582dc24", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b784fd-af30-4f1c-a4a4-bd3c6e07b49d", "sighting_of_ref": "indicator--b6bc4c8d-3f9a-4773-bea9-d01cdaa512ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8407351f-f950-4bba-9478-a15256546672", "sighting_of_ref": "indicator--ed4c24e7-d695-4db2-a093-e2457860bdf8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f462061d-73ef-4313-8d94-965ec7879cfc", "sighting_of_ref": "indicator--c695dcf2-0eac-44a3-a885-d95a1145c185", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6c7fab-ada4-4637-8606-e77389580596", "sighting_of_ref": "indicator--c695dcf2-0eac-44a3-a885-d95a1145c185", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2eaa35-0827-4917-8c31-209ca8aba8e0", "sighting_of_ref": "indicator--f220aefb-96a3-4aa2-a3f2-6b7780faf7d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98032d86-07bb-4dd3-b822-64ecf5dad09b", "sighting_of_ref": "indicator--bd427e33-4347-43db-9610-8a687877ce9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ccc398-bb6b-4f2a-8683-9e1f42e4318d", "sighting_of_ref": "indicator--1a0d4349-f210-40d6-8511-e245fb70a766", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9ec66e-4325-41e1-9490-a2cd30050296", "sighting_of_ref": "indicator--1a0d4349-f210-40d6-8511-e245fb70a766", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbee8001-ae37-4408-83e0-68b231fa96fb", "sighting_of_ref": "indicator--8b98bce9-82ec-445e-b979-d782c3933ccb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d279f64b-cae2-4b66-930e-8115ee90051a", "sighting_of_ref": "indicator--387ca29b-b382-4ff5-8f4f-d137e58a39ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8905dfbd-e172-4993-bf1f-fceec44b9be7", "sighting_of_ref": "indicator--387ca29b-b382-4ff5-8f4f-d137e58a39ef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e0b41d-3025-43eb-b2c6-4f86928d7492", "sighting_of_ref": "indicator--116e0077-9d34-48e6-a89e-028cd48f1444", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e135e54-38e6-4c71-9547-ba120fd22d86", "sighting_of_ref": "indicator--116e0077-9d34-48e6-a89e-028cd48f1444", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1610f3fe-8855-4d40-b343-cec146333291", "sighting_of_ref": "indicator--6832feb2-f92f-481b-8e9a-eb47dda5082d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d1cc96-e64f-4c6f-b9fd-651899459360", "sighting_of_ref": "indicator--2d12e8fd-1691-4da6-aab0-71037b05aa66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552a03b2-b561-42ca-b15a-ec7b891655a7", "sighting_of_ref": "indicator--f526fe7b-c823-4901-8752-11bea7730054", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca2eeec-2ceb-4bfe-ba5e-49c484184176", "sighting_of_ref": "indicator--7c424bd0-d071-44d6-b7c4-5afc4ec260e9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c66abff-35a3-454e-9586-3852dd62c3fa", "sighting_of_ref": "indicator--bbb1cdee-f590-424b-a2c3-46c9192c6c3e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b7d6fb-4e94-4549-a8ad-abc97e9af9c1", "sighting_of_ref": "indicator--d242f2bd-cee6-4fec-8625-de8642c5e104", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fc6f63-c6d5-469c-851f-50287dc06085", "sighting_of_ref": "indicator--6b5378db-0686-41b7-b54a-6efe36aba3da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddb85a3-bae2-4e77-9d3c-ade0c6555c34", "sighting_of_ref": "indicator--b8455b47-3a7a-4d45-9c07-d3208649e068", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1914492-7759-494b-8e0c-39f7365dd769", "sighting_of_ref": "indicator--90f9a504-8e83-4ebe-8268-d01cd2a079e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85719a9c-c78d-408a-863b-cb1406a9dbaf", "sighting_of_ref": "indicator--3bd23620-bbac-43cb-b81c-1cc7ab474266", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c38cf0-a528-4b18-96e8-81a436ebb96e", "sighting_of_ref": "indicator--b623de27-bfb6-4acf-925a-5b63a33b1404", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3bdc38-b9db-456a-9fe1-5351ccd7e14d", "sighting_of_ref": "indicator--26b07218-657a-456c-9293-1f9a9d753484", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2731b5cb-d802-4da9-bc2d-d9f6539ca2d1", "sighting_of_ref": "indicator--4cf67c57-a15d-4068-8563-ceb14173d19f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f75d60-4ecf-4345-a443-595df4ef40aa", "sighting_of_ref": "indicator--607c0a0c-75fc-490e-a6ed-c984b3959451", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d1429c-42e4-4753-b7c2-50d83482ff50", "sighting_of_ref": "indicator--ec80a7e7-6219-4a0d-8c0a-7576ad7903cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6b188d-93e3-4573-b9d7-573e78a100d7", "sighting_of_ref": "indicator--3396c1ea-4f36-438b-bfe9-5352250ce2f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e6123e-61c5-46a7-ae7b-15907b344360", "sighting_of_ref": "indicator--1b4dfbc1-74b4-4cfe-9f5a-ebcd51c82f4f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c8383b-cfd0-4575-b871-1ada8e5c08ab", "sighting_of_ref": "indicator--1b4dfbc1-74b4-4cfe-9f5a-ebcd51c82f4f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6288d5-6cee-4bfc-91f6-f602bcbb5f7d", "sighting_of_ref": "indicator--792a2992-1b1b-4166-b9ab-5b4d02479cd2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25262387-888e-4249-9a9b-65a00b5d1652", "sighting_of_ref": "indicator--a4c181fe-a47f-4cbf-b2ee-5fa988a05cd3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dec07b6-9caa-49a6-bc9a-39ecd9551801", "sighting_of_ref": "indicator--0d627a97-ecd2-4530-adcc-d709f00e38e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e22b79e-13dd-439e-8b62-5ba7327f9a6b", "sighting_of_ref": "indicator--b93d0b41-fdb5-439b-b69a-3731a25e13ad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826a8a5e-6dd9-4079-901f-8de5a824a289", "sighting_of_ref": "indicator--29a3f31a-d25c-4dc8-b5a5-2e3327fc7340", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbe0e0b-cb99-47a7-a89e-40637aedc26c", "sighting_of_ref": "indicator--24088925-58d7-4c17-b889-9653945707fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcd0306-2b25-4c6a-93f4-3083d4c058ea", "sighting_of_ref": "indicator--2e455b58-82d8-4e8b-af34-2edbb417fd14", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9116b0f8-82bb-4d06-bb1b-895b7b21beb6", "sighting_of_ref": "indicator--f25c2fa0-0cbc-4d09-a6f8-4ea1c1473dcb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce0340c-e0f2-48f5-9746-9ca461198c85", "sighting_of_ref": "indicator--b826d654-5b38-4bb0-ae3d-a8ec2de55243", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4fc2ce-e0cd-4612-aa8d-5fd3d4505861", "sighting_of_ref": "indicator--94c8252a-47cc-4b77-880a-378f475eaf76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18de9df-45fd-4391-8a6d-00cd1ed61e74", "sighting_of_ref": "indicator--e142ccb4-e380-483b-82cc-bdd2d870d5a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfcd1bd-3da5-410b-b9c5-c966ef97611c", "sighting_of_ref": "indicator--9f04ce06-b730-451e-88d8-7b06d8e74da0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b06b4ba-04da-4f29-9e43-b53ce73a218d", "sighting_of_ref": "indicator--ff61dc6d-fe3a-4e42-93d3-ef9d4d3abaca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c7af0a-c4ba-468b-b9e5-9a93fcf1c5d7", "sighting_of_ref": "indicator--96a5f3d7-ac68-41f6-bd8d-5f2a182b5b11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1a010d-5d28-4df7-ac5e-8acf8f4a31be", "sighting_of_ref": "indicator--fd2c400b-7439-4769-96e8-94ff3ea76786", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6232e399-7f52-4c63-9170-7c7caf071282", "sighting_of_ref": "indicator--592f9c88-b50d-4101-a1ef-02bea7a03685", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fb4379-23f9-467b-8bd4-57abd4bd3660", "sighting_of_ref": "indicator--592f9c88-b50d-4101-a1ef-02bea7a03685", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c42a053-bd88-497b-978e-fc05c3799bdd", "sighting_of_ref": "indicator--d9b452ef-7b20-490b-b52a-38f9c8da8988", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fa8143-e0bc-4ad9-8726-c20fee28578b", "sighting_of_ref": "indicator--d9b452ef-7b20-490b-b52a-38f9c8da8988", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0157c7c-153d-4054-ada3-97cbfdadbf61", "sighting_of_ref": "indicator--1720f91f-3567-4626-bff7-72b037194068", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43fe52b-ad63-4a73-96ca-437bb9dafc25", "sighting_of_ref": "indicator--1720f91f-3567-4626-bff7-72b037194068", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa40e617-d3df-42f6-b07d-bab7a8d00de3", "sighting_of_ref": "indicator--9017a915-ddc6-4719-aeb5-0787de8fcbcf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb327b50-7266-40c4-a5a8-a6fdcd354638", "sighting_of_ref": "indicator--f66a64a7-feb3-4f9e-a0f2-0cc3c5b19bae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27317933-38d0-4839-8037-d2b3d82500d5", "sighting_of_ref": "indicator--0cbfbd09-99bb-4591-8e11-34cf0f3cd090", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70529ae-77ed-400b-9106-f24b9e9c2b9a", "sighting_of_ref": "indicator--975e7866-7463-484d-af99-2558bb756503", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3dc51f-34e1-4232-a0bf-22984e14555e", "sighting_of_ref": "indicator--d7030e62-491a-40be-9cd3-8135ac3ce99d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde083ed-be89-4669-a3bf-69547975f948", "sighting_of_ref": "indicator--6149cd9a-9e1c-45a7-a61e-406e640bd8cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7472137e-d654-4c4d-9b92-59c403d4729d", "sighting_of_ref": "indicator--c2279d94-4fcd-4794-aca1-6ede170e5837", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fbf846-6241-4982-a32a-d2beac79e138", "sighting_of_ref": "indicator--7053dd33-6c08-47ce-a2b2-ce739d5cf2a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3532cb-2e92-41cb-b384-e3b6bde63aec", "sighting_of_ref": "indicator--1ed4f028-24c1-4f6b-9b00-b5be0f11d8b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3057b5fd-9775-4c32-b7a4-8db40bfea951", "sighting_of_ref": "indicator--c155caa6-b9aa-4ca2-bf5f-5f073a046d6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b746eec-abad-4c66-821f-ce67218259d5", "sighting_of_ref": "indicator--b40df0d7-24e0-417a-b258-2b3affc5ebab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322868e5-8211-4101-a417-56bd71f59b95", "sighting_of_ref": "indicator--5f31ee6a-1a45-47c6-b696-552eb41f899d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcde0e5-9da1-41bd-b0a4-84cf561f565b", "sighting_of_ref": "indicator--51f8dc77-f8d1-4780-9502-8b37e4ac06d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a0b252-990a-47b7-aef9-5692ff37fe09", "sighting_of_ref": "indicator--f4980eac-ef9a-4093-a4e3-a56d95b49c35", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f8fe7b-8238-42b0-aeb5-6c5f90a65085", "sighting_of_ref": "indicator--404c4269-3463-4a6e-bdb0-e16db9e9cb2a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f390f92-1b7b-4f65-9152-f8bec922ae6e", "sighting_of_ref": "indicator--00e552b1-a62c-4131-8e86-e7297ec46126", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175ba25e-a764-4a3f-8b0e-25945e82d819", "sighting_of_ref": "indicator--0d1b2da9-2318-4b29-89cd-67fa3b46d668", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83672b90-a7c7-496c-950d-97c4c126895a", "sighting_of_ref": "indicator--ff94c7a2-870b-4f2e-973e-dd831139ac2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de2a33d-fee0-4b14-8a4f-77acc9181893", "sighting_of_ref": "indicator--ff94c7a2-870b-4f2e-973e-dd831139ac2b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecac594-6555-4829-97c1-622383fd7880", "sighting_of_ref": "indicator--5f77f3cf-2517-42ce-86be-03a6500ebca3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95aea360-1bf9-4c55-b9b9-06f26315eb4f", "sighting_of_ref": "indicator--5f77f3cf-2517-42ce-86be-03a6500ebca3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994d9b41-1639-45bc-89a6-b34a8a167445", "sighting_of_ref": "indicator--849fc8ee-920d-4f01-86d2-daaca855b290", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065c92ff-c774-40e9-b1f5-bba482582270", "sighting_of_ref": "indicator--4f485916-00bb-4e15-a3b5-c88b1980b489", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b30e02-ac35-4df9-92de-d2dea2e53222", "sighting_of_ref": "indicator--4f485916-00bb-4e15-a3b5-c88b1980b489", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f8d980-7e1b-4292-9f8a-d3de9d75ea1d", "sighting_of_ref": "indicator--59f4ccd1-319f-4e20-be44-59a253665803", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfffb389-a532-4549-87fa-68d88226afd0", "sighting_of_ref": "indicator--59f4ccd1-319f-4e20-be44-59a253665803", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a762239c-d50b-4a37-aa75-3219294a496d", "sighting_of_ref": "indicator--88101073-299e-4dbc-9fe0-ae9b4ac7e397", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454d695f-f5bd-4822-8764-f48c21c23d03", "sighting_of_ref": "indicator--88101073-299e-4dbc-9fe0-ae9b4ac7e397", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51999661-b457-4647-82ad-e7a3b20c6538", "sighting_of_ref": "indicator--05db9bec-0f20-46fd-a389-9caaed6023e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50eaf649-844f-43cf-8dcc-750e81993327", "sighting_of_ref": "indicator--609c72a0-b2af-49e9-b82b-b97e9e3c0d0e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dadb90-dfc3-42b0-8fb0-0e0671e09d82", "sighting_of_ref": "indicator--9ada8ede-93cc-43e9-b708-e449d93b25a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4296836c-a80b-4baa-b71e-47bcce1acb50", "sighting_of_ref": "indicator--e5058305-c744-49af-b6ec-c6980f578f63", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa36502-4785-45df-b084-6a53577302b2", "sighting_of_ref": "indicator--e5058305-c744-49af-b6ec-c6980f578f63", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae9a5e6-7dfb-4fbe-ac02-bfa3abcf1823", "sighting_of_ref": "indicator--ac85b99d-d8ed-41f3-b8cd-8222f215a354", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fe566a-95b9-4b6c-bd42-fe1ba9c01b0b", "sighting_of_ref": "indicator--698fb019-3490-4cc8-b62f-c99c37d1bf85", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f6afa1-457b-4058-a6c5-88bd286c5a45", "sighting_of_ref": "indicator--7527cfcc-16e8-470b-b767-6b8646b1d7a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bc0bf7-0dcb-4913-af5e-1469c04ecc30", "sighting_of_ref": "indicator--3848d43a-2b37-4950-913c-8348debfe804", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace1a8a6-c4ab-4e88-a669-e77131e4fe57", "sighting_of_ref": "indicator--5b1383ef-60d4-4d9b-8de8-2e68c534c04b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d64fa8-19dd-4bab-9159-92343a8c344e", "sighting_of_ref": "indicator--1c9efb12-7b25-49e2-8a02-e6c3ffd4945c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547c76ee-129a-4276-88f6-d425a0829f61", "sighting_of_ref": "indicator--1c9efb12-7b25-49e2-8a02-e6c3ffd4945c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9034f181-f036-4ebe-a504-1f3352aff02a", "sighting_of_ref": "indicator--0b2db35c-110a-497a-b9aa-67d55f626460", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170e3c2b-ba88-42bd-9602-9aac71c48165", "sighting_of_ref": "indicator--b9950a05-6e22-47ce-820d-1de4f9cb94ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cefc878-6a0f-468e-884f-3e533f79d418", "sighting_of_ref": "indicator--f073a215-94b0-4598-b479-5a917f85200e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dc81f7-0b78-4c20-8751-8868cf520489", "sighting_of_ref": "indicator--1bceafc6-9c8a-43e7-9e79-71a50090e86f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f0b393-c6b5-4404-b507-47bd91be69d5", "sighting_of_ref": "indicator--d708b6c4-269e-4d5f-a8a9-a5c73d1be9f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefac1eb-2711-461f-8619-2de7abff049a", "sighting_of_ref": "indicator--355f76dd-1c9a-4db4-8bc4-49ad43345ea8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ea2aaa-255b-4025-940e-7f3f47c7d13b", "sighting_of_ref": "indicator--355f76dd-1c9a-4db4-8bc4-49ad43345ea8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8445620b-228c-4603-9d0d-9a0c8b4d1875", "sighting_of_ref": "indicator--68b7c2cc-0503-41c8-bf03-876df10cad8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab35686-7a21-435f-bd92-fc9633c6f61e", "sighting_of_ref": "indicator--68b7c2cc-0503-41c8-bf03-876df10cad8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2aa685c-0ebf-41b3-820a-a9dc72303182", "sighting_of_ref": "indicator--966075a6-506f-4e05-b600-378d098e57b1", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54999fca-ef61-4d3f-b4de-193b887f029c", "sighting_of_ref": "indicator--8b2c760e-f3d6-4b66-973d-4220b5828037", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba08bbc-6318-43a1-8f88-ccd75b19fdef", "sighting_of_ref": "indicator--ea05e457-0f21-46e5-bc59-d941ca63675f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cbe27b-f440-4da6-9171-72710bc37148", "sighting_of_ref": "indicator--ea05e457-0f21-46e5-bc59-d941ca63675f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ff0635-d8ed-4831-a0c3-d684cf33d543", "sighting_of_ref": "indicator--aec121d3-11d7-4e07-b9c3-1672557c2230", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a7f372-ba79-47c7-a9f8-59b0f9bb7d1b", "sighting_of_ref": "indicator--31752a7f-3bf5-4c88-8251-e36d64e2f5c3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1817e0b2-4a74-43f9-95a4-4cb797521558", "sighting_of_ref": "indicator--31752a7f-3bf5-4c88-8251-e36d64e2f5c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27a04c0-159a-45f9-ab5b-f4ad25b80aab", "sighting_of_ref": "indicator--ef917e0d-5fa8-4632-99a7-b86879526e5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7860df82-41e6-42ac-8e97-c594a38d1d96", "sighting_of_ref": "indicator--c419f0e4-8bbc-4dee-b66b-0cdc199a3a25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173bd691-0377-474a-87ee-989aa2ef3d80", "sighting_of_ref": "indicator--c419f0e4-8bbc-4dee-b66b-0cdc199a3a25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc5eb09-097c-43c4-a540-772dbcd192b1", "sighting_of_ref": "indicator--23a6a523-cb52-45c8-8c4c-a2d70de58123", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847100ab-de5e-4003-a0e4-3f795dc0f27a", "sighting_of_ref": "indicator--23a6a523-cb52-45c8-8c4c-a2d70de58123", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b0212d-7d62-440d-bb98-f3712bccf050", "sighting_of_ref": "indicator--43e3b5d3-c34f-4f6c-afd8-cf858dd3907f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3ddc7c-2739-4112-85c1-76cf34a5347e", "sighting_of_ref": "indicator--323ca024-e38b-4817-a25f-a977112cf737", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a18eba0-9ecf-450d-948e-fc480ae361f5", "sighting_of_ref": "indicator--c47bf536-1887-49ca-997d-04fb018bb092", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d5e414-688f-4d32-84e4-fbbcbfb75516", "sighting_of_ref": "indicator--fa8def04-3a43-4a55-b83e-1d8fc9ff65b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0b3079-3bdd-490f-9ccc-f6a3cf8abf90", "sighting_of_ref": "indicator--7ce7b00b-86ae-4305-b817-1c18b0796014", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e391e2c-3418-4e88-8370-261b06738265", "sighting_of_ref": "indicator--7ce7b00b-86ae-4305-b817-1c18b0796014", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2666fd-6e02-481c-84fe-80eaef133a36", "sighting_of_ref": "indicator--f93e9ee1-51e8-4459-b3b9-de19ae2876cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0414014-2c54-4919-806e-36ea334ee1d2", "sighting_of_ref": "indicator--23cade17-42b0-4ced-bade-90ea515b4248", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0d6b0d-29b3-4979-ac7e-5a6b60df2468", "sighting_of_ref": "indicator--52ebd5e0-c1f4-4652-9bff-56694442cd49", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e09e46d-94a8-4949-a27d-802cc41cf171", "sighting_of_ref": "indicator--064b5a35-2598-4ca8-92c1-db03b0002235", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b37187-5503-43d6-9afe-4e0bd4ba81f3", "sighting_of_ref": "indicator--596467c8-f3d3-45b2-b27e-e300bb5bd6c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648eb220-959d-4983-a043-7fe13455db7c", "sighting_of_ref": "indicator--881cc0b7-8d16-46cd-ac73-0fd16ad966db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde4f83f-faaf-42b7-bec1-f0c4ad4fe5e6", "sighting_of_ref": "indicator--3ce4bb74-2a75-40c4-b206-f666d2c50a2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7fe530-8ea7-4479-8091-34d351075bef", "sighting_of_ref": "indicator--d2c2787b-d407-4e96-b3e9-c400ca83eb34", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e45db8-2bf4-49a2-8573-f21b70991f24", "sighting_of_ref": "indicator--2eeaef37-8042-4f7e-ae1f-76066c5a16cd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3eff9e3-0b99-4021-805a-6fe37fadb146", "sighting_of_ref": "indicator--28561a01-6f0a-4631-b7b0-b99a1b8a4749", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa74428-8748-406c-94dd-4c67f421e089", "sighting_of_ref": "indicator--28561a01-6f0a-4631-b7b0-b99a1b8a4749", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24824e6e-c8af-4ced-908c-5bc4014a774c", "sighting_of_ref": "indicator--881fba9a-9a0d-4060-9c82-ecc5772a3892", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8562f3-18f4-47ca-a92c-9ef66dade2e1", "sighting_of_ref": "indicator--9538df37-8065-42a6-b42e-67e42e9bf6e9", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee51e70-bd34-4e83-a264-892ad2c78e0f", "sighting_of_ref": "indicator--e84a5355-f898-4f3d-8b56-6aff6f44727b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f6c33c-ae68-422c-8405-2c137faf925c", "sighting_of_ref": "indicator--17d0d484-e1f1-4b8c-9336-ef8f7e2fc4e9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed60ae2-e54f-4cef-81f8-62c16111056b", "sighting_of_ref": "indicator--656efc94-ca86-446e-9df8-e18485377753", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22b39d0-3cfe-4b0f-b95e-b42e06341f67", "sighting_of_ref": "indicator--ffbd03bf-9fea-4d2c-b2e3-c9b3949d84c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561b39cc-00fc-48eb-bd1e-0680f407f325", "sighting_of_ref": "indicator--bfbead98-3cd9-4941-a399-ff014eb7ccdb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3036475-850a-4173-839b-892aa17df280", "sighting_of_ref": "indicator--37864449-a9a1-46ea-a12d-4fa7a7ade0e2", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25378c05-5e48-4758-9d29-7609a31d01a7", "sighting_of_ref": "indicator--e0ae694a-e80d-4c73-8855-9ce940021933", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf5beb8-9313-4abc-9495-22661003284f", "sighting_of_ref": "indicator--860dd91d-13c7-402d-8ce4-ae4275dcebb2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59913dae-a8ad-400a-a8a5-5eeb0b9319a5", "sighting_of_ref": "indicator--860dd91d-13c7-402d-8ce4-ae4275dcebb2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dbf0d4-db2b-488a-891f-21c3fb1716d9", "sighting_of_ref": "indicator--ca4e5eb4-c62a-4953-b0fd-34b00a0c227f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec04346-9bae-4568-9bd3-87633b62aa38", "sighting_of_ref": "indicator--64db0726-022f-408f-8f96-556104d4f0b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebdfa16-7d27-4033-af0a-2570d9a39a30", "sighting_of_ref": "indicator--d81ee874-2d00-48f2-9868-39aac6db2e17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acea17a3-2484-4749-b2d1-30a0a450d880", "sighting_of_ref": "indicator--754a81c2-5301-4619-ab18-d15b905b395f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f26b3cb-b9da-4464-800c-efe606665adb", "sighting_of_ref": "indicator--5b2728fe-4214-4050-aeff-cc1efa7d2bd3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509f30e1-4783-450e-a427-961a3b39d0be", "sighting_of_ref": "indicator--5b2728fe-4214-4050-aeff-cc1efa7d2bd3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496d057f-cd9a-4712-a72e-b751b75529f6", "sighting_of_ref": "indicator--bd58af32-0725-46c6-81c6-57774a09e169", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e8b2a7-ca01-4481-9cb1-f49c65f14fac", "sighting_of_ref": "indicator--bd58af32-0725-46c6-81c6-57774a09e169", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22a63f6-6c73-435d-bed0-f477ade8c0d0", "sighting_of_ref": "indicator--aeada496-343e-4780-9501-9f1f010d1444", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c96184-0172-4201-a2fa-416f7bc9ffc9", "sighting_of_ref": "indicator--aeada496-343e-4780-9501-9f1f010d1444", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3221bf-e479-4e4d-80a6-390b5ef026dc", "sighting_of_ref": "indicator--d6eb9a6f-4697-464c-bce9-c37d08ce811d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037846c9-22c3-4899-9101-b9004250c742", "sighting_of_ref": "indicator--d6eb9a6f-4697-464c-bce9-c37d08ce811d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983eb584-481d-46f7-806e-ab85b9fc68b1", "sighting_of_ref": "indicator--bf1bdcef-554a-4d98-aff0-f51fd0222087", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e5c798-edda-4af6-ae82-4b3b9551d35c", "sighting_of_ref": "indicator--bf1bdcef-554a-4d98-aff0-f51fd0222087", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db80c8d4-4900-466e-b44b-957114284ddd", "sighting_of_ref": "indicator--6ee7693a-5813-438f-8ba6-5b091e24e268", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4483c3aa-d6f6-4f80-87c0-f7c0ae6e16e3", "sighting_of_ref": "indicator--4ea5c574-ac72-4eed-a7a4-c541d75b2b6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3418b550-d065-414f-b1f5-40c4d497ff0a", "sighting_of_ref": "indicator--7a3b57f8-31f7-4faf-adf6-2701beec4430", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791495d6-7f2e-4992-920b-7c2268acb865", "sighting_of_ref": "indicator--7a3b57f8-31f7-4faf-adf6-2701beec4430", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f3f309-c700-445f-89fc-0a6c6777c4e9", "sighting_of_ref": "indicator--b6bbedae-7879-405a-915d-8587794e22ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1378a33b-84fb-4ad6-82f0-00cdf1d50e4e", "sighting_of_ref": "indicator--cf7e1c60-55e4-417f-a03d-c7c6048dd43a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88de3d6-dbaa-473a-bb6f-52b595546550", "sighting_of_ref": "indicator--cf7e1c60-55e4-417f-a03d-c7c6048dd43a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99abee63-cd07-49d8-9ee8-c7dfa13f931f", "sighting_of_ref": "indicator--485f3695-10f2-4593-80d3-eef96f5dc4f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5345b675-f0df-4a15-b2d9-0368db15ab20", "sighting_of_ref": "indicator--c2fcd3ce-5d91-48a8-8631-246a4a0a024c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e7ce51-99f1-4d2d-885f-82434ef72847", "sighting_of_ref": "indicator--b57edfdd-d53b-4299-afe9-e794983b543d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e6ed13-d518-44ae-acec-ebdc70f8a49d", "sighting_of_ref": "indicator--59314acc-f4ae-459e-8cba-00c1106c1b49", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a9e6c7-c3f2-4600-88f0-0f3f2244610f", "sighting_of_ref": "indicator--6e6407ce-6f18-4924-9043-c6dd6b4e8b77", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0b3fb7-7458-46e3-b384-e8c0f1d2ec22", "sighting_of_ref": "indicator--6e6407ce-6f18-4924-9043-c6dd6b4e8b77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be238c1-c549-471f-a44d-a185ca510822", "sighting_of_ref": "indicator--797f39ff-81bb-4b5c-ae43-90fdc7965063", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59446cf-a183-4420-9319-d899207209cc", "sighting_of_ref": "indicator--797f39ff-81bb-4b5c-ae43-90fdc7965063", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cad61df-c78c-42b8-8410-bf294cf29f58", "sighting_of_ref": "indicator--e3458310-2560-432a-971d-453ab4e1f89c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32db8112-5904-4cc6-a766-29236423b80b", "sighting_of_ref": "indicator--e3458310-2560-432a-971d-453ab4e1f89c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480e0911-8795-4521-b7cb-6845149f3ab7", "sighting_of_ref": "indicator--8aec5ed3-2a9d-4db0-91b6-7489efddd556", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecba9cd-8cf8-4435-8d2b-1575b30c937e", "sighting_of_ref": "indicator--335d9812-680a-4b02-9cdf-19c526eb7037", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c148cbe-a2c5-45f1-9df6-f7aeea56d242", "sighting_of_ref": "indicator--335d9812-680a-4b02-9cdf-19c526eb7037", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726d9f8a-ea5d-481d-93fd-67e265c3295b", "sighting_of_ref": "indicator--95dbf88f-71f5-490f-94fa-3964146e2875", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730312ec-66c6-4cfd-815c-d21edff03a18", "sighting_of_ref": "indicator--ff0a0291-3eac-47c8-8aa5-279697295af3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033f3546-c8ad-43df-8874-28b544ee7c9c", "sighting_of_ref": "indicator--1c3c6a7a-21e2-4907-a3ce-5ec09aa7195f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0e6600-cbfb-49ff-bc2b-e2955787c07a", "sighting_of_ref": "indicator--1c3c6a7a-21e2-4907-a3ce-5ec09aa7195f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f03c85-3a7e-48f4-9f9c-4a76f911ddd5", "sighting_of_ref": "indicator--a07a2101-2007-49ec-b8c8-ce3cd5e9ddc4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f775579-1180-459e-9c45-e6f56cd8632a", "sighting_of_ref": "indicator--be037e84-2929-4b67-850c-9addb65c873d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26a4e8b-ffac-4260-84b6-052180e25814", "sighting_of_ref": "indicator--d49776b5-33c7-4f65-8657-4c3316598299", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f94a02-0846-476c-a091-9838e4dc7913", "sighting_of_ref": "indicator--1703a4dd-e7c1-4857-b687-299d0668db20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c710ea2-f271-44d4-80b3-40cdb60d71d9", "sighting_of_ref": "indicator--1703a4dd-e7c1-4857-b687-299d0668db20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca475c67-d5d1-4f42-b1db-bd3ca092b4df", "sighting_of_ref": "indicator--c2a55ce8-0d68-4b83-8b12-d16769afdd3d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dda2f6c-f3d3-4064-a5fe-7240d3832fbc", "sighting_of_ref": "indicator--c2a55ce8-0d68-4b83-8b12-d16769afdd3d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13103e2f-9c2e-4c90-8275-b4a771f180d4", "sighting_of_ref": "indicator--2bb44764-99f8-4fdb-98b5-8b417428c7a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767827a8-ba22-4369-81e3-5451ab0cc1d8", "sighting_of_ref": "indicator--7e80ee35-c8d2-40e3-ac5d-17e37a018b4a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39207584-6394-4216-b463-1bedbc76f7a9", "sighting_of_ref": "indicator--7e80ee35-c8d2-40e3-ac5d-17e37a018b4a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca386dd0-3eeb-4676-a6e1-abf50cf6dfcb", "sighting_of_ref": "indicator--b315020b-84b4-4252-8cdc-32dc7936425f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8cb402-b738-45bd-9626-a5d1e1488bd2", "sighting_of_ref": "indicator--92044d54-6b66-4717-bb39-11296cc6b3d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7418e920-0b5c-40f9-952d-5d9fa6432300", "sighting_of_ref": "indicator--92044d54-6b66-4717-bb39-11296cc6b3d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15a0649-757c-4855-86ab-093959bd5a57", "sighting_of_ref": "indicator--2d7c1be3-772e-4117-be11-11bd5a4931ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04b9c4c-491a-4e0a-9572-938fa08834b6", "sighting_of_ref": "indicator--2d7c1be3-772e-4117-be11-11bd5a4931ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05dc7761-79c7-41d5-9329-0b82d18d7adb", "sighting_of_ref": "indicator--222a05a8-9b7a-4726-9a8c-8114f6be4013", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265c51c4-dd5b-4a6d-8ca3-c053b14cfe61", "sighting_of_ref": "indicator--222a05a8-9b7a-4726-9a8c-8114f6be4013", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8b338b-64c1-42b2-9507-b713b607fc17", "sighting_of_ref": "indicator--a56bd277-f661-4f56-a2f3-836c00141a45", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba0b2dd-0a6b-414c-b6c1-8871288bcf9b", "sighting_of_ref": "indicator--21ce8547-113f-4d26-89a7-4536e549135f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38566efe-1fc7-478f-ae6d-4f7c68ea8d82", "sighting_of_ref": "indicator--21ce8547-113f-4d26-89a7-4536e549135f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc97a2b-ad31-40ec-87f4-7c6f7802b8ca", "sighting_of_ref": "indicator--21ce8547-113f-4d26-89a7-4536e549135f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbce8fb4-1ac5-466c-b719-3e1581aba697", "sighting_of_ref": "indicator--fbe21f8d-fbd5-447e-9c29-207ff5b86e3e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cad34c-97ca-451c-bf05-5196e96e16cc", "sighting_of_ref": "indicator--fbe21f8d-fbd5-447e-9c29-207ff5b86e3e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38e434e-e2c5-4660-85fe-9d72f05044f4", "sighting_of_ref": "indicator--fa2df64a-f80f-4c3b-8324-077e1a12fdb5", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa238c8-e3cc-4328-b3ef-5a617cdc16cc", "sighting_of_ref": "indicator--3a5954ea-6e20-4d74-b2a8-ac3a76d7e1fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37731640-ddc8-4c55-961f-19b12785d846", "sighting_of_ref": "indicator--a1d8c984-442c-4beb-b2bb-56aa69722cb0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d732be4-d768-4a1d-ace7-e0cba0751807", "sighting_of_ref": "indicator--a1d8c984-442c-4beb-b2bb-56aa69722cb0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1211265f-d90c-4089-93fe-023741dda749", "sighting_of_ref": "indicator--d0d9e0a0-d6c6-4acc-877c-06637d505531", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e8635e-5de1-47ad-be25-8dd7e70e161f", "sighting_of_ref": "indicator--d0d9e0a0-d6c6-4acc-877c-06637d505531", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7794042-bdf9-46c3-bab5-7b45b3142f2c", "sighting_of_ref": "indicator--900da2fe-3b26-4e47-a602-7956f9f9a185", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b899758-cd32-469d-9dec-d9a09376a935", "sighting_of_ref": "indicator--f76891c4-7f25-4a1a-b327-6b7e4cd0753f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c50448-b3fd-4665-bcd7-3c17ef083762", "sighting_of_ref": "indicator--77afd163-7a8f-44a7-b677-cfe87e966598", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f8ff13-c9c3-4235-bff6-6b602b498855", "sighting_of_ref": "indicator--5bb8de95-c338-40b5-9e77-b82fef8669fd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5677c5-f9f0-4981-b695-d9569da9e0a5", "sighting_of_ref": "indicator--aaf6ad82-d31a-4920-abf2-2cea3c321aa8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a3a20e-8e06-474b-acc7-0b4ef0989f3b", "sighting_of_ref": "indicator--28f8e5c6-e360-4375-9702-a570fd29b348", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcfb2e9-e61b-4433-8b3a-e28d3dad64a3", "sighting_of_ref": "indicator--2596d5c5-65b7-4ae2-bdf4-baaea523af0b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a109bbf-cf9b-4c75-b1e1-4de79054f2a1", "sighting_of_ref": "indicator--1b65d867-4526-4188-80f0-50084ac3ff0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196ce00a-38d2-4fa3-9916-d5a45e6c474d", "sighting_of_ref": "indicator--1b65d867-4526-4188-80f0-50084ac3ff0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f32f47-e8bd-4cf6-8171-ef9358ebc0ce", "sighting_of_ref": "indicator--4460249d-9680-494b-a89d-ff5cd07913f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804bbf5c-a8a2-4150-90ee-2d8ab1f7dde1", "sighting_of_ref": "indicator--da073f01-4eb4-41f2-acdc-1d2800d1685b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d41fcc-e8ad-43b3-af34-9b82cefbcdc6", "sighting_of_ref": "indicator--c250023e-1ea1-4f86-8aac-4bc1572e5285", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcc8cd8-c150-440f-9dc7-e22698da4bd9", "sighting_of_ref": "indicator--4390e966-6e07-4dd5-bc4e-76a65a274d3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4522b7fd-938a-42fb-9432-ad1e4059f536", "sighting_of_ref": "indicator--3e6fba80-6aed-431d-8e63-46e078bdab42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f61c9a5-792d-41af-a70f-bf4964b81a5a", "sighting_of_ref": "indicator--e9484e1a-b4a4-4089-a908-939798fa0874", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa91d43-3011-433d-b67d-a08d23eac776", "sighting_of_ref": "indicator--e9484e1a-b4a4-4089-a908-939798fa0874", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eef0fab-e40d-42b4-847f-5afcb7f58ac9", "sighting_of_ref": "indicator--6bf20c61-2909-40ca-aca7-d975be9ef7e5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673b23c5-a0b4-4c65-8c24-67237822d667", "sighting_of_ref": "indicator--f00227b9-fd36-4016-b393-ea74d3503acd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86d8c11-0e37-4025-838f-626f4cf2d2b4", "sighting_of_ref": "indicator--f00227b9-fd36-4016-b393-ea74d3503acd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ad87c3-b9ec-4fc6-902d-758116803420", "sighting_of_ref": "indicator--7df7dfad-96f1-425b-b573-b25bb1d24f6f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc45f21b-8b78-44ce-8423-fc7dcb6a12e3", "sighting_of_ref": "indicator--7df7dfad-96f1-425b-b573-b25bb1d24f6f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf827ce9-fa23-4b13-ba75-db407042ce49", "sighting_of_ref": "indicator--c031a60e-fa64-4d7f-8877-64e84a0961a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f363d8-bf3e-4396-b499-0cec687d9ee1", "sighting_of_ref": "indicator--0fdc308b-3b7a-4d5d-a020-f5ab2748cc22", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ba4fb9-0a3e-4f20-86b0-78ecfd306d96", "sighting_of_ref": "indicator--37fac4af-cb0c-4447-9fdf-28139b378612", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba22cd78-d675-41b4-9b8b-1acaaad42e9c", "sighting_of_ref": "indicator--37fac4af-cb0c-4447-9fdf-28139b378612", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb5c827-9c47-4cfa-8509-e199280d4762", "sighting_of_ref": "indicator--2acb45b5-f753-44b8-830f-8966db1b6a2e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2134a610-8dcc-4f5b-9bd8-e317b394c52b", "sighting_of_ref": "indicator--e7c9aba9-6f2b-42ea-8646-ce8fb46eccc7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dbb735-e590-44df-8cf6-f2fc6b40f262", "sighting_of_ref": "indicator--5b1c5b04-5c42-4bd3-8dc1-166e3818c00c", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9ff344-50a3-416e-b398-06abb1cbd952", "sighting_of_ref": "indicator--904d5546-bd9e-4477-9e73-d2d54c24c0c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcb7ac7-807a-4157-a9d2-663dfa2b12ea", "sighting_of_ref": "indicator--2ed0a20a-e389-493f-bd20-f08ef452083d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67877df1-f59c-4fb2-ad6b-340c4026d310", "sighting_of_ref": "indicator--309c7a84-b17b-4077-8cde-7ec9248c41f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ee2dc1-88da-4ea8-a699-bce357d4fdb6", "sighting_of_ref": "indicator--309c7a84-b17b-4077-8cde-7ec9248c41f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce818fa-5303-43d2-aa5b-e32420bd941e", "sighting_of_ref": "indicator--55b36ba0-819f-4e14-980e-024603992d2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7531d7-6f72-4202-938e-b126c7eb998e", "sighting_of_ref": "indicator--55b36ba0-819f-4e14-980e-024603992d2b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63cffae-d342-4d54-8093-ce8954242178", "sighting_of_ref": "indicator--e21f5b2c-5f8b-4c89-b547-e323dd8d0010", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162621e7-be11-48b1-ac46-129e4a964bf7", "sighting_of_ref": "indicator--28a44ee6-0354-4453-8b35-ed2ff414bac4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673d59de-9d4e-434d-a456-237e119f6305", "sighting_of_ref": "indicator--a5d7621c-886d-4ac3-b521-59c6708cc09b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1a34b3-6976-4874-8da2-632fd9e4cf0c", "sighting_of_ref": "indicator--4e6e305b-a6a7-4a57-8cd9-f642100cce7c", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc150996-5402-4ff8-ba51-3a551d34da7a", "sighting_of_ref": "indicator--d5fba9f3-bab7-4881-8519-fdeee2b434ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b3d6d2-8d84-40bf-b502-1367047858cb", "sighting_of_ref": "indicator--d5fba9f3-bab7-4881-8519-fdeee2b434ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9c3aca-b1ea-423d-9e75-6133d750fd37", "sighting_of_ref": "indicator--be694842-ca41-4be0-bb3c-ab7b2ea72d7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bba2c0e-b961-4eed-bf6e-d2b8b9394540", "sighting_of_ref": "indicator--00d455e3-9ee7-480b-992f-53168116f1a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e870564b-b13a-4d7f-8d2b-816d180fc173", "sighting_of_ref": "indicator--00d455e3-9ee7-480b-992f-53168116f1a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ae6751-60b6-4acc-a188-9aa15761b164", "sighting_of_ref": "indicator--fa9e3754-8327-4389-8a15-d5b767d7468d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c5a06c-2a7d-4f80-a97a-8b6da7d45645", "sighting_of_ref": "indicator--49b98e99-daa2-4ab9-89e4-9f32f29dbe2d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7eb324-23b8-4aa5-9bcf-d7370d092ac1", "sighting_of_ref": "indicator--49b98e99-daa2-4ab9-89e4-9f32f29dbe2d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f44d36-5e5a-495c-a8ce-c07130937fcf", "sighting_of_ref": "indicator--9c5674e4-c95e-4813-914f-2aed0abd9616", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24003c06-2e63-46e6-8266-19b02dfc2efa", "sighting_of_ref": "indicator--7fb2fa22-d034-4f55-ae99-552a0a3734aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805cf5cd-668b-484f-b98c-0e0bd743a427", "sighting_of_ref": "indicator--1798a6ec-1f3b-4267-8fa7-791fc2c999c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2667beac-dc78-48c3-ad9d-d5b35d91b265", "sighting_of_ref": "indicator--1798a6ec-1f3b-4267-8fa7-791fc2c999c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f118f8-e46c-4a80-a7c4-24fb60f5a128", "sighting_of_ref": "indicator--5f4a49dc-2c54-4572-8c63-e77ccf54c714", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c06e9d-1c4f-48ee-9202-d20f46a0353a", "sighting_of_ref": "indicator--5f4a49dc-2c54-4572-8c63-e77ccf54c714", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7737b220-0633-4de3-8d80-4a87193c18c0", "sighting_of_ref": "indicator--bc2045b7-fddc-4680-850e-4c9ccee28aa6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fb0d6c-3318-4558-a18b-5555e2846a2a", "sighting_of_ref": "indicator--1ebaf546-6974-4518-8b36-f3ef7a98e12a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e57971-f0f3-4f6e-91c1-be400a6b5adc", "sighting_of_ref": "indicator--1ebaf546-6974-4518-8b36-f3ef7a98e12a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfb59fd-cc62-42c4-a76d-cc116a531dc2", "sighting_of_ref": "indicator--402f0c48-f1d1-4623-8c3f-e72858949671", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2692b8-bda7-4eed-838b-d680f2573ceb", "sighting_of_ref": "indicator--c9ffa678-9d61-4c1a-ba42-9950d3677c65", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40886910-a289-41ef-9f5f-318a46383529", "sighting_of_ref": "indicator--4e7dd018-fe5b-4f46-8900-3d697c827b37", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1e49bc-368f-4d3c-9486-2d5d638e6432", "sighting_of_ref": "indicator--4e7dd018-fe5b-4f46-8900-3d697c827b37", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e198a76-fad0-4838-b7f1-564847dbf3b7", "sighting_of_ref": "indicator--f577f5a2-0ff7-4957-a44a-3463bd186bf0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163075db-fb6d-4446-89bb-d7f2440de149", "sighting_of_ref": "indicator--9e728596-f619-4904-81cb-ebed84d2eaa4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49681f42-f96e-42b2-9b0d-734ae095ac7d", "sighting_of_ref": "indicator--255ea533-1370-4060-9276-8de41fb57a4f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdeb5967-7f52-4851-bb1e-ec6e59d115a0", "sighting_of_ref": "indicator--0f87567a-a403-4c76-b67f-0b680a822988", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d60292c-0e29-464a-927f-fdb7709e0fa3", "sighting_of_ref": "indicator--b32f5a12-0505-4b11-b34f-0ef618f2ba5f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e762fb-855e-4a9e-9153-f34cceddd617", "sighting_of_ref": "indicator--48b7c8fd-24db-4b97-aa32-05e5ad37f93d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e8518a-dd44-429b-aa34-a4acb6b5db0e", "sighting_of_ref": "indicator--9f5d2a0b-88d4-4f4e-b5ed-6fe4db248886", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03135b0-418d-42e3-9f1b-d8ad3026036d", "sighting_of_ref": "indicator--9f5d2a0b-88d4-4f4e-b5ed-6fe4db248886", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b8d923-f349-49cf-9cc0-b212a097e129", "sighting_of_ref": "indicator--587380a7-99bf-4c0b-a4d3-f8c2b81b70ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830ad30b-9ea6-4444-b142-78a5cf9827c0", "sighting_of_ref": "indicator--10a1bdf8-e361-4115-adc0-0c65caa701b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1432ee1f-aa00-4d8e-b62c-756881178a4f", "sighting_of_ref": "indicator--1236dc26-ab2b-430a-8e79-1b7a4047eb25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c563e7b-1ac9-40b0-88e5-a05166e551e6", "sighting_of_ref": "indicator--007423e0-1cd6-42a6-ab62-e056aa143db7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e878c037-d24a-483f-978a-1cc791c82b86", "sighting_of_ref": "indicator--a4fe5f7f-4c78-48d3-853c-4d34d606624d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262b70ee-c6e4-425a-a93b-f36b85323633", "sighting_of_ref": "indicator--1ebf00a4-4707-47c5-a329-e5723d56b324", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b12409-304e-4786-b55c-7e735f243d2b", "sighting_of_ref": "indicator--d7d6bf97-d6c2-4225-93d2-6efbb02d558a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822f248c-1733-4778-b5ed-4cb4506a8229", "sighting_of_ref": "indicator--4e41d739-8df3-42a1-93af-32cf1d93014c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa64bf2-0544-47ce-a16a-5edf851fa953", "sighting_of_ref": "indicator--32306e9b-2adc-49bf-8821-ea367889681f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0ea9c9-a197-410d-a8cb-3187ff8be649", "sighting_of_ref": "indicator--f55b96bc-8f4c-4c0f-a0e3-df937bab334c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d1c35b-a187-441e-97cd-b9a046c3834e", "sighting_of_ref": "indicator--f55b96bc-8f4c-4c0f-a0e3-df937bab334c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e70ff58-4810-4845-8197-cf16866051a4", "sighting_of_ref": "indicator--0d9485dc-04ea-4148-b805-ca4134a42656", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd64ef5-ef63-4c56-b468-1a7d79d2a8d0", "sighting_of_ref": "indicator--b19937c1-9496-4f32-96c3-47ea6c533c8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa371a9a-c069-4afe-ada3-b3597a0c75e2", "sighting_of_ref": "indicator--0a7aa92f-4158-4080-ad76-6468715d9df3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3152f8ac-172c-43eb-ada2-5d641a228bb2", "sighting_of_ref": "indicator--4a8f7f7c-13b2-4b91-887a-e833a281b8fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f79f57-9479-40ee-9e49-0528c036e675", "sighting_of_ref": "indicator--4a8f7f7c-13b2-4b91-887a-e833a281b8fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acb2ff2-f367-4e1a-bc7e-1540d1e4245e", "sighting_of_ref": "indicator--3d1abc28-1863-4ed3-bee7-c838c8265f6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c8c26e-c7e6-45a1-986f-43abd05920ec", "sighting_of_ref": "indicator--3d1abc28-1863-4ed3-bee7-c838c8265f6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934e1560-c2e8-429d-951e-cbddee5bf3a0", "sighting_of_ref": "indicator--3c4e22eb-dfe8-401b-bb1a-d31166f353d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63a5d02-3870-44ba-8653-3b34962165dc", "sighting_of_ref": "indicator--e5885ccf-4b74-4dac-a14a-a4250683bc9d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b1f156-ef0e-43da-bc4b-22478b30b721", "sighting_of_ref": "indicator--ccb1c16a-8cdd-4cec-9fab-be607b1c5352", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade41bff-de7b-48b5-aee1-37d9dbcecaf1", "sighting_of_ref": "indicator--6054fcd1-8f61-425c-9b9a-984cc3206ceb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0962c0ce-cbb1-45ca-9bb1-57cf56056410", "sighting_of_ref": "indicator--6054fcd1-8f61-425c-9b9a-984cc3206ceb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3c143f-8a9e-4787-a4f1-b2392602fd45", "sighting_of_ref": "indicator--c2fdfdf7-aca5-4f70-b146-3484eb339d29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debd60bf-b310-49cb-825b-b1e822da726b", "sighting_of_ref": "indicator--e7e1ed45-f8e9-46e0-acea-4ea667e7e97f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2d40ec-51ae-45d2-9a32-628b54dd5b72", "sighting_of_ref": "indicator--836c257a-9448-4c2d-b886-0e33076e4131", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d953df-e2ce-44c2-822b-f012df389240", "sighting_of_ref": "indicator--2d1a6082-5e06-4e19-8fd3-5a9868c3686f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd893523-236e-4159-8d32-41324c328c0e", "sighting_of_ref": "indicator--2d1a6082-5e06-4e19-8fd3-5a9868c3686f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5156241-56c7-4010-ab53-1befbb4f21e3", "sighting_of_ref": "indicator--fea5a852-d485-456a-93da-39c310b22e48", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7074b8-4452-436d-83c5-2dd2457edfa6", "sighting_of_ref": "indicator--fe629e5a-f831-41a3-a85e-b883b6002c82", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b7399d-622d-4c5c-8f34-c6b9a6ae91dc", "sighting_of_ref": "indicator--fe629e5a-f831-41a3-a85e-b883b6002c82", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddca6a97-8f72-4915-bbb5-604c0561a823", "sighting_of_ref": "indicator--511b6e48-c6c9-44b2-a390-79ef3584327c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7076e1-fbb4-4a77-a8ca-997fc7f264b5", "sighting_of_ref": "indicator--511b6e48-c6c9-44b2-a390-79ef3584327c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346e7575-d600-4ea5-8fea-5367f28ab030", "sighting_of_ref": "indicator--0eea5ca9-7103-41f6-ab4a-b42256d35dcc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03099735-df68-467f-af5f-54a420b3c0cb", "sighting_of_ref": "indicator--0eea5ca9-7103-41f6-ab4a-b42256d35dcc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8425f7ed-f401-4a74-a483-ba2b3f09b1d1", "sighting_of_ref": "indicator--84c0bdbd-73af-4f73-a1ae-f97bdeb46bed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef6e0f9-39cb-4f7c-b443-0c31ec151449", "sighting_of_ref": "indicator--84c0bdbd-73af-4f73-a1ae-f97bdeb46bed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6e004a-8290-4929-bd28-572250cb361b", "sighting_of_ref": "indicator--bd5ecb72-50ef-4837-bf57-dd9cf1ba4e22", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a113bfe7-d66f-4cbc-9b19-d65f11a513aa", "sighting_of_ref": "indicator--bd5ecb72-50ef-4837-bf57-dd9cf1ba4e22", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04cb859-2c73-4fc7-89b0-cd5ae7e0ef7e", "sighting_of_ref": "indicator--0e17a653-c1a4-44b3-8aa1-61d4a342e27a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7de52c9-0ccd-4320-a7ef-80dd70974d14", "sighting_of_ref": "indicator--0e17a653-c1a4-44b3-8aa1-61d4a342e27a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b904d6-bae9-4f18-9fb4-cfc55049204b", "sighting_of_ref": "indicator--5d0abd86-ec04-4a23-b46b-2f168c19f93a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74895411-9e95-4b71-ae09-0de9b0608fea", "sighting_of_ref": "indicator--3a2a3167-4624-4d1a-a0d0-3fa9dc990fd7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3608c95-3ffa-4416-a6e9-2bf80094f581", "sighting_of_ref": "indicator--4c92bd2b-2dbf-43e0-ba21-abdb0dfade6b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ee52fa-6135-45e1-9df2-a6f2f3b7ea06", "sighting_of_ref": "indicator--4c92bd2b-2dbf-43e0-ba21-abdb0dfade6b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f9e473-bd82-4192-9bbe-80f3b3f44ffb", "sighting_of_ref": "indicator--7430fc6f-f776-4a4d-9e5c-8d4344be7067", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecae7d08-642b-4df2-8b5c-14879e023511", "sighting_of_ref": "indicator--d13edb86-0c1e-4d36-ad10-3f4faa16129f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241f92c6-c410-4b06-804d-3c93e86f8c1e", "sighting_of_ref": "indicator--5b7ba57d-2e9a-4e03-a470-4865d3da4a0b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231f1d5f-7b20-4e4b-a573-f8267fe7781f", "sighting_of_ref": "indicator--2b8df8b9-1507-4942-96ee-e44029ee0b66", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d902278-8775-4c61-a025-86521b137451", "sighting_of_ref": "indicator--889f9b3a-0385-4d52-832e-c5733c63c9d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aace297-7faf-468e-ac76-671792ecd378", "sighting_of_ref": "indicator--e43ed4ba-0d70-42cd-bb22-24e1a06a33ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b494b2f-7e4f-4bf6-9bf9-56db3f4fc6f8", "sighting_of_ref": "indicator--98446097-f0b2-46f4-ba0e-6a3eaf59c9ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e03ffe0-8635-484d-b778-215d4bde953e", "sighting_of_ref": "indicator--98446097-f0b2-46f4-ba0e-6a3eaf59c9ce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5154ddf-ee3e-4627-a4b0-372ba53ce736", "sighting_of_ref": "indicator--1ec39927-2215-4eee-a89b-9a33e0f75e87", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ea6432-2d0e-4d1e-a18c-647c4243bdee", "sighting_of_ref": "indicator--1ec39927-2215-4eee-a89b-9a33e0f75e87", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ed32bf-458f-489f-8ac5-330e54b4d110", "sighting_of_ref": "indicator--dd96931a-ba6a-4d0d-838d-0f0d56e6b29a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d417fd6-3170-47f8-ad11-41e84f59248e", "sighting_of_ref": "indicator--dd96931a-ba6a-4d0d-838d-0f0d56e6b29a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a2ee60-4f62-4f15-9bf4-4a39b75b707c", "sighting_of_ref": "indicator--16abf94b-cfe2-409e-9367-a671d19fbfde", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03eea94b-c5ce-4ea7-ab5e-6c641deab21e", "sighting_of_ref": "indicator--16abf94b-cfe2-409e-9367-a671d19fbfde", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb0026b-c603-4d09-be4d-de5357f1f8fd", "sighting_of_ref": "indicator--dafec83c-0f5e-4822-a9c8-13c1f1b10d3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3673a6-3b5f-46cc-966c-005c27dce07e", "sighting_of_ref": "indicator--d2ebfec3-bac3-4eea-833d-9bda85cb3e81", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4945d4e5-332d-4ae9-8a3d-709d38d43c60", "sighting_of_ref": "indicator--d2ebfec3-bac3-4eea-833d-9bda85cb3e81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a391dc01-4271-4b60-a9a6-37240b0e05fe", "sighting_of_ref": "indicator--2c80cf5d-8129-4a81-b09f-0c6b8d7a3379", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406fd742-7f9b-4186-8838-e9ce127e4fc1", "sighting_of_ref": "indicator--d04929ea-7899-4ba7-a91e-9543857d4a90", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac80570-b5a3-4b89-bafa-8069cc0ba1b8", "sighting_of_ref": "indicator--b6a659d6-4817-431d-af88-dbe611a7d7ea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b71ee49-334f-4a91-9333-00ba605a07d1", "sighting_of_ref": "indicator--bdc48ec0-4e69-4c47-a715-b19a50e2911f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2843c1e6-6dd7-4bb4-a19e-9d83c58ea0e8", "sighting_of_ref": "indicator--bdc48ec0-4e69-4c47-a715-b19a50e2911f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b38afa-92ef-4fa8-98f4-95417ff163ea", "sighting_of_ref": "indicator--d3deaa6f-5e39-4406-ab32-afef430d67f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bb1734-b4ba-43ab-8afd-bdd8253d0ce0", "sighting_of_ref": "indicator--bc3b4e2c-bb63-4d53-9b46-0c74a23fd718", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9fa474-6191-4bbf-b62c-13a6fcde7472", "sighting_of_ref": "indicator--bc8929a7-6e2c-485a-813a-b6e2231ce3df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc8f644-4194-43a9-8d1f-459652e8380c", "sighting_of_ref": "indicator--f19d4ecd-9654-4bc9-a8e0-e9d1d9e58a7b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68069e7d-b5b9-4db7-b47c-b9aa5fbb6051", "sighting_of_ref": "indicator--d5add8c1-4de1-4440-bf0a-0a161a66b573", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fd458e-9ee8-4045-acfa-29f56fdf3ba4", "sighting_of_ref": "indicator--15c69738-2031-42cb-8d4e-2907ab6daa23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02f0a43-737a-4a2f-83ce-fefa4f8b6230", "sighting_of_ref": "indicator--5b184d74-e69b-48b6-b396-610eeb5a2b4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151f019c-e82c-46ce-81cb-a6095d74a163", "sighting_of_ref": "indicator--399ef0c1-b67e-41e6-ab23-3c65d9293517", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faec31cf-c457-491d-b4ea-ba211ac09f34", "sighting_of_ref": "indicator--399ef0c1-b67e-41e6-ab23-3c65d9293517", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb13bfc-9fbf-4d68-a3f4-8d77e99c572f", "sighting_of_ref": "indicator--af057484-1c46-4f66-af65-62af6b74b571", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5419a69b-93a2-427e-aa53-a9db784b1d66", "sighting_of_ref": "indicator--9a115302-a6cb-4d4b-badf-c3e8ec307033", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ad5d6f-1d0b-470a-a5eb-098ba28f4607", "sighting_of_ref": "indicator--9a115302-a6cb-4d4b-badf-c3e8ec307033", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f075e1ce-7be6-40bb-9c6c-f6e1032bef49", "sighting_of_ref": "indicator--4e7698f1-893b-4b46-b837-7ad4bf427610", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdc6023-6072-475d-aab2-13010eecef34", "sighting_of_ref": "indicator--5311099c-cba3-431a-a954-eacddc30b641", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6ae4e0-0843-4fd3-8ccc-d5914ca9cd4a", "sighting_of_ref": "indicator--5311099c-cba3-431a-a954-eacddc30b641", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067c26ef-a8cf-48b1-b9a3-81031c055ded", "sighting_of_ref": "indicator--926a73f4-91ea-485a-ae5c-00454c40974a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5070ebd-5dab-46e1-8192-9e0178ff285e", "sighting_of_ref": "indicator--d16fad45-a95f-419a-8d9c-c69b487a1a52", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4687212a-4ee3-4057-a8b1-9a12d2f2707d", "sighting_of_ref": "indicator--8a6ff35f-79ce-4ed8-bf25-eb0b43f22af6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7e4caf-314e-4da5-8083-a1b13ca7373e", "sighting_of_ref": "indicator--8a6ff35f-79ce-4ed8-bf25-eb0b43f22af6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13015d78-f16a-4c91-9153-f6f409501db4", "sighting_of_ref": "indicator--28838259-1c5e-4041-9369-f44a778bdd18", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4217a4c2-54a3-4022-a383-119efbc56aef", "sighting_of_ref": "indicator--28838259-1c5e-4041-9369-f44a778bdd18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcc081d-94da-42cb-a517-f4c1e5c68022", "sighting_of_ref": "indicator--362f777c-4532-4343-88b9-6a1fa3d83fe1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c77de8c-f02c-458b-96ef-9b13a5f7c0f1", "sighting_of_ref": "indicator--5a31f0f6-d051-423a-8a8b-ae7bca8b2116", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06aa577f-1296-46a2-a19b-1941f45cf3a3", "sighting_of_ref": "indicator--5a31f0f6-d051-423a-8a8b-ae7bca8b2116", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0559609-9b38-4bd8-a92c-5b7216f25220", "sighting_of_ref": "indicator--7f43bc23-fb78-4a22-acf1-66a458e5eecb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5320f813-ec25-403d-b1a6-de88060443a2", "sighting_of_ref": "indicator--8579d123-5a1a-4aeb-998b-2fa8c32578c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7a4991-b863-485d-abf6-92cde08a66da", "sighting_of_ref": "indicator--8579d123-5a1a-4aeb-998b-2fa8c32578c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7911988-300a-4917-b6e4-ddf25a79f265", "sighting_of_ref": "indicator--222a5ff6-33b7-4a27-87e7-b49bb6184cc9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2b53f2-3106-4b7d-956a-a8a048690015", "sighting_of_ref": "indicator--e81192b9-b1b9-4c04-9e54-04ada07a9b8f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9426a252-dbf3-4346-9063-c974239b2bee", "sighting_of_ref": "indicator--4e11f0ac-cf83-4e93-a6c6-f6b6880fd8b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb489b42-3960-4f30-aa8d-5c6ec1dc6321", "sighting_of_ref": "indicator--40a1f3d8-70d6-468e-b46f-017c8d0156e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c4b9a4-9b74-44d3-aade-c6f59d5684f6", "sighting_of_ref": "indicator--40a1f3d8-70d6-468e-b46f-017c8d0156e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f45f8f-fa6e-48fb-8a11-221d0d9fdf6c", "sighting_of_ref": "indicator--7b22bc5f-fa66-47cb-82b6-16b552331e47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e697f94a-6592-4e9c-ab45-a0cfbf57d0d1", "sighting_of_ref": "indicator--8385328f-3c89-4c0b-9e10-94899633187b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f3d249-4ad0-4abe-8a59-42e72debd34e", "sighting_of_ref": "indicator--9ddf1687-6bf9-413e-92f0-b2e0ba243716", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03884ddd-1c37-4a1a-99ed-ac7f5c3609b7", "sighting_of_ref": "indicator--bd76fd8f-4097-46a5-bc7d-95bbec555d11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edc4498-1e66-4b41-bc99-f3e0b110df25", "sighting_of_ref": "indicator--bd76fd8f-4097-46a5-bc7d-95bbec555d11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea47cfba-0777-4457-a3e1-a49a9cb93368", "sighting_of_ref": "indicator--230a90a3-4e78-4efb-baa4-7a160276e652", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c58e379-9f04-42af-af68-b6e0cfa80421", "sighting_of_ref": "indicator--cecaca49-b490-4f7b-8ce9-d7679aaf7879", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd77952-2343-4c05-849e-011394396bde", "sighting_of_ref": "indicator--95eb3077-4b5f-4434-b0e6-4c92c4fb743e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26739ca-3401-4e93-aade-680d7fb74595", "sighting_of_ref": "indicator--c3ded0d0-5d1b-4e62-8de5-b7e37501ef8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8353d4-8c33-4b9b-b708-7a915a32dadf", "sighting_of_ref": "indicator--9c3c4dd6-c67e-4a82-8086-b1112d3d6689", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9beae42-3034-4d96-a647-909b6171369d", "sighting_of_ref": "indicator--7d54f1b1-6161-4840-8304-9351e306afad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d143d579-47cd-440c-b725-e1b8449a742d", "sighting_of_ref": "indicator--7bda99a9-89bd-43a9-bb36-6d20036a7faa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1e6d71-8d9f-4ee2-8deb-c96b75850405", "sighting_of_ref": "indicator--27702fac-c078-4ace-8a81-96d7377adeab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26235062-ebb2-4244-a1d6-d09176f1d209", "sighting_of_ref": "indicator--2ed1e33e-4e48-4cfa-ba0a-d1013e62671e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502fef8e-3790-4533-bc52-45465ec2a47e", "sighting_of_ref": "indicator--2ed1e33e-4e48-4cfa-ba0a-d1013e62671e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c530902-8142-421e-a55e-e95d84c6f55c", "sighting_of_ref": "indicator--7a670cc8-15b4-4a00-b64c-f57b93cd9779", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d120074-ce47-4b28-a6ef-ee4899704e3b", "sighting_of_ref": "indicator--2ebc2ea6-be3e-42d5-b8f8-3f53a8d4b524", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ad6ea7-49ac-445f-bdb7-a4c532564cda", "sighting_of_ref": "indicator--00e3af3a-5b5e-45c3-a642-a9d9b4f679d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cee2bf-ebfd-47a5-81ee-7fae28d0e612", "sighting_of_ref": "indicator--b13e16c9-5665-423b-a776-ea27471410d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37c1b2f-e433-49e6-b510-885f6d2f8b0d", "sighting_of_ref": "indicator--f7c471ba-d1e5-4f9e-9fdc-91ae4db758bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf84f398-53c5-428b-8999-b993ff382b33", "sighting_of_ref": "indicator--c6fc8366-b0a9-40db-9e0b-40689d780c32", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f3e701-1245-4fdf-994f-df353d213fd9", "sighting_of_ref": "indicator--5d80b36a-a007-49b9-b017-1af4d91f7635", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b65e3d9-c097-4d2c-ac7e-4723d77e578b", "sighting_of_ref": "indicator--8572d9c3-35b0-4d99-badf-d4988d1ccf22", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206c6fcf-05eb-4421-8ccd-e2c8963e1a7b", "sighting_of_ref": "indicator--2fc0b8b9-349a-42af-a2a7-0337d29021b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a81d051-f8fe-40eb-81fc-ae39f82fc24d", "sighting_of_ref": "indicator--df1cd2bf-4a66-4220-bbe5-46bac2d60cc9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e05737-b749-4018-8d33-f28f0d34b0e4", "sighting_of_ref": "indicator--df1cd2bf-4a66-4220-bbe5-46bac2d60cc9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1372dc01-8129-4527-9508-d2af9d65b467", "sighting_of_ref": "indicator--40def7a2-77ac-434f-96e1-df069fcccd2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a45a05c-b864-4fe2-b881-36a45c23c3e3", "sighting_of_ref": "indicator--30fac12a-8e0a-4760-a4d3-ca5f9d767cc6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a34462-2a23-40d9-ba48-609b9a2e4b4b", "sighting_of_ref": "indicator--7b749a09-5dee-436c-996a-d640220923e5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4da9a4c-8f94-4281-9dc5-0733348bc968", "sighting_of_ref": "indicator--7b749a09-5dee-436c-996a-d640220923e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bafa71f-6031-4646-9d03-8a516adcdeb0", "sighting_of_ref": "indicator--813180c6-dc2c-4a87-be10-4e63d948c454", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9b4d33-830a-4a5b-9600-43f9a4a11ce6", "sighting_of_ref": "indicator--8b00c33f-3603-4b45-a5b1-bee48852a44b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e6e318-ccd4-4025-87fb-f1261598c7ff", "sighting_of_ref": "indicator--07f6dab0-d0ce-42f3-bdaa-c1b4ec1b5969", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca4fd6e-8492-4daa-9681-5293e8c8e48d", "sighting_of_ref": "indicator--32656604-ac7c-4c74-9141-aa0df9d4bdd7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95472388-2ab9-4d15-89da-ea7c5e49f6b0", "sighting_of_ref": "indicator--11da2306-4a58-4d49-b6d7-8c4579c5d241", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f00b72-1ba0-484b-b041-30cb602ca92c", "sighting_of_ref": "indicator--a2143782-d61c-42a6-a4c9-e9052b70e805", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a4bea9-cb5b-4061-8682-d00cd40beece", "sighting_of_ref": "indicator--a2143782-d61c-42a6-a4c9-e9052b70e805", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792395a7-60f5-4dde-8fe2-9d66e659eea0", "sighting_of_ref": "indicator--7e043358-d74f-4463-9497-106ebd336dd5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead80503-cba1-4f78-a502-957f34ab9a72", "sighting_of_ref": "indicator--0a4ddf90-d1bb-48a4-9cd3-7357274df0a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf64e6b-52ff-4aba-a5f0-1a62f6b34be3", "sighting_of_ref": "indicator--0a4ddf90-d1bb-48a4-9cd3-7357274df0a6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac9ce18-7863-4e6a-a9c3-7844e7b6e8e4", "sighting_of_ref": "indicator--8b912e84-5821-4a3e-a5a9-5383ed871b06", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9ec788-22fe-4349-a30a-9ed3be919f9b", "sighting_of_ref": "indicator--065edaf9-6984-4de4-af7a-bd00eade037a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430b50e4-7488-4e9a-88da-ffec5baca6c1", "sighting_of_ref": "indicator--9314a3aa-07ff-4876-82bc-73586c144789", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f84509-f2cf-493b-9480-b54e30f91f9f", "sighting_of_ref": "indicator--e5ab9518-1475-44b7-9881-724f5146d895", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4ab443-49ec-4778-8802-edf8209b9ba4", "sighting_of_ref": "indicator--e5ab9518-1475-44b7-9881-724f5146d895", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26eeb087-4c65-41b9-b7bb-3e469366632d", "sighting_of_ref": "indicator--847911d2-2ffe-4a0b-a63b-3871ac6475c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276a502b-a24b-431a-a772-63c9217904fd", "sighting_of_ref": "indicator--847911d2-2ffe-4a0b-a63b-3871ac6475c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0aac32-553f-47b7-b828-e173fdcf29a4", "sighting_of_ref": "indicator--53a2fb26-af66-41c7-b42f-a375ed20eb88", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daef9c17-13d7-4448-8db6-4972f67e8744", "sighting_of_ref": "indicator--22118857-e391-4702-9726-73a9106ca5f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f9958b-9280-40c4-adc7-333cb4a2c238", "sighting_of_ref": "indicator--22118857-e391-4702-9726-73a9106ca5f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61934b4b-b419-4dc2-9579-3eec75762f23", "sighting_of_ref": "indicator--f5c5fec7-2d74-4635-8c99-6ebda91842d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6540b907-e752-4af1-9a10-d5f43f32c606", "sighting_of_ref": "indicator--193c671d-0f0f-433d-a927-ee2b9606a4e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0030d9c-afe4-4079-bfa9-ae61458c0a34", "sighting_of_ref": "indicator--193c671d-0f0f-433d-a927-ee2b9606a4e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925523fe-25e9-4df2-97a6-39896e467651", "sighting_of_ref": "indicator--9339cc95-ac64-458a-99f3-2ff10bdbc927", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f20a7a1-868b-41e1-b5ba-b7625a925db4", "sighting_of_ref": "indicator--5e518c38-3acb-46da-bc6a-1bd92873c66b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd05205f-e903-420d-9c2e-24b0ab713bbd", "sighting_of_ref": "indicator--5e518c38-3acb-46da-bc6a-1bd92873c66b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cd8b0a-7174-46b3-beb5-01396b235d24", "sighting_of_ref": "indicator--0a1f56de-279c-4941-8019-4e84b64ed3bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d6e4f7-8d3b-4215-92bc-2f143ceacb1c", "sighting_of_ref": "indicator--f9df0641-a8ac-4a20-a151-6264e0d8d357", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70fdeb6-44e0-4a1e-a007-00273a203a3e", "sighting_of_ref": "indicator--ca7f8638-308a-4cd1-adfe-e520902931da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e303c747-f355-46a1-a32f-c8cad97ce12e", "sighting_of_ref": "indicator--ca7f8638-308a-4cd1-adfe-e520902931da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1407e87-85ff-4455-a2f2-f4c07ab5cdad", "sighting_of_ref": "indicator--311ca9bb-d733-4582-a484-69aeab653131", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b87d66-f987-4824-86f7-2eceb57402f9", "sighting_of_ref": "indicator--c36a1dc8-95d9-4d29-b0d6-2cf12c097c3d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2770e59f-a450-48b1-a89d-f57a21043ca9", "sighting_of_ref": "indicator--c36a1dc8-95d9-4d29-b0d6-2cf12c097c3d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcf49db-a467-4915-b7cf-d1af924763e6", "sighting_of_ref": "indicator--97cf46ae-b8e1-4c8e-affe-fe21b3305211", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76c87a8-82b3-472d-b582-d75e8bbe241f", "sighting_of_ref": "indicator--97cf46ae-b8e1-4c8e-affe-fe21b3305211", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3efedc5-a1d6-4cd0-bbf1-07d52ae2acb8", "sighting_of_ref": "indicator--dd360873-2c27-4c46-8a53-04173360d756", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9f7996-1de3-4be1-b123-def66e32ba5f", "sighting_of_ref": "indicator--d7496d33-c2fe-4c48-b05f-a371280318da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bc434e-109e-46b3-a9f8-0632999ad676", "sighting_of_ref": "indicator--d7496d33-c2fe-4c48-b05f-a371280318da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5400ce52-b75c-413e-8a15-7ed00879f75c", "sighting_of_ref": "indicator--ae696892-fd97-4815-bb97-cafa7f598cfb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19ae7c0-cc0a-463f-928b-ffec2fd6eb67", "sighting_of_ref": "indicator--95024fab-e3fa-4e37-8171-3ffc77a0b591", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de306e9-5ecb-46d1-92ca-5f749cadf879", "sighting_of_ref": "indicator--95024fab-e3fa-4e37-8171-3ffc77a0b591", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bcc755-c79e-4f1c-b710-108eb94e494c", "sighting_of_ref": "indicator--f63ada20-6649-4587-bd53-f0984acc3dff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ebcf15-3e57-4f2c-a1d9-f737b1fa616f", "sighting_of_ref": "indicator--47abaa37-bf3e-4908-b865-e4ffcd281bb5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fefe37c-4243-45fd-a6df-7f231d8f92e7", "sighting_of_ref": "indicator--09a76dfa-6b5c-4225-8977-8fdd13bee6e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297bc7ee-1cb1-4288-a4f5-c738b65b8a96", "sighting_of_ref": "indicator--17251a91-df70-4e9c-acae-1bed550f0fb6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2d3c73-e84c-45ae-9314-9a82c8637fa6", "sighting_of_ref": "indicator--cbbfc56b-df8c-4c5f-9b34-7f11c82959b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b2893a-bcab-42c1-9c83-d0e5fc62d3ae", "sighting_of_ref": "indicator--cbbfc56b-df8c-4c5f-9b34-7f11c82959b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d24d6a-2c39-44ed-a6d4-b04bb3a02723", "sighting_of_ref": "indicator--044d079a-f8fa-4191-9553-c7b446654a6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4d496d-7b60-4fcf-91de-04891037aa49", "sighting_of_ref": "indicator--044d079a-f8fa-4191-9553-c7b446654a6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0587543c-9eec-4034-8eb7-361e17d3c429", "sighting_of_ref": "indicator--89ebb023-93a0-4226-96ce-ac1234ae0db3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3b2605-42f0-49da-918a-984a6583ab60", "sighting_of_ref": "indicator--686fa2dd-e3f7-4a39-9856-1b82d8d3e10a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3af54f-6417-4397-bdb3-1e08b3db225d", "sighting_of_ref": "indicator--dc8008e9-d6b2-47de-aa13-d2cc456928f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a88142b-3a42-44b5-969e-62ec4cc595b4", "sighting_of_ref": "indicator--92883d08-7a2e-4f90-92ab-c2857b0d24f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d094cc9-8a4d-445e-9c7e-eb077bb34e7e", "sighting_of_ref": "indicator--6a1f6d36-39b8-4c20-a1db-258fd407a5dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91f522f-4d21-46b6-a629-f7a3c243fb95", "sighting_of_ref": "indicator--12b191ce-682d-46bf-85dc-b25cc05d6baf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc17afe-00d7-48e1-8664-6518d3aeac68", "sighting_of_ref": "indicator--f0c89cd0-7b48-409e-9c55-8c3941ec7090", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b80e2a-7c73-4ba1-bcf0-724b16e24788", "sighting_of_ref": "indicator--1dfa69de-4a53-4d85-a7f5-a30b5a4054e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e69cb8-5bc0-4241-8072-ec165d4b7b5f", "sighting_of_ref": "indicator--cf49ec06-7959-4419-8c0f-e429b21248e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbdc9276-497b-4f4b-ae83-016d52ca9ebc", "sighting_of_ref": "indicator--19ebd845-b039-4856-bb02-e6b9bad8f0b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44da69f9-b3e6-42bf-9e06-fce70d8747e2", "sighting_of_ref": "indicator--c9e1a18c-953a-4fb2-9be0-f84bff63d703", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3632e0-75da-43c6-b6b1-43eba5d456cd", "sighting_of_ref": "indicator--c9e1a18c-953a-4fb2-9be0-f84bff63d703", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7fdf6d-b379-4457-86b9-701bfb490eaf", "sighting_of_ref": "indicator--2efaea7a-f9e5-4606-8507-ad36bc575123", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b064107-d79d-4ad8-97a7-5bb2db50fda5", "sighting_of_ref": "indicator--2efaea7a-f9e5-4606-8507-ad36bc575123", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24b660e-0d3e-43d4-a026-1213382cc85d", "sighting_of_ref": "indicator--b927770b-7d66-4e17-92e6-3f8d21a175a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd9e743-45e6-4bc9-bda8-f29976c394bc", "sighting_of_ref": "indicator--4e7bc8e9-4532-4268-ad55-ffd8cc1fce7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef34fd6-ac8c-4c04-a638-da9d483c760b", "sighting_of_ref": "indicator--32140a43-b57e-444b-afbd-465d10c214e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293587cd-bf6d-4858-912f-b3f5263affa2", "sighting_of_ref": "indicator--acfa4a7e-ad85-4651-8d2d-58f82b1957a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc27ea64-180a-4494-b56f-909f0f6bf114", "sighting_of_ref": "indicator--acfa4a7e-ad85-4651-8d2d-58f82b1957a7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325768c1-5b57-49a0-be2b-a0c42b2f72a4", "sighting_of_ref": "indicator--78329a16-b9a2-4a16-a914-ec92859bd673", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4ae41a-2a95-4ab7-a350-a397369bbd58", "sighting_of_ref": "indicator--f2b62ef0-0b3d-4ecb-8566-3938415921ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9e382e-be8c-4a30-a08b-9891badc1285", "sighting_of_ref": "indicator--4a200b70-9c49-46c5-986e-ca9f02b5cd17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0298a332-0489-4a58-9498-ec5ef586e8b9", "sighting_of_ref": "indicator--5e39b8ab-fe99-4385-b0c7-bb5a053747aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea58330-a36a-4b15-9005-355385493c12", "sighting_of_ref": "indicator--5e39b8ab-fe99-4385-b0c7-bb5a053747aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e944d63-78f0-4dc2-9797-1154d8c737e5", "sighting_of_ref": "indicator--86d07a6f-cd7a-4ee4-b0ac-206c2cb9aa71", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585b5c4f-bce0-4a40-8521-7461ad3721fb", "sighting_of_ref": "indicator--fcb268db-ebd7-40c7-bf56-fcab04cb4de9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2f8cbe-c879-4398-b693-ef920615b7d5", "sighting_of_ref": "indicator--1fafc7b7-1b55-461e-82bb-deaa7eee295c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a199fb-db40-4607-8bab-345f60dd5497", "sighting_of_ref": "indicator--33d7d7f1-61d8-47fb-955c-eea8ce287ce5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093bbc66-ca10-4a6d-a5c0-3dae591dc1c0", "sighting_of_ref": "indicator--f9fb77c0-ee95-43e0-8417-276cb73b58df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec40f1a2-af96-40e0-9f25-54a7cb08d3d0", "sighting_of_ref": "indicator--f9fb77c0-ee95-43e0-8417-276cb73b58df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3281c36d-fba3-44ae-863c-aff0e51796c0", "sighting_of_ref": "indicator--4c335c61-2f6f-4626-a3e4-089380af03bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9229627-ddfa-4d24-988f-527c58bb050c", "sighting_of_ref": "indicator--b280d403-ec16-4cf2-a25d-e9fe8cf7f920", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606158d5-e1cc-41fc-88c6-e735854f0bd9", "sighting_of_ref": "indicator--907599be-9da8-4dd2-8aca-f41206eca742", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100ba8f8-1a12-4db0-b4b5-a0b60d566118", "sighting_of_ref": "indicator--8452d404-8832-4f6d-a31e-cb7f0253102b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee5a607-fd6b-429f-9148-cc799b7eea4b", "sighting_of_ref": "indicator--8452d404-8832-4f6d-a31e-cb7f0253102b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be567890-64e4-4e59-bf00-b364e061c9a8", "sighting_of_ref": "indicator--761f73a7-6f35-4915-8203-4857a93625a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6874254e-acf2-4d12-ac38-72f10a39be56", "sighting_of_ref": "indicator--761f73a7-6f35-4915-8203-4857a93625a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c7c5ce-4934-4e34-a33f-b1ae6ce81180", "sighting_of_ref": "indicator--08fc32a6-090c-4fe9-ac71-21ba8e52e646", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00f45bd-6f47-4070-a4fa-4bc390c9f9af", "sighting_of_ref": "indicator--e04b62ae-904a-40e2-9f56-5d475196c66a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f306a8-d9b7-4d61-861a-bad2d9da6ad9", "sighting_of_ref": "indicator--e04b62ae-904a-40e2-9f56-5d475196c66a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dbfba2-2cca-45a8-aeba-0c7354d773ea", "sighting_of_ref": "indicator--2847223b-e90a-455d-af42-b6008052d432", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ff176e-8a2f-4aac-b694-7d9832d61893", "sighting_of_ref": "indicator--d3983e14-27fb-494e-8f46-c1ea1698420d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347bbd11-afa0-4c41-81d9-35d7b3d21171", "sighting_of_ref": "indicator--d3983e14-27fb-494e-8f46-c1ea1698420d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8677585c-8fd7-4a00-9718-e6030a9e126f", "sighting_of_ref": "indicator--bc92691b-f6f7-4875-bb4b-042bd181498c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8c9505-d92c-433a-956b-44a597c9190d", "sighting_of_ref": "indicator--fb1c739e-0e6b-401f-92a2-d6f7216b799c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e955871a-64ca-4725-8fa0-22966c7b002b", "sighting_of_ref": "indicator--fb1c739e-0e6b-401f-92a2-d6f7216b799c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43c51f1-cbc4-4a6b-b98f-074d835e64f7", "sighting_of_ref": "indicator--964fbeb0-fade-4544-b385-47e79400c147", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272beed6-ca3f-4499-a0a8-0185f9126a6f", "sighting_of_ref": "indicator--964fbeb0-fade-4544-b385-47e79400c147", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17b70ee-cd6c-4532-97c6-e37a79066ebc", "sighting_of_ref": "indicator--97c8fdae-21df-4273-921c-e3c6f4943272", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8e098d-65e9-4c02-8146-f31537d95c32", "sighting_of_ref": "indicator--d4d13dd7-9bfa-4eca-bfad-711a3a0f635f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9775034-66f1-42ab-8ab3-c7789732051d", "sighting_of_ref": "indicator--7c747ba0-3d22-48a4-aa60-34df1e3286c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909043a3-69b9-4cb5-92d3-a89a8f249c03", "sighting_of_ref": "indicator--1cc66500-ad92-4165-8caf-8004c5853967", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebe9543-0489-4809-8406-e56322ea387d", "sighting_of_ref": "indicator--dc50f1b8-acbf-42cd-9a2a-687749906ca0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4896b615-fb14-442d-b5e1-9a5f70b9d990", "sighting_of_ref": "indicator--736a0104-fd28-4f82-bedb-2508feb8e3b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b211988-92c5-49f3-9a4c-d7c3cb06c577", "sighting_of_ref": "indicator--176bf59d-4c72-4264-bc42-328766a1e53d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71aecf6d-89fe-494b-a92a-62b3abfe0dce", "sighting_of_ref": "indicator--176bf59d-4c72-4264-bc42-328766a1e53d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0678953-620c-49ea-8ca5-3df2250bb92d", "sighting_of_ref": "indicator--1708a57a-6cf0-4d9f-b2d0-c5696f22f738", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2af9ddb-4b32-4bc9-ba62-8a632953e4d9", "sighting_of_ref": "indicator--1708a57a-6cf0-4d9f-b2d0-c5696f22f738", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55889db9-2be1-4a23-8c65-02955bbf5ea6", "sighting_of_ref": "indicator--31565d31-41e7-4cf5-802e-7a09ebba0a26", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f54f63-8ad1-41d5-b268-63238b788e21", "sighting_of_ref": "indicator--31565d31-41e7-4cf5-802e-7a09ebba0a26", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d67b37-c18e-48e1-bee5-3caf3a5bf5a6", "sighting_of_ref": "indicator--236347c9-7716-4035-87b1-d5326a2e789c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d97e5d-a62c-415d-88c9-f90584991fd7", "sighting_of_ref": "indicator--c4013116-2308-4db2-8b8e-1cc8896a1645", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349d5221-1b42-4758-8dd4-dc6d628b2b2a", "sighting_of_ref": "indicator--c4013116-2308-4db2-8b8e-1cc8896a1645", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d63a7c-e10d-4251-82bf-400866d6d142", "sighting_of_ref": "indicator--204fa4ef-ba51-4b25-bee5-2984d58c2d21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfa4710-0aed-4658-99b3-fbd8682a7d5e", "sighting_of_ref": "indicator--204fa4ef-ba51-4b25-bee5-2984d58c2d21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654ba803-eb53-4230-b6ec-d7ad24878ec2", "sighting_of_ref": "indicator--a5d1739b-a2fc-48a7-b198-0e2eae41d9f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e6123d-9559-4452-b6fd-5c3f6ed4a836", "sighting_of_ref": "indicator--a5d1739b-a2fc-48a7-b198-0e2eae41d9f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e24457-8a6c-424c-b258-c44bf030e9cc", "sighting_of_ref": "indicator--44232e64-9692-4ad0-8840-5448439bd238", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb78154-b0fa-4800-8e2f-167eb9df479f", "sighting_of_ref": "indicator--44232e64-9692-4ad0-8840-5448439bd238", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943b0433-112a-4560-bba8-1e7b412fe65b", "sighting_of_ref": "indicator--dbdffae1-b66b-4cc7-90f2-800c0951d2cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1191442d-cf4c-4983-9c66-4f89b8a618eb", "sighting_of_ref": "indicator--dbdffae1-b66b-4cc7-90f2-800c0951d2cd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b3a08d-b214-4e84-acba-25566ba779ca", "sighting_of_ref": "indicator--207e1449-7909-4ea5-a4f0-61e356ffaf1c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da7db6f-29d0-4988-a380-d3003de40cfd", "sighting_of_ref": "indicator--b156f9e0-cf83-4cd9-8786-1b63085297e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dadc984-70a3-4b2e-9725-a5d9c51bc2c2", "sighting_of_ref": "indicator--ef3cb067-6137-4bd5-934c-27d120155829", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acfb503-ba7c-4dfa-a965-9bb6229bd06f", "sighting_of_ref": "indicator--ef3cb067-6137-4bd5-934c-27d120155829", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470c75d4-799d-4aec-8089-ed608c71cdad", "sighting_of_ref": "indicator--b573c34d-8b61-4343-a210-3fb3c9195c36", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cb0874-9b13-451d-89d6-1ebc9b3380f0", "sighting_of_ref": "indicator--ec84dc6f-85f5-4987-aab5-7b46b278a844", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9c5a93-f30b-4b2f-af80-6195b717a084", "sighting_of_ref": "indicator--ec84dc6f-85f5-4987-aab5-7b46b278a844", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e5d0ee-2b0f-4d68-9bb9-36945c48d692", "sighting_of_ref": "indicator--f851531d-5749-4d99-a0bb-0380b2ae9598", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23ae30c-b77d-4d63-9cfa-5fe4390930c4", "sighting_of_ref": "indicator--2755c506-fe4b-43ce-ae25-8552bc475d62", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd547fbe-8c41-494f-8a70-cfa9d7000058", "sighting_of_ref": "indicator--232ff792-0025-49fd-936f-fca5ecf5b686", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b8f838-127a-4ad8-afe4-cdf806c15354", "sighting_of_ref": "indicator--9f8685ba-668f-4222-9cad-94d4f9486e1c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f62123-d151-48d5-af65-ac7f4bb93f9c", "sighting_of_ref": "indicator--0ca264af-a581-4203-9591-1d74e73a05ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602a2418-5d83-473e-ac7b-9a0d9e7d64e1", "sighting_of_ref": "indicator--e18d05c5-356b-483b-a6ca-189fb5f24d13", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4017681e-db4f-4023-84ea-2c58684d3e3e", "sighting_of_ref": "indicator--65e71bb5-8677-47ad-960f-1c3d93471ad5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ea156e-3b12-426b-ab75-4368df100762", "sighting_of_ref": "indicator--65e71bb5-8677-47ad-960f-1c3d93471ad5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b056d0-5ab5-474b-b82b-1cf48648b518", "sighting_of_ref": "indicator--761a7ab5-4110-466c-a28d-24a8bc869c84", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a56d893-7ff3-4d2a-ab9e-dd4ea4edeba9", "sighting_of_ref": "indicator--761a7ab5-4110-466c-a28d-24a8bc869c84", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ec16bf-1989-4689-bad7-527af7467ee0", "sighting_of_ref": "indicator--06b9721c-5e36-4712-923b-a36424bf1b4f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf4f5d0-4e83-41a8-891b-63eb7f4d62b5", "sighting_of_ref": "indicator--13b99bbd-b5a0-4a4e-94ee-1297d98094af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28446ba-a243-4dd4-92a9-bf4ae9dcc485", "sighting_of_ref": "indicator--c2967761-b979-4075-ada8-aa0c36acfa43", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76eca236-2e0b-4676-b37d-0aed60df3384", "sighting_of_ref": "indicator--c2967761-b979-4075-ada8-aa0c36acfa43", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54711de-d761-4ca1-8406-abf912df0f1e", "sighting_of_ref": "indicator--63dff5ef-ec05-4eec-8dff-a4f6a38a9e5e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb61d92-96bf-4c75-ab1d-ad16f4a6e1c7", "sighting_of_ref": "indicator--dd384798-6c7e-4bc8-af3c-457c41e6a73a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1a24c0-5ca1-4ef1-8df2-170f21831393", "sighting_of_ref": "indicator--8651d51e-851e-4dea-b674-a9a4d959cf95", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423f8716-3e28-464f-a346-0afcf59f042c", "sighting_of_ref": "indicator--e94464b6-baf1-4a86-8c0c-2655b3071ad7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6104f0-1f75-437f-9998-fd014d9ed34c", "sighting_of_ref": "indicator--e94464b6-baf1-4a86-8c0c-2655b3071ad7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc3822b-01d3-481d-a21f-da1153cdd7ba", "sighting_of_ref": "indicator--4f830ad1-4df3-4e33-8fa7-a54a1d910a3f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee127b3b-9caa-4bfa-8450-9be9e3fa4bc2", "sighting_of_ref": "indicator--fce0f399-bded-40ef-98c3-852bbf9643ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34db56a3-cd2b-4f6f-baa2-738c1c77491d", "sighting_of_ref": "indicator--a8c9d700-1508-4d14-9b5c-5b763fc39674", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba5464d-c871-43b9-b82d-5f0a85e03c1d", "sighting_of_ref": "indicator--a8c9d700-1508-4d14-9b5c-5b763fc39674", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c9dcc7-27f0-4679-8f1c-ab91953cc16f", "sighting_of_ref": "indicator--f05dd060-3953-41a4-9c59-50c4ed5aa443", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11dfd9c-2f2e-45d6-a9d4-582c8dcbfcbd", "sighting_of_ref": "indicator--f1267de8-a39f-4e16-a24d-5a45b8416e98", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce2e119-f032-434c-969d-f1edef1c7e6a", "sighting_of_ref": "indicator--270ba26c-7ce7-42cc-9757-02a427a879a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d07ecd-53a9-4d99-858c-c10dae5c29db", "sighting_of_ref": "indicator--270ba26c-7ce7-42cc-9757-02a427a879a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12df715c-b405-412d-b9b1-633265d7ae44", "sighting_of_ref": "indicator--56d705f3-20ed-499e-af0b-9ee6bb5995b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcbd06a-49f5-4a49-bd2c-d5b3b8a62f04", "sighting_of_ref": "indicator--bf4099ef-5e9b-484a-bea2-48cda4f33621", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c1f78a-2327-462a-80f1-d03e79dc41dc", "sighting_of_ref": "indicator--3736dbd5-eb4f-4de2-bde6-717436adea31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7817fb1c-4ba9-40aa-a683-dd31649f5e4e", "sighting_of_ref": "indicator--424aa424-569d-440e-af31-07b6cb0f4f38", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a5ff2b-f47b-46bf-8471-26acb9d9c177", "sighting_of_ref": "indicator--424aa424-569d-440e-af31-07b6cb0f4f38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5935afb9-e7e4-4195-a6ab-7ef8a7357fd3", "sighting_of_ref": "indicator--60f6d1ce-8daa-4560-905a-db5f81e24068", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cedb0c1-85d9-4540-9e0f-6dbeb5eb926a", "sighting_of_ref": "indicator--5684c8c7-e437-4512-9a84-473a583444a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6717aa9e-8d60-4118-bb80-97369e036372", "sighting_of_ref": "indicator--34d96be9-396c-4723-87ad-19b989339282", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0980a3ce-2d5a-4c07-b299-296124314992", "sighting_of_ref": "indicator--34d96be9-396c-4723-87ad-19b989339282", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa1e240-8117-4e35-af1e-c4cbdcc472f8", "sighting_of_ref": "indicator--f87d545c-7b9d-4b08-8d5e-3b1cc45b5825", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5f49bf-d66e-4dcc-9fec-3ffbd4d244e8", "sighting_of_ref": "indicator--f87d545c-7b9d-4b08-8d5e-3b1cc45b5825", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844891fb-3ef2-430f-ba15-536e14bfc154", "sighting_of_ref": "indicator--044358c9-84e7-4b34-a147-535187470ed6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddb6a30-b3b6-498c-8fbe-09e328cee0fc", "sighting_of_ref": "indicator--044358c9-84e7-4b34-a147-535187470ed6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd7d95f-2b1b-4bd2-9bb8-759fc92a5567", "sighting_of_ref": "indicator--e998ee3d-ba53-47c7-9c25-d0d24bbd1b28", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a74be0-b4cb-49c5-a347-96be97aea023", "sighting_of_ref": "indicator--385e906d-964b-49ab-a25d-0fb623d3f0aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1d589d-4312-40f7-8f4f-23f8c87ce841", "sighting_of_ref": "indicator--385e906d-964b-49ab-a25d-0fb623d3f0aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524ce8a7-5c76-4d5b-a8ce-ba7b75cb0974", "sighting_of_ref": "indicator--b9ba711e-4a27-4d98-9134-a6b837ca15af", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbe0123-e630-43bc-b682-cd8d7646b028", "sighting_of_ref": "indicator--9dc453a7-a6fc-47d6-9850-450d75598c94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bad1db-6228-4ae4-9624-305654b6fc18", "sighting_of_ref": "indicator--3cdef52d-ddc4-4c02-b9ab-5111dc6a9d0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3abdaa-3698-43b1-8c26-1858b75c31f5", "sighting_of_ref": "indicator--73bc7501-9a6f-404e-b917-bb98d12fa0a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01acb83e-2aa1-4612-93f3-446d9a00b822", "sighting_of_ref": "indicator--cc86e46d-8b66-41f6-b634-6a4020e712e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb6c050-1942-4294-a627-b7c3a773051b", "sighting_of_ref": "indicator--9b637c86-bad7-4c58-a99b-4495626d4b08", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ea169b-7ffd-4bf3-9d63-656dcbef8abf", "sighting_of_ref": "indicator--9b637c86-bad7-4c58-a99b-4495626d4b08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03041be-2672-4f3e-a825-07b0484d564c", "sighting_of_ref": "indicator--67204b51-38f6-47c2-bd5d-8ddf4e3f4380", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079c1f96-bc2b-4575-9d1c-b3c472b1ceb7", "sighting_of_ref": "indicator--40ed934c-3e24-4254-b77b-b3843bfcb4d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503f5256-511b-4975-9de0-1f26f71eaeb8", "sighting_of_ref": "indicator--40ed934c-3e24-4254-b77b-b3843bfcb4d2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b666d107-1059-4e36-8841-38190c491233", "sighting_of_ref": "indicator--f71b342f-aa7e-4ddf-8d1a-ffe4f27a89d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6f44ad-9ab0-4d99-aa9c-69f33358fc67", "sighting_of_ref": "indicator--a4fbcaa4-325a-4a0d-aa3d-def40dd371c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56534306-9054-4db4-a975-781b5a13e0e2", "sighting_of_ref": "indicator--a4fbcaa4-325a-4a0d-aa3d-def40dd371c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8221d7ca-2473-4d9d-81ad-9f85c3036fbd", "sighting_of_ref": "indicator--ccda65ea-3d41-4911-b70d-becdf75e7efd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a278f5b-b617-4573-81ee-617d8b583de3", "sighting_of_ref": "indicator--3496fab2-25c7-40f0-aeda-40c738fb7040", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a46ff79-b08d-4fa7-ab9c-22567b72b1de", "sighting_of_ref": "indicator--c62a9f20-27e1-4f80-97ca-20eea94d5801", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539a2ee6-6c07-456f-bfd0-77a256722991", "sighting_of_ref": "indicator--8591e3d8-3b5f-4fdc-adaa-8b82f74c2f15", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823d4099-df94-4901-ba7d-428d83661bb1", "sighting_of_ref": "indicator--7986611a-aca8-4737-9e64-4ae8fa89d336", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394a63a0-f856-4e45-b287-d1ff76469f81", "sighting_of_ref": "indicator--7986611a-aca8-4737-9e64-4ae8fa89d336", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9baf080-3984-4f95-9aec-bb8b10f12a8c", "sighting_of_ref": "indicator--ddb46dd0-4f94-46a3-b3be-1fb8c58318ba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b22ec21-76c0-4fa0-ba50-992319214db9", "sighting_of_ref": "indicator--7f69f407-ff58-4e7c-b442-567d314045e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193c18cc-21d8-4184-b6f4-2608a48adb9e", "sighting_of_ref": "indicator--7f69f407-ff58-4e7c-b442-567d314045e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f993b5b5-8531-4ac2-ac7e-3a94bf6f1cbc", "sighting_of_ref": "indicator--d9c2d678-cb49-4a7a-a57c-9624fe09e443", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656a4cbb-cba8-4aa7-9493-c6d7e7bfa362", "sighting_of_ref": "indicator--37c04bcb-15bc-4dce-a3f5-36bb99326d4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d073d7-5ad8-43e9-84bf-6c4ad7bf27ce", "sighting_of_ref": "indicator--37c04bcb-15bc-4dce-a3f5-36bb99326d4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cdbaca-4555-4a77-8339-b2daf6f2384a", "sighting_of_ref": "indicator--c5356e6b-c8d1-4d2f-a4c4-16582a7ab4b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24f96a0-0858-4974-b81f-cd46807892bd", "sighting_of_ref": "indicator--03f72f54-6336-487e-98ef-aa00d720a052", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8df6efc-fb31-460d-94e0-b4f703fe6791", "sighting_of_ref": "indicator--942585a9-b29a-4743-9222-82b54c7f097a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bff5dc-663b-45d0-b9a8-b214654db94f", "sighting_of_ref": "indicator--942585a9-b29a-4743-9222-82b54c7f097a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df487ab-5175-4155-ab79-5c472540a6b2", "sighting_of_ref": "indicator--848959fe-03e1-459b-a87a-ba9e3d29f558", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7e7fb5-b02d-4fca-8004-d40cf5f1676a", "sighting_of_ref": "indicator--a3fb50fc-3fe0-47fd-8d76-48f0b20b745c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dbbb18-4e17-45f4-98e2-35566fcb9b87", "sighting_of_ref": "indicator--1806309c-8f9f-42f3-a9c9-1821cac0c6e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a58c4f-213f-4b2a-aa2f-e463680825cf", "sighting_of_ref": "indicator--20995e55-1c44-4505-b66e-c4aab1e8cd3e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10425c7-3e9e-4b34-958c-17d542ba564b", "sighting_of_ref": "indicator--20995e55-1c44-4505-b66e-c4aab1e8cd3e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dc7195-6f7f-4853-91b4-9d1dd00c11cf", "sighting_of_ref": "indicator--dbb33d7b-0dfc-4b83-a345-d16576f889b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75afb81-a577-442c-b8d9-433c5e71778c", "sighting_of_ref": "indicator--5c0028cd-cfed-4143-a4fb-2cb92909da67", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cf2b14-5f82-466d-bd7d-e772bbb0dde9", "sighting_of_ref": "indicator--5c0028cd-cfed-4143-a4fb-2cb92909da67", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c053f81f-02f5-4d05-805d-019e1150e7b4", "sighting_of_ref": "indicator--8f3d0b14-a5cd-4b82-9655-cd5536514635", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026ccbc3-45a0-4efc-8857-8c48997bf9ab", "sighting_of_ref": "indicator--847697a0-6b2f-4c88-bf75-78f6c75eca41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a28a3e4-2849-4a81-9ce4-1e8a23bb01ff", "sighting_of_ref": "indicator--6fd13792-ec9e-4153-a88a-04bb372a4a27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72830db4-3139-4ff3-a9a7-685d0b34353f", "sighting_of_ref": "indicator--bb1cf356-14e8-45b6-bc3d-188041cf534a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68b9788-2c64-4e96-b330-d7a0d154a89c", "sighting_of_ref": "indicator--bb1cf356-14e8-45b6-bc3d-188041cf534a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9ff94e-50c3-4f30-a1ab-01366f5c668b", "sighting_of_ref": "indicator--00fa8f04-e182-4987-995b-a54028c39452", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9604b9bd-66ef-46a2-a43d-46b3525ea332", "sighting_of_ref": "indicator--bf3c0021-9ec8-447e-8f9d-90fc0fd4f3bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0b7bca-c0f9-47a6-aeb9-c1fa09d782d5", "sighting_of_ref": "indicator--3a946627-62e8-4f2d-a91c-608e28fc6504", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f9c5a3-79d4-4fb0-bba2-9fd28c6d9700", "sighting_of_ref": "indicator--71cb023a-d70e-42bb-adbd-b7aefbe0787a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2189cf68-a0e1-40a8-bc7b-a38c8838bc2b", "sighting_of_ref": "indicator--7fbfb2d7-b73b-43b4-9eb3-dcd4dccdadf6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9138a9d1-740a-43e5-94be-d5e6b95253d2", "sighting_of_ref": "indicator--9436e492-f006-4cc5-9220-095c45299639", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0915dba1-c63c-4f81-847c-3dc3875ddd88", "sighting_of_ref": "indicator--9436e492-f006-4cc5-9220-095c45299639", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecc13c4-966d-4e46-9a29-1fdd95db8975", "sighting_of_ref": "indicator--fe781a9d-a523-440a-ba58-d32802ccbd31", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f88a62-aa01-4093-a342-ffe551b46946", "sighting_of_ref": "indicator--d1fd544b-f5cb-4c1f-8cbe-8faab162967d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2014b0-4fdd-42a2-b6e6-aacde86d3211", "sighting_of_ref": "indicator--77f82f3d-e9be-45e8-90df-bccb1c96a168", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439ad964-bca9-48d8-8b10-cf74c21a024d", "sighting_of_ref": "indicator--e093e682-0acf-4b41-b9b5-7d8907b86e86", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfea1c3-2611-40ec-a0f8-fae0879aa01d", "sighting_of_ref": "indicator--e093e682-0acf-4b41-b9b5-7d8907b86e86", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b872264-9e7f-4272-9117-165415ad36f7", "sighting_of_ref": "indicator--41a5e1f0-698f-4f74-9a12-7d5758d9a75e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fbee09-8465-4194-ac8a-b6562aed18da", "sighting_of_ref": "indicator--41a5e1f0-698f-4f74-9a12-7d5758d9a75e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e7da01-c1ae-4e56-b62c-c4599c699928", "sighting_of_ref": "indicator--cf5689dd-7136-4c7f-8800-c70ba979dd1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481efcea-5daa-4468-9525-33070c70a051", "sighting_of_ref": "indicator--bd92ba3a-22b0-46a1-affa-c95f1c8cbb72", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0b55b3-b147-47c0-9afb-a28aaac440be", "sighting_of_ref": "indicator--bd92ba3a-22b0-46a1-affa-c95f1c8cbb72", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ef225a-068d-41fb-8aa9-00e4b716acdd", "sighting_of_ref": "indicator--d3798a09-6d5b-4171-9d5b-57484397db2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0be649-1a1a-41de-9335-366e45208e93", "sighting_of_ref": "indicator--87ad17ed-2aaf-4ed9-bd5c-ac4a99ec5b0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448c69cb-b2f7-4490-8e62-425f1d72b911", "sighting_of_ref": "indicator--87ad17ed-2aaf-4ed9-bd5c-ac4a99ec5b0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c882e6d-74ee-4931-87e7-ca10dbc594dc", "sighting_of_ref": "indicator--48289d98-3b3f-4eb1-bf1d-8fc0ba0287f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcdfaae-6982-4e74-b507-ec697f5541e2", "sighting_of_ref": "indicator--8eb674d3-39bc-47a9-8c4f-126e79bff9c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945f7cbc-ceb6-4fce-9101-8d2ff871bbdd", "sighting_of_ref": "indicator--68877007-3cd5-411e-b423-06399e327947", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2f091b-513c-4122-8fc8-c51383a1006f", "sighting_of_ref": "indicator--26a3ab4c-1893-44af-889c-fc521346fc71", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a508b024-2594-4915-9746-09d344d38144", "sighting_of_ref": "indicator--ecfa3d27-34eb-4abf-a2a9-c76d2fbfb594", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f04572a-e6a9-4831-ac25-5c70601e627c", "sighting_of_ref": "indicator--16fbf13e-d033-4976-b45f-99616eb6d76d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b858fc0-c1c2-43af-9bdc-3a906e09fe40", "sighting_of_ref": "indicator--8e8d0ce4-0a64-463b-9cbd-add6b48ee745", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13df40dd-275b-4805-b1c4-e8426424f3c4", "sighting_of_ref": "indicator--a71c4271-b852-4265-8c64-8acab5b5a8cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f335901e-b8a8-470d-b117-180ed0a64729", "sighting_of_ref": "indicator--a71c4271-b852-4265-8c64-8acab5b5a8cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86199c79-3dea-4712-a006-ec95f27bab80", "sighting_of_ref": "indicator--b6a1f063-753b-4a09-9b0f-c537ba52b529", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773cb360-080d-4c3c-8a9c-f2818ceaf083", "sighting_of_ref": "indicator--a6378bfd-0dac-4fd5-b694-ded05f463e2b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b5f3a3-4ff6-4372-a380-9f5a4a1592a2", "sighting_of_ref": "indicator--161efc5c-6d4a-47a5-8632-d8c774d03aa0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d26234-0869-4467-8ec7-a4732acca707", "sighting_of_ref": "indicator--88216555-1f26-4b02-a778-e5b19ff491b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a971419-90b1-4044-af97-4d3ab527352d", "sighting_of_ref": "indicator--2ae03ca4-ddcb-4add-8c87-dcaf9a757bcd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fcfe10-6bb6-469f-9af2-042696ee05db", "sighting_of_ref": "indicator--cc0842ca-f8d3-4e65-ba50-65195a8f773b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1e93ac-ba9c-456d-88fa-b1e3c20eeef6", "sighting_of_ref": "indicator--8bb94be8-ff94-42b4-986f-f523aa7bdb62", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaed7b0-eefc-45d9-ab28-8874bf9e9598", "sighting_of_ref": "indicator--8bb94be8-ff94-42b4-986f-f523aa7bdb62", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc1ee40-262e-4c34-90a6-3d558c8fd280", "sighting_of_ref": "indicator--a99992a2-862a-4d18-8952-deefdae91491", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd3e2fb-ef9d-40c1-8e06-c69a1b3934e8", "sighting_of_ref": "indicator--6e8cef15-de5a-4672-bffe-ade170c4570e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece800cc-fda1-4727-802a-10847d9f13c5", "sighting_of_ref": "indicator--6e8cef15-de5a-4672-bffe-ade170c4570e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20593a0e-294b-4629-9c73-e0f6273a1b08", "sighting_of_ref": "indicator--16bf5eca-8280-4c4f-b8d7-6dcca26b3b6b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a1ee5d-5f0e-4f17-9537-c79af207eaa1", "sighting_of_ref": "indicator--96022867-3430-4bda-9ea1-6b3d02dba72d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22938118-6677-4955-933a-1f1066b55d7a", "sighting_of_ref": "indicator--4d6696db-5dd2-4837-8f0e-9e1efcecdce6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7162fe7b-b76b-487c-ac2b-efd5f5f92453", "sighting_of_ref": "indicator--4d6696db-5dd2-4837-8f0e-9e1efcecdce6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d563f57-5982-4bc7-a149-1790abd19ea2", "sighting_of_ref": "indicator--f92eb5ad-e960-4859-84a7-9c3716c6a420", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a15907-0078-4b94-aa25-9a8f28b32ce6", "sighting_of_ref": "indicator--137a2ed2-ea81-4890-9198-4634082bf0fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba69e784-9d6d-46f5-a11f-d3529a9234b1", "sighting_of_ref": "indicator--346df071-87ea-483b-9c5e-e80fac863225", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d92489-5061-4d19-8965-0d35605a9ca1", "sighting_of_ref": "indicator--911c502b-2a21-4462-9cf1-39d6d1d828ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdbabad-d322-45c5-9c8e-6a7a59ca6870", "sighting_of_ref": "indicator--3fd0f155-c4e8-4de9-91d6-81105240ec52", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106ff7ed-7fe4-44e6-8bd3-afa3cdbe2fdc", "sighting_of_ref": "indicator--2a7c9cea-2839-464b-be41-6dec0d39aa1a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed5a8fd-4acb-428d-b572-1105605f860b", "sighting_of_ref": "indicator--785177e9-fd2e-4210-9184-11d035ec290e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c27da9-a1bd-4eb2-88ab-2b7524275b05", "sighting_of_ref": "indicator--d63ab0be-dc6f-4a4f-bea7-dc5d9b255e97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe972e2-0601-4d9f-8ce8-b29e7b1af5b1", "sighting_of_ref": "indicator--1c7f926a-6456-4de1-8593-e846d8df50ce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8390bfe1-710b-4be3-843a-467120d62c8f", "sighting_of_ref": "indicator--80325439-1082-412a-bdaf-d4b3b5cbdaf5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96439bb7-cefd-4231-ab36-93aaa4141afe", "sighting_of_ref": "indicator--5621f5cb-85fc-4033-a18f-7eb735d71da6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a3bd4a-61f7-4da4-b233-6e054ae7da5e", "sighting_of_ref": "indicator--4573edca-a5a3-475c-ad76-e59952c0e05a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61560cc9-68e4-4ada-a725-40b2959969db", "sighting_of_ref": "indicator--61a9a9e4-72f0-4ba8-805c-e068394e15a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125b503f-ec05-4a5b-9937-3d701e4a523e", "sighting_of_ref": "indicator--61a9a9e4-72f0-4ba8-805c-e068394e15a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833e0c7d-4de5-412e-9222-2ba4bddae096", "sighting_of_ref": "indicator--24161593-323f-4025-b549-1b4c2c09d777", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b82aeb-7097-491d-82f8-d96f428ecf72", "sighting_of_ref": "indicator--c2174dea-be4a-4585-935e-8d0d614332de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0ba2b0-c3dd-4478-9e3f-36b84c3df4bf", "sighting_of_ref": "indicator--93120612-81ca-4075-af74-8553589fce63", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5925e8a3-6095-449d-b5c4-7c12969d0f12", "sighting_of_ref": "indicator--93120612-81ca-4075-af74-8553589fce63", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1f5946-bfaf-4bdf-b04a-dfd3421ee23f", "sighting_of_ref": "indicator--322782ca-8fad-440a-a7a2-d83dfb691fe9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4b0ba7-e8bf-4bb6-a665-a535402cc398", "sighting_of_ref": "indicator--eb48b9cd-a177-47d7-946b-737ceae5b5e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125d03d4-ee64-4907-9fbb-69a6698c72c8", "sighting_of_ref": "indicator--16d22f6e-38d2-4bd1-ad22-2d4af3b1a55f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d92346-f976-4d81-8a41-a243c7d80881", "sighting_of_ref": "indicator--76f11a51-0520-4118-9d1f-83342bf967fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7741b3d5-cc07-43a9-b4eb-e83118b38ecb", "sighting_of_ref": "indicator--76f11a51-0520-4118-9d1f-83342bf967fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739e7ac0-2d80-4dc5-960f-b310e45c49f0", "sighting_of_ref": "indicator--6aba6b1e-574e-4b47-aab2-8abfd0c6a3cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc259021-bc66-40a0-b973-c0465faa0c9a", "sighting_of_ref": "indicator--a09be246-05c8-48a4-906c-cf0dfed57cbd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855ca5d8-61f5-4b64-aed1-e74be6bd315f", "sighting_of_ref": "indicator--9f8a67fe-70c9-4a9a-b54c-cd4ae2ee41b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1918b6-f7e4-4572-8c9b-8440def2e9da", "sighting_of_ref": "indicator--838f2fe0-e007-4800-98c0-2d0b47ae7b10", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d5a494-499c-4e3f-97f2-96b0d935e958", "sighting_of_ref": "indicator--838f2fe0-e007-4800-98c0-2d0b47ae7b10", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6291f70-a147-4f1f-98cc-ce2f95316d85", "sighting_of_ref": "indicator--37ce6f84-3867-4066-8352-bbee5ac41e5e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e98bbe-3d9d-4760-a147-000cbced415e", "sighting_of_ref": "indicator--37ce6f84-3867-4066-8352-bbee5ac41e5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fa0249-1922-40ae-b760-464bf341b351", "sighting_of_ref": "indicator--cf40fd23-bcbf-472f-a8ec-1366dff9d70d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a04572-2fd0-41ae-ba26-38ad54725b2d", "sighting_of_ref": "indicator--9e05114a-df73-4e09-9313-39cb0073a8f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20db2bc4-e30e-443a-9c48-9636e10d7417", "sighting_of_ref": "indicator--9e05114a-df73-4e09-9313-39cb0073a8f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85d6704-9644-4f83-8a9e-8f15d131d79e", "sighting_of_ref": "indicator--95aa0e42-0eec-4a49-beb6-6d54a22cf922", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd93346-4144-4909-8db5-d50479f0f20a", "sighting_of_ref": "indicator--cc434dfa-0967-41c9-8cbc-6717900308f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd82877f-f481-4efc-9482-a61aac094f34", "sighting_of_ref": "indicator--ab066b88-dc0c-48b9-b75c-5f65917a7542", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed192a00-99ec-48fa-8a69-ed2ac902ca5b", "sighting_of_ref": "indicator--ef2e9997-4093-4d43-9852-880031d36623", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c51e2d-ed15-4ada-9295-91c7c46dcd97", "sighting_of_ref": "indicator--51d3baa3-4b6a-44f3-bed4-71c06072da1e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320862a1-d71c-4c21-922b-01367101254e", "sighting_of_ref": "indicator--c13a811e-52f6-4202-9e3c-df94581c6877", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f8caff-8dc3-45b9-bea0-477e0a394f4c", "sighting_of_ref": "indicator--c13a811e-52f6-4202-9e3c-df94581c6877", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2c7ae5-39f3-4eff-923b-1eab38a09278", "sighting_of_ref": "indicator--f0d29052-2749-4a3e-a00e-13167cc0763d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986bbd26-c25d-455d-a1a3-b63c3d762ebc", "sighting_of_ref": "indicator--f0d29052-2749-4a3e-a00e-13167cc0763d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a6ba15-155f-4c7f-bc66-94a7e270e182", "sighting_of_ref": "indicator--437a8b07-1e48-4b47-8b55-59e190c8d3da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c131f2c3-885f-490d-a714-ff3fa297374c", "sighting_of_ref": "indicator--a9de314c-1b6a-444e-be47-19bd7619aba3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defe919d-d24a-442b-b14a-b8630f7f198f", "sighting_of_ref": "indicator--97596816-8f22-40ee-8c87-03258a77d7c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b6b34d-4461-4c05-a564-94eeac5c6abf", "sighting_of_ref": "indicator--c79ce6c7-9ca0-4b51-be60-10a5b85869de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f130b741-ef87-41e1-99a4-ad54ba5ab753", "sighting_of_ref": "indicator--c79ce6c7-9ca0-4b51-be60-10a5b85869de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e0d568-aed2-452d-9f81-2f44933a6532", "sighting_of_ref": "indicator--f844cb63-a399-4e1a-a294-a20e85938ecc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e1b00d-319b-4db5-b303-1ce664127ca6", "sighting_of_ref": "indicator--c2d877d7-cd5c-4b77-9b3f-c0e75a694632", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef0b761-8a54-486a-803b-b3cbfe00a257", "sighting_of_ref": "indicator--bf6f6e54-53ef-4bbe-a63d-2fee8c4c44fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939975df-fb46-4ebc-9d48-62c03e0d9884", "sighting_of_ref": "indicator--0a6c3265-3493-4dec-baf1-9aabc83a29b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426b28d7-723f-47fe-9d63-a00162e77a1e", "sighting_of_ref": "indicator--eb957b78-cd1f-4cd7-992c-8ae32174b770", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c000064-52ce-45c4-9b6f-2783d4bfe925", "sighting_of_ref": "indicator--8e52d820-0a9c-4371-bd85-62ffe0ed65cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4803521-78f0-46d0-8d3e-4f89dda2f732", "sighting_of_ref": "indicator--8e52d820-0a9c-4371-bd85-62ffe0ed65cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1044419-0796-4e39-8f07-79290bd0013b", "sighting_of_ref": "indicator--d2b59646-f016-4642-9a04-794c4f88e94c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d990461f-4360-4aa5-b6c3-67702eb230f8", "sighting_of_ref": "indicator--7ecafa26-12d3-4e6a-94f8-10c1655b74d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645d6fdd-c3a3-42d8-b3bc-67d2446fa137", "sighting_of_ref": "indicator--13d459b8-c33b-4dff-8e2f-bbf408517033", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b2ee13-4a17-4666-ae9d-61211f5b8f26", "sighting_of_ref": "indicator--bcb25055-89f8-4ed3-8385-a1d69845c46b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f08391a-1a66-411a-9847-e0e6fd4bebb5", "sighting_of_ref": "indicator--3fe2e94f-688f-4385-8b50-ef09d3c23128", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c19526d-8907-4b44-acf1-c517371fcdb8", "sighting_of_ref": "indicator--f729b51d-d603-4735-82e0-6e063f4f3f30", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bb8505-f1b1-48e6-935f-5b8779856de3", "sighting_of_ref": "indicator--27b24325-52e1-4aa4-9396-6ecb531ee023", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4949e3-4129-410a-a2d1-ee335d873ab4", "sighting_of_ref": "indicator--aee9a094-6b70-429d-8a26-17172261c573", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c0d91c-50cd-4aff-a140-8392b45568d4", "sighting_of_ref": "indicator--aee9a094-6b70-429d-8a26-17172261c573", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a98ed6-cd77-40d4-a7a4-a02b7c1d056a", "sighting_of_ref": "indicator--a9e634cd-8cce-4236-a494-43fbf8a252b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6745627-f0fa-44a2-a88e-8cf2e0231761", "sighting_of_ref": "indicator--d4bcfa45-ff84-4f42-8a6b-89029c413aad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07008133-b43c-4b56-a444-a4c53b0ffc05", "sighting_of_ref": "indicator--414fbdc9-8693-4e73-a48f-6560ec0b2247", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fd250e-3acc-4927-95e9-e5cf5b783e09", "sighting_of_ref": "indicator--a47f7877-0c6f-4f0b-b222-ff7cd3c1ba62", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b3c324-0d69-46e8-a5bd-e15c35d5bad1", "sighting_of_ref": "indicator--8df95f5a-1e44-4e13-8634-0e35d9271223", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86da6ffa-382a-4f06-8fe1-72b7f8e9ab6b", "sighting_of_ref": "indicator--8df95f5a-1e44-4e13-8634-0e35d9271223", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3f6aaf-5458-4b52-bf5e-f7ebc045b0b5", "sighting_of_ref": "indicator--1bc47074-d792-4b17-87fb-821abe884151", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e35dd9a-3a79-4c2c-8c6d-11622aed8a9f", "sighting_of_ref": "indicator--045cf901-ded1-41d0-a0ec-07556602d668", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9022dde-027f-4926-8e91-5b77daede414", "sighting_of_ref": "indicator--045cf901-ded1-41d0-a0ec-07556602d668", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0142e288-0825-4ac3-b132-2eccbfc23b9c", "sighting_of_ref": "indicator--995d54b1-3e82-4651-9e0b-9fd664809b15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b252a3-7f01-4359-a626-4eb4ff72f04a", "sighting_of_ref": "indicator--8ae4127c-0e12-4294-ae5d-840a8f64b48d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c97c98-a1b6-4853-bc87-c3c3cbb432b3", "sighting_of_ref": "indicator--2c0d571d-0ccb-4460-815d-520b8bf1439d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2dd6f8-6cc4-4d06-9ef5-d3212ee022a8", "sighting_of_ref": "indicator--a0afe078-1b18-4069-97ed-42e66ad91f9d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f98768-d440-4896-9d6f-8ba883fddef6", "sighting_of_ref": "indicator--e1b0f302-05b0-4599-988f-7517afb561cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddf7bff-8df1-48f8-8ed8-8fd9c0465afa", "sighting_of_ref": "indicator--2b6ab872-36f6-49bc-abeb-bb9671c11681", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d2b021-1e8b-4d09-a13a-cb78edd4e425", "sighting_of_ref": "indicator--df9a13a9-9d43-4c74-a0b9-86b4e3292343", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f746bc9-0157-4bed-8a3a-cdae2b80b337", "sighting_of_ref": "indicator--ed395397-dfa9-47d4-99b1-3fc560ad37e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c63cf06-26d7-4124-b76a-617f3d901ffa", "sighting_of_ref": "indicator--ed395397-dfa9-47d4-99b1-3fc560ad37e6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f98360d-ece7-49a2-90f1-dc64c98930c1", "sighting_of_ref": "indicator--b85c0997-ff53-4678-94b8-9a30c54f2ec1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c841e2-cbe1-4df0-82d2-4d7c8399f2f5", "sighting_of_ref": "indicator--36d52aa4-4222-4815-9fc6-1c5d5481be27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d647ce2-1573-4465-81ba-630059df8d28", "sighting_of_ref": "indicator--53663473-8a53-4562-859f-3bfa96fe6b8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1411e05d-9776-4031-8bc7-051551e2f024", "sighting_of_ref": "indicator--d63f1f3d-c602-48ff-a455-cb1e687ef150", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f01f8c9-9e4d-45e4-a2d8-513da3b15fc1", "sighting_of_ref": "indicator--bcc25044-a57c-4104-b266-d163ae6970f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8b57ab-0eee-462f-9738-b468cc97f31b", "sighting_of_ref": "indicator--bcc25044-a57c-4104-b266-d163ae6970f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19015db-4817-4e79-897a-136927babc05", "sighting_of_ref": "indicator--d75f27a5-2520-4a15-8428-8de61e998fa9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e180309-7080-4283-8694-c4e4fce2470c", "sighting_of_ref": "indicator--e81a13ee-7a2d-40dc-a48a-30bc10adf35d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5818dc43-3f33-4c91-8656-19c82be9302d", "sighting_of_ref": "indicator--b1de7f01-e118-4023-87de-66c83988ddea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4683ff3-301a-43bc-ba98-e0c1bcd23151", "sighting_of_ref": "indicator--21791df4-5785-47b2-9595-b5a1d7b1e7f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe426d56-a47d-4cae-927e-40dfb9ac5dd7", "sighting_of_ref": "indicator--bf4edbb8-8f44-4094-a55c-b28665ce022a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c777b7ca-a6bb-484c-a823-f7499c8db9d9", "sighting_of_ref": "indicator--1406a493-c3d5-4aea-9579-b5f723ee45bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b132d7-09f7-4fae-996e-0b1fa498702e", "sighting_of_ref": "indicator--07ae946c-d6e7-4f29-b17a-28f03b2320a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3954c998-bba9-42b5-bd22-5a04d6efe163", "sighting_of_ref": "indicator--07ae946c-d6e7-4f29-b17a-28f03b2320a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be668f21-6783-48a7-ab64-8c9ea0589f83", "sighting_of_ref": "indicator--a2f4ac21-f475-4a1b-ad22-ef1fa7ae6dc6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdaaeee-4e90-414a-b9af-33a2e17a01fc", "sighting_of_ref": "indicator--ffb78a70-e793-4c16-b116-1f9e48c23d39", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f404b834-90a0-41f2-a10f-7b8a324a1e1a", "sighting_of_ref": "indicator--ddd06a93-7e50-439b-8b76-257c77e20a1f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710371cc-be61-4428-8083-129020b4bc7e", "sighting_of_ref": "indicator--ddd06a93-7e50-439b-8b76-257c77e20a1f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b3f240-fed4-458c-aa58-ca0a93e34ad2", "sighting_of_ref": "indicator--756bdae7-5858-4d6d-a2bd-d8c7640493df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f12532b-faa7-47d3-b4b0-2729f7e3bea6", "sighting_of_ref": "indicator--756bdae7-5858-4d6d-a2bd-d8c7640493df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a19849a-b556-41eb-8cea-791870911ed4", "sighting_of_ref": "indicator--0b9f08ed-9667-4c7e-9f67-626c9416b0b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fe23b3-8d1b-475b-bc24-c11de181d7c8", "sighting_of_ref": "indicator--b13c22b0-708c-4bfd-9885-9ef1f7d695f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0218c9-f17e-460d-bc03-25390744e0e6", "sighting_of_ref": "indicator--21123b34-cb03-414e-8f39-8815b1e13773", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec55c0b9-62ec-4948-be0e-d4bc6fc0e134", "sighting_of_ref": "indicator--1f01dd7a-60e9-464a-9e80-ab7827d5207f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e404a0-d122-42b9-8113-7d1e35879213", "sighting_of_ref": "indicator--1f01dd7a-60e9-464a-9e80-ab7827d5207f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cf152a-6939-45d6-825f-01bbf7409634", "sighting_of_ref": "indicator--e2cfdb36-d49b-404c-bf21-cd1bf35f0b88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d472ea-a3cc-4ef1-a0c8-6ec6a467a99e", "sighting_of_ref": "indicator--ad06c6a1-b9ce-4513-aba1-f483ff32185c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3896b1e7-45ec-4053-840d-e21a6a88e228", "sighting_of_ref": "indicator--c767d499-3150-4ecd-ae76-82e963ba8b8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06ec9cd-cdd7-4686-ad8a-50735a9245f4", "sighting_of_ref": "indicator--78d29e0e-5e47-416d-a65a-71687ee56419", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc5a4e2-3a67-4ab9-b99d-f71c62450fcc", "sighting_of_ref": "indicator--78d29e0e-5e47-416d-a65a-71687ee56419", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448320b6-e998-4b15-b688-4f040cf5e64d", "sighting_of_ref": "indicator--e83b34d8-4089-4536-bef3-335c4475eb65", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a39438-23d4-43f7-852e-78ee3bf83610", "sighting_of_ref": "indicator--e83b34d8-4089-4536-bef3-335c4475eb65", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da39db10-5dcd-4b63-8013-6f7e3812768b", "sighting_of_ref": "indicator--7367389a-fdd6-4e6a-ba7e-587cec2a34b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a933af2-3944-43a8-9be3-0cc19d072103", "sighting_of_ref": "indicator--a375df16-0ed1-405e-a80e-cff69225ac20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e669306-400a-419c-bf3b-200fb5560107", "sighting_of_ref": "indicator--edd1ca91-7328-4c19-845a-4b89a6b89d81", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020d1110-1fa2-4acc-bee8-f5d80e5831ae", "sighting_of_ref": "indicator--edd1ca91-7328-4c19-845a-4b89a6b89d81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741a83ec-1073-481f-8643-f0f089385f7d", "sighting_of_ref": "indicator--7bcae8e4-a997-41ec-abbc-f7df90e23f79", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e77ebf-7144-4712-b491-325368978824", "sighting_of_ref": "indicator--165e12c1-ea05-4296-ad2c-b945d418f313", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba56658-2a67-489f-9d82-97bfe677f4dd", "sighting_of_ref": "indicator--b7dfcdc3-3658-4ca0-9dd6-e944c77ca06e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f3fcb4-6665-4e53-a01f-1cd74bdbdedc", "sighting_of_ref": "indicator--ba3eea57-cdeb-4ab8-9c73-0fc2784b43f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138435bd-e992-4abf-a0ae-ac084e69af4a", "sighting_of_ref": "indicator--b6581a5f-46fb-4adf-bfc0-016af3b77a7f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0287672d-d2fa-4ad8-9ed7-acc6a59f1a38", "sighting_of_ref": "indicator--2e6f204a-880d-4cac-8741-0dd121db70bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4b8eb4-c333-45f0-bc57-66de1399ed80", "sighting_of_ref": "indicator--b8fadd36-99c6-4a23-9544-391f7a6b0d88", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1673dc66-a53c-468b-80a0-b43d27b4fb8a", "sighting_of_ref": "indicator--b8fadd36-99c6-4a23-9544-391f7a6b0d88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e327782-09f5-4eec-b61f-b358ba697be2", "sighting_of_ref": "indicator--3035c7cd-16f5-426b-96fd-aaf7f22b699c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732713ef-7acb-4196-b65e-b95aa2a380f9", "sighting_of_ref": "indicator--49bd3be9-6845-40c5-aa3b-82cad9cf27d7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269a1836-6c53-4900-83ea-ef042237dbd2", "sighting_of_ref": "indicator--117d5bb9-7558-4279-aa34-c7ef7dddc465", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8acae2-f7f6-42ca-b3bc-c81ed1429c43", "sighting_of_ref": "indicator--117d5bb9-7558-4279-aa34-c7ef7dddc465", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5eb4241-848b-4273-acf5-5b6087652a54", "sighting_of_ref": "indicator--1392a2c5-0b39-4eb7-a41b-6349f7d334cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b38a432-b0ac-4a36-8173-49c1ca1d6946", "sighting_of_ref": "indicator--2a0479b4-74cc-4ee3-8f4f-1803264581ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2b455d-61e8-4030-962b-0b6ef7d5f2b2", "sighting_of_ref": "indicator--2a0479b4-74cc-4ee3-8f4f-1803264581ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a19929d-bcef-4381-a604-3f76f90e88a4", "sighting_of_ref": "indicator--1822244f-dbe3-4e0f-bd47-ea0bf28feab8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45db6bc5-cea4-4567-b4d0-e276e371823a", "sighting_of_ref": "indicator--9c0652cc-2c07-40a4-90ec-740e6a68ffbc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f38f01-44b6-4a4a-9518-850dc6c7d98e", "sighting_of_ref": "indicator--717ba0b7-ad4c-4d78-9194-627fab2b1bf7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7279bf75-c74e-47fa-ac87-b1889ff43bfc", "sighting_of_ref": "indicator--5bd1b1e3-1be4-4678-bb65-75c28e84f976", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97d6fa7-abb5-4543-8b8d-3d6acab936b7", "sighting_of_ref": "indicator--8edb3477-bb00-4651-9540-bee1384d3fac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54313e19-f0dd-4844-8011-0c10249db79f", "sighting_of_ref": "indicator--5a716c49-5991-43fd-b1ff-36189316ff14", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7c8c64-c592-48b2-8def-051a84d4c18c", "sighting_of_ref": "indicator--ff245bde-5f5b-4a40-848c-41a00dd86ab3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021baa63-e198-4a6d-be84-66bfebe4802f", "sighting_of_ref": "indicator--ff245bde-5f5b-4a40-848c-41a00dd86ab3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001f898d-1cc0-49d9-b523-d31befcb0914", "sighting_of_ref": "indicator--3884c34c-1b37-4a29-80bc-3445bed62a08", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ead566c-23fa-4ab9-9a67-1896c3072aa2", "sighting_of_ref": "indicator--3884c34c-1b37-4a29-80bc-3445bed62a08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1ac4b3-5374-49da-a50a-2c76a9719f4a", "sighting_of_ref": "indicator--7d4c8f1b-517a-435e-a70d-06aedcb27e1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6411396e-1380-4f81-a4d2-fee2f592b53f", "sighting_of_ref": "indicator--8eda0fd7-98fc-4b4f-8d91-63e85891c8f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095aff65-6160-43b7-813f-9fec1fb4a3c1", "sighting_of_ref": "indicator--828b3a9c-85d2-4bc8-a833-e4c409d1f976", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72217b69-e4f1-4bad-b52a-fa0726e14968", "sighting_of_ref": "indicator--828b3a9c-85d2-4bc8-a833-e4c409d1f976", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3685ae-bc48-474b-9263-1af84e8cb918", "sighting_of_ref": "indicator--be2d3f04-e32a-429f-8b7f-88d00e77d03e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152c3a42-f536-4e4b-bb0b-0a09ffca8a84", "sighting_of_ref": "indicator--be2d3f04-e32a-429f-8b7f-88d00e77d03e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5892bf45-078e-4e3c-ab16-7fb80fd96e6c", "sighting_of_ref": "indicator--89b7fdd4-6ca9-4d17-99ce-3e01337ff932", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2704505-054f-42b9-b792-f28b93af9126", "sighting_of_ref": "indicator--62b02ba3-b45b-49af-a0b8-c6c8e0e32678", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0721d27b-4ec5-41d5-ad4e-177c29af542a", "sighting_of_ref": "indicator--837301c9-6a4d-444b-ab33-afeba59af4c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f68110-87cd-4a95-a0dc-70680cfe64ed", "sighting_of_ref": "indicator--e9f48cac-cdaa-4a38-bec4-2f8f942a5f59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbae53bc-9d34-4585-9bce-196a2532c498", "sighting_of_ref": "indicator--9a681e7a-a78a-478a-8a82-95c7a2ad920a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9fe2b3-6810-4704-a231-4729f39f7a0f", "sighting_of_ref": "indicator--b4ff7e39-65d2-46ea-b858-c7c37b9bc70c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdcd6d6-89d6-412b-9e5c-8d534a6074fa", "sighting_of_ref": "indicator--a50502d0-56af-45ba-87ca-15a5442c0b41", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de527cff-fe2b-49fb-bf4e-e149fa0acf8b", "sighting_of_ref": "indicator--a50502d0-56af-45ba-87ca-15a5442c0b41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d490c0-63fb-4933-b043-e60369607e7d", "sighting_of_ref": "indicator--aabab764-58f7-4c67-b39b-1abdc5a22d4c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b88858-006b-407f-afd9-e7459df0c246", "sighting_of_ref": "indicator--1457a5dd-70e6-4b2e-be6e-c5382f5f2567", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ececf73-be79-4c75-9f7c-54af1438adf9", "sighting_of_ref": "indicator--35a8f222-16e9-4625-b307-1aed1918570e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d92f18-5444-47db-979e-79dbeda9d310", "sighting_of_ref": "indicator--a0205c6c-c162-4801-96aa-f97655bc4176", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfe2674-3084-4f66-a32f-41b3b6146816", "sighting_of_ref": "indicator--0b1b56a4-2036-4872-8af6-f7be716ee03a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26afb072-7b2f-442b-a7c5-6347c14a91d4", "sighting_of_ref": "indicator--a8efc315-92c8-4f19-ae5f-a1e6bc77165f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d589ad-24a3-42fa-8061-fe7fb175d518", "sighting_of_ref": "indicator--165d1aea-d0fa-46c3-b1ec-ed4fa5e601a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa1ed79-7b30-41bd-85fb-8e96ddbae92f", "sighting_of_ref": "indicator--165d1aea-d0fa-46c3-b1ec-ed4fa5e601a0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88dc785-bbbc-465d-979a-f654200a2700", "sighting_of_ref": "indicator--4574563d-deb9-4702-91c3-8d37a0f6e9bc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7e9d52-05e9-4653-ac10-2834afde7c92", "sighting_of_ref": "indicator--80fccf92-4b2f-41e4-bece-80b910ff8d4d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d456eb92-5873-4786-92b3-47c9ee92858e", "sighting_of_ref": "indicator--80fccf92-4b2f-41e4-bece-80b910ff8d4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278c9437-d441-4bd5-98ab-a2320a0f51f3", "sighting_of_ref": "indicator--0c052cde-c02a-4170-b4ab-7638d377b958", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d51b7a8-c6f9-44cb-97ef-a57788ea2105", "sighting_of_ref": "indicator--29d7e45d-c1d5-491b-ae52-a28794340a78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2143bda0-b5ba-4e90-b04d-fd575757b8df", "sighting_of_ref": "indicator--46821550-d78c-462e-8cf3-0444f5bf2dbb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d2ad7e-0793-4a5f-a887-6d4d2a9cab17", "sighting_of_ref": "indicator--46821550-d78c-462e-8cf3-0444f5bf2dbb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ecca35-20d9-4edf-a7e8-304bd2a5a896", "sighting_of_ref": "indicator--08ae514f-ae1e-4ca0-a4fc-5204bdd61c77", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dff756-8109-4762-9da6-8f1e351acd73", "sighting_of_ref": "indicator--08ae514f-ae1e-4ca0-a4fc-5204bdd61c77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed711fdd-a020-47b2-ad55-194bd1bc05ea", "sighting_of_ref": "indicator--82b29092-63e1-4ac6-90a9-76decf35317c", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe36066-45a3-42fb-9682-aa2df754fc3c", "sighting_of_ref": "indicator--e66746ae-4488-4a92-9f4b-d5704dc98af9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed230ce6-0f66-4248-87dd-cf18ad0ccf10", "sighting_of_ref": "indicator--e66746ae-4488-4a92-9f4b-d5704dc98af9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924bf9b5-051b-4bac-b665-6f1a404e8887", "sighting_of_ref": "indicator--62c31b89-93dd-4cff-b7fd-839df2d3db6c", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f6a8bb-3b85-4444-9c1f-c1284e3b181b", "sighting_of_ref": "indicator--623abb21-7f52-4de4-ad7b-d9488bdb21d6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d730fbe-9135-4086-928e-3b41440d92ac", "sighting_of_ref": "indicator--fde9cc80-f0c7-45b2-a376-1ea7bf0b74cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ea8da2-08be-426d-85cf-309d62378e37", "sighting_of_ref": "indicator--fde9cc80-f0c7-45b2-a376-1ea7bf0b74cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beab1bc3-6c25-4050-abff-b98b10c15c63", "sighting_of_ref": "indicator--3415b898-1068-467b-8dd5-1317055fcc1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e9086e-9900-4bd8-a2b6-2840ee0ab121", "sighting_of_ref": "indicator--98f046e6-88f2-448e-a0b3-6941bb53ce73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f795bf-9b3e-41a4-975f-e68b0af1a499", "sighting_of_ref": "indicator--b1415187-9ce2-48c8-947e-663fd0c2bdf2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5ea0b8-d64f-4d3b-9de5-ec47108fe0f1", "sighting_of_ref": "indicator--d31b45e6-4588-410d-a9ab-a06e16fdf22e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535d7440-c7a0-4b4c-9e98-bc480b8d8347", "sighting_of_ref": "indicator--55c80332-13f2-4072-b0ea-be721920cd10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a59e18-af9f-4c78-b174-e252fcff42fd", "sighting_of_ref": "indicator--9a3093ce-7f87-4d0e-8984-4f5ed63d5af0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3392ab-d1a2-4e4e-b7ee-257337be6a81", "sighting_of_ref": "indicator--9a3093ce-7f87-4d0e-8984-4f5ed63d5af0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b136e3bb-5b7c-4670-a50a-40544a53ab25", "sighting_of_ref": "indicator--e5fa5656-0608-4983-a98f-e05d08249cc3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cab387b-d461-47ca-8c84-ff7e3b158204", "sighting_of_ref": "indicator--b01fd261-c656-4df1-bb39-3ef03bba0290", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff29b58-3bda-4ac2-8df0-976e05a18535", "sighting_of_ref": "indicator--c19e1a53-f94c-427b-b52f-97bb84a9462e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98432dd4-1c75-480f-896e-a4d89cc6d48d", "sighting_of_ref": "indicator--c19e1a53-f94c-427b-b52f-97bb84a9462e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e72aea8-1d1a-4599-9624-e8079f090e51", "sighting_of_ref": "indicator--1ea2bcd6-c4aa-4eaf-a1ce-99482cb300e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc69796-c12f-45d0-9dca-7bfb03cfd507", "sighting_of_ref": "indicator--1ea2bcd6-c4aa-4eaf-a1ce-99482cb300e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ecb5c9-66ef-4667-8d95-b088c2c17635", "sighting_of_ref": "indicator--4588a990-83d6-4db4-ac4d-950d42edf1a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110e2891-37e2-43f8-b8b0-8eb106a03ece", "sighting_of_ref": "indicator--4569467c-df1b-420b-aff8-565fb4d7f7bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e99e10-9355-4323-99e7-d41650571a95", "sighting_of_ref": "indicator--280a9fe9-305d-4aeb-b698-50a40cfd5d0f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecef04f-7732-47ca-8712-533fcbf32a31", "sighting_of_ref": "indicator--1f30c2d1-e34a-46e8-a827-cde9f7981f0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8bd65d-cdf2-4b1d-8cd2-1e658478108e", "sighting_of_ref": "indicator--61f4fe32-9224-421c-b5b6-190bbc588a18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ab561e-7ff2-47b0-81d9-ebd386586bff", "sighting_of_ref": "indicator--de7fd117-0303-4ae9-a381-c1cf3eaa82cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb4170e-aa18-4752-ab7d-1dacf5df5a3e", "sighting_of_ref": "indicator--5fecb3e9-4146-4220-830e-ad5e5889ba13", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1846dfce-3dfb-4c02-a3de-265fb4f6be03", "sighting_of_ref": "indicator--2cfaebf3-a421-44ff-b922-593e59844d9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225679b6-5b70-4587-aa98-3e35ef22116f", "sighting_of_ref": "indicator--2cfaebf3-a421-44ff-b922-593e59844d9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530cc7dc-ff09-4eda-878d-15042117449d", "sighting_of_ref": "indicator--fc8678ff-c604-4a19-8340-b97d0901500c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eda7c5f-88c1-40ca-bd92-62cd9a62267d", "sighting_of_ref": "indicator--42abb247-f905-450c-925f-ae92e0c25241", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d55e889-ba85-4fdb-af79-b46d7476bf6a", "sighting_of_ref": "indicator--86a02133-e40a-4097-b731-60b70f8c96fe", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b58f556-dbe0-41a0-bba1-244c9c389006", "sighting_of_ref": "indicator--f1486999-24fe-43f4-a97e-a52fb4d9b546", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c43b2c-f728-47e0-8732-f17ef13d0685", "sighting_of_ref": "indicator--f1486999-24fe-43f4-a97e-a52fb4d9b546", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa4d0d1-7d22-41e6-9c23-c627ba0878d7", "sighting_of_ref": "indicator--647edbda-20d0-4f25-98d2-145892c7a303", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322029d8-95c6-45a3-a0d2-a6c9e44d7b1e", "sighting_of_ref": "indicator--647edbda-20d0-4f25-98d2-145892c7a303", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6826d86b-4e3f-4b9b-950a-2559204cf723", "sighting_of_ref": "indicator--a489a898-08cf-4128-8ec2-ab71c9fffb15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d02dae6-d557-4dbe-897f-56971d28741c", "sighting_of_ref": "indicator--a489a898-08cf-4128-8ec2-ab71c9fffb15", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3141ea-72a9-4861-892d-16e147aa2877", "sighting_of_ref": "indicator--2e0d6535-de9b-4c0f-b2d7-76d5be12570c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38737813-a236-42df-b2da-b27ae84a3f02", "sighting_of_ref": "indicator--2e0d6535-de9b-4c0f-b2d7-76d5be12570c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbe2731-f12f-415a-a679-1fec92798249", "sighting_of_ref": "indicator--03654a60-9f6e-4e1a-92d8-29355683fc14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412432ba-cda8-421e-98e5-912368b2a796", "sighting_of_ref": "indicator--92c834d5-07c4-4eea-bcc7-bd40c77f7bf3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cdf360-e3e2-438b-bccf-02f77d60bd28", "sighting_of_ref": "indicator--92c834d5-07c4-4eea-bcc7-bd40c77f7bf3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47448ebc-80a7-450c-bda8-759c1b3a6aeb", "sighting_of_ref": "indicator--cd356907-5b07-4c30-bf32-8f7dee8dd10d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b965741b-45f7-48c9-9ef1-56045279ebeb", "sighting_of_ref": "indicator--f1803227-f1df-4c7d-afcd-867da2a7f830", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6487e0-ccb3-4f6c-9e63-090c9d088e87", "sighting_of_ref": "indicator--2bdafe0e-e732-4a9e-ace2-4413755c2ebe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a7573d-d178-47fc-a142-3fce0c3a75af", "sighting_of_ref": "indicator--9b9d8cc8-b360-4f72-a817-2cdfc93699a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4d14d8-3eb8-49fa-99ba-43f68c0eda84", "sighting_of_ref": "indicator--d20c05b6-68ff-4d3d-a580-c5ab38895238", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fdc595-aa6a-481f-9896-9c3d0c94e606", "sighting_of_ref": "indicator--d20c05b6-68ff-4d3d-a580-c5ab38895238", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19df33b-a901-4aaf-badb-9ee9d4b9fa83", "sighting_of_ref": "indicator--675da18b-5db0-4cbf-80d6-414ac806fa82", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7139d3f6-1dc7-4c65-bbba-e8172484eda8", "sighting_of_ref": "indicator--a87a0327-02f5-4c5a-80d6-26ca854bedde", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041e6985-3d37-4fbb-8015-9fb4846872ce", "sighting_of_ref": "indicator--a87a0327-02f5-4c5a-80d6-26ca854bedde", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f705f2f-b884-41f8-a119-50958fe262c3", "sighting_of_ref": "indicator--032f3d4d-ef9d-4be7-8b3c-4f5bc756d9f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856d3e30-8294-4c0d-bdca-c0fc49cecdad", "sighting_of_ref": "indicator--04667a78-d520-4b1f-ac70-f7de73f97aef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2679b663-edbb-4be0-9d2e-f0f1b6402f47", "sighting_of_ref": "indicator--e0ecc68c-0170-4f14-bf70-79b37f33a72f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119419f9-fc43-4a0a-98e7-39fd385fe16e", "sighting_of_ref": "indicator--a2fb5f20-0db3-47a9-a5c9-a3552a55f32a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea36917-7c54-4422-9770-07fcf2993321", "sighting_of_ref": "indicator--9a9bdd64-eb5f-48c3-b941-b21651b6d86c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036613f9-f5fb-4e3e-a194-2817af4c9012", "sighting_of_ref": "indicator--1cdbe61c-1b16-4e45-9287-f6c4c58640dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b48ff2-3631-4251-ae3d-53c635d61b5f", "sighting_of_ref": "indicator--aa482de6-ae60-47f7-9444-d0c71bc7b311", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae44e12-7e6a-47df-80f3-350b4d2cb8ff", "sighting_of_ref": "indicator--dfc2cb0d-bf89-43fb-ab15-2b3dbca57e86", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0034bbe-dd30-4ecc-b7f0-47d539616325", "sighting_of_ref": "indicator--dfb2c3fe-036b-4679-853c-39503f48133d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689232d6-2d6d-4a12-80c3-8a7c1cf34292", "sighting_of_ref": "indicator--cca12fe7-18e4-4c37-9421-d661a0b914a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cdbb31-d350-4d73-91fe-ededc8d52a3e", "sighting_of_ref": "indicator--3db3c94a-7dc9-4ff3-b7fa-611c0a99ce30", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570352c2-6c6c-40af-9440-f2d15f67a67c", "sighting_of_ref": "indicator--402be288-0f70-44fe-85e5-1ea009d6da9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a870b714-5057-454a-b67d-b4ce77c097a0", "sighting_of_ref": "indicator--2492c82f-fb02-40c7-9557-fa751125b09e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f36d0d-de3c-4c72-9fcb-7683fc2f53f1", "sighting_of_ref": "indicator--0663068f-dff0-4656-a7b0-41053a582923", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121a09b9-8e45-4837-8b8b-8d3eb5cd92ca", "sighting_of_ref": "indicator--17a20dba-ce12-4425-bd64-a47a43e60751", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3581642-e0c9-4156-bfc8-4d73f7cd19ee", "sighting_of_ref": "indicator--17a20dba-ce12-4425-bd64-a47a43e60751", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0487cae4-bc0f-4315-b887-b5a666823292", "sighting_of_ref": "indicator--b543939e-92c4-4abc-b3d0-62a91b21a7b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738d56eb-83a9-45d6-b2cd-f8b37911cbd8", "sighting_of_ref": "indicator--2fbd77e3-4edc-4dd3-83ff-ee144e2963f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e1c1f7-cd6a-413f-98e6-1dd67ff375d2", "sighting_of_ref": "indicator--46a7274a-89de-4a6b-ab05-1b93b40a9cde", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3329956-77e2-40c3-a6b6-7d0c28cf38c0", "sighting_of_ref": "indicator--46a7274a-89de-4a6b-ab05-1b93b40a9cde", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9effff1-dfac-4933-9d30-2c2228333274", "sighting_of_ref": "indicator--8f3d389d-af72-49be-9652-77072685e765", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f916254-1d01-45d1-a908-3185af826af2", "sighting_of_ref": "indicator--9a0fb4a4-561c-4b30-9221-b9b1c28a222a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f98b615-1b6e-4ee1-87ce-e958f0a2a5e0", "sighting_of_ref": "indicator--9a0fb4a4-561c-4b30-9221-b9b1c28a222a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be88895e-e25d-4918-9851-e7791957e0ac", "sighting_of_ref": "indicator--5bf16925-653e-4ec7-b93c-c7148d72292d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480480e1-1d6e-44f5-a4c4-bfae3d27bddd", "sighting_of_ref": "indicator--1aaf49aa-5e59-4eac-b9c0-7f87aa9178c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71787d53-5440-4a48-adaa-f4c773674572", "sighting_of_ref": "indicator--1aaf49aa-5e59-4eac-b9c0-7f87aa9178c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436fb926-438f-460f-80db-04a938df5969", "sighting_of_ref": "indicator--ff09318e-0b83-45c3-b586-3a79b34cc506", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f9ccc8-4e8f-4f41-b95a-a8f185e570fd", "sighting_of_ref": "indicator--69871f56-1b38-4636-846a-5668220dced9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f984918-41bd-42e7-b62d-5256de9977d7", "sighting_of_ref": "indicator--af139193-03da-4f4b-b682-b9fd8edcaf0b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff51b2f4-510c-44d0-bce7-460dbaba0c88", "sighting_of_ref": "indicator--266c0cac-494f-4406-b9ce-1d0f815eb18b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34d751f-eb53-4604-82c9-2d3cb7668de9", "sighting_of_ref": "indicator--30293de2-af2d-40ac-a736-8c1bd160eb8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0cfe76-cbf8-4018-95f3-c49c8fc42706", "sighting_of_ref": "indicator--30293de2-af2d-40ac-a736-8c1bd160eb8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c5a0e5-64ed-477d-89be-f3eecb109b47", "sighting_of_ref": "indicator--dd0a048e-66c3-493c-b5a2-efa45af8ba24", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5197204c-a64a-47ca-b641-56dbfe45135f", "sighting_of_ref": "indicator--4762fb80-8f83-4793-8d80-3a31b5f3ea7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c99b23-d9f2-4d83-a411-cfcfe9d9b2bb", "sighting_of_ref": "indicator--4762fb80-8f83-4793-8d80-3a31b5f3ea7d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bc790d-13c3-4ca4-99b1-58f358f100b8", "sighting_of_ref": "indicator--f1008d7c-5494-4095-b76c-7ce79dd98d9e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1031363-4542-4b70-b0b2-b8a916b2f2cd", "sighting_of_ref": "indicator--d88cc9f5-b1d1-4028-a0f4-3207435ffdbc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca19210-1706-4ab5-96c4-65826388a5e0", "sighting_of_ref": "indicator--d88cc9f5-b1d1-4028-a0f4-3207435ffdbc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36dc7ed4-0d40-4217-a2e2-015d712364a7", "sighting_of_ref": "indicator--469967ad-a883-4e48-b4ca-8ff0b80fd61b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1529a6eb-8d0e-40da-995a-761ca8e1849a", "sighting_of_ref": "indicator--469967ad-a883-4e48-b4ca-8ff0b80fd61b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336e846d-a7c1-4ef6-a0e2-26ce1ce227cc", "sighting_of_ref": "indicator--cc297634-30f8-437d-8b44-0caa7c5ad4b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bd6c13-7888-4d0e-ad68-449d107c9503", "sighting_of_ref": "indicator--556f7957-5e06-4650-b768-5a8364fb5199", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaeafbf-2a4f-49a8-a093-15a773be3f71", "sighting_of_ref": "indicator--e9fc7849-4b49-4691-87a5-272db8c7c205", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260ac708-0c6a-42eb-841a-05035bc1beab", "sighting_of_ref": "indicator--e9fc7849-4b49-4691-87a5-272db8c7c205", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaab7f0a-d148-45e9-930e-1e879edbd120", "sighting_of_ref": "indicator--25ff29a1-165e-43e6-b7b0-e9afa7d909da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7d2385-f549-4f9e-8f31-69fb671f5f9d", "sighting_of_ref": "indicator--25ff29a1-165e-43e6-b7b0-e9afa7d909da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f766a1b2-7608-47b3-ae35-9ab26bd1b48d", "sighting_of_ref": "indicator--5dc2ecb3-3c0e-40a2-8ba6-070454063f05", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d4539e-63a9-45ad-a489-768073fb8904", "sighting_of_ref": "indicator--5dc2ecb3-3c0e-40a2-8ba6-070454063f05", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b311c70-5824-438e-9f7d-25f86964c266", "sighting_of_ref": "indicator--b9748ae2-b30b-448e-bd62-3dc837c41581", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c6d93c-4f3d-4171-94e5-230c6029d8f5", "sighting_of_ref": "indicator--b9748ae2-b30b-448e-bd62-3dc837c41581", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356c7f8c-3dc0-4224-96dd-aed427d9af6d", "sighting_of_ref": "indicator--74cafc1a-30fa-48b2-b0c6-422b407f2625", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf9b917-26db-4cb8-83cd-2fcb32145da0", "sighting_of_ref": "indicator--722302de-7a51-4463-a042-cb552491d856", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5c5840-c7ce-4755-a004-4ad572d853d3", "sighting_of_ref": "indicator--ac812483-2e23-4bd9-8f83-193858ec7036", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007e3c50-48ec-47be-a83c-f867597f2f0f", "sighting_of_ref": "indicator--9b460d6f-d034-410b-88c5-5d335246b88e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b09972b-f26a-4150-9f57-50a3dd053853", "sighting_of_ref": "indicator--546171ca-354c-41f7-bc01-96c7671c171f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9583c22-ea88-4265-9e5a-309a21748220", "sighting_of_ref": "indicator--10e12d3a-b6b3-4e9c-94f0-aa0737831c53", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f2fbf4-6a15-4e7f-8714-c7540151e14d", "sighting_of_ref": "indicator--49099d82-0e6f-447e-9fed-5bd3bde6b471", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853dab5f-286c-4424-98b6-4ac6ef1ae4f5", "sighting_of_ref": "indicator--49099d82-0e6f-447e-9fed-5bd3bde6b471", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e770c43-08ea-4afb-92b4-ca244c672fdd", "sighting_of_ref": "indicator--85c5179a-3205-46b8-95c9-a1515e7d0522", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed82530-fce2-4ba9-b883-07b6ebf8cf4a", "sighting_of_ref": "indicator--529b38a0-8111-4203-a8ee-878400d32ebf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf99f563-308b-4c86-ab34-46806e8c394a", "sighting_of_ref": "indicator--340e879d-6bb1-4240-861f-d971e7a0125e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0af1cb4-790c-425a-aa98-6e184ffa8513", "sighting_of_ref": "indicator--8bcda532-7a5d-49a2-830a-83f8a371246b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d2edeb-10f3-4764-88fb-4ed3818a66df", "sighting_of_ref": "indicator--b9e2fab3-ed3d-450d-8b04-f2862e55d656", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8774bc-8108-46df-9d93-ee73029a3294", "sighting_of_ref": "indicator--a98ab54b-a4fc-4ce3-8a15-28a82b124c1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7e2e08-cd32-42a9-af1f-9d780b2344f7", "sighting_of_ref": "indicator--42c3780a-984f-41d8-a540-39b1a7632ce5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2122c3-918f-483d-a1fc-794053db9168", "sighting_of_ref": "indicator--799e2432-bb28-4716-8768-bc68281b7b6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c57e3fa-e20e-401e-8d53-4fbdaff2493e", "sighting_of_ref": "indicator--799e2432-bb28-4716-8768-bc68281b7b6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b619f87-f44f-4160-aac2-14b6cb3cbd02", "sighting_of_ref": "indicator--ef4927ad-bf1f-4739-a72e-017b4e7c6933", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bcc99f-3db9-4c75-8e28-3ffb94dabf9a", "sighting_of_ref": "indicator--ea086cea-3af8-419c-9dbc-78b39fbcfd58", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2f1b6e-268b-4e44-b866-f61f3a8afbc9", "sighting_of_ref": "indicator--7834dc59-96c8-479e-9bcc-39c66aa8b83d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b43e38-4538-47ef-a460-df29a7213d3a", "sighting_of_ref": "indicator--6d30993a-3377-43bd-8fb2-61c97ff9d26b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d0b0c6-420b-4a81-b01f-920089a18fc8", "sighting_of_ref": "indicator--198ee80b-9789-4a5c-99c0-b03264dd6966", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82b0e4a-06db-40a9-bfda-13518530b413", "sighting_of_ref": "indicator--b16f9034-bc92-454f-bed3-542cdb1725f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b7bead-e146-4533-bac9-60fe9afa06ce", "sighting_of_ref": "indicator--1fb59b61-ac58-428d-8251-3f32db627b75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84801e8f-b9b0-4257-ae7b-c1825dffaddb", "sighting_of_ref": "indicator--46a99c9c-223f-4cda-b7d2-e5d6517e2857", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe615aef-35cd-48b7-a1b4-cbbae3304767", "sighting_of_ref": "indicator--66dbc04d-2c8e-4467-ac9e-49eb5a245911", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc868a17-5822-4885-a17f-5384a7abe936", "sighting_of_ref": "indicator--6c188a1c-82fe-4e39-8303-1a0e7de10c38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4c9a73-03e4-4646-8562-e381440ecf7b", "sighting_of_ref": "indicator--723ae4a8-85da-4aa4-8022-b947af98f796", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d37fdf4-70f2-4afd-88f4-d5547f4e1226", "sighting_of_ref": "indicator--61de77d4-4e61-4919-a7d0-274ea156367c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a2b36d-c6cb-424e-9f89-535e77242606", "sighting_of_ref": "indicator--27b18871-97e5-4918-8760-7899f329a94b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf7757c-d2f0-4cd8-837f-727877cbdbeb", "sighting_of_ref": "indicator--552d49fa-482c-4116-97ee-3c8bb5c09c18", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0abca42-e19a-46e6-82a5-b1d577b624ce", "sighting_of_ref": "indicator--5886090a-059d-422f-9a22-be7365056028", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740e836f-7ee1-4315-b58a-7e1f82de8cab", "sighting_of_ref": "indicator--5886090a-059d-422f-9a22-be7365056028", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b9dbaa-ad65-4049-8449-3ffaff184dcb", "sighting_of_ref": "indicator--6b60e3a7-9a90-40bc-a024-fb02a69dd4f6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c08077-0266-4fa2-8ec1-c695df563206", "sighting_of_ref": "indicator--2fc96f75-65aa-47e3-b5bc-509c914fd887", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ecc28d-1c50-47a8-b261-032b2bfa5d13", "sighting_of_ref": "indicator--196f28cb-80ae-4c73-aa4d-3f0face2920b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4ba0d8-89d1-4f5a-b0f4-e25ff97cab2f", "sighting_of_ref": "indicator--38de205f-f5b9-4650-b679-7974a9873f88", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f355d668-488a-4d70-9e3b-225d9812367a", "sighting_of_ref": "indicator--38de205f-f5b9-4650-b679-7974a9873f88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed8df0e-9c92-48e9-a48e-739f3330ba32", "sighting_of_ref": "indicator--565b5245-df9d-42c9-9f80-19099abac186", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d571d5-7cdc-430d-945b-fbdb9c7a0535", "sighting_of_ref": "indicator--ccbfd131-cf0b-4e54-9502-2f724bad3fbd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068ce62d-4e42-4a2a-ba30-bd00aea9b58f", "sighting_of_ref": "indicator--7033a6e0-fec2-4da3-88ea-e66603f62f8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ea0b07-aadb-4f66-9a0e-29b4378213ee", "sighting_of_ref": "indicator--7033a6e0-fec2-4da3-88ea-e66603f62f8f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfad74f6-bc82-4049-a4ca-3a26d805a6cb", "sighting_of_ref": "indicator--88eab0ba-2591-40f5-9857-4def9d612b84", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc5b37c-175a-4caf-b407-f989a30544c4", "sighting_of_ref": "indicator--d2715146-a195-4002-9bd6-5948e14a4d9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab61022-5f38-4095-a96e-0fc4eb5d48b5", "sighting_of_ref": "indicator--d2715146-a195-4002-9bd6-5948e14a4d9a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c54b98-86a6-46dc-bd79-6b759f6985ba", "sighting_of_ref": "indicator--db23de88-93eb-4e82-8fe1-c04d5bed86f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a058c6-c234-4468-a476-a1c4ebab6db6", "sighting_of_ref": "indicator--db23de88-93eb-4e82-8fe1-c04d5bed86f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa07740-355d-49b9-8a03-dec2d2347aa5", "sighting_of_ref": "indicator--9ac9580e-afd7-4776-a413-23fea34b468d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181367de-062f-4115-a01e-47541adfa8c4", "sighting_of_ref": "indicator--56b3fe2f-4d6a-4837-a216-4ac64b63773c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b59950-048c-4ce1-9f51-ba0a1d6745dc", "sighting_of_ref": "indicator--49cd56c6-d7d5-45d7-adcb-e9b2d306b304", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aaccdd-5737-4463-9ca8-80750cd6b46a", "sighting_of_ref": "indicator--22d21950-4669-4141-bfbf-1cdd4dcd08f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffb537e-71be-457c-9cee-65485cb75b5a", "sighting_of_ref": "indicator--260d2d72-fe84-40aa-8ee9-88506f665dce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9619f2-bde7-47d5-bfde-95f511acc940", "sighting_of_ref": "indicator--5511f9e8-2be5-4d20-8836-6c8c6cb499e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735f412b-1680-41d7-b8dd-a7f3fa087f91", "sighting_of_ref": "indicator--f5abc090-7ccb-4a6d-85af-32f4b7a97b20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fb1239-65fb-4377-bde0-b55b67afd80e", "sighting_of_ref": "indicator--f5abc090-7ccb-4a6d-85af-32f4b7a97b20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ece14f1-a533-493f-8e7e-55c5ff463927", "sighting_of_ref": "indicator--fdc7593a-d206-459a-81f2-dc5728fd6348", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cf26c5-ac79-47bb-9e81-48dec12a2e27", "sighting_of_ref": "indicator--50a2ecd1-264d-403f-93e2-6c4f1df4f5d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd5847c-8b06-4a82-8dbe-fdddbc093a2f", "sighting_of_ref": "indicator--e4afc29d-2a76-4a02-b5df-174cab7f23fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f2da97-8a2f-4526-8671-8966f8449491", "sighting_of_ref": "indicator--968179d4-5578-407e-9ce4-8b3768b2ac71", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c10dbd-fa11-4554-9ef8-d683ab1e71c2", "sighting_of_ref": "indicator--968179d4-5578-407e-9ce4-8b3768b2ac71", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e4a1b7-e3b4-4bcc-8edb-cc8422bed54c", "sighting_of_ref": "indicator--2425885a-e814-4386-8624-f244cc41d43d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67dedf6-caa3-486f-82d4-1e525a2ed97c", "sighting_of_ref": "indicator--67f0f2fa-14fd-4f94-9d92-53b315f7242e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acadca0-998d-432b-a631-b21f6927c3de", "sighting_of_ref": "indicator--771649d0-6db7-4dc9-8fb2-1d62aaa84d78", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b007a770-9198-4d4a-8cd6-55a54cf962b1", "sighting_of_ref": "indicator--f761c482-bb6f-4ec8-8d72-1af6374baf0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32ce09c-fc03-4b27-9de6-4eacd456e3eb", "sighting_of_ref": "indicator--8dbd6291-ce01-44ad-a93b-6e755e5c068e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c862da1-5e92-4106-aed4-fa0e544ed6f1", "sighting_of_ref": "indicator--6d7c481a-482a-4706-83f5-aeca769a8295", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a17736d-af0c-4ed6-8e9b-1fa42819f5c0", "sighting_of_ref": "indicator--6d7c481a-482a-4706-83f5-aeca769a8295", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c8e9ec-9252-4ad5-8ecc-7ca641f08bef", "sighting_of_ref": "indicator--2de10796-642b-4abb-bcf3-e9f3b7079eab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a899f2a7-5e2e-4a6e-89a8-8e9926bc406f", "sighting_of_ref": "indicator--a94b614b-90f4-4c12-96d8-37fd594285d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75efa231-e64c-47f6-9d39-9ed28cf8d8c2", "sighting_of_ref": "indicator--da399742-c48e-4ba2-b153-7171c9171057", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22981e6f-a791-449a-ab68-3c96a06b47a5", "sighting_of_ref": "indicator--2dba554f-ab74-436e-b85c-ed82f13fcb12", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848d11da-5915-4c7e-a625-16890408c56c", "sighting_of_ref": "indicator--2dba554f-ab74-436e-b85c-ed82f13fcb12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0010d3c3-441b-42f2-8498-c6b74826fabc", "sighting_of_ref": "indicator--351a9efb-1c03-4e93-8029-840e4b5e3279", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e62cd5e-746a-4cd1-9854-bd32cff7af8f", "sighting_of_ref": "indicator--351a9efb-1c03-4e93-8029-840e4b5e3279", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb837129-07ba-4937-920b-ad75da6c965d", "sighting_of_ref": "indicator--fd2b8236-1c9f-4e32-9c04-0e896ae48d4d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e619fd14-90e5-44d4-9abc-9f4b96f3ecf6", "sighting_of_ref": "indicator--8abd0064-0faf-4da7-a32b-fb9830a7cf1c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05e51a9-3454-4036-933f-ef0041fb8bd6", "sighting_of_ref": "indicator--2c5e5bd4-8b4c-4199-9642-ad0ad0a80087", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc0bad3-2a8e-4848-9c65-3085fa2e8f31", "sighting_of_ref": "indicator--d379dcc1-3ba1-4e1e-908d-29026bcab2a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b2664e-d851-4130-aaca-2c16d0ca5c90", "sighting_of_ref": "indicator--946e2701-2f9f-470b-b72e-acf3248d9dad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b608813-afa6-4f19-bd34-346afe8cbf4b", "sighting_of_ref": "indicator--60c2aa17-5d03-4a82-8cf1-f8348151902f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6aadac-10d4-4b7b-b7ff-a5beffd4af27", "sighting_of_ref": "indicator--a767ea5c-5e64-4aa5-8ac7-72215f93bda0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2703de7-050d-4200-b57a-46f37aad5e90", "sighting_of_ref": "indicator--a767ea5c-5e64-4aa5-8ac7-72215f93bda0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd181c2-e171-444b-be1f-b7c982155a45", "sighting_of_ref": "indicator--cca728de-4ce1-485b-8412-613cffcee3b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0d732c-3cfa-4b64-aac4-f4a81680d672", "sighting_of_ref": "indicator--6e22daae-2cba-4bec-938d-502eeca78fd3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c957c2bc-e25d-4997-81fd-09ac3a48122c", "sighting_of_ref": "indicator--6e22daae-2cba-4bec-938d-502eeca78fd3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e7a1b0-598b-4bad-91bd-67cc7a123477", "sighting_of_ref": "indicator--ef07c501-ac09-4443-94c0-b92a67b7cc5d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0928d1-c531-4ce6-9850-41e04d550e2c", "sighting_of_ref": "indicator--3cae1fd6-023f-4a92-b62e-6ee76cb2fca4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c964408-a991-4625-8248-2733ff3b4e5d", "sighting_of_ref": "indicator--3cae1fd6-023f-4a92-b62e-6ee76cb2fca4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e2c488-b6cb-48cf-90a3-682d820f09dc", "sighting_of_ref": "indicator--49d08c03-9f2e-4e23-ac11-a92c0dc98aea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7a474b-1be5-40ca-a285-f28d2a46838c", "sighting_of_ref": "indicator--49d08c03-9f2e-4e23-ac11-a92c0dc98aea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048a4410-6793-4c04-88d7-957c89af60ad", "sighting_of_ref": "indicator--3afedab4-c56a-4c79-acef-64d8cd6db170", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00caace0-722a-4809-889c-c36a9e64605d", "sighting_of_ref": "indicator--f9ae3000-2cc8-4dfe-826e-c28a16738559", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a50951-a976-477a-b4fb-e73ad9892980", "sighting_of_ref": "indicator--612161c2-c4a5-429a-8f46-e61a1b63df18", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a507d2d-7e1d-49dc-9ebb-d33fac266187", "sighting_of_ref": "indicator--2b07b810-0253-40a9-ae2a-307dc393c1de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7a7826-2baa-49ed-aeb3-2c4410a0fb28", "sighting_of_ref": "indicator--78373c12-c037-4aa7-b595-26b8afd4d3cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e7c772-c7d3-4115-b9d2-c90976840fbf", "sighting_of_ref": "indicator--a217ebb5-b6f7-4ff4-8fd1-71484d60f29a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e771540-01dd-4ad5-818f-2a43d4566779", "sighting_of_ref": "indicator--e30abd8b-31e3-42fa-b4a7-3bef3c1ac150", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bbd96b-485b-42b5-86a5-100e78288236", "sighting_of_ref": "indicator--d5b6f6f5-cabf-42d5-8b51-25d4ca0e0c54", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6d4b78-1ef5-483d-9818-d49d2cf0e7b0", "sighting_of_ref": "indicator--d5b6f6f5-cabf-42d5-8b51-25d4ca0e0c54", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559db993-026c-4ca4-86f2-aa97dc586e45", "sighting_of_ref": "indicator--e09bb634-5b01-4987-a684-6be2eb0aa6f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c865960-5486-4a36-915f-ae15a2ee3f34", "sighting_of_ref": "indicator--e6b5dd97-d75e-455e-98d7-de91a8ab5882", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c852361c-4d51-4329-b86e-0ed03a912834", "sighting_of_ref": "indicator--22a4875f-1e2a-4535-a7cc-ae0c91ccc036", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b828e02b-67d7-4083-bfe8-53a08216f0b7", "sighting_of_ref": "indicator--23f0163b-074d-4471-8441-c2d4447e0757", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2f2920-f797-48a1-ae48-86a0457418ee", "sighting_of_ref": "indicator--d8c864d1-0a37-4f90-8728-3247adbaff2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008f3508-767d-4d15-b7f2-54089c1c518b", "sighting_of_ref": "indicator--0cd4ec3b-f891-48aa-8fbb-c5a5ac1ff228", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148b1076-895f-4003-b707-090df184b36d", "sighting_of_ref": "indicator--55078345-6cbb-4514-93b1-81315b291911", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8da9c6-f03d-4095-b586-84959ba25a89", "sighting_of_ref": "indicator--f07e9ead-9028-4ac0-90ec-d3f6b64bfcf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb883bc3-7677-4490-85cd-f9c7b5c8061b", "sighting_of_ref": "indicator--e0de3bf4-35d8-4806-b2d3-6f0a4b14e82d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f3de5d-e8f4-4076-8c08-3a05d63ee531", "sighting_of_ref": "indicator--a366fb32-2ec3-4868-98c2-837bbe38a89c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6117fb9f-a838-42da-a790-6abb01c83a9e", "sighting_of_ref": "indicator--00c66815-b39f-489f-b521-cdd3dcfefaa2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d72438-8d67-4034-a5de-9b0af8bbaf96", "sighting_of_ref": "indicator--a9df274d-bd34-4243-aa08-09b578ab57cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2851c829-6d7a-470a-8c6a-033558dbaeff", "sighting_of_ref": "indicator--22e06031-bbd0-42c1-9ed0-52d05f0a407a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51709484-c0aa-4657-aa7e-d58feb20f0c0", "sighting_of_ref": "indicator--26de84c8-7d04-4cfe-9a33-b380477f0b4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557ff144-1b98-41d5-823b-6aee78fd13c9", "sighting_of_ref": "indicator--31da1cb2-14be-42eb-926d-95daa52c488e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72278db-f815-479a-a11d-ef67c5cb139b", "sighting_of_ref": "indicator--cb96890f-de90-4e42-8705-19f1c4380518", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e52c052-c4cb-4883-b8a1-4768cd0a19a8", "sighting_of_ref": "indicator--cb96890f-de90-4e42-8705-19f1c4380518", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7791d79d-ee2c-4cef-83d7-2d088de5963d", "sighting_of_ref": "indicator--7d596ca6-9297-479a-ab01-552e458b2ed3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a9024e-467a-4a1d-81b5-d980974b694e", "sighting_of_ref": "indicator--c43276d9-b7d2-46ed-b5a2-2299bd32b605", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8d9fc7-6b36-4c86-bf81-446d9fbfddfa", "sighting_of_ref": "indicator--8cceaefe-2002-421d-ba4b-10e954ca46ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239c31c9-3fe1-4d78-b805-06a3de61082f", "sighting_of_ref": "indicator--e9772f2d-4935-4160-9f0f-87766c93785f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9b5d74-5e89-4b67-96c8-d4faba397f5d", "sighting_of_ref": "indicator--d7c73ee6-87f1-4dc9-bb9c-1dba91bebea5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59232d1-84f4-4672-8c21-09fcd19ae290", "sighting_of_ref": "indicator--0e2408eb-eac0-409c-8a23-59eaca2401c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80081093-8ee2-43da-911a-94575a91c24a", "sighting_of_ref": "indicator--48b97912-60da-4d87-9aff-59f71bf75868", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710669e5-bfa0-4cc4-889a-644721d119c2", "sighting_of_ref": "indicator--f251cb3a-59d6-488a-bce2-ee0ef6e4e5c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ce091d-6292-4037-8dce-e2555f5b0ee1", "sighting_of_ref": "indicator--8ead62cf-702d-4657-a129-863d47e9a9b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7046ce6-73c7-49c8-8bbc-497e0e3ac61d", "sighting_of_ref": "indicator--9c130a5b-6cd8-42bc-8b0f-1a03774cfa81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fef577a-0591-43c2-bab8-03409aba03a7", "sighting_of_ref": "indicator--40d2fd5e-c2f3-41d2-bca9-c1c29346f014", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fece32-a9c5-4e0f-ad13-21b8aa8f7ede", "sighting_of_ref": "indicator--f528082c-277f-463c-851c-4c4137d71452", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97af9f2-f0a9-48dd-81ca-31b15d874787", "sighting_of_ref": "indicator--51cbadcc-b981-4f0c-931b-4058619abfa1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edb6493-5728-4d7e-bc77-10db9a757a7a", "sighting_of_ref": "indicator--7a3105d8-d309-49e0-bae1-9a3f4df87212", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d70334c-3fa6-4d68-a9e7-499fa1d5c803", "sighting_of_ref": "indicator--c37edc24-2033-492f-b10e-0c612519db82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a7253b-02b5-44bb-a479-3c56d8a26b3e", "sighting_of_ref": "indicator--90da19f1-7a70-4821-a810-e7947a069d92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1abfe17-869c-4d63-8cec-95c72da5f8ca", "sighting_of_ref": "indicator--8973a26a-4e09-4edc-9679-07e41b5d7389", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d6e527-d378-4aee-a87b-14a0f4a6a373", "sighting_of_ref": "indicator--b5450533-efba-428c-bfab-72214e3050f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c421b0-8bd3-497c-aeda-5401ecdd2a40", "sighting_of_ref": "indicator--6efd0454-e136-4d0f-a321-efa0a9a48b3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f143ff96-fa3e-42b2-bc8e-0065cda7e6c6", "sighting_of_ref": "indicator--8f2c15a3-edf6-480f-88b2-1b0bc854bc1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e742f2-cbe5-4932-b901-9c58b56dd37d", "sighting_of_ref": "indicator--8938d611-118c-4670-9789-99daee90d4b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edeba32-6025-4a9c-a234-0410b27f64be", "sighting_of_ref": "indicator--bfd99b18-cde8-42c1-9212-2b5697364114", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf96098-3500-4009-bf32-0d6267fa0188", "sighting_of_ref": "indicator--6d311a67-1a8e-4d2c-95aa-7051d2727424", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6a47e9-9c46-4c89-a100-42b11c0f215b", "sighting_of_ref": "indicator--370d1878-9243-4911-9f59-7f71908ba850", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd89ad1e-3c9b-4829-adaf-3f9d4418aaf3", "sighting_of_ref": "indicator--c74721d4-3217-4b3f-8b5d-4e597ee5fad7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30d229e-8480-45b4-82d4-82196e705113", "sighting_of_ref": "indicator--234a0144-3237-438f-b757-d338afdf24c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6872ea-4f59-4008-b28c-56644fb46798", "sighting_of_ref": "indicator--c2d65e74-7a8a-4bb0-9f24-e7aafc6c12b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0493aa8f-24b5-4f15-9eff-7ca762444cb8", "sighting_of_ref": "indicator--3cc9a8ec-c0dd-409f-a20f-914dedaff305", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f934ba33-cfb0-492c-bae2-4df8785395a4", "sighting_of_ref": "indicator--914af027-6011-482a-9112-b84b3db38346", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abf8a13-8cf1-428f-8dfb-a70cb67d98f4", "sighting_of_ref": "indicator--dc7b985c-f81f-4dd7-b72f-9e922ad3d539", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1f8bb5-17ff-42ab-919a-4320089e35eb", "sighting_of_ref": "indicator--38feffb2-9cca-48cc-b2b9-22efda26a4c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d39e7ea-fe3b-4c5b-845c-7b9dd45f7f9f", "sighting_of_ref": "indicator--c2dcde56-6884-4841-b682-fef5615c54f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec61d747-fe38-4f75-b5b6-21279a4f7b74", "sighting_of_ref": "indicator--6aca78c5-8ebb-4a77-8e2e-e81adc1a8415", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec2e974-64a3-490e-b999-8c3a2c188808", "sighting_of_ref": "indicator--9921d3b6-9eb5-4e79-a4d4-ff77da813c73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb506b91-a4f4-449c-ae4a-62bc7427def3", "sighting_of_ref": "indicator--f2fa54be-ae03-4b01-801f-23d94b656223", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93c2265-6ea6-4ac9-b037-1fb7a41e5231", "sighting_of_ref": "indicator--e14b552d-3e8c-4f85-817d-c7ae8636d265", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e8e6f4-2878-4e4b-9609-5bfc1c3a8d18", "sighting_of_ref": "indicator--12169fda-eb9b-4db2-b4f7-6ebe46e548ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1303650e-ff12-4438-922b-07bb9949df21", "sighting_of_ref": "indicator--2c3c1ac5-444d-4257-96d3-c0db05bcb715", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f904b924-fa49-42cc-9332-2af91f7abc71", "sighting_of_ref": "indicator--d39eb2da-688c-4cb1-a158-52ad0cca8f21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0f7f60-b86e-4171-bae7-3d0dce9e3d42", "sighting_of_ref": "indicator--1b2371ec-c037-463c-8c4b-6abb8814dc07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe17ec8-0ec5-454b-8739-7633b89695ac", "sighting_of_ref": "indicator--97122b09-aa15-437b-b1dd-16327c307992", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98e0477-0809-4d13-a50a-c6f6da4d5a83", "sighting_of_ref": "indicator--c9e3791f-949a-4f33-846e-c2e4d81af4c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35c9bfa-ea2b-4ffe-afab-6bb27b8a1f84", "sighting_of_ref": "indicator--0eb78d87-c611-4203-826c-cc6b4576bc7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaa959d-c230-491b-8e71-0e086d58f58d", "sighting_of_ref": "indicator--f0975e55-a25b-4ca7-b7ba-9151efc49e38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30452d36-ab81-4096-a927-359316a20b28", "sighting_of_ref": "indicator--3c008540-a43a-4272-949e-4f9477d48a1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4eccd5-021d-4d6c-b413-8bd62f81bd27", "sighting_of_ref": "indicator--5aed9a64-034c-4188-a21b-cc93f84dcf2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85753e0-52a4-417e-b54b-8b796a8481bc", "sighting_of_ref": "indicator--4599977f-1ee6-4111-9897-55c859e3bd19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b929dd6a-5d62-4158-97e4-bc97044747fa", "sighting_of_ref": "indicator--fe29be39-4974-4f55-8c93-cd7a7644ded9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b232f22c-816f-4783-8564-2eeb8c83aa4d", "sighting_of_ref": "indicator--624d154a-9166-4b8a-b3db-7e9283d4b092", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fe625f-7b91-4d35-a3ac-bf057347741c", "sighting_of_ref": "indicator--677628d7-96b5-4994-80a3-a9e55a46371f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569eeaa6-9fe8-4ef2-8f8f-f1c977e2505d", "sighting_of_ref": "indicator--66842d06-63a0-4752-a791-47a68122441a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc866741-ef43-44c7-9e9b-ea7c7f237745", "sighting_of_ref": "indicator--bb3fcff3-c4a0-4d75-8fa6-2b66027ec34e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ef7070-2a7e-4a88-88a6-7aaf6d46cd42", "sighting_of_ref": "indicator--9d339d26-8f53-4d17-8a05-815a24a554ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98a53b3-df63-4acf-a0ea-48b294bed145", "sighting_of_ref": "indicator--f61d7e5e-a08e-428e-bc7b-573835144f6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0086d3c5-5434-4335-9c5c-1c6e47e93ec8", "sighting_of_ref": "indicator--717c9e6d-fab9-492c-937a-21da19107fbd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf0b12a-918d-4946-8211-cfed4e314a7a", "sighting_of_ref": "indicator--61294a9e-45a7-47f6-821e-6599afe57d81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb31d31-5dc3-494a-8a66-559181efceb5", "sighting_of_ref": "indicator--e361fde9-5300-4f21-a343-0170620c633f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad681af-04cc-4c14-804d-9b20583d473d", "sighting_of_ref": "indicator--08550cc4-d8e3-400d-a344-9a3acfdbee49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6103059a-a066-4cf6-aa6c-8bb0dc3051dd", "sighting_of_ref": "indicator--b8c50148-8c6b-42fb-9482-76c4d57ba0e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6336fa13-c6c3-41fd-94c9-0920b6b883f2", "sighting_of_ref": "indicator--cb0a28be-c259-4664-87d5-ac143d4b955a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29acce1a-514b-4133-a08f-bb387bd621a5", "sighting_of_ref": "indicator--ddb5907b-b6b2-4aeb-bf03-5a53adb7db54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64432a36-ca57-4f67-8a83-e0a8515d92b4", "sighting_of_ref": "indicator--c74bcad8-27b2-4c8e-a522-da3eab49ed35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73659570-7948-4fe4-9abd-f0d69a1e4e4b", "sighting_of_ref": "indicator--f8d2caad-1259-49e3-ac7e-8ca5de659aa7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b90fec3-20fc-4377-a9ae-36c490320a22", "sighting_of_ref": "indicator--782e8755-9235-4fb1-b35d-03fdec6fcbd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24e333d-5090-4e3e-8804-00bb287ce440", "sighting_of_ref": "indicator--4b2749fa-d4ed-4e6a-b4e1-1fb2ae8104f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda2a575-27d8-4536-be3f-83ff0885db60", "sighting_of_ref": "indicator--88a1e348-83f9-4b60-af43-0a3bae6cfced", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f9e4de-da2d-4837-b90d-2b6f7c5293f6", "sighting_of_ref": "indicator--2e755679-8f7a-43a7-a12c-3ff730821a3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d179242-0d8b-4d97-8010-3b05cd2acb94", "sighting_of_ref": "indicator--5da45487-3997-47a8-9742-fafdb7887060", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4a0a23-836f-4ee8-aef1-8aebb0a577c8", "sighting_of_ref": "indicator--a35668eb-8c6d-493f-9977-8e9016ac14e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515b20c0-23be-4046-8977-b198b591b5dd", "sighting_of_ref": "indicator--14a3e20b-a0ea-46d7-ae39-f102fba5925e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03771c8-05fb-4352-b240-28325ad6f259", "sighting_of_ref": "indicator--f739a65f-910c-4649-afe8-3b1003877348", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a644de07-6115-40e9-9674-1d8ab078cdb4", "sighting_of_ref": "indicator--bdecb57b-cb23-4185-9bfe-f9e8d81ce1cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0346b48-8a52-476c-9cea-0e224bab0695", "sighting_of_ref": "indicator--d718362d-7615-4821-beaf-ba1bc19c008c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dbe6a7-cddc-4f73-8a11-191e2d75ab6d", "sighting_of_ref": "indicator--b41a83ed-8d39-4417-b95f-7c0fdfa49cfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0933dfbd-8a15-45fc-8757-b62d36f60f9d", "sighting_of_ref": "indicator--fb2e2672-730e-4afa-8aff-483b8c855556", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ff4a39-92b1-4b9d-868c-bc805eb29162", "sighting_of_ref": "indicator--43f62878-a7de-49b0-bb6b-bddf05908569", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f264c32-ff80-4197-8c58-90d288353b3d", "sighting_of_ref": "indicator--135004f1-1daa-4322-b771-0d792e4fdb40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d91d752-aa9e-4595-bd0b-56592ce259f6", "sighting_of_ref": "indicator--b0f13d5f-0438-42cd-85bb-8a14a4491c85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a20eeb1-fc9b-4dae-baec-02631ff60503", "sighting_of_ref": "indicator--595a1295-8009-424e-9a5f-de1b31e87b9e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6776993b-46c2-43b3-a053-7735a133d9ba", "sighting_of_ref": "indicator--f5b0231a-2127-42f6-9c80-07126f0e1804", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387a737b-f6d6-4b21-875b-c9529407aa0b", "sighting_of_ref": "indicator--09fa0a75-4ce4-4111-a16b-026dcefead5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cc69be-0d81-4100-bce1-91066c7af496", "sighting_of_ref": "indicator--aab39694-75f6-4452-86d4-94ed2697fdc5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecef7314-c6c2-44ae-8b02-5b14e57932d5", "sighting_of_ref": "indicator--3b5a8dbd-620f-4969-bdab-159b23dfd406", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad47fad3-8316-4df6-893c-deb69761a379", "sighting_of_ref": "indicator--fa195caa-ab90-463d-a76f-2f263abda765", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c225b336-ef5e-4dc1-9dfe-443ba9c1186e", "sighting_of_ref": "indicator--3088a1b6-392b-4f1f-a2cb-261330fd9dd2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed96b6bb-4a17-48cb-9275-2248aa0f9ecf", "sighting_of_ref": "indicator--e6410bbd-536b-4395-99fc-b0ad02650a47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00634838-4744-4bfb-a924-978562053dda", "sighting_of_ref": "indicator--f59839e2-41d7-4c27-8c22-817cfac7e91f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9834ff-bf9f-4643-afc6-fcff45888703", "sighting_of_ref": "indicator--30cffbdd-7a88-46e4-ad5f-c1575251be20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dad15a-4d31-493c-8460-b84dafef02d6", "sighting_of_ref": "indicator--431f898f-f90e-4d0f-bad5-089c4046f8b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d628c1-5c7f-4c0c-83e3-a2966d605e1f", "sighting_of_ref": "indicator--d309363b-7683-4d44-aad0-f19b10229a56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a9c0c5-a6dc-44ba-ba0a-ea786accd4f3", "sighting_of_ref": "indicator--28a1bdec-206a-4bfa-8d4b-95c65c3bbed6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a59370d-fe57-4a1e-9a19-e3b281d5e29a", "sighting_of_ref": "indicator--718e5226-73a3-46bc-bce5-7b8ceb7da672", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3777fbc7-71f0-4d5b-8d87-8e558243a1b9", "sighting_of_ref": "indicator--91eef7b2-c3d3-4a06-86a2-1dbd34ff7968", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e54bac3-1620-4b11-a67b-e1779769d709", "sighting_of_ref": "indicator--463f2de5-59ce-42f9-9894-f31c5e5f02ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e070f68-bf03-49d6-a8d2-b676c5cb1c10", "sighting_of_ref": "indicator--50bd695e-bcc5-4c5b-9223-38139045abbe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b20e3c1-f4ad-4562-983a-ded7ac8b8c48", "sighting_of_ref": "indicator--169faa26-dece-4810-86ea-4fb6b4b90eff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60e4838-0347-4d98-b183-9be8c90daf30", "sighting_of_ref": "indicator--e98296e0-4bca-4926-bd0d-985597acdcde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7b95d7-4898-4172-ae64-11cfffcec71f", "sighting_of_ref": "indicator--77595f26-11cd-407d-ba09-bde867acc816", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f4e2f8-bc83-4ab1-a619-40caf9434b7a", "sighting_of_ref": "indicator--5679471e-a698-4968-aeee-8380153b170c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2621a295-fe23-4bbb-9baa-bf1fac6132dd", "sighting_of_ref": "indicator--ae5bee60-11a4-48e1-90a2-b4c7e433f7d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e82dd14-acec-41e3-8b36-4c2b48e0ca34", "sighting_of_ref": "indicator--fecf36a9-e436-4571-b0a0-fe196dc804d7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad91ffc-a81e-4e94-8756-c3aaab6762e8", "sighting_of_ref": "indicator--fecf36a9-e436-4571-b0a0-fe196dc804d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acd94ce-211a-460e-9a83-a1f1652593c2", "sighting_of_ref": "indicator--726935bb-6458-44da-8dca-c1d9265589b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e96aa8-b8e7-4441-b491-e5ca4c053bc3", "sighting_of_ref": "indicator--b1c98eb2-bb5b-4636-bff8-5122d82828ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a621792a-5de5-4452-9a13-690f05816140", "sighting_of_ref": "indicator--d2b8e5ae-49f7-4714-8507-f10966e384f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da951987-5ef2-4620-a3aa-79520c3997d9", "sighting_of_ref": "indicator--1acffa55-3309-4aa6-aa90-6ec21179e57a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70accd34-613c-4adf-8624-c57c3bcd066c", "sighting_of_ref": "indicator--75c432d3-a93d-48ca-b4ff-8074606bb48a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1ff2fa-ad32-4202-af96-da8d1f7c20af", "sighting_of_ref": "indicator--f312d892-ced7-4d44-9bbc-e8df93f889aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c8b597-1db1-44ae-bf88-3330f407f39c", "sighting_of_ref": "indicator--4bdc72e0-b37c-4c43-95db-8f66c90bdce3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d99807-1d41-4537-8cc6-6316b327aa58", "sighting_of_ref": "indicator--192ef4de-e8a9-451a-8b14-df65c47c35ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49abb943-6990-451d-8007-e667a0e1f7aa", "sighting_of_ref": "indicator--b4bb7550-7d0e-4770-92b0-faae042ec7ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a9248e-90ac-40ab-9003-9397e0746d46", "sighting_of_ref": "indicator--9ece79e2-ff3f-44b6-851f-a4e8edc02789", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf47bb9-a48e-46eb-a7cb-d8bd914a6ea4", "sighting_of_ref": "indicator--b1d0083a-b371-4fc9-b612-047c08aee1d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8533c1-4c4b-43ec-8ae6-99319179a486", "sighting_of_ref": "indicator--53b518ab-14d6-41c2-8307-e99f9344980e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0371d06b-93b8-40d8-b420-facc7d710120", "sighting_of_ref": "indicator--84cd7081-2eba-45dc-84fc-c911449ebc2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9b9432-2b68-46d5-867d-127df07f4c60", "sighting_of_ref": "indicator--e4f034f2-1698-4e0c-9861-f8b93289b380", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf2cfb8-920e-42e2-880e-0b859643df40", "sighting_of_ref": "indicator--a57f2563-233f-419c-bc12-b5847e041bb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c78a9e-28a0-40ea-8cca-b1423b0fcf39", "sighting_of_ref": "indicator--6723089c-04c4-44be-bca0-9269192d4282", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba28a19-f44e-47f7-8cef-24cea9d0fd51", "sighting_of_ref": "indicator--5d82cd9a-96ff-46cc-b3b4-3a0017702063", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a3f637-ee75-4e1f-bbd7-ec76fee70d46", "sighting_of_ref": "indicator--ed8c13d4-961a-44df-8ee9-05f8dd16eacb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e812808e-ef01-4c5f-aeb3-41eace1eb6c3", "sighting_of_ref": "indicator--a8356a7b-b6a2-4abe-93a8-574dc4262223", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c557a8a-abcb-4be2-aa25-7692c508ce13", "sighting_of_ref": "indicator--55cc7dc6-a67d-47b5-a521-cb629813c38c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de13f1f-e67d-499b-b57e-3d8b45227b34", "sighting_of_ref": "indicator--c51e83c6-e34e-4341-8fe5-1509fb3af297", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bb1d20-2896-489b-b0c7-c2996f3e26b3", "sighting_of_ref": "indicator--86a87ee3-02e6-4ac5-a47b-3b44594074b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d4e4b4-8842-4669-8512-d4df6255b30e", "sighting_of_ref": "indicator--9f3a7e17-733a-49ac-bb7e-24b442d9bb74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832ee02e-d374-42a2-9166-81165d79a024", "sighting_of_ref": "indicator--1d9c01f0-d4ef-4545-adf4-ac088285a0b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1703a1a-6148-4dae-9775-1f3c7f38f124", "sighting_of_ref": "indicator--9141d6b5-6dc7-40a5-91f5-109b2dba4349", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8e8cb7-f20a-4a0c-899d-3f91f3ed246e", "sighting_of_ref": "indicator--2df6d019-c451-4ca3-bc34-46af51d3bce9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c302d7-b24e-4bf5-8906-6b5c696df97b", "sighting_of_ref": "indicator--df792965-979f-4b19-b08a-044adf3dc070", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d12d20-cb04-42ad-b643-e5d60d28a395", "sighting_of_ref": "indicator--e1548a5c-8841-4ff0-ba63-f16d821a2125", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1f2a14-ff81-4af5-bebc-42c679b0f643", "sighting_of_ref": "indicator--4f53c53f-75ea-4b6a-a7e7-e6a04b62c836", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7199bc-a271-426b-b587-eb405929e306", "sighting_of_ref": "indicator--0c2005d5-3897-4746-8b46-427d5f3c2553", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5dfdee-a8fe-473f-8dad-5748d62bc916", "sighting_of_ref": "indicator--6085d7eb-b90a-42e2-86b3-a4e0427abac3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dbf112-8ba2-41eb-9184-91bc39039dd9", "sighting_of_ref": "indicator--40b1f782-8352-471e-82f7-79821fb64284", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d31291-7bf1-4524-97f4-5a2c62c6b28c", "sighting_of_ref": "indicator--15d85847-4375-44e0-9b8a-9532e3654153", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837a1d41-f23d-4c0b-9c1a-695cba19b59d", "sighting_of_ref": "indicator--c73dfb30-e90b-4af2-b6de-56b4ab15c56f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c15879-cfbe-455a-938e-1fb28e69169b", "sighting_of_ref": "indicator--1519ccd9-0c1a-4dfd-b971-c4a83dea22a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab21f95-389c-4fb9-bb8d-2b07ee076ef2", "sighting_of_ref": "indicator--37f836fa-0a0e-4a15-aae3-a51003233935", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3788ed5-e982-4757-9116-9ac6b0e1741d", "sighting_of_ref": "indicator--edbc7bfe-06e1-4265-9bcf-01b9bd83e6d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2372e630-6b1d-4112-9472-3551f8ee571b", "sighting_of_ref": "indicator--3233aa7f-d3b4-4051-bdf9-20acbf045d0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e93241c-93c1-49c0-84dd-082548674c6e", "sighting_of_ref": "indicator--daceedd8-db42-4f60-841f-e4245e456e3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb7da2c-3ef4-41ed-9bc2-3fe3d8a8343f", "sighting_of_ref": "indicator--e454879e-a4a5-4a8f-91b6-b7c1ac0e642b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce8312f-fde5-447a-b8f4-2904e66f5e13", "sighting_of_ref": "indicator--a1f2b465-9c05-46b7-9137-2e595b97f54d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d067163b-b862-49d6-913d-fcb14a93977b", "sighting_of_ref": "indicator--0e31e12d-d06f-46ee-b5bb-300fdec0dd2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f2f2be-da07-4c39-92f0-0fa1d183f9a6", "sighting_of_ref": "indicator--fe93af61-6444-4b16-84ea-62648a70f28b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec59b03-ba66-4561-a69c-f06aae15300c", "sighting_of_ref": "indicator--67b89dc1-322b-414e-8334-ce092b5e29b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c323ef6-6f49-4c7b-a49b-1130df64c58a", "sighting_of_ref": "indicator--209a3f4b-5f78-4991-88d7-29702b909335", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f0f8e4-350f-41b6-beb6-f42c30ec2bb5", "sighting_of_ref": "indicator--ad3f73b7-102f-4bd0-a891-b57f1ca58d93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91701166-2c4f-465b-89f8-012f6bb36606", "sighting_of_ref": "indicator--b6be8895-76de-495a-a91f-d4a0b585b9b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b2e183-ee07-4895-95f9-cb73742c08fd", "sighting_of_ref": "indicator--8de6a3e8-3cb6-4a6f-86ce-5b2b952487af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6d2080-beec-4228-aa42-35f9c96cc31c", "sighting_of_ref": "indicator--eec6ac27-39f6-4db7-8b0c-506f30b1eded", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cda5c7-57c6-45a0-b269-757e031b3440", "sighting_of_ref": "indicator--b65a3c0a-88a3-4a54-972b-74728c9f640b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51cd923-d085-446b-92a0-7238c7a02137", "sighting_of_ref": "indicator--6c456971-969d-4098-b8a9-3fe57af886ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc865908-0f87-4509-9630-e48d1d0a5e36", "sighting_of_ref": "indicator--70399127-70af-4df5-9c3b-261844eaac0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a772453b-8826-4ed0-b48c-bab03d584cb6", "sighting_of_ref": "indicator--9190649c-b03e-43e3-be93-0ff803daf445", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a8b216-59cf-4e8f-92bd-5f0644cfa3f8", "sighting_of_ref": "indicator--a6d3fd3e-597c-437b-a9a3-8350969a8dfc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0606ff9-4477-4dbe-b10c-f80a178324b4", "sighting_of_ref": "indicator--7f0badf9-541f-44eb-ae1a-5b9038a0b221", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d99b13e-3786-45cd-a92e-57a991ce71c9", "sighting_of_ref": "indicator--819d001b-aef6-4aa1-9d56-6f4d9dfbed2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960eb072-36dc-417b-a260-0f408523ad45", "sighting_of_ref": "indicator--cd7842ab-f685-4cc2-aebc-cb2c0045c84b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c8dafd-821d-4d53-8a7b-25bf68cb9bf2", "sighting_of_ref": "indicator--c9e0eadf-8764-4a71-8a05-6f66a4bac113", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1e363d-80f5-4f7e-b9b3-521c33daca8d", "sighting_of_ref": "indicator--bef17e4e-c347-40a4-a941-d76a87e0e61b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2420726-c1a8-4401-a0a0-5daad5f51b51", "sighting_of_ref": "indicator--b0617029-4f68-424d-9f1c-afbf7086a3e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fb5601-e494-4358-80cf-91982c4402f8", "sighting_of_ref": "indicator--ae4112ce-099b-4513-b443-97ec42694724", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101d04db-bb17-4a56-a31a-506d432f22f8", "sighting_of_ref": "indicator--f662c35f-7509-45a1-9500-2c0d2cebf578", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0b9869-bcb3-4f9e-b5b7-31b96093a99a", "sighting_of_ref": "indicator--5be04c3a-723a-40f8-945f-cde58ab1d4b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e06a80-372f-4877-b246-124a2fc0946f", "sighting_of_ref": "indicator--e0a7f934-f451-4970-8e18-a235fd3fb276", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4140e10b-239e-416b-9c93-28fb9eedbeac", "sighting_of_ref": "indicator--4c6b647c-35d1-4c09-9aa1-aeb9b3d1fe3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875bffee-1296-4ace-b904-c3ef4c3a8f63", "sighting_of_ref": "indicator--5092bad2-d69f-4e6a-9d5b-f6755899e1e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a09b2c-87ef-484c-be9e-c9d557a14708", "sighting_of_ref": "indicator--f9e4e544-a774-44d2-ab6a-42d46f2d547a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe130e5-582b-4a83-b24c-abcc8ae5ac04", "sighting_of_ref": "indicator--52b9a4e5-1e40-4dcb-be83-e70bc74c0d18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cf891a-0509-46b4-8954-63ba8b3f8c01", "sighting_of_ref": "indicator--7022c3e2-089a-411f-9d79-ed2157710868", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274fae10-3ca7-4365-a160-e3045f797c07", "sighting_of_ref": "indicator--896e55ca-6067-402c-abc6-0963f3580e6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9cbe5a-d2a2-4f3b-bd72-9b292900cc50", "sighting_of_ref": "indicator--96cda543-d67a-4afe-827c-02061a7b99b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74bdbc9-6523-4275-8887-01f65d2d3eeb", "sighting_of_ref": "indicator--51b5c743-6709-4ab1-b964-a710b165a1f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61732f2-a662-462b-a8b6-240be20e0b3e", "sighting_of_ref": "indicator--3f1cdf83-6ee8-4b53-b3b7-f75700666999", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba950d3-14cd-4e1c-a11a-ab1ec1e0108a", "sighting_of_ref": "indicator--61a3dd31-d69e-422e-8bb7-6e85639913e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1166b0-185b-4b12-b8b0-7c9f3beec046", "sighting_of_ref": "indicator--a929eab0-774a-4bf5-96ad-f7fb2ef678eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94068b6-13cf-4f43-96e5-1aed36cec398", "sighting_of_ref": "indicator--df880958-b289-44f5-8d24-6bc02c663e48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad498e1e-bb2e-4b46-9913-b733c5dd8124", "sighting_of_ref": "indicator--d9cbeeca-4bf1-4c1d-87b0-dbaa04ab2592", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6011e9f8-55f8-462e-8629-fa289848699c", "sighting_of_ref": "indicator--79f53c69-f0c8-4868-acea-13d9e0209500", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63f20cc-5166-4337-b43c-ff8211de83b0", "sighting_of_ref": "indicator--f555d1e5-0e55-443b-aa0e-f2b9b5d722e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a86823-1a95-439a-8b8e-4d84ccc60c3d", "sighting_of_ref": "indicator--60e214c4-9ef7-4ffe-8d83-b9fae4855e29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc6f602-6ccf-489a-84ba-9a278dba36a8", "sighting_of_ref": "indicator--e97e4484-5a5e-4beb-a872-ded0c6d5f32e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18126288-fded-4a4e-a841-6ef318211601", "sighting_of_ref": "indicator--7b5920b6-d394-4f07-94f6-8ed193eab00f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e397bba2-049b-4ff9-8b66-eb07ad8d2faf", "sighting_of_ref": "indicator--cd87d556-a31e-4282-82f9-79416ff965ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680cf042-bc03-4c90-b686-d5b2df9e0504", "sighting_of_ref": "indicator--3b34422b-4a99-4156-a742-cf7d2ba0879c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99daccc2-aa0a-49c2-9ccc-7b932c2c4797", "sighting_of_ref": "indicator--95e5123c-fa9d-49f7-b4d3-632b90a41458", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d085f8-a019-493b-8f68-8c0bef224faf", "sighting_of_ref": "indicator--847b54ea-3511-4887-98cd-5cce741b79c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1121ff-2920-46b5-a643-372edc88c19e", "sighting_of_ref": "indicator--982cb123-dd4a-4576-bf25-7bddc9127fdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9521a9-6fea-4e15-a099-1c570ff3ab9b", "sighting_of_ref": "indicator--b8004732-9765-4795-a4c4-3a3112d04634", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b456a1-a730-4fac-8b67-79a778e7791d", "sighting_of_ref": "indicator--c815d1f6-36d8-4d00-9f2c-d22687172630", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bf8c13-5505-46a0-a1b2-8ac7ebc4be4b", "sighting_of_ref": "indicator--64840442-2b89-426e-a862-293492b1c2fd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b7cef5-1970-42fc-98db-b32b03504cf0", "sighting_of_ref": "indicator--47dd8091-e7a6-4ae8-9667-a5079c16244a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7dedb63-650b-43f2-9f95-d1cc5a40fbdc", "sighting_of_ref": "indicator--93f6bfe7-67ab-4d79-a0ff-7c9d11222b49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2e457c-e104-4e83-8c8f-fc02d4106ad8", "sighting_of_ref": "indicator--68fe25b8-1a58-4e13-a50b-6146dd185fa4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a49ec8-1a23-43f9-b2b2-2bcc7fa187b3", "sighting_of_ref": "indicator--f271c7e0-2d7a-4c9c-bb65-d3e4e1668d84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc0f9aa-810d-4768-a6bf-09736ae393e3", "sighting_of_ref": "indicator--44225db3-53dc-450f-bec3-9a0603950c24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9413f49-50eb-4952-9409-f73c2e50822c", "sighting_of_ref": "indicator--5adec222-e1ee-4147-8367-241fa89582bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a4ed99-826b-46a9-abd9-75041f90629c", "sighting_of_ref": "indicator--2ff891f8-bd69-4851-a59a-34d755d7ae92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ca8459-4097-4450-857a-319080420a83", "sighting_of_ref": "indicator--8238088e-81d0-4a4f-b03d-f662e1bbbcac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a33ef8b-455f-4e6b-9f86-ef35dcf63699", "sighting_of_ref": "indicator--79b33353-0089-44d4-85b0-fd19fcc18479", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69102ae-456c-4e09-bc4b-83afe2d1ad78", "sighting_of_ref": "indicator--edecae42-4f83-4ba4-bd14-1f5a68996915", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97ae478-a43e-45f1-bfac-42c9c469d415", "sighting_of_ref": "indicator--ec4dc9d8-3732-4b82-912a-fe7738a621c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d02b4ca-1eb9-42b8-a5e5-a43525517525", "sighting_of_ref": "indicator--b5b5bd7f-b7fc-4bda-8735-9d4041ab2ea6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a12c0d-038c-4d3a-99ca-b2f694bb21d3", "sighting_of_ref": "indicator--bd1fa222-8437-4f7e-8328-8333fccea45a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7024d5a-d117-4c52-8a6e-311347caeb4f", "sighting_of_ref": "indicator--475be40f-f75b-48d2-a8ed-c0b6bc2966a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356d1431-3c00-42ff-bf0c-40a6cef7cb30", "sighting_of_ref": "indicator--92cb6fb2-616c-42c9-946b-9f18527d9c39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3ddc66-2cfc-4283-98aa-7a3f3f7f4e38", "sighting_of_ref": "indicator--907b6da7-46db-4a5a-8910-dd86cadb8fe9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660b3016-2db0-4e67-9382-35bbe833ae0b", "sighting_of_ref": "indicator--cdb6092d-4db1-43a9-99d5-dfa89b1fcc23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924ca5e2-3ee6-40f0-bc44-8e0503e4e813", "sighting_of_ref": "indicator--ed5de5b8-b3e2-43b0-9f7b-db8ba3d081e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2f50da-11f3-47ae-8776-8fc31c53a808", "sighting_of_ref": "indicator--fb53f489-d52a-40e5-b49f-c4c3d38f9dde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f047dd-e75f-4e79-bfc5-298a3b9a1c60", "sighting_of_ref": "indicator--e2f252f9-34a4-437a-ac05-4e4da96dbedb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965b6dc0-2095-414d-826b-0756fc4019d1", "sighting_of_ref": "indicator--23dbe31e-0b9e-4288-9060-40ae0b6f3e59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e44e2b-b552-4e1d-b783-6ae0033d3c33", "sighting_of_ref": "indicator--310922b0-29fb-4050-b0bf-b697f9d5851b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aff7df6-99cf-4e2b-9a25-1fab75805482", "sighting_of_ref": "indicator--cea3a469-72c6-401d-bf95-6337abffa168", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578ce596-1ffe-4ed9-a5aa-169d9dfba371", "sighting_of_ref": "indicator--8253c195-da16-4eed-9c2e-0b761d46455e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9e2c62-6c4a-4109-975a-2bcd4ff3283f", "sighting_of_ref": "indicator--69c9f866-360a-46a7-ba67-b95755f9908b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1053350f-8d6a-492b-a770-172a4583346e", "sighting_of_ref": "indicator--afe364ab-fc89-44a4-8c08-439bc26c773b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7018f177-6802-46ee-bdb8-f427fd0e2e64", "sighting_of_ref": "indicator--89e82d97-f10b-4153-b597-12f6a8525af4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7080c1d6-c612-42fd-aba0-00af4b8f3ed8", "sighting_of_ref": "indicator--8cb7231c-a66a-4e59-bd4e-81775dcca1ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d55e15-3dc4-41f7-90cd-05b2a9b61439", "sighting_of_ref": "indicator--11cb82ea-0947-4338-8cfa-b86c474109d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1a33cd-d9d4-4eed-a959-117db4c8cf40", "sighting_of_ref": "indicator--ebaa2541-246b-4cdb-8fca-96a0fae0ee83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abbc4ca-4b6e-40ce-adbd-12b7edd81216", "sighting_of_ref": "indicator--74e9d4a3-bf0a-4953-a835-f086619c44f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e061ac-7ee0-4cdd-aa45-39777b5d8ae1", "sighting_of_ref": "indicator--a54d8d77-da22-497e-b2f0-092f493a9bb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28ece58-afc3-4c61-b48f-c974cd125132", "sighting_of_ref": "indicator--51437481-64ad-4be9-a276-c544dacb5ad7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb5cd83-17b5-4ab7-b403-2ef4152508a3", "sighting_of_ref": "indicator--15cb4b77-0837-4146-a461-a867f1135fb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d077dd-0ed2-4186-a6c3-a5b372010f9f", "sighting_of_ref": "indicator--125fd62d-d3f1-49d0-8921-c9b2b32b7f70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e7f2c2-f7ad-4271-bf3a-b3ebbd4cfaec", "sighting_of_ref": "indicator--a8683255-ae3c-4e03-8e5a-a710b3df1da2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e519c7-1044-4a94-b805-47a13846c463", "sighting_of_ref": "indicator--b79fddb1-cb52-4256-bc87-55607f7f3cee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ad377a-4fd2-4734-b9e9-3fa8bf546ef5", "sighting_of_ref": "indicator--8d8aa0a7-2397-4fd8-ba4d-b5c85813ede2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a6ef52-d86d-43f4-b6aa-634e123c15d2", "sighting_of_ref": "indicator--df5aa134-5a88-4639-aac5-e96f985f4022", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc571715-4a6b-438e-9063-dc7d4957f013", "sighting_of_ref": "indicator--d14d079b-3a27-4bfd-aab2-9a2ec782c1c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1202dbf2-0172-404f-9ce6-969f397c86af", "sighting_of_ref": "indicator--cd0cd570-7034-4ee6-9e6f-588d466c5f89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f97b37-a87d-4603-af7f-d00669699050", "sighting_of_ref": "indicator--88e7b2c9-eb5d-466b-8a3c-a556d75379ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25ecfb1-4713-4e56-95d3-88f662a1cc7a", "sighting_of_ref": "indicator--4c27e79f-6646-40f4-a55f-73b002cedbdc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc69598c-ee9c-472f-b4b5-e411c1d4f77c", "sighting_of_ref": "indicator--ba237568-d3fa-4942-9035-26f843179256", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56382098-78ae-46d0-b212-390a82632792", "sighting_of_ref": "indicator--723d9384-5986-4146-9488-43ffb48a77ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e45c584-ce52-41d9-994b-ff857409c7ec", "sighting_of_ref": "indicator--9bd221d0-6251-410b-b163-d91d8485e6dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90918c7-d6c2-4ee8-85e3-599db66421bf", "sighting_of_ref": "indicator--b640a66e-c9f7-4d73-bc30-a287788aad5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2ffa8e-2b0e-4fdc-8adb-7393b2390e86", "sighting_of_ref": "indicator--94ed68f5-33a3-4d62-ae20-c157c45319a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f86f482-e4ce-402e-9473-8b2c8b8aee2d", "sighting_of_ref": "indicator--07cc07c2-a333-4de3-aa2c-500b5f920426", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afdcd31-5491-4084-be53-81059360708f", "sighting_of_ref": "indicator--1c5d337c-f2a9-429f-8c54-aa79288178f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f55a15e-32ed-4f67-b353-dea8a051bf64", "sighting_of_ref": "indicator--a64fc964-20ec-45d8-87a3-61aaca79663b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5aa990-2f20-492c-9ab5-ca1407241cb6", "sighting_of_ref": "indicator--750fb850-787d-409a-8d5a-ee7ca5c99d2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82afc2e-699f-4714-a789-49857dd63ece", "sighting_of_ref": "indicator--955f8f62-e8e9-464a-b32c-ef3462196658", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce051532-8f8d-4d3c-9ace-83cd3cd42256", "sighting_of_ref": "indicator--8c639fea-edaf-44f9-b8c4-dc98c6b645f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fc6366-608e-4dbb-9928-83e035e85533", "sighting_of_ref": "indicator--7a36110e-e61a-41c9-8afd-ff1ab4d18374", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c548367-aaa6-45a4-b419-6230b4746f3f", "sighting_of_ref": "indicator--f112f9af-760a-457e-8983-347e7078bf95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fed6159-f1d8-414d-9f79-aa1edb664687", "sighting_of_ref": "indicator--15bde649-770d-4fb9-a9b2-8416f1fb0bd2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8614aa83-9607-4f61-8c3e-ae5533fff8b0", "sighting_of_ref": "indicator--b8a18ce9-68ba-4606-8e13-82379e016042", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb6eeaf-1485-48ff-8805-fe0b431df704", "sighting_of_ref": "indicator--a90c5b97-0780-4c43-8104-d131b9bd5d87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd97d07a-7289-459a-858c-f1541ec4cd47", "sighting_of_ref": "indicator--b0167e36-074e-4922-9eab-37c9b53721d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d732b1ff-7695-4061-8665-efff2675bf54", "sighting_of_ref": "indicator--54e3fc7b-0b1b-44b4-ba07-9a2782732807", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633a79d8-d33b-4c4e-9a01-5e9326133902", "sighting_of_ref": "indicator--5868eb27-6c29-4bb2-a0c9-29b8b20d709a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba95959-4ea4-4a90-b07c-e1af380000cc", "sighting_of_ref": "indicator--84372ffa-423c-41de-a6e5-a6ef71ac9c4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d4dda8-575e-43dc-8dec-90f5621addef", "sighting_of_ref": "indicator--ceb6d09a-e70d-44a5-a843-75e94cf2f6e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd97b9fa-7ee7-418c-8fcd-656c3c300ace", "sighting_of_ref": "indicator--1221df9c-7c60-4806-8096-fa4879da5edd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1e6da5-d536-4d97-a966-30b9a04afe59", "sighting_of_ref": "indicator--11a9fc48-52ec-454c-8b0b-58d58c47eca7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7275bd6-7093-4a51-ab06-9ee2b81acf04", "sighting_of_ref": "indicator--ceb4c455-403f-47f0-b562-77ae3732964e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e093b13-5e85-4b56-a9de-4596ebc5a7b0", "sighting_of_ref": "indicator--cf467733-19ea-464f-a438-4fedf3f46b16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2256fa93-100a-40db-a52f-458b707cb569", "sighting_of_ref": "indicator--e0071d91-2fb5-4b79-8a85-65e93f606625", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf21bb12-0bff-4351-9b00-37c56b95a1a0", "sighting_of_ref": "indicator--7b8faa51-111f-48d2-ad06-551c8b683bcd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2da2f81-e3d9-4a32-9e71-7ad6bbe4d36f", "sighting_of_ref": "indicator--1bc8506f-f195-4f1e-9f42-551e1c4d8473", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ebb669-f351-43d6-b608-d96535da93fe", "sighting_of_ref": "indicator--eb42f38a-c44c-451a-bb83-b29d97bebbf0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73225426-f51a-47ad-ad45-cedc2790141e", "sighting_of_ref": "indicator--1b6257e4-847f-4496-a37a-bea4e5674f4a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fd02b5-36e6-4542-af0b-4dc18b4153b7", "sighting_of_ref": "indicator--94e4b7c5-a5f4-48db-8097-918add1abae4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516c7528-452e-4b27-88fc-111c934587c8", "sighting_of_ref": "indicator--d08c19c4-e0dd-4148-8b4e-55e79eb532d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe23247-fda5-4e8b-8f05-246b9a8053a3", "sighting_of_ref": "indicator--ec23384a-039a-4b9f-9d5f-4354b58f6d95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2335e393-bf4c-4240-bfa5-40a1a1c81bb3", "sighting_of_ref": "indicator--16eca3b7-edf1-4b23-87ac-195f64261e92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dae84c-ce10-42d6-8a85-2a2a47181ceb", "sighting_of_ref": "indicator--57e49c86-e257-45ce-a43b-ffff0614e7fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59524c4-ae33-411d-b6c6-b8b489f8fd8f", "sighting_of_ref": "indicator--6d53316e-6ee7-4997-8144-9f8a91c964fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befb3ca4-ae92-4b9c-bb8f-7df4c76608b1", "sighting_of_ref": "indicator--c33ad0be-d4fe-4e38-8fb1-bc845871cb57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9226d5-9501-4c9c-8eae-eb839cba21d8", "sighting_of_ref": "indicator--32281cb3-ef19-4f4e-afa5-b529116cdd3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d061464-38f1-4ca0-abeb-de690e20e7c4", "sighting_of_ref": "indicator--230451ff-4dd4-4412-94ec-790a4638ca90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bb3434-df4d-4c2f-804f-4b73c3cb66c7", "sighting_of_ref": "indicator--f529361c-e771-466f-adb0-7ac2761a5685", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e829b6e-24b0-4e76-be95-c24c5b8d2db2", "sighting_of_ref": "indicator--c2114a1a-2db2-42b6-802b-79905f3d9fb8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd58b6c-d56f-4802-8565-41d671c23be2", "sighting_of_ref": "indicator--575891d2-0e74-4b04-bb31-dd06d4818efd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2a8598-fe23-43e7-8713-1f1a33216087", "sighting_of_ref": "indicator--452a4f29-a3d1-467c-b877-545b1673af58", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afbb95c-2a18-44c2-a933-f34685c3bc1d", "sighting_of_ref": "indicator--465d9a6c-7f26-4543-93b9-2d71d07ef92e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3a3ec3-b2a9-4ce7-acd7-ff4c699e365f", "sighting_of_ref": "indicator--759b0071-2ce5-4794-8df6-0ce8daa91dfd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d581702-b7b5-486c-af47-d1c5316c7177", "sighting_of_ref": "indicator--00ffdf27-0ca5-4225-88b2-42c277e1b365", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ab8056-cfd6-4909-a4b2-c1eb652fa890", "sighting_of_ref": "indicator--6faff110-dcce-4012-a334-17b83149a1ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c6809f-e628-4a0a-8081-31b41b6c4e43", "sighting_of_ref": "indicator--9505c600-2300-4cd5-87ba-ad581d1553af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fde2f0-dd1d-44e9-9df3-9b2a58458621", "sighting_of_ref": "indicator--c8a61f95-94f4-4ea8-9031-8c8693d5c892", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8165c2d9-f958-4370-a8f3-c8acbfd2da5b", "sighting_of_ref": "indicator--a1a53d02-94d5-436e-b2eb-3d2774dbbcad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20220c9e-be43-4135-9e36-8ad45a7d1264", "sighting_of_ref": "indicator--0ff474e1-2f71-4784-a6b1-8bc0e161a906", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7894733e-d5dc-4539-920e-130eba31876e", "sighting_of_ref": "indicator--87bac1eb-d442-4b6e-b915-a8cd3d5963bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401c138f-3506-47de-9c0b-c97d0df8ae48", "sighting_of_ref": "indicator--7445c1a5-4e01-43a9-9a1b-b251e330b3ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9efbc2-af8b-4edc-afe7-c80bafdf7be7", "sighting_of_ref": "indicator--460f1432-7618-48a1-bb13-c7df6ff005df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2872ae-ad34-4fab-9b24-9bdcf0372281", "sighting_of_ref": "indicator--a6896fc0-b2d5-47f2-980b-b6a6099fff7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f83b50-01c5-4a18-a9ef-f2c620df5242", "sighting_of_ref": "indicator--b8d0c830-93dc-4430-88ec-3ef64e48788d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e93be3f-168f-4bd1-b33b-1e409fd809e7", "sighting_of_ref": "indicator--1ac224f6-accb-46b9-9052-3393e4245b73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b417e4-1b67-4344-ab1f-e9b067af3abe", "sighting_of_ref": "indicator--7b1460b9-3a77-42c0-b6f7-2969a9bab726", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5965ef7e-5d51-4afa-92c0-2bd87192925f", "sighting_of_ref": "indicator--7f95095c-632c-42f2-a552-e97a521d8777", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcf190b-67ee-4cd2-b3ea-6e6870f08774", "sighting_of_ref": "indicator--e42eac17-9e1f-453d-8e13-dc56c92c0c95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930e1747-ea92-45b8-9fda-647c7ba57d58", "sighting_of_ref": "indicator--62484f6a-9e01-45f6-8fd6-b84c200950e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae82aedc-c1c4-4b5e-b112-989aa075d8fe", "sighting_of_ref": "indicator--5414a147-77fc-4f12-b383-ed6a6df2a7c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336f5d4f-2cc1-48bc-8b01-ad115ee8eba0", "sighting_of_ref": "indicator--88449a2e-3958-4c4f-965c-871f2f3fecfc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f901fce-4848-4ace-8ca3-9b51275f7286", "sighting_of_ref": "indicator--d842fdb2-7e84-4c7a-92d4-3bd7fe0b74ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc525fa3-9256-49f1-a7fa-a7a080953ed6", "sighting_of_ref": "indicator--3ba87481-e24d-42be-9588-0456695112d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63762571-5814-49b0-8697-cd716055c477", "sighting_of_ref": "indicator--3befc1dc-0873-4f42-9f22-3e64948e4e19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43879aa8-db90-4818-9d4b-4febdf0bd42e", "sighting_of_ref": "indicator--3bec18fd-47fe-48ee-b6eb-28152038e522", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210abc51-5fc1-48d9-8bc1-267fa14e195a", "sighting_of_ref": "indicator--4ae9dcf8-4607-4904-a3d3-77b644c36824", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbfbc49-feeb-4ed4-982a-63bedee1a1c6", "sighting_of_ref": "indicator--2d7b8517-1753-4c0f-a62e-a214779e8f62", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3accd5d3-70ac-4405-854e-24aa0f0af981", "sighting_of_ref": "indicator--8d123880-cce6-4b37-bb6f-594b7384ffe5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68190f8-1c45-4cbb-b22b-bba1bb594867", "sighting_of_ref": "indicator--1cff1293-f476-4279-9b1d-ee81e4bee848", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89d603a-ec0c-4031-a1f2-5d4f5779266b", "sighting_of_ref": "indicator--035f6b0c-d693-4598-b84c-3294ecd9f21a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee89bf9d-8941-475d-a0aa-017a0b06a4ca", "sighting_of_ref": "indicator--7397626a-9d24-467c-b855-b1f82b3d74ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c048c37-d83e-49c7-8bbb-4f28e7f9941e", "sighting_of_ref": "indicator--aaa41296-1c7b-486e-9b64-684025d1da35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a76f5b3-8da3-484c-8780-b5c1d6ca8ef0", "sighting_of_ref": "indicator--8d195ae9-b20f-47f5-94bb-f46730053f31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fd4383-e52c-4d87-8ada-0942df5dd118", "sighting_of_ref": "indicator--572ebb7b-1b39-4724-9d01-50b906d00348", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e21d56-d388-4bde-9a90-9ba5b104d6b0", "sighting_of_ref": "indicator--59c7d7cd-1ead-4377-9e9e-b2865a7015a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e266bce1-017a-4c97-a197-fd339a5f0753", "sighting_of_ref": "indicator--ba23e3ec-d947-4522-8d64-13f79d7f5c0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461402d7-d05c-4cf5-85fd-a28b0685925c", "sighting_of_ref": "indicator--4a35984c-b822-4ce3-b3d0-054d4f792ad6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac62a18-85fd-405f-b205-baea61ae649a", "sighting_of_ref": "indicator--c186b57a-db0a-48b6-88d5-90ebcfcdec3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab27ca1c-78bb-4f61-b185-51e5edf00107", "sighting_of_ref": "indicator--ef3e3d4d-d18a-4be9-ade9-705a41e05f07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2665ec82-5d52-4acf-8c41-3d062975f814", "sighting_of_ref": "indicator--fc7a43b3-f30b-4022-b16d-e2222df3ac1b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5cdc2b-6e80-41f0-9902-104af5511a65", "sighting_of_ref": "indicator--236bfbdf-ab82-41b8-9023-19e64b2f1d62", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26425e1-c6ac-45a8-8341-f33ffbbeb91a", "sighting_of_ref": "indicator--fdbac691-383c-450f-a9f9-b9aaa11d1924", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf261ec-96b5-4d5e-b9d1-354d45bbd1ce", "sighting_of_ref": "indicator--d204b3c7-57b0-421c-9b63-18fc014fc1c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003240f5-cb71-4dc2-9350-5e36f66e7886", "sighting_of_ref": "indicator--2cf91339-fe3a-4b52-bdeb-32cc1d9bb438", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b799e8-4bce-4488-8b48-49fa63226c83", "sighting_of_ref": "indicator--2cf91339-fe3a-4b52-bdeb-32cc1d9bb438", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8e3a54-5f29-468a-9be1-5b0ac1c795ee", "sighting_of_ref": "indicator--5441c4f2-8841-4543-a9f6-b12cc67e6ae0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec36f7c-0967-4bdf-a35e-f7aa07dea431", "sighting_of_ref": "indicator--fd4c2129-26ac-4021-93e1-a74a75e99e73", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a4fbe0-4b4e-4e08-ae7a-b8e19fd7c7df", "sighting_of_ref": "indicator--fd4c2129-26ac-4021-93e1-a74a75e99e73", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2372ffad-3633-4743-b9e9-2d7fee67c2d3", "sighting_of_ref": "indicator--5b344b16-82d0-48d1-a0fd-cf06e33fc8df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231fbeca-50bc-4ab3-825c-c37ee8c40337", "sighting_of_ref": "indicator--f0a45137-ffb2-4d9b-aa88-92e0bc029e19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d10452-6124-4bb7-91a7-5fff8b245ff3", "sighting_of_ref": "indicator--f0a45137-ffb2-4d9b-aa88-92e0bc029e19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c636402a-a62b-4b73-b15f-c79a50040379", "sighting_of_ref": "indicator--be1d9b14-771f-4f3a-a347-322d099bf2ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1646db8-c95f-4ea5-a39f-483157bba2ad", "sighting_of_ref": "indicator--4cc6ac54-4d83-40e7-9d5f-a3f1c047e4aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3d7b78-30b3-4c5a-bbe1-8feae72a527f", "sighting_of_ref": "indicator--c94e109a-f412-4dc2-aba0-08bd55c15375", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ef1816-4422-453e-96ca-ef251dbf5502", "sighting_of_ref": "indicator--7882de4c-fb1e-40dc-9cd3-22f8fc6e5d15", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13504bf2-bee1-46a7-ba6b-f28c662cd450", "sighting_of_ref": "indicator--0d2c6581-b09a-4bc8-bbc2-ecb95a8adc56", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec7dcff-8796-486a-9e43-68b8d0d58410", "sighting_of_ref": "indicator--0d2c6581-b09a-4bc8-bbc2-ecb95a8adc56", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736b7528-9b5d-4092-9253-c624f3bf34ea", "sighting_of_ref": "indicator--619aaa1b-1169-436d-a5f9-80575c9ee4b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6278c23e-1c0e-476d-aedb-136f2979b228", "sighting_of_ref": "indicator--8eba6905-59eb-472d-a115-b6234712111a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede5090d-c158-466a-b540-8146ef815a01", "sighting_of_ref": "indicator--2797836a-5017-4ee1-b132-9434ba77d2b0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ff31ca-d378-4dbc-a85e-ff4c2255395e", "sighting_of_ref": "indicator--b27afe60-e135-4632-baf7-7bbd5d24fc6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4c6c1d-2a3c-4738-a781-603f329bd799", "sighting_of_ref": "indicator--5b7fa373-4278-4b73-b057-22896a8ec49d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d110c23-dbf8-46dd-92dd-493d4c855b8c", "sighting_of_ref": "indicator--f1f288ad-60e0-4507-9303-ba80002618f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a2c3f5-db4a-496e-bd59-1fb7f6b8a2d7", "sighting_of_ref": "indicator--4d23c2e6-14f9-43d2-a114-9377c62aa9d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6f23c4-c308-4f59-b495-25d74e7e7b0c", "sighting_of_ref": "indicator--0c23bd22-2991-4f41-9fed-5ef5a4c54e28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3c13f5-02a7-49e7-8771-c1fd60c5b0bf", "sighting_of_ref": "indicator--9442853e-cbdf-46c1-8ebb-247cc1443d02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8371900f-c198-4f27-a2e4-cd5cb8da0224", "sighting_of_ref": "indicator--1b215187-d91e-4470-a6a0-5b0ce68fcdde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f99a70-5aaa-463a-b453-59dc66be58b4", "sighting_of_ref": "indicator--8e8ba850-1016-47d0-8ee2-26c1bb370fce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a2ff21-fd1a-48d1-8f4e-f0e41e69523c", "sighting_of_ref": "indicator--2835cfcf-2bac-4673-b4ae-930a6fa32b92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b694318-4c88-4505-b983-c53071030e02", "sighting_of_ref": "indicator--a1e52997-d2f9-4055-9f95-067f92e9dc29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c83d61-232a-40f6-9289-b3b72a9f21b8", "sighting_of_ref": "indicator--4d2c0dc4-bd72-4054-8147-2dd264d3ee82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13abd55-7d4e-425a-8fab-3ee5cc66a248", "sighting_of_ref": "indicator--454367ea-dd60-4ccc-ae6b-fb1ab900c45b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a382d1-94ab-4a13-b4ce-70e2029412dd", "sighting_of_ref": "indicator--9a974c8f-110e-4904-9ef7-41e4f313747c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdeb64d-213b-4bb8-80fe-1508ded2f231", "sighting_of_ref": "indicator--e4402e43-c7a1-4511-addd-ed7291b751ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61574d45-ae62-43b9-bf41-31f4550fa404", "sighting_of_ref": "indicator--34c233de-7aa5-4c82-a05d-1b570d7c5cef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f121c4db-882f-41ee-843a-a1824bb69f3f", "sighting_of_ref": "indicator--c9efedda-f14b-4ae6-a3ff-c768723e8ed1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9dca0f-e179-4a5e-bcfe-6838a5935894", "sighting_of_ref": "indicator--6b4ae7db-3acb-4156-9681-f6539a3dc5b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81650894-ed99-415b-ba2d-59fbe7286676", "sighting_of_ref": "indicator--d884c7e3-905e-4925-9de2-535ef396768c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0c52d8-74a6-4bc5-b25c-ec64a75122a0", "sighting_of_ref": "indicator--b8115300-b4e9-46dc-9fed-8bdc5e053a8f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3d99d7-ea00-4b52-ae00-f3b69c17585f", "sighting_of_ref": "indicator--ff491f10-172d-43d6-9811-bd3db1369028", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cb06d6-16c7-4885-9437-b125b17a570b", "sighting_of_ref": "indicator--7a41d533-fc5e-4f4d-aa3d-690ef0c6ad41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e478da09-3eb5-47e2-add2-bcaf55fce047", "sighting_of_ref": "indicator--1c17a727-66be-4771-9400-b75959494119", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef35b2f-bc64-4d94-bae2-b6da686d8b7d", "sighting_of_ref": "indicator--762786c9-0d47-4630-b76b-2cbb4af76da3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b97a3ae-93aa-46ae-92e6-bdf0af31a2c2", "sighting_of_ref": "indicator--644e1c1c-0d89-4276-99c9-bd28e8d879f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bd7b5d-c5ca-46b2-8159-9d8fee2c875e", "sighting_of_ref": "indicator--654a9b9e-f60a-44a5-a82c-2c7657649014", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331a882c-b2bb-4146-803f-e874b46e44f4", "sighting_of_ref": "indicator--315ed0d7-d193-43bd-89c4-8f211fd1f210", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76d03d6-ea88-4319-82e0-adb4b07f5bb9", "sighting_of_ref": "indicator--c76aa144-3868-4769-8483-5fd118db4d68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c85cf5f-3590-4126-9f9c-4b3627e1a5ac", "sighting_of_ref": "indicator--ff52da7a-96ac-4963-8268-bada78881a02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be11728d-f980-44c5-8421-a1f58bcc6806", "sighting_of_ref": "indicator--576e4591-c155-4439-ad67-0eadf4b65cef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d057d3f9-0825-494a-a4b6-a3006b937ba7", "sighting_of_ref": "indicator--6fb4d144-4e27-4608-bbb9-132670c7e110", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a13bd2-1eca-4c3f-b4e3-e676ef77cfdd", "sighting_of_ref": "indicator--f97b1f37-9491-4ca0-926b-d83a9ba897c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195494cf-fb2e-4c3a-8f7a-ad63dc55f15c", "sighting_of_ref": "indicator--89011b7d-d375-4209-9b51-e4e95725a39d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5a7e42-9ffa-4519-86fb-975bc9c97636", "sighting_of_ref": "indicator--5826093d-fd82-41e3-9c36-f2a4df69dac2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356f6923-d7a4-455e-b8a2-3be842ed13b3", "sighting_of_ref": "indicator--3880f422-2f05-4d63-ab2a-aec24e1c64e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a769a375-d7a2-4344-b8a4-4df0cf6c5382", "sighting_of_ref": "indicator--566f589d-2bb5-44a2-b5d0-e1613e6340f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60aeb785-5061-49cd-a709-99f8f21e5381", "sighting_of_ref": "indicator--9b1e6210-0869-459c-8f39-3ff0dc8ddb02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f5da0e-653d-43c8-8eba-b6ff3439b82b", "sighting_of_ref": "indicator--70d23375-3113-4694-bfd8-93b1f4c70aac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0d6905-b621-4bfa-a580-b4f6b085aca4", "sighting_of_ref": "indicator--a406fe2a-cc3a-4be4-9880-8a2f6f533b59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920f9197-6f1f-446b-9af7-284e8f9ca706", "sighting_of_ref": "indicator--627e44d5-513f-4a76-9bdf-63d9656cf91d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a22fb76-b2b2-4391-8887-27928b9b75b6", "sighting_of_ref": "indicator--3e0030d9-9011-47d0-9eac-61e95c7f4c74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adfb42c-3072-4b55-830c-4e194143de8a", "sighting_of_ref": "indicator--5cc9e1fb-7cde-4f12-a592-4ad5c9b532c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64197202-0ada-4a8c-a6f8-3b78e84500a9", "sighting_of_ref": "indicator--98d1252c-d8d0-4547-b6e5-51e292b9a2a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bf0180-81d3-4402-a4bb-5f1b71451588", "sighting_of_ref": "indicator--6d1d168d-809a-4101-9c19-f34b2029d2c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c2aaba-39f3-46fa-af5b-79f642f988f9", "sighting_of_ref": "indicator--4801d9d8-e191-4c5f-b6d5-ab9582856abe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3274e7f-3693-4f1f-8d3c-9802d1acf72a", "sighting_of_ref": "indicator--3952e6f0-e53e-424c-8259-08b5eef60bdb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b32b8e-7f34-4c01-bbd8-92ed875b5436", "sighting_of_ref": "indicator--ee238e28-bca2-4300-8522-c303a49cc402", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbafae7-8a5e-4da7-a6b8-449a1dad9313", "sighting_of_ref": "indicator--4de5d27f-c2a7-48b5-b3ec-f122bf7adf97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907ca3d8-e4ea-43e0-aac6-66d8811f14c8", "sighting_of_ref": "indicator--3d84d51d-f445-44ba-9272-4f67eaf6b2c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7e1493-0b7f-44a6-9907-9706f255ea5d", "sighting_of_ref": "indicator--31eec649-f22c-48d2-839c-76103a63cc1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c96c17-88f1-4573-86ba-f784ad6a2024", "sighting_of_ref": "indicator--5255e1fc-db93-4f82-9446-4afd31b34936", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077c6ac6-4720-468f-ab8c-060693f8bcb1", "sighting_of_ref": "indicator--7dd44254-5fa0-432d-aea7-840db110339b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67de5e8-d56f-4f9d-9a9c-2271af22ba36", "sighting_of_ref": "indicator--e8ebd597-41ea-4bab-9e1f-cb2e844d3564", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a5ff4a-dbf4-4201-8119-de2d518dafc4", "sighting_of_ref": "indicator--816d8e0a-23b4-44a5-bcd8-9fbfa3e17172", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec5ce74-3e70-471a-bed6-f5a131d48c29", "sighting_of_ref": "indicator--9cc903e9-541d-4cd2-b47a-5209f20ec696", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ebf107-7dbe-44b0-9201-8c4e080f4b56", "sighting_of_ref": "indicator--3f85d0f0-7660-4d98-b0ef-b0ec76f2e629", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d358df-8ef1-4a5b-b212-833d9104cd11", "sighting_of_ref": "indicator--8518c2be-ee32-4221-b898-332202acdff8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968b3ba3-c6f8-4c67-ac25-fba4f1a6b274", "sighting_of_ref": "indicator--33795ee2-f0b9-40c7-8e66-6205c28ed5bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce758a7-0086-43fa-9bb7-c98641036b6c", "sighting_of_ref": "indicator--068ba544-61d3-4611-bf3c-27642fde6224", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb8ebd0-6859-49a9-94e5-cc1db0fe5368", "sighting_of_ref": "indicator--66df7454-ac95-46d5-866c-5b4169a13b48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5690d9a-409c-49a5-a30c-55c1f02fdd83", "sighting_of_ref": "indicator--3a42e56e-d88f-4c39-a0bc-af592ad1998d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c28f5a7-489d-4e91-bdc4-502fd34cc3da", "sighting_of_ref": "indicator--a5c2da5b-8c31-47c3-83d9-1b8274305717", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b051817-aac9-444d-8dd5-120db2f6938f", "sighting_of_ref": "indicator--5293ac2e-942c-434a-a982-cd0e22a59a1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb443ff8-e35c-4157-b6ca-bec0f97dc48c", "sighting_of_ref": "indicator--2b29b712-8cd7-4ee5-b947-4280f742a1b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b01b6b-6abf-4c8d-88a4-b4cea004fa60", "sighting_of_ref": "indicator--d11ebc4e-f934-43ad-a8ec-77f197ffb65e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7111f750-cd28-40d3-970d-11b86c887bc3", "sighting_of_ref": "indicator--0adac8ac-650b-4cfa-af8e-4872ccf1798d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e340b1b-bb63-44aa-8877-e10eea88b993", "sighting_of_ref": "indicator--90346029-5877-495b-abb2-0b130dc5eff5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80e3d34-27ed-4d1a-98da-f9bc6ea758b0", "sighting_of_ref": "indicator--d642499f-f12c-4a60-8514-e1347f46f4b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3557e60e-b627-4b71-af30-2789e1c37854", "sighting_of_ref": "indicator--2e93ac3c-a710-4704-950b-46c22dad2be7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591f3b0a-9ffd-4eee-bba2-bcfc090d38db", "sighting_of_ref": "indicator--16dcc150-430d-4353-b9f1-3482ee0d6143", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689c2996-8911-47cd-ae97-3df12370cd64", "sighting_of_ref": "indicator--d8b3cafb-ca1d-4f38-960b-565d87435cbd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b3987d-47a7-47b1-9878-fcfce053cf7f", "sighting_of_ref": "indicator--1f88b314-f682-46ac-bdf3-e45409bc90ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c08259f-82b8-4d95-95c5-042f1e93eda0", "sighting_of_ref": "indicator--54f7b1ab-6258-4245-a4f3-70d3d42f054e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6381bc28-4135-4e71-95f0-add87f061667", "sighting_of_ref": "indicator--a30e8e7b-9443-4c2f-a61e-464870f81fef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992c7cea-8c0a-4b5f-b21a-fee5c7f929c2", "sighting_of_ref": "indicator--22423766-b54b-423b-ac61-54ed4356df77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab76594-8f4b-4406-80cb-e16ed57f66f3", "sighting_of_ref": "indicator--65698674-0b47-4bbb-a1e2-fb0b81cc19bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb67869d-03c8-4474-889c-aad88cede0d9", "sighting_of_ref": "indicator--68635abb-9e32-400b-934c-9eefe9565269", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2924d310-5a8d-411c-bb76-597c08abe052", "sighting_of_ref": "indicator--b5379caf-6109-4547-8af5-31277124cc61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162c8133-2222-4c3c-b3fb-69c425907139", "sighting_of_ref": "indicator--4a4c4163-0bb8-4342-9188-47bfd618b66e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fd542e-c47b-4f94-8095-e7bf32f6530c", "sighting_of_ref": "indicator--7832903e-703b-4b3b-82ff-f3ab2daaed1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db30b8cf-a834-475e-bb0d-cbf510f62f48", "sighting_of_ref": "indicator--0eeb50b3-7277-497f-8576-943673ccfbd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6eb2b9-c0c4-4dc6-ac1f-79989358ef3e", "sighting_of_ref": "indicator--f710b318-9035-476b-8d27-12975a996c02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17068539-c071-491c-a537-fbe60c6f6469", "sighting_of_ref": "indicator--41ff2284-3f6b-4c88-ad05-59ae5717ab38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccef747-1faa-4814-9ce4-b00dd1da1473", "sighting_of_ref": "indicator--5b859c75-b232-4054-8b28-e86047604693", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c07579-3afe-48f7-b06e-680070106e97", "sighting_of_ref": "indicator--fd4ac1a6-b2fb-41ca-b3db-687d378dfa4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24217b6-5918-4576-918b-08f2a929714c", "sighting_of_ref": "indicator--c0eb0f8a-8ead-4345-b5f1-5be843b77529", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda27877-7866-4a82-93c6-eca9ce26d14d", "sighting_of_ref": "indicator--781f7f0d-ca15-4331-8cd0-81e04a55c5af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c13772-733c-47dc-a772-9ffe948477d1", "sighting_of_ref": "indicator--73b1d531-1ced-4e68-aea0-987786905f29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09db39c6-d4b5-489f-8265-9891eabb5aaf", "sighting_of_ref": "indicator--9cca3ada-6566-4940-b990-73a7984da0ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872e9e20-e0d1-4f6f-a241-3672788b4b3f", "sighting_of_ref": "indicator--ec988d49-bd96-4a78-9b28-aaf6f0dc9f69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a14ab4-f16e-4774-9618-2e84d6d47c2e", "sighting_of_ref": "indicator--c1a8130c-ef8f-48e3-81a9-4a81be76acc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70ecebf-284d-454e-a747-7c35786f4406", "sighting_of_ref": "indicator--1ec95b86-10fd-432c-a61d-71dbc71ef581", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885dfdf2-af42-41b7-a7c7-277827aa5fe0", "sighting_of_ref": "indicator--6164a78d-70d7-4881-90a7-a9582f24ccff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e94d7c-6b62-4dae-b31c-f7c1b5187ec5", "sighting_of_ref": "indicator--03a15713-df7a-4361-9a18-4e3bf821f0b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1699bd4-7e18-438e-a631-1681ebf1c9a9", "sighting_of_ref": "indicator--7ae47ba0-d488-43ac-8de7-64c3c2caf7cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acc45da-7765-454e-8501-e3a485864742", "sighting_of_ref": "indicator--268b1bb2-1c5c-4637-a056-8b098e0d492a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c9d3e8-916f-43fa-be41-62bc4e8fef7a", "sighting_of_ref": "indicator--386d5c3f-07cb-4c56-8069-889fa97eb968", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fd591d-4f28-4fef-b9cc-f6272930925b", "sighting_of_ref": "indicator--96e99f84-9da1-4dab-9369-8240d741cd36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b47500-644f-464c-a94e-db6d189578fe", "sighting_of_ref": "indicator--c51910a7-8a29-43ac-8247-d496b28ebdc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821d58a0-4832-4e09-a3fc-c69e4a6fce1f", "sighting_of_ref": "indicator--51563c70-fb2d-4b43-9eeb-d828a1aacf8f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf9ff6c-2477-43a3-a657-81243119bb99", "sighting_of_ref": "indicator--9a34ec32-b3e0-4413-899f-a632bf001985", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6e5a81-3d42-4cd9-955c-86c3cb824b9e", "sighting_of_ref": "indicator--3718efa4-b590-4b46-b00c-bad5ab43ab49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817ee891-ab07-4936-922c-8d861ab8a6b4", "sighting_of_ref": "indicator--160f4054-7d53-4310-907a-89bddf18e29e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853d09d0-5260-46b6-a019-3a3df2121e5a", "sighting_of_ref": "indicator--97cb48c5-d1c6-4416-89ef-396d834d3b7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ceda8a2-80c8-47bd-a453-4cfdd227af39", "sighting_of_ref": "indicator--7ca77a68-0876-4818-a936-a1952566fdb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2e9444-23ae-494e-b126-5dfbfb0ad2d6", "sighting_of_ref": "indicator--6f65bb97-5179-41e4-8ecc-541c840c4b5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e704f7bc-78cf-4205-a33c-3b91d3eb2019", "sighting_of_ref": "indicator--8755ade0-b4d0-4b56-b915-8453458bab22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031a3919-48a3-43ad-8432-93006589376c", "sighting_of_ref": "indicator--4edbfc2b-a09e-4d2e-bf39-23aa76672d8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c9dae2-0b89-482f-bf7b-75da094c072e", "sighting_of_ref": "indicator--5d727457-88d7-49b1-ada5-9cc5351dc1c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0903e2-e36a-416d-a923-8b76c7a5a9fd", "sighting_of_ref": "indicator--92f39dde-056a-421d-9af1-383ac33dbd03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcf6081-906a-4c63-9174-57bafd2b856d", "sighting_of_ref": "indicator--eecc4b3e-e3f1-4836-9b32-ed3955a87b8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f0abb5-ff1d-4dc8-bc27-59b97cedb69e", "sighting_of_ref": "indicator--b87f47ab-0390-4af3-884a-bb4dde36df6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7edd678-1d2e-4a37-94e5-c7fc088d5a89", "sighting_of_ref": "indicator--4c20fdf0-b250-4660-b54e-5068906b1c43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6f47d0-978a-4e58-a607-32b979d83823", "sighting_of_ref": "indicator--48e9cc8b-43ec-49f4-a7b0-0b5366caa246", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab34ee5-31dd-49ce-b3dd-507099c2623b", "sighting_of_ref": "indicator--101e4d41-bfdf-4d02-9943-a50f351d3e1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb5e580-b47a-433c-b535-8fefeb31087c", "sighting_of_ref": "indicator--8696c8c3-ce61-4e7b-9008-2e2c1bf47d46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2d05fa-85bf-47eb-9e67-37b377f6d59f", "sighting_of_ref": "indicator--a77e9741-988b-45a6-b83d-c19b3829a461", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ed5634-0ac0-4021-a7f5-12e35da31665", "sighting_of_ref": "indicator--645b3529-870d-400a-b0f0-892f52c8083f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f751ca5-3029-4780-8c1f-edb0fb14a92c", "sighting_of_ref": "indicator--6df46db2-fbd0-4ec0-8f09-c453e742c91d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3902c29-dbd0-4f0c-9c51-5bd7261afe82", "sighting_of_ref": "indicator--9eb6f64b-ecdd-4ef6-8962-59cb1c7186d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fe65e5-0f60-486f-98d9-4e11c32ed0ab", "sighting_of_ref": "indicator--7963d324-5cb4-429c-bbff-2ab340341b06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5f7a24-4268-454c-b609-d3b70abf8f67", "sighting_of_ref": "indicator--7cdbd2b0-120f-45fe-8733-ce3655f83861", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30371ab9-4116-4cdf-b9f1-e1d8b112fdda", "sighting_of_ref": "indicator--f4b5a960-d8cb-4bda-8314-48f4a1a74357", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abda1254-dd67-4f9e-8abe-3d86a71ed919", "sighting_of_ref": "indicator--21eb60dc-d167-4611-85e4-a5b83e84d7ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b2f128-a5c9-4957-9652-61ffe024540b", "sighting_of_ref": "indicator--89423054-ed49-4ace-aeec-971e0bd30f8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1091cc9-e8c6-4570-be8e-6af72502d9ae", "sighting_of_ref": "indicator--4bfdee94-21f7-46e3-a25f-d3acd7948012", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c715e20-a8fb-4188-85b2-b0d4ba2c137b", "sighting_of_ref": "indicator--b4e6e66c-4f9f-4a1f-87e3-3484e3306e46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f7b8ea-26cb-41df-8530-6d7213fb2e6d", "sighting_of_ref": "indicator--4ab703b2-e5f4-4d3d-95ff-a0013a7513b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371a8249-f651-4576-b19d-ec582e0f0479", "sighting_of_ref": "indicator--36e71909-8a9a-4d72-959b-f0cdbc74738d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff29a7c-f3d6-46fc-bf1e-ad9b97abd1e1", "sighting_of_ref": "indicator--d4392770-38f8-432b-b7ea-2538b6321b1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ea4c92-8b6f-4176-84e2-ef2e635fa042", "sighting_of_ref": "indicator--f3058c13-11d6-4ba5-8c18-800d0c03c498", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031a2a62-5fba-4ed1-9257-d1e608c2be51", "sighting_of_ref": "indicator--44c84dc2-ca1c-4a45-8187-a9ed2475597b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e5c839-b7e5-404c-8464-1953d3e59cb7", "sighting_of_ref": "indicator--34c9fc02-fb93-4323-8a18-44030c114f33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9006f3-f1b8-4ad6-afa8-862c750190eb", "sighting_of_ref": "indicator--9eda10cd-8b45-4d65-943a-b7e928362c12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be6fff5-50e8-4384-adc7-0b58e58fc758", "sighting_of_ref": "indicator--d0baf4d7-6ab2-44b1-b6ae-619f7848b73f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1566aff-e1d8-40b7-9211-2824877fd6a3", "sighting_of_ref": "indicator--7888af2e-8c0c-41d1-9d10-2778c659a360", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a3bfbe-3c21-4189-9b4b-ce3cb3e92c44", "sighting_of_ref": "indicator--d2cb444b-afae-4988-817d-e57db843049d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93c5514-d827-44cd-8576-5a7b96d8b842", "sighting_of_ref": "indicator--72959436-45db-4cb9-9b65-2657fe240d8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1eca54-18e3-4bc1-8473-2d4645ce867c", "sighting_of_ref": "indicator--4795bdd7-ca5d-42af-8374-ba735635f000", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe34f21-18ce-4b6b-acd5-6a21562a4910", "sighting_of_ref": "indicator--4a4dd31f-1a20-4799-a7df-210961e6c1de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da456ec-ed74-423e-9a47-0e3d6e74301c", "sighting_of_ref": "indicator--e50429bb-f5e4-4d09-8f6f-ddcb31fd7683", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a9c10d-5456-4479-9095-0dff752f5142", "sighting_of_ref": "indicator--d63c0327-90b8-41aa-a5e9-7ed9ec7a8ea3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02475847-7659-472c-937b-d4e13870df36", "sighting_of_ref": "indicator--08107ce8-4bf4-4178-9cea-f841ffc064ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d96c62-bbcb-4b84-bc81-b753e421ab39", "sighting_of_ref": "indicator--b9fc44b1-7929-4100-b2c3-41c4824d91bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019f6deb-ffe8-47d7-b7d3-8f6f54efb5a2", "sighting_of_ref": "indicator--3d5d052f-70f1-42d1-bab6-329003ceb6e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbb3d97-3134-49fe-910d-1bf3a7cdf3d5", "sighting_of_ref": "indicator--0d2af70d-4435-4a29-b113-8da83738497b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdd032c-7711-4f6d-b1c6-292511c2dbec", "sighting_of_ref": "indicator--63db718e-8414-41eb-99ee-996cbc4a0f18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319a1961-0e15-4a80-ad8d-fbb557d855b5", "sighting_of_ref": "indicator--0b749be6-fe49-4f94-a290-df537c572c43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990ba4a0-6845-496c-8970-a0b2b062b64d", "sighting_of_ref": "indicator--028436c2-6621-474e-b876-8dddd32e2463", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61330240-fec8-468d-81ba-77a6e2e893dd", "sighting_of_ref": "indicator--d48f8e24-aaa2-4a26-a303-38be984f9e72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a92f15-2303-4b81-9187-ad6532809fc9", "sighting_of_ref": "indicator--1ee6cbc9-cbe0-4caa-b224-3805d5b29c9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579e7f17-702b-4926-92c6-5b1d29342cf7", "sighting_of_ref": "indicator--87d3f610-e642-4938-8afb-06d7385093a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1eaa7b-5134-4395-b874-cdb67ef20e14", "sighting_of_ref": "indicator--e89a8536-64ec-4ce4-ace5-4dcdf601ff2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2663e13-3e1d-4639-bb6b-be271fd5bc63", "sighting_of_ref": "indicator--d187d26d-2d27-41e3-bbf5-fedbf9bf4f0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b551ec65-5ad4-4ea1-b042-90235d6a0f1d", "sighting_of_ref": "indicator--2f18fba2-36e8-4293-b8cc-275cca970c74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e77c8cf-3ef4-4a4f-85ce-35b4699ddb7d", "sighting_of_ref": "indicator--1c0b7aef-37a5-476d-a529-9c724a42e110", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcec3d67-7ed5-4800-ae8b-bf79f4dd58d0", "sighting_of_ref": "indicator--b7b4166e-a08b-4357-a470-7150af33bb46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3591bb39-9f5d-47d4-9db5-8c559d09ac08", "sighting_of_ref": "indicator--7e8f4fd1-fe42-45b1-ae15-9829566ed013", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4724ee-1058-4e35-8620-c90cea2f16f4", "sighting_of_ref": "indicator--f89b74e0-753a-4e3e-a5c1-6ade55e836c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719424b9-5fd2-45b5-864d-6a6101de3055", "sighting_of_ref": "indicator--e2d23121-ae8f-400c-9a70-af0d14ad5806", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc08d4d2-b59b-430d-95ab-e13046ac20f4", "sighting_of_ref": "indicator--a1f0977b-43ae-44c8-b701-62b58bb720d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8d6849-7056-497e-98be-2f542941eb1d", "sighting_of_ref": "indicator--527f5e41-2da3-468d-ad77-9fba84a018cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429f063e-9671-49c6-806d-f4e11daec6a7", "sighting_of_ref": "indicator--4baf3a98-79d2-4f38-851c-d2a6734db232", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d02f32-ef4e-44b5-b637-c3bd752a15bb", "sighting_of_ref": "indicator--898c64bb-3f7e-431d-ac8e-fc902bf24f99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaa003d-81a5-48b4-8c01-22ad65079b31", "sighting_of_ref": "indicator--979cbb2d-ad3c-4d91-ae84-b1957bfa6fc3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eedf9d5-0803-48c1-ada8-f7328ad1f165", "sighting_of_ref": "indicator--5fc1370b-b304-4a9c-ab21-5d6b831ca6d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a7c051-e28e-45b7-b14d-c10393435fa9", "sighting_of_ref": "indicator--73b192d1-fa01-46ce-93a4-92c38e0e3e5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d3aba9-159a-4d15-b2e2-de5091cc70e0", "sighting_of_ref": "indicator--1e847218-158c-4254-948d-0e58c74424ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fa37be-3045-46d3-8485-cd711b13d656", "sighting_of_ref": "indicator--edf1a297-d8ba-4a3f-8038-530b499227ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb10cb9c-ffdf-43d3-a33f-e33714b2a80f", "sighting_of_ref": "indicator--ae1b13c4-dbb9-4e42-a3dc-e1ecf1d2b206", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809540cb-7b37-4f91-b3dc-c5b511218551", "sighting_of_ref": "indicator--0630905f-7e3d-4537-a89e-b904d05f7cd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f04be1-ee7e-46ca-8e48-526bc15c622b", "sighting_of_ref": "indicator--057edd8c-f44d-444d-adf4-7c0c5b1957d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e4e1b5-78cc-4d51-94a2-9083d4a7eda3", "sighting_of_ref": "indicator--898e8492-fc59-4c91-9a37-491275a15140", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781e0b21-b844-4ef1-9f16-000eb741f125", "sighting_of_ref": "indicator--edfc7d61-4f3c-4679-9bd8-828c82175cfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eda7f25-8476-4dd9-a646-edd284a241c4", "sighting_of_ref": "indicator--a10b5a8b-6367-44c4-8c45-0fea72530f60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7017bb-cf6a-43f1-b455-3b02ce709db7", "sighting_of_ref": "indicator--edd1263b-aeae-44a0-beba-fd94a877f985", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec510c98-c33b-49b5-8a2f-c6bb843d7ee6", "sighting_of_ref": "indicator--1dfa5a40-95c0-4de8-b2c5-d079b59593ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1959ac0-4973-4397-b987-f2d6372ff24a", "sighting_of_ref": "indicator--20a6ff4b-51d9-4658-a5f7-a9d31592dcdb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ca0517-ac90-4652-b1b2-d7d946ccb617", "sighting_of_ref": "indicator--45efe5d4-d56b-4009-8c77-2f4642eca44e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa28fe51-4fee-415b-a62b-84f8ae60aca7", "sighting_of_ref": "indicator--a426be61-93bf-409a-a66f-7253067b2d8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31601f1-88ab-4833-9c34-fa8ce77fc175", "sighting_of_ref": "indicator--a76f88cf-b7fc-4d16-9f27-41486a90f78a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d491ae6a-7b87-45b9-8e23-a274b45ad7b7", "sighting_of_ref": "indicator--1ca38742-01eb-44e1-95aa-ec550349eb41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b613d4c0-cd8e-4882-9cd9-8b20755b7dee", "sighting_of_ref": "indicator--b8043629-8956-466f-9164-60aed9963ae3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cd95d1-6c1d-4c25-aa51-e4ea67934d52", "sighting_of_ref": "indicator--199aa79b-9180-4c9a-97bb-fe455ca37fe6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5f5613-a3eb-4b5f-bf1c-56f2f394544c", "sighting_of_ref": "indicator--a7f3395a-b7bc-4845-a4ad-16b48b2a03b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b00d25e-a72b-4c7c-ab7d-7f228e5c40ef", "sighting_of_ref": "indicator--2d4605bf-e90c-4119-a72f-d7db5aeb5a60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25485d0e-7b49-4302-b11b-4df4a7eaadbd", "sighting_of_ref": "indicator--01152e22-dfbf-4eda-ab9b-0c8b0bac06ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2560749-0e22-4b33-97af-3a79f9f7509b", "sighting_of_ref": "indicator--91dfeda5-7046-4ac3-98e7-66c10d86703b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b1e69f-abaa-4a19-993a-7acc89364ff4", "sighting_of_ref": "indicator--dfd77c9f-4675-4de0-a2c6-67ae7d873869", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bd8902-ebbc-40cf-ba04-c5dc23c4aa9a", "sighting_of_ref": "indicator--1a4de4f1-70b2-47b7-816b-a9d4b67cf07d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea9daae-3d18-4ffd-b668-a5c9dace76fd", "sighting_of_ref": "indicator--3faa483f-9a43-4a21-bf42-2ecc5320ba0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc723d9b-2ce6-4b7d-9dd2-a3a1fbf7f497", "sighting_of_ref": "indicator--6f1bcc90-3e0a-4cf9-88da-fb9ee4bcd9ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b07c708-749e-4227-9c4b-ec79dd8f6d1b", "sighting_of_ref": "indicator--9429699e-f922-4468-9b4f-7e8155b0dd10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907a0630-951d-4212-a52d-5533aa1c3e99", "sighting_of_ref": "indicator--c3f05bc4-bb43-4834-8e76-d56c5d3832a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626ab4a8-eb00-429d-99cc-f8e30cd7b53c", "sighting_of_ref": "indicator--f027f8dc-f2cd-4691-9191-2cf2e70c1e41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28acdddf-e203-43f8-b143-7bf2c86e604b", "sighting_of_ref": "indicator--350dcfcb-f165-4095-ae14-f10f38d935dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1903a40-3f7f-4594-b85f-799a46623980", "sighting_of_ref": "indicator--3e67e42f-1168-4e43-a425-72cb21b6c118", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1a370a-85a3-418c-917b-629fd523ac02", "sighting_of_ref": "indicator--220a6c29-88d2-4a68-ae14-972a3cd8d8a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96dd2036-d266-49a9-9789-a6f935407858", "sighting_of_ref": "indicator--c04b1186-461f-4cae-b5e8-2930d90e7553", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e852fc89-76c5-419d-a00b-66f9cbb2bbeb", "sighting_of_ref": "indicator--93a3c145-8a68-4035-ab4b-463b7f3bc335", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775d9bbe-ec26-4f53-8cff-56e5591ba14e", "sighting_of_ref": "indicator--14c0212a-cada-4d3e-8a99-5a6fa391400f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f303bb0b-7c17-46bf-a093-b731867aa8c8", "sighting_of_ref": "indicator--a16bd22e-f0c8-4aba-90e8-8d262c9fe818", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2aed0a1-83a1-4b04-a140-34185f1fe5cf", "sighting_of_ref": "indicator--4eb90b90-4cf0-4dfc-af44-01b449d75936", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614951ae-a38e-4430-b8a5-c3454c6843a7", "sighting_of_ref": "indicator--d12915e9-271a-4764-b82e-f18f6c643a64", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d385bd20-9420-4294-ad85-9e60a8badbdc", "sighting_of_ref": "indicator--2fff918f-99f8-470b-88b0-dde7b7a96017", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a112871-81b5-4714-96b2-4d113041d4d0", "sighting_of_ref": "indicator--0218365c-425c-4052-8955-011b105d36ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b930d9e3-d340-4cd3-b235-78e617c193c3", "sighting_of_ref": "indicator--2cf4a05b-50e7-44b4-b6de-f5293f53aa87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b974a28a-2391-4139-9e77-cc4a0a712822", "sighting_of_ref": "indicator--9fc892f2-0213-4f5c-8b25-e1de22516864", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6397be45-614b-4153-be56-3f2062b60a6e", "sighting_of_ref": "indicator--8ec12109-1871-4428-a8ec-962a224a3595", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1481f155-c844-4c0a-8169-ecd176ccf017", "sighting_of_ref": "indicator--9e4d4176-6661-4a23-b25e-53a353b4cede", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a389b138-0928-427a-a9a7-dfe5d378ca1f", "sighting_of_ref": "indicator--7b6effce-ab4f-425d-9665-57004d94f7cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db40145c-b1bb-4637-939d-0686b9e39ccd", "sighting_of_ref": "indicator--c35406be-cd95-4afd-96ce-c67ee31178a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0554e1bb-5cf9-492c-b8e3-5002f71617e4", "sighting_of_ref": "indicator--0e5c420a-250d-4eec-972f-b440f39c7287", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eff10ca-d992-4555-a3da-90dc435fe986", "sighting_of_ref": "indicator--53d21f1a-00ee-492b-9c1e-900835f5cdb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ba7e57-2629-4dea-9a48-7cc2b441f2fd", "sighting_of_ref": "indicator--45492764-ed21-4cc6-b48f-f2125f2698f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49edd14e-0ac9-4ed8-b539-615dee87301c", "sighting_of_ref": "indicator--24964cf8-04b8-45b4-895f-2ec49d584c94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1ecd0d-714d-48fd-8384-97ce7667f43a", "sighting_of_ref": "indicator--2d07a1e3-17a5-4ca1-9467-060391018a10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bcfed2-8ede-407a-92d5-7c1319e80976", "sighting_of_ref": "indicator--a8ab4a4d-d1ab-4051-bd58-9f8308bc15d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066757e4-f975-4fc1-9844-44aeae8592a9", "sighting_of_ref": "indicator--61cd8a16-32cd-4595-880e-30cd66715bb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7122fb-d633-4de7-ac64-d5b0839d16ce", "sighting_of_ref": "indicator--7ba6b392-1be2-4bd0-b438-3ad2c6a13c43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da0d534-7bba-4c32-8406-5b88591f9d3a", "sighting_of_ref": "indicator--8f1975ca-9691-4595-8bcc-90a7ddbb210c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2216cb0e-22f2-447d-9e60-04c13dc1f533", "sighting_of_ref": "indicator--3736d40d-03dc-41b1-a867-8966173a978e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e95223-c73e-45f7-a2a2-cfd907f3c6c9", "sighting_of_ref": "indicator--8b79a45f-3327-4e3b-a5b8-c4e8c4c20afa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66dfbc4-ab83-4324-b123-8189ff52b739", "sighting_of_ref": "indicator--07c9ff66-6bb3-4d1e-ae00-ace5ad985abe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b346ac-f722-4ce0-884d-8845139c0ae7", "sighting_of_ref": "indicator--d109f1a4-24aa-44f4-a699-e403645ae392", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8460b41-5c07-46b8-ace8-97b71124e1f8", "sighting_of_ref": "indicator--1124af37-c07a-45a7-bbb5-65ed4f9d6391", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b82156-cc3f-4df1-bacc-6b1a1964d80d", "sighting_of_ref": "indicator--ec019998-ea60-4a84-9bdc-c06faf9aace4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a954ac-822f-44ee-9b1b-5434dbb8983a", "sighting_of_ref": "indicator--6109e170-02a7-469f-b067-276d521db88b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978c4787-fdac-429a-805e-ef457dd80c28", "sighting_of_ref": "indicator--d91a77f8-63cd-41bd-b4d7-7515b3efafd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d8809a-137e-4ab5-b1d0-00e459cd6be2", "sighting_of_ref": "indicator--a015ba82-fb5c-4601-83ac-1c165d516dca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976dbdb1-0f45-4c4d-9a8c-1a4f07c8cc49", "sighting_of_ref": "indicator--75ad1a7e-5eb6-4892-a88d-60ea6bc0ba45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493a8182-db79-4d9f-8cd7-98b664306632", "sighting_of_ref": "indicator--22d38a9f-599f-477d-8904-a083d5019615", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe82b66-0655-4712-85e8-edc178e50e8c", "sighting_of_ref": "indicator--14bdf833-a727-4ea3-9810-a35d9951b258", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cc6bb9-0c83-49a3-a69f-d4fcd1cbb748", "sighting_of_ref": "indicator--bca8b58e-8454-48c2-bb20-6d1ddc9ef1fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e159ff97-2a56-4c4b-9206-09ecc3a09813", "sighting_of_ref": "indicator--31a5ad13-e0c6-4558-8a9f-cd5f01346870", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbf8f54-2be1-429d-9248-b02f7a453e65", "sighting_of_ref": "indicator--5d818c0a-cb04-4fbe-9cce-f11d00effb24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3861aad2-8fe1-4c9f-8679-4ca1af47c481", "sighting_of_ref": "indicator--deedc375-dad0-43fe-8045-c4a916e67667", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4d22a6-8661-4d2b-8028-c5d57f4cdc24", "sighting_of_ref": "indicator--8edfa9ef-72eb-405b-af22-6c79427dffca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0049488a-496d-47e5-88f3-fb41c6e4181e", "sighting_of_ref": "indicator--f9a3852e-0dd8-4282-b18a-0c6dacbc4986", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044b0120-03d6-4f26-9d0b-f12f6d22f7d4", "sighting_of_ref": "indicator--607f63a8-82e1-4007-b084-e089414efc13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160b1432-94a1-448a-a8c3-6beef6b97b3d", "sighting_of_ref": "indicator--f337fccc-c5d9-405f-9401-741d3133709e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0441af-46a8-448e-be2a-9ae65736ce57", "sighting_of_ref": "indicator--2205db52-eaaa-49f8-98c7-d715cec3a6d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8225d4aa-7ee5-4f8c-9f05-ac392bf29024", "sighting_of_ref": "indicator--9c11031b-8214-4490-a666-eb10713d0ccf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec1f90c-510d-4fd8-84d0-23e385fda303", "sighting_of_ref": "indicator--668de1da-5ffe-467c-b7ce-f21d657fa5f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3395d7bf-901c-4105-b5ce-7df5aaea86ed", "sighting_of_ref": "indicator--a8261412-d97d-4b50-9345-92851b80e164", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5ce61f-2bb7-4f00-982a-aa49bbd8ee85", "sighting_of_ref": "indicator--0b86a7da-1ab6-4fb5-9c73-68296b04f4f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd2b178-1cb1-4e79-bdad-097ee68862ef", "sighting_of_ref": "indicator--6ccaaa9d-b16e-4bd4-bb98-8599b764f24b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c299f5e8-3668-407b-8e01-04a433a26745", "sighting_of_ref": "indicator--4fd29a3d-02de-48a9-bf4a-3c6953377367", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd8a310-b875-4d9c-a069-bf8ef68f8874", "sighting_of_ref": "indicator--3a390c48-8508-4971-92f8-b6f18cb809e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5352547f-773f-4ff3-aba4-888f680af017", "sighting_of_ref": "indicator--2d866e8c-4885-4dba-906e-d32d694b6e61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c634814a-bdb0-48b6-823e-6dc0d61e52a6", "sighting_of_ref": "indicator--6a6a3394-6738-4e8e-af36-b563f62f4b08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06febdf4-15be-4e8b-9524-7415684b7c27", "sighting_of_ref": "indicator--58d7404a-7ee7-4c99-840f-ab4a3d065374", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c01dee-1f9c-4fa0-88b0-eee1cf9efa04", "sighting_of_ref": "indicator--c9d5977a-9e1d-4322-af43-ae43e155677f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016b46d4-601b-477b-8474-b183cdc8450b", "sighting_of_ref": "indicator--14d2169c-9d0d-4134-be09-b7ab1d4fd48f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347724d0-2f50-434d-aea2-051a43a6b235", "sighting_of_ref": "indicator--29596d4a-005f-4581-831b-a0a360839cf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e90dfa8-65a7-4ada-90ac-f02a11afa358", "sighting_of_ref": "indicator--3beb600d-8a6f-4df9-928f-d7f356ee15ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3ee683-400d-46cc-b2a9-52c5b6011c0b", "sighting_of_ref": "indicator--c09cce6d-7b7c-425a-9be0-79e1ec3e3235", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02a6c29-8154-4ed8-8f8c-c7a1668cd1f4", "sighting_of_ref": "indicator--02fce291-e802-45ce-9438-63e0fa1ac194", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444e7dfc-9b41-4506-9688-9a09dbdf7642", "sighting_of_ref": "indicator--991fae47-7c87-451d-af3c-5545c5b4ff52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaebde2a-abe5-4f1c-bdb6-77d007671b06", "sighting_of_ref": "indicator--fedc7063-249a-4dff-922f-db7e078beb20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59571b7-1669-460d-949c-010b60d39210", "sighting_of_ref": "indicator--dd45a46a-57d0-4848-8ff8-fa02650ef5c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c01fe3-ddd8-4c99-8e11-9addcccec3b5", "sighting_of_ref": "indicator--d6a8934e-b054-4179-be5e-4e55a1938af6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dee11eb-9671-4ce0-ba0d-1ec9634758e3", "sighting_of_ref": "indicator--7fdb8f15-f8f0-41cc-a93c-1b98dd3f1c20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528537c7-1ec0-4f4f-a0d1-f6e112063bf9", "sighting_of_ref": "indicator--25e749ca-2e34-439a-a64b-63d5b3bd1335", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927233bc-b1d7-4840-b990-0f7b4df3f95a", "sighting_of_ref": "indicator--d4ac4c53-b261-4bf1-86b7-9f214de081aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95ab6f8-db94-4472-a346-e676ff61071a", "sighting_of_ref": "indicator--c87ff7f8-da65-4800-baaa-e236d287144f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5085b988-ba0e-4484-9e1c-f8497ca91a66", "sighting_of_ref": "indicator--fe552985-4f36-4761-a3a6-98627fc7f42b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cdbb99-ff83-47fa-a41a-e597a6133c6d", "sighting_of_ref": "indicator--9ce72cef-b845-4baf-a8da-286de450cd17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c54e05c-a414-4b6f-873e-f0eee4f2a58e", "sighting_of_ref": "indicator--d3bdaab3-d18d-4d72-9dbb-b8c5e06ad2c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b75198-da1d-4034-954c-028d6e72364e", "sighting_of_ref": "indicator--3f623cd1-6cb3-44d6-8904-dfb3a777e6fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c6fdc3-c15f-4ac5-999a-4a20a4053c4c", "sighting_of_ref": "indicator--40a0150e-4ef7-47e8-a788-4763ba8a3b81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c15ea1d-6534-484f-a3a8-2cece86e8d09", "sighting_of_ref": "indicator--4814aecd-8fb0-43f0-9d9c-bde8cbe5b4b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa134c4-7338-4bec-b23b-ddd38cd6de69", "sighting_of_ref": "indicator--955f335e-5fec-4b96-868d-3bbde1997603", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62317517-6e4b-4a51-b002-aae6498c8bac", "sighting_of_ref": "indicator--d599acc1-81c0-4078-8c5d-b6eee95dc2a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739791c1-7b0e-437d-9620-2b20469ab8af", "sighting_of_ref": "indicator--df688e69-471d-41a3-9e0d-e991012bc63a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307b606a-35e3-4317-86c5-3ea75bf7bd32", "sighting_of_ref": "indicator--e946dcd9-f9f6-44a3-863b-95b73a45bbd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12138919-78a4-4f07-be75-059289fe9692", "sighting_of_ref": "indicator--1255c976-61ce-450f-9866-f8fc7724d201", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bf40d8-c4c5-4793-9b7c-73ceedd3e350", "sighting_of_ref": "indicator--35b57193-1e9e-4e0e-8906-fe311b3084b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe7c91b-17df-4c8f-bd0c-ce25f004928e", "sighting_of_ref": "indicator--3f55aef7-fd23-4d0e-957b-95a9d1a217e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9c4d9b-1556-4559-b61e-7b133f9a9469", "sighting_of_ref": "indicator--7db394d0-2087-43e3-835e-7156003cba3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f89237-f90e-4f9f-8e73-27356f28d916", "sighting_of_ref": "indicator--eefb4404-de9a-41ca-82a4-aa0dca5c54ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc912d0-9876-42fe-b34b-744893fde54e", "sighting_of_ref": "indicator--d6aa8bf6-2f0b-4448-a768-a8e543350b8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94304c65-4088-42b6-83a3-0813a63f0139", "sighting_of_ref": "indicator--ed9f819c-80a3-4a1e-8116-386b6a79d4bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beecfb23-aef0-483a-ae78-ec9fecbbacc4", "sighting_of_ref": "indicator--e20eef13-ad2a-4eaa-9e43-6865c2d5367b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735d5d59-22c9-40e8-8c87-c96f283a8677", "sighting_of_ref": "indicator--6268eeb8-0dbd-499b-a7ad-5434b2435842", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f63a02-0fdf-4acc-a053-71368ada0a09", "sighting_of_ref": "indicator--219a7081-266d-41be-b5d1-4b823a17eea2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe052ea-a549-4959-9609-2481004a4304", "sighting_of_ref": "indicator--c2489116-066a-41fe-a6f0-76e14f71d8d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095138ba-1345-4ef1-ac07-723515d6bcb9", "sighting_of_ref": "indicator--f7f9281e-c57a-4c80-9d04-79545719b5d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c7999b-b459-431c-966a-cc71bcf8300b", "sighting_of_ref": "indicator--4efc3c8c-a19a-4ad6-835c-a17e72a391f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d973b3b9-35e4-4781-b2ae-838fecab8811", "sighting_of_ref": "indicator--7a29af23-7db7-4e47-ae47-e70772278cdd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf4df65-0f88-4e7b-83e8-63ddec5546f0", "sighting_of_ref": "indicator--8d101fd8-b1ee-40e2-9e2b-8743523cc15c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962746a1-8c33-438e-8da3-9af670e330c8", "sighting_of_ref": "indicator--3dd284fe-7d43-48f9-978a-0eab9ffce512", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df255fa2-90a0-4472-b994-1d1ee04f9b68", "sighting_of_ref": "indicator--ebd7c301-c14a-4cff-82a8-95283b5ff020", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed29b013-079d-4649-9c82-c3ff3f3e719e", "sighting_of_ref": "indicator--fa92b30b-1dd4-4d89-a39d-395f30f7c787", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0930dd6e-b407-4708-b4a8-c821f1ce75b9", "sighting_of_ref": "indicator--284a6b1a-658a-495e-ab1a-1a2e22191c93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4ef64e-6965-452c-8b66-846958e36541", "sighting_of_ref": "indicator--fe2763a2-f1f9-4dd4-a9e8-5a193fc5f61b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2134757-868c-4441-a103-6465a30e68a2", "sighting_of_ref": "indicator--551d92af-ad9d-4ec5-866c-dec345840768", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0930e73a-3947-4299-8e7b-f038f4ca6b5b", "sighting_of_ref": "indicator--07304afe-642b-4b0d-b8ce-3b1665cb9204", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcac00c6-605e-4075-9f75-e3f94f55aca3", "sighting_of_ref": "indicator--e37512f9-bc2d-4d1b-8a73-9355ba90e414", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd40964-a159-49a2-a137-14153cad56bc", "sighting_of_ref": "indicator--eb822cc9-2aad-4ee3-b8f9-d0cd4fcbcd37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8c522d-d801-4b8d-b6df-1f8dd040f283", "sighting_of_ref": "indicator--94658a1b-baf1-446e-8d20-e548b0e0f86c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5874cb-c817-4b9f-93aa-e208cab12c67", "sighting_of_ref": "indicator--ce21e2d3-3fd3-40ee-92bd-c5bc9282f148", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3c4b8f-7978-4cc0-9a54-41cde47741d5", "sighting_of_ref": "indicator--fe2074d5-073f-40b6-9f41-daaabc333268", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b121f813-6690-4e48-916c-068f4aa3cf3a", "sighting_of_ref": "indicator--ccd5c470-6626-4fa8-af66-b17c8ef5d9f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9220e4e3-5a17-4561-953f-75e166780e63", "sighting_of_ref": "indicator--4c413f95-455c-4e9d-bbf7-106d0ecad7c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142ecfb8-8227-4e9e-b5cf-781ec2598a0c", "sighting_of_ref": "indicator--a773b9d5-0259-4510-9c0f-ff125c472f8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f1fd5c-490e-4218-9ac5-ac828d1ac784", "sighting_of_ref": "indicator--4258d290-7ac3-4583-8011-33c6dd3399c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4614a521-f0d4-45a2-8f8c-bb107b552b72", "sighting_of_ref": "indicator--9b4ab2d5-c8aa-4801-bee1-cf88c93c21b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09d0722-18fe-46c1-81be-df980ca95b18", "sighting_of_ref": "indicator--9dd4729b-b59e-4bfc-ab6f-5b9aae370e4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b627f02-cff0-44c7-92d1-94faa6bd32cd", "sighting_of_ref": "indicator--28302a8c-f639-49f7-8ebe-51cd0b142299", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63090c87-d615-4a06-bcee-c88b333c7719", "sighting_of_ref": "indicator--0eeadbb6-0a41-4080-9476-9ab969460caf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7360ffe3-3515-4d38-8d40-26cdd6e974f1", "sighting_of_ref": "indicator--09512715-27da-433f-889e-3a66a9721d88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d637bb4c-38ce-413c-aafb-c9ff894c118b", "sighting_of_ref": "indicator--47e7d310-64f8-4919-9990-153aebdc3599", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f957805b-d9cc-4aa8-9711-11355b4210e6", "sighting_of_ref": "indicator--1a59e91b-0231-4ea5-81ac-1a15349ee4f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab5d12e-528d-452b-bd5e-08ee238123ae", "sighting_of_ref": "indicator--a85ef495-53d3-434c-bb3b-c766d558c7e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1671a1-0d66-4499-8ce3-b867c27b1a82", "sighting_of_ref": "indicator--9da018d4-e97c-4e8c-a8a6-b4f0e5ae7921", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e64861c-a0f7-4abb-96cd-78f6e230912f", "sighting_of_ref": "indicator--42000a03-853e-4fcb-948d-13c050f5721e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c750103-69a2-41e0-8384-fbbd27c1b221", "sighting_of_ref": "indicator--3bb86d5b-bacb-4042-938c-6f3d9731a5b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9f2535-56e5-41d8-a9cb-bd3efd200d81", "sighting_of_ref": "indicator--25ebc105-aaeb-4f4b-b5be-8d9daf634364", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51883d4-c5ed-4e5d-a32e-23e1d953ecb0", "sighting_of_ref": "indicator--3ca16d9a-7a5e-4ce1-b2aa-1ab0f285fad0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d16062-a321-4f34-bb92-5417624b9348", "sighting_of_ref": "indicator--b8249125-ac09-483a-a467-d0ba05fb95c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb4ed55-068e-4ff4-a088-fd78405a6812", "sighting_of_ref": "indicator--87bba952-ef50-48e2-82ad-148d59b650e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d46b68-d555-4989-afeb-4a427449f612", "sighting_of_ref": "indicator--ca2c04c5-5589-453c-b1d8-ca086605f70d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0196b96-7e3e-4361-a86a-a76eabcef0ac", "sighting_of_ref": "indicator--8d351f85-e4c8-4837-a987-5f1d11c6a45e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783f68d6-848e-4593-9b84-581af98a885a", "sighting_of_ref": "indicator--0f95dbc7-cd0d-4617-8721-c55a8cd5c739", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3d0895-c5d2-4e1c-95f4-71dd85d22040", "sighting_of_ref": "indicator--b201a455-b18c-4db7-8814-9488b296e109", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e78528-69a9-446b-be38-042f2fcf3c4e", "sighting_of_ref": "indicator--0b62b0df-9e10-455a-a6ae-2036675502d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d75454-c190-407f-be7a-a51e8d37925f", "sighting_of_ref": "indicator--0805ad65-7a26-405f-9364-409217352834", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256b18b0-6efe-48f7-9c1c-aabaf2ee1e5d", "sighting_of_ref": "indicator--f83195c2-b46b-439e-96fe-cc88966c0d08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953bbdca-876f-48f4-ac98-b04d60f380d9", "sighting_of_ref": "indicator--bef811b2-3af8-4562-8090-c9a24c530af4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591590ba-9d94-4166-9c70-7f8d2973c51d", "sighting_of_ref": "indicator--948442f3-f416-43a6-8d6a-3f126f21646b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d6447e-9903-4d40-abd3-05720d374cf2", "sighting_of_ref": "indicator--c3bc5eb2-707e-446e-bf2a-9b8fbdd03995", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd33d03-5513-4163-aabb-355e50e18dbc", "sighting_of_ref": "indicator--ddf851c1-9ec4-4c3b-a795-f60ab95792c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef95cbee-a994-4fbf-8733-f7f3a778b0d5", "sighting_of_ref": "indicator--182457c9-37c0-4b52-8b42-825e0c3fdcf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6dd00fa-f542-48b7-972a-e8b8d2439440", "sighting_of_ref": "indicator--e0cf3fc9-6b9f-4aa4-ace5-533dc7c4975c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80e7240-7316-4c4e-8758-cebf6326a959", "sighting_of_ref": "indicator--064e0e77-fe4d-4372-b6f7-4fc1d4b4b094", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2dd6204-de5d-4ea7-a877-581230068ef3", "sighting_of_ref": "indicator--2c11eff3-b81b-4ea3-a712-00819ad6f425", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9daaf0d-8cde-47db-ad73-cdc866531ed5", "sighting_of_ref": "indicator--b89b4853-601e-4cb3-9249-5acd5acf527f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ea18b6-0af4-4afb-ac5d-4e3bfd1996b1", "sighting_of_ref": "indicator--ae23a426-bb3a-4420-a2c9-fbeba21c7399", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8967440e-779a-462b-86a6-bbca2bca6819", "sighting_of_ref": "indicator--53435a48-35fa-4aee-adc9-a66fbb9a6ae2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc893830-cdf1-4ee7-b346-7a9cd4acff6c", "sighting_of_ref": "indicator--2494a34e-1c7d-40e5-9310-f3adbf015ab0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f856b3-37ba-4e9c-9c17-99309c2d0eab", "sighting_of_ref": "indicator--1996f16a-163e-4a71-acb2-24738522db0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4aea5b-cfa4-4872-9f5a-80b323a8c533", "sighting_of_ref": "indicator--cfb13276-159f-42ad-8628-90c2d5f5064d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd05573-451d-49e1-84ee-b587b2b0d4ea", "sighting_of_ref": "indicator--db70202d-2563-487a-b57d-4e0b07617d62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2575391-9995-44b9-9a8e-cb5b48eac649", "sighting_of_ref": "indicator--d722ac72-e827-472c-9f31-f3657875686c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ce271b-c6f8-4c29-ae32-f71df257a9b2", "sighting_of_ref": "indicator--5b906e1e-f001-4db1-8bb8-a7d9a001736b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2231e1-147f-4822-ac45-d2595a66adf8", "sighting_of_ref": "indicator--8df81ddf-c540-42cc-9b19-ee1ee2982890", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab478629-3575-4eda-86ce-2fc06601a255", "sighting_of_ref": "indicator--7042a7d8-a6b6-4025-9acb-8e919c565b6e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b70dbe-1f5f-46de-8009-83ac20d062f7", "sighting_of_ref": "indicator--154ec506-372e-4bc3-bb06-7eb6f8f3ded6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45426cc-c880-4e11-ad4b-14a7b1acc48a", "sighting_of_ref": "indicator--f3f42f44-02c1-499e-be66-77297eaaccb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3169c28a-575a-476e-805b-4c8f11bef3e7", "sighting_of_ref": "indicator--5455bc56-d120-4181-9c94-2e1d504ddd9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a444532d-58a2-4ccf-84d6-ffedf7fb8e34", "sighting_of_ref": "indicator--7c26c5a4-8e7e-4ba1-ad6a-c14c86cb4092", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8976467f-bae1-4d74-9905-5f8f4b822e51", "sighting_of_ref": "indicator--02f3f812-6c79-4f07-922f-bfab6391617e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0172ffe5-d32a-4642-b400-1b1f34c2808c", "sighting_of_ref": "indicator--39fb2343-fdf5-49a8-84eb-9b78f8fc92ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf5de7e-92cc-4c36-a5c4-42047ceaad7a", "sighting_of_ref": "indicator--641785c8-6c83-477d-a604-b633c3e58d3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889a5f1c-101d-4de2-9ec9-b9760884cb37", "sighting_of_ref": "indicator--aa9c7e97-8099-4354-894f-7a9279d9658b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbcac1e-25a6-4a57-a1ce-fe9d7329fb46", "sighting_of_ref": "indicator--bc0a6edc-90d2-467d-a6fa-39c5b068d774", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18bb1f6-023e-4e67-873d-97caec7b38e8", "sighting_of_ref": "indicator--8ecdaa23-4713-4805-83ad-18d051fac117", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b482237f-fdce-4fc7-88bc-3b75f7fb1542", "sighting_of_ref": "indicator--a1e3bfab-3c91-4c12-9bae-997e987ceaa0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3693375c-c7ef-4b0c-8d98-e6f1d5218467", "sighting_of_ref": "indicator--9a423d09-60e6-48e3-933e-6ce1d02a4554", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d9d56c-be63-405d-98e6-7e6f409e5f53", "sighting_of_ref": "indicator--b82ce228-2b27-47f9-adc3-37dbd493b46f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343c76cd-ccae-41d7-970a-1b3d3c408789", "sighting_of_ref": "indicator--5ce5b20d-2e20-4de9-a7b2-7c12656ac2b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20dcdfb3-9565-4e8b-98aa-6e2c682de848", "sighting_of_ref": "indicator--feb41d4a-0582-44ee-97aa-e022c0599980", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9e2484-0dd4-4850-a9f7-e2c186b66fc0", "sighting_of_ref": "indicator--42e229f6-b577-47a2-84a7-e33dee8f7937", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f10bb69-8080-47ec-a013-a20a347a14c7", "sighting_of_ref": "indicator--1879dff4-0f39-4d9f-90eb-8df392b35173", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b342a3a-1f73-47c2-9858-bb8c2f0fef42", "sighting_of_ref": "indicator--2e2c3aaf-04ad-48a2-a3b0-aad7696d5158", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b1dae6-b2d3-4ef8-b1a0-888e4ed72a9c", "sighting_of_ref": "indicator--09561b28-abc7-4142-92ec-6e3066efa0aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ccb2f2-d9b7-4a2a-ab86-d33b9a1d1ae0", "sighting_of_ref": "indicator--126ec006-59d2-49b9-98b0-ad0658d96ffe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5cda0c-d17b-4b46-b63e-6fff30c5cafa", "sighting_of_ref": "indicator--41ba7bcb-3bc6-4d87-98c7-5e6ffb22cc97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2a1319-7a2c-437c-9273-39ed44689858", "sighting_of_ref": "indicator--47ea9322-fadf-4df9-9679-071030c9b97e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d922611f-b2d6-4a98-82c4-613c13b9a86f", "sighting_of_ref": "indicator--ed499e19-b575-424e-9675-b2346fccbab5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcab2b7f-72bc-4887-96e4-90c1de0af9f4", "sighting_of_ref": "indicator--e425626c-9cef-4d28-ae15-ca8f0bf9beef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cae127-21f3-45c4-afa1-d5d00ec4448f", "sighting_of_ref": "indicator--b1417114-d1d2-42f1-a808-f110180b47cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7309539a-5aa3-4437-931f-e4e222746111", "sighting_of_ref": "indicator--50bb90a3-e2d4-4b49-99ab-5186540f7701", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41e616a-0f50-4f76-806e-5e36440b0021", "sighting_of_ref": "indicator--24994ba3-9ab1-476e-bc5c-9ac1cd686e9d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67f184b-bbb7-4d9d-b018-6b554e231a78", "sighting_of_ref": "indicator--1529f612-6d98-4048-a6d0-50191506b051", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133c2131-fc42-40ab-b547-70e1ed12359a", "sighting_of_ref": "indicator--b3559754-4799-4dff-9d5c-3488aaeb6069", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9b0426-f866-4bde-81b6-c2f7877e0de0", "sighting_of_ref": "indicator--33baaa0f-b85a-40d3-bcdd-5a3c0839acf5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8637db0e-8c39-469b-b72e-a7a6f3d35775", "sighting_of_ref": "indicator--1c64e731-b7c2-492b-a623-b28f6bd10f01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8901ac4a-6ab8-4b1a-88a8-5d47aa13aa9e", "sighting_of_ref": "indicator--eac4f1a6-1921-4569-ba21-9cc06ec79fbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216d99dc-dd06-4906-afee-efa63515b924", "sighting_of_ref": "indicator--b6281673-8aaa-4153-aadd-2eff3edbb026", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a09a6f-2900-41ba-8681-d5b17e3a7e90", "sighting_of_ref": "indicator--0be54208-1469-4e01-b95e-615e92fc5cf5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7210005-c57c-4309-b6bd-008bafad5069", "sighting_of_ref": "indicator--5202939b-a625-4e2f-8f3d-ad4d5f75461c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2dd6d9-e723-4615-8de9-5ff3f689e859", "sighting_of_ref": "indicator--ae137b9c-886b-4fe8-bf4e-5ac9d1490521", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba44f7d-4132-4d0b-a1bd-369c0b83df7d", "sighting_of_ref": "indicator--2839c4ea-1c95-4b4d-98a2-a61bf22dd2d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9678bf4b-31c4-4ee7-804b-b5d3907b7fd4", "sighting_of_ref": "indicator--91972281-6e8a-49d5-8202-d1eaa3dd7bf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10841cc1-2a1f-4284-9218-94679e8e02d4", "sighting_of_ref": "indicator--43c2ac12-b221-4ea8-829a-94b26f041a3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832cec80-2489-4cf6-9d35-cc17cba64932", "sighting_of_ref": "indicator--f24fd485-832f-42f7-b82f-865c313d975c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92afc42d-3572-4fd0-b774-5235a5ffed59", "sighting_of_ref": "indicator--8db123c2-63ec-49eb-9607-d68d5ec3f001", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cd4be6-31f4-43af-928b-e3e4017643be", "sighting_of_ref": "indicator--04b6835f-ac92-4751-b190-ba25bdff4ce5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb6c984-dc5d-4cd9-8973-214b4bc0d73f", "sighting_of_ref": "indicator--7ab19b2d-b2fe-472a-9515-8024a5a56b33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae090b9-40ee-4cd1-ade1-c930d853d8ba", "sighting_of_ref": "indicator--e66c2016-2615-4181-9a65-9dffb6345e2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b76acc9-760d-4251-8b99-7f79f3ac1acf", "sighting_of_ref": "indicator--738185b1-fe7a-49f7-8c92-2933ffd41b59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8f9d8f-5b54-4c04-b271-86d3fdfc5636", "sighting_of_ref": "indicator--b5d94d95-7bdf-4d6f-b216-186a8d95aaaf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a753353-c171-48a9-bbb7-a1d974bace15", "sighting_of_ref": "indicator--f822dfcd-523e-41b4-b20f-0d4b67e18bf1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8cd7af-2268-4054-b57b-dbcff4fcfec3", "sighting_of_ref": "indicator--d5e1f0dd-9445-44ad-a490-cc2d497c81b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920dffd6-f697-45f9-b208-86b301d4716a", "sighting_of_ref": "indicator--fdf45c4c-d1cd-4fc6-a01f-2abda3e4ca30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e399fb-8249-4557-a57f-bcaa2f3dddc9", "sighting_of_ref": "indicator--649195e6-bd6d-494c-8472-e304007fa0d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02653f8f-02b5-4086-bea5-984d68219cda", "sighting_of_ref": "indicator--22279797-ed55-468f-961c-f1944abd31e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcdbd9c-71a3-4179-b3b0-a8aea4d71961", "sighting_of_ref": "indicator--ac69a973-f4fc-48d6-80a2-b4d8a8699e54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca9667e-e43e-4ca2-a12d-dfb3bedb12f9", "sighting_of_ref": "indicator--1f3a20aa-2ac5-418f-b2a4-ab0001b0a224", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b96e71-a2d2-4929-9f31-251bb9ed3ad1", "sighting_of_ref": "indicator--5e824dc5-50a4-4764-a858-3153d777fc3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff59c71a-d685-4e03-bf94-d2794174ab9b", "sighting_of_ref": "indicator--2acc0762-c2fd-4bf1-a18f-b4c8ae7c5533", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b927ab82-fb34-4aa3-8431-df24fd52a95a", "sighting_of_ref": "indicator--8aaf4633-23a1-41ad-b602-beb21bc11fc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431b49c0-e66b-419b-b4d4-e2dcdef6ae73", "sighting_of_ref": "indicator--ac279ff7-ba08-4f7d-be5b-e68409206ec4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24ce951-f7f7-4880-88d2-b47a3bb2bf10", "sighting_of_ref": "indicator--a08b6927-5300-467e-951c-8de62c4f366b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ae5b00-0b69-4e4e-afe0-2d64872b6e17", "sighting_of_ref": "indicator--a921100a-aeb1-4c4b-bcf8-b85394be13f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d84b99-24e0-40b8-a295-06721a075ea4", "sighting_of_ref": "indicator--0874e1d0-b63a-4d19-afa1-5b48c4de0462", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1243775d-1531-4e59-b9f8-a7bc402ef949", "sighting_of_ref": "indicator--82e62747-61c6-4288-a0d2-6bcf9455eb6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41868ce5-6759-44e6-866a-5ecb37c8e0e6", "sighting_of_ref": "indicator--6321d3ad-adba-4108-99af-9d6a7a9d550a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a63a052-879d-40ed-a11b-c4cb71623142", "sighting_of_ref": "indicator--6321d3ad-adba-4108-99af-9d6a7a9d550a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a127e6-c52d-423b-a4b3-27e260d360df", "sighting_of_ref": "indicator--306f718b-a8f6-47be-a92c-0fd7fb53d2cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923059cd-7f1a-4c37-978b-2be1e451b325", "sighting_of_ref": "indicator--306f718b-a8f6-47be-a92c-0fd7fb53d2cd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec7567c-5b59-4119-874a-bdc604f470a8", "sighting_of_ref": "indicator--e1df5529-f2db-4f66-bf85-6ef9d6505cdf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18f41af-2c94-4890-90d4-a459cf09a0ed", "sighting_of_ref": "indicator--e1df5529-f2db-4f66-bf85-6ef9d6505cdf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30c8ecb-c759-4509-9364-463b2fd866f9", "sighting_of_ref": "indicator--3a4714cc-7054-4352-ae56-0c1ecb9be470", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87e0160-80ce-4999-b691-5f859d16b973", "sighting_of_ref": "indicator--3a4714cc-7054-4352-ae56-0c1ecb9be470", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7e07d6-5cab-4e97-be7d-e98bf5d4d380", "sighting_of_ref": "indicator--ca02838d-a5be-4152-9882-128c3823fd02", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9453ab7-d02b-41d9-ad91-9357d1b5cdbf", "sighting_of_ref": "indicator--ca02838d-a5be-4152-9882-128c3823fd02", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846a89ed-640b-46f4-baec-d727871c667b", "sighting_of_ref": "indicator--36ebfeea-52b5-44e7-8763-8cde1f97bbed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c06d88-64e5-429e-8dbe-7d2764b57970", "sighting_of_ref": "indicator--4190d319-bd45-4501-979e-17e56a20272a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86755787-000d-416a-b38c-05cc1748a6c2", "sighting_of_ref": "indicator--581fb7cf-041c-47f1-8b04-f5d5c4cb3cdc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7cf2b0-656e-4d20-8c7f-29e8f6565bec", "sighting_of_ref": "indicator--32d75bdf-d88c-44a0-87b6-855906a08ffe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9ad719-f7e1-4cc6-b0a0-b80894a1f559", "sighting_of_ref": "indicator--f0138362-6e5d-43c4-bed2-f90ff5c1b6eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef67270f-4514-468a-8aea-b2af80911787", "sighting_of_ref": "indicator--3092acfb-b437-4149-849d-3b2c9193677d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3a870e-a615-45dc-bf1f-63e0fa9b6f73", "sighting_of_ref": "indicator--9863d10a-a1c6-4cf6-8324-78c3b0a7b9be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18b66d3-d4c3-4128-b9c9-82936bc537df", "sighting_of_ref": "indicator--2635e67c-211c-45d9-a12a-bf36ba33a0f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91f5679-a035-4d36-a8f6-16ec658c173c", "sighting_of_ref": "indicator--2635e67c-211c-45d9-a12a-bf36ba33a0f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84be6c58-7113-40d3-a83d-24eb820e5b7d", "sighting_of_ref": "indicator--5e88f4a9-4dad-48f5-a14f-c942f0ec6d17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9c297a-f418-41af-b6ee-84672653c5ac", "sighting_of_ref": "indicator--0ff1a28f-a955-4754-a4dc-284c613b73fd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323ed610-8c9f-42cc-930f-140191b9e7ec", "sighting_of_ref": "indicator--867e6188-52a7-4e12-851c-1f152765bc3d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0be033d-3b05-40cf-bd61-a41cd81b079b", "sighting_of_ref": "indicator--867e6188-52a7-4e12-851c-1f152765bc3d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7326aa9d-2b4b-43b8-be7b-e2884b9bfd5d", "sighting_of_ref": "indicator--5b2752e0-e767-42f4-b05c-e1df6a692572", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c22ee5c-bd11-4217-a8ac-e5ec36510782", "sighting_of_ref": "indicator--d3fceed4-d85f-4620-8e93-a2f2a538799f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6eb168-988b-4f93-ba0d-2b6c76776420", "sighting_of_ref": "indicator--1f3d1dd7-a28c-4b30-96e8-ffb253f98698", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2005faa-188e-470e-8eae-f647938ad29e", "sighting_of_ref": "indicator--a70c170b-a1fc-43c7-825b-23636e09810d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631a8eb9-ab5c-47b7-981d-f91b8fc814c2", "sighting_of_ref": "indicator--a70c170b-a1fc-43c7-825b-23636e09810d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce106e8-00b4-422c-84b4-adb0ad5a3c0e", "sighting_of_ref": "indicator--28480345-c3c9-48d2-b656-ad7c2976c6b0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378a9dff-e6e8-473e-b0dc-94a7e32fcc2f", "sighting_of_ref": "indicator--b56bf771-1141-4eb2-ae1e-0bbd04aba3ad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbe7f52-2284-4010-b8a0-e96df5fbf7e6", "sighting_of_ref": "indicator--92ea82c1-4f3e-4db7-9b96-b3c821d7dc7c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4036a7b3-3c31-4785-b3bb-8eaf5f64f650", "sighting_of_ref": "indicator--f93d84c0-0f36-48f4-ac54-249df6845050", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b41bc9-4ec2-4387-aff2-a4b9e868951c", "sighting_of_ref": "indicator--f3c14e33-f7d8-4aa6-98c9-49fc4c3df9a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a192eb10-3f7c-4363-b923-067e46b220d8", "sighting_of_ref": "indicator--bac15567-2211-4c65-88ad-e8bbd1862baf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed73200-49e8-463e-8502-146b4110d918", "sighting_of_ref": "indicator--bac15567-2211-4c65-88ad-e8bbd1862baf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71baa1d1-c49c-47ec-8027-0c599e2c4308", "sighting_of_ref": "indicator--78f55a2a-6f59-4109-873a-d31e8ff268f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480689da-00fa-4a9d-be5e-b18553b2afc1", "sighting_of_ref": "indicator--78f55a2a-6f59-4109-873a-d31e8ff268f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282c73c2-266d-462e-accb-35a8d6b0c6fe", "sighting_of_ref": "indicator--ae7b9100-ff2f-49b8-8ba9-8bf6704fc4c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5814e21-9487-499f-8a92-1e6d8a1c20bc", "sighting_of_ref": "indicator--ae7b9100-ff2f-49b8-8ba9-8bf6704fc4c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f3a777-ec93-4cbd-be3e-256463415ad2", "sighting_of_ref": "indicator--e9a60b6a-ec7f-471b-9be2-67d064b3d85b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095d95a3-3c69-4210-ae0f-a1200fab3e54", "sighting_of_ref": "indicator--e9a60b6a-ec7f-471b-9be2-67d064b3d85b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100f4a50-a6f3-483c-8e70-269e06cc8153", "sighting_of_ref": "indicator--e5cba40f-c264-4285-a5d2-2eb45639323a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bcc260-0f47-4a00-b660-8a3adc9bc8af", "sighting_of_ref": "indicator--e5cba40f-c264-4285-a5d2-2eb45639323a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367bc6a9-5743-44bf-8e67-9455eeffc4a9", "sighting_of_ref": "indicator--87a6edf0-6fbb-4f09-b389-176d212425b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0854087a-51af-4b5f-84a4-200b95e58ffa", "sighting_of_ref": "indicator--87a6edf0-6fbb-4f09-b389-176d212425b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e903537f-08d8-4a21-8d2e-8f5ef2a707f6", "sighting_of_ref": "indicator--5e78b260-57e0-45a9-9f4b-09215e29c33a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999c2933-c656-4809-bd17-e9016e94fbe9", "sighting_of_ref": "indicator--5e78b260-57e0-45a9-9f4b-09215e29c33a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557fbf54-c01f-4fcf-a171-e274448b977e", "sighting_of_ref": "indicator--f607eba8-de1b-462c-929a-118169d2ba28", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db17a016-dfc4-42ae-92c4-e1fae2d23c44", "sighting_of_ref": "indicator--f607eba8-de1b-462c-929a-118169d2ba28", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891b3803-83ad-48be-ab02-a09290158704", "sighting_of_ref": "indicator--827ed814-b471-49f0-a81b-23bb9f27d76f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84861c33-f4ef-4f21-a910-89820f3dcac2", "sighting_of_ref": "indicator--827ed814-b471-49f0-a81b-23bb9f27d76f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733133c8-3bbb-4d82-8614-b26b815f5ad7", "sighting_of_ref": "indicator--ff89b95b-ff80-474f-aa96-2a68f146141b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea5ac61-07ca-44c6-9370-1f6e8fddae78", "sighting_of_ref": "indicator--ff89b95b-ff80-474f-aa96-2a68f146141b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cf2701-81bc-4e19-8f39-d84046580146", "sighting_of_ref": "indicator--4af681ea-11b0-4d47-a499-49120d4059eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a29f19e-5465-4e71-a256-0982b153c54e", "sighting_of_ref": "indicator--75b55e25-41e2-4ad9-b760-f40674955141", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3cf200-152b-49ed-868f-7c2cb83fa5a5", "sighting_of_ref": "indicator--75b55e25-41e2-4ad9-b760-f40674955141", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01fd050-a968-41a4-b4ef-66f973088ddc", "sighting_of_ref": "indicator--3128c2e3-c925-40b1-a58c-48e67d2114e9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12b5dce-8d21-497c-9a52-6eb281b12d8b", "sighting_of_ref": "indicator--3128c2e3-c925-40b1-a58c-48e67d2114e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58709ed0-8ea2-4ccc-9c8a-faa6411927ee", "sighting_of_ref": "indicator--e8ccfff4-755b-4dfb-abb7-f2864fb8db2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6566ba-6536-41ca-9c96-7ada8a5ed4c8", "sighting_of_ref": "indicator--e8ccfff4-755b-4dfb-abb7-f2864fb8db2b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a337b4-f309-46a7-8e58-2b3214328219", "sighting_of_ref": "indicator--60059a28-e128-4375-8835-db2f1778d8fc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f933ccf-c01c-4f60-a959-6facb6d80389", "sighting_of_ref": "indicator--8d399837-c687-4e4e-88cc-fb58259aad62", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce68e17-6bb4-4c48-a0af-984ae674de5b", "sighting_of_ref": "indicator--56ded0a1-bf62-41c3-8cf0-4fb8b80d5ac2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1a745d-c83f-4e02-a9aa-08616e3f5845", "sighting_of_ref": "indicator--56ded0a1-bf62-41c3-8cf0-4fb8b80d5ac2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420a5398-cf75-40a2-b790-73befc87a5a2", "sighting_of_ref": "indicator--cb94245f-3a54-492b-8e8a-8fcbcc9f04cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184ff6bb-5bfd-40a8-bd56-3cae73fe5a45", "sighting_of_ref": "indicator--cb94245f-3a54-492b-8e8a-8fcbcc9f04cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76329b61-d50a-4aed-b848-7a9f50ad8ac5", "sighting_of_ref": "indicator--5a46051c-1e81-4e47-9ade-f3fad281fe5a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd163937-c7be-4927-aa5e-c9894a56be85", "sighting_of_ref": "indicator--5a46051c-1e81-4e47-9ade-f3fad281fe5a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46606343-fc4d-4f5c-9807-927519fdcef4", "sighting_of_ref": "indicator--897d961f-670f-40f4-82c2-922b634318d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df45f92e-a419-4abd-ba24-7b4e793a4159", "sighting_of_ref": "indicator--ff813751-7821-4086-8493-a5f3bda8ec17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17faebf-533e-4919-adb0-4de21ceb93d8", "sighting_of_ref": "indicator--c2a28d23-910c-4dfa-ad6b-d1c8b483af05", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf19f8a2-9592-4591-b8a4-4d34cb52cbf4", "sighting_of_ref": "indicator--c2a28d23-910c-4dfa-ad6b-d1c8b483af05", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57cdc8f-50ac-492d-84d8-d5a4557aea9a", "sighting_of_ref": "indicator--ddb6be61-6066-4168-bf00-df73bc2dc7c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b144f77-706f-4135-9379-66c2d634272b", "sighting_of_ref": "indicator--ed9b149a-5c1f-4eb2-9586-8a173de63877", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc574a80-0ffe-44a5-9b49-398d940bf0b9", "sighting_of_ref": "indicator--ed9b149a-5c1f-4eb2-9586-8a173de63877", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b08426-70cc-4dae-a19b-09ff53d2c9bd", "sighting_of_ref": "indicator--ed9b149a-5c1f-4eb2-9586-8a173de63877", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48e52e2-55a6-4dcb-9368-762f5ac25f50", "sighting_of_ref": "indicator--b4deb774-61da-423d-9f12-3949ac9578e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb021888-aa57-46e2-8cc5-58fcb56e98c1", "sighting_of_ref": "indicator--b4deb774-61da-423d-9f12-3949ac9578e8", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2231e05-9d80-4dcd-99a9-3c4727a79c6d", "sighting_of_ref": "indicator--b4deb774-61da-423d-9f12-3949ac9578e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0340e7f-f8bc-4d4f-84a5-85eba15e8994", "sighting_of_ref": "indicator--cd147187-5721-479e-bafe-24ba06480dd5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f93e955-dd3e-48d8-a61b-ee5ac5ade0df", "sighting_of_ref": "indicator--cd147187-5721-479e-bafe-24ba06480dd5", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162c3a14-d42f-41d1-8379-71303c6b52ea", "sighting_of_ref": "indicator--cd147187-5721-479e-bafe-24ba06480dd5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd8459c-ac36-4df6-b2da-d4bf816b8154", "sighting_of_ref": "indicator--09858eaf-05e9-47fb-8ea4-f51b335102a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214831a1-49a9-4cfa-85de-81552dc7dc82", "sighting_of_ref": "indicator--09858eaf-05e9-47fb-8ea4-f51b335102a9", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864c53c1-9300-4411-92fd-910754219e9a", "sighting_of_ref": "indicator--09858eaf-05e9-47fb-8ea4-f51b335102a9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeee9175-e466-4112-ab40-215274a6a0ba", "sighting_of_ref": "indicator--0a78bca2-1623-4756-bd88-bd636426c462", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f002fc-88b7-4ad8-ba4f-f21a8d4f73b9", "sighting_of_ref": "indicator--0a78bca2-1623-4756-bd88-bd636426c462", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ed7c5f-198c-4c60-a456-ef112ca6709e", "sighting_of_ref": "indicator--0a78bca2-1623-4756-bd88-bd636426c462", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6551ac-d8b8-41b6-8518-8110aedd1890", "sighting_of_ref": "indicator--98e39889-01e2-40f3-b956-14b9cc60afe7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ae62bf-64d0-4c21-8e82-8ba596f908d5", "sighting_of_ref": "indicator--98e39889-01e2-40f3-b956-14b9cc60afe7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefedf80-c800-4ec7-a6f9-249da14b004a", "sighting_of_ref": "indicator--b2ee5171-daa2-4136-b05e-2d18739ba08c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff51829-ea1e-46e5-bfb4-13d9fb41d8eb", "sighting_of_ref": "indicator--b2ee5171-daa2-4136-b05e-2d18739ba08c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f045ef53-c0f6-46c1-94d5-d63afe31fe8f", "sighting_of_ref": "indicator--c8f66f8e-cd0a-4a88-9583-25854d4b26c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadd9f15-d5ff-4d96-a691-23ad7c8f4b9f", "sighting_of_ref": "indicator--c8f66f8e-cd0a-4a88-9583-25854d4b26c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e903d7f-10e3-49eb-a9f0-b7200d0a969d", "sighting_of_ref": "indicator--bce90e37-09f8-4f9b-bcd7-6401a5c61fc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0517cede-205f-4ab9-b63a-cde3c850360d", "sighting_of_ref": "indicator--819e0349-ab2c-4239-85d8-a6cd493c56a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e06f117-6d4b-4bc5-9e58-53b0ccebb812", "sighting_of_ref": "indicator--819e0349-ab2c-4239-85d8-a6cd493c56a5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9570c1e-90f9-44a3-a1b8-8cd3b8827ef1", "sighting_of_ref": "indicator--3faf5892-60e2-4fd4-bc28-46b9461a8757", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb0a948-3aca-4fb2-9081-c155ba0d189b", "sighting_of_ref": "indicator--db578036-dbbf-4e9d-b5b7-63fc18756368", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b35af8-0cf3-441a-a2d0-74f1d93edbaf", "sighting_of_ref": "indicator--5e07e458-bcdb-4b54-803f-65a415a429bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29ee59d-8b57-4d68-b793-4fbf4e46bceb", "sighting_of_ref": "indicator--4585e5bb-01fa-4e02-83ee-888f2b44dc89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa36452-4629-43cf-9626-f59af4514529", "sighting_of_ref": "indicator--9afbe2c5-bda8-4e5b-8599-362623610aea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cb7b74-97f7-404e-8393-ac338d502700", "sighting_of_ref": "indicator--9afbe2c5-bda8-4e5b-8599-362623610aea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629b0839-fa99-4dee-858a-388a37624a91", "sighting_of_ref": "indicator--63710083-b197-46be-b49f-986cb243cab1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7eb167-8dfc-4d28-bd22-85690e21ac97", "sighting_of_ref": "indicator--44391888-92ff-45b6-88ad-df33aa5e906f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137bac5c-620b-47ed-897e-f3532a863f47", "sighting_of_ref": "indicator--44391888-92ff-45b6-88ad-df33aa5e906f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ad5a6b-014d-4389-9d3c-e67807fee57a", "sighting_of_ref": "indicator--e05430c7-8218-42e1-b089-d99313d4758c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccfae47-0fc1-43fc-b62a-96b887cacee2", "sighting_of_ref": "indicator--e05430c7-8218-42e1-b089-d99313d4758c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18b1225-3fa2-4dc2-bda1-32fd99be2b99", "sighting_of_ref": "indicator--4feb84c5-26ee-40b8-8472-00c933eb9a70", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059a6cec-3951-42fb-8e96-e3a437c3b768", "sighting_of_ref": "indicator--135eccb4-fe4b-4c55-9f2d-f1f3a6e714a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d0eb59-9ca9-4290-9713-6993aaf053b6", "sighting_of_ref": "indicator--102c0d67-309c-4aff-be79-50d46bd374d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951c396d-0e97-4549-93e6-16cf776d372f", "sighting_of_ref": "indicator--e8b7f976-e7f5-4f71-a05d-fd15fd506cec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afda620c-e761-4fe1-bbc0-24b0ff581558", "sighting_of_ref": "indicator--8a62c52b-26e9-491f-b289-d4b058b964aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8259e64-2360-46ae-8348-460bb5e85785", "sighting_of_ref": "indicator--1f9c180a-7f3f-4d00-a04a-152b8f1b3918", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d840b3-4ade-4b12-b48f-9bd71e785eba", "sighting_of_ref": "indicator--454fd822-bd24-482a-a2a9-8fce42c140ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6ad943-0b3d-4598-8025-cae6be024505", "sighting_of_ref": "indicator--39a6ea18-bfae-440e-becf-56e6e85726b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920d11fc-d6c1-4c96-96ed-adf3bdb8acd6", "sighting_of_ref": "indicator--70f9b7ad-9476-4428-a22b-1cc626fcb52d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9b6d7c-0de7-4a04-b7fa-da4236b010b3", "sighting_of_ref": "indicator--12f77253-08c3-4499-8d53-772267e6b5fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a503a9b9-6fdb-4aa7-872e-236e6e5bbbd1", "sighting_of_ref": "indicator--6e8a9090-0612-4488-ab1a-596f466b8fe6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ef014c-43a9-400a-8656-b7d7127cdb5f", "sighting_of_ref": "indicator--95c611a4-c3da-4d52-be2c-d5d1e07a6ccb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f05a64-4163-425e-a07b-4dfb1160e545", "sighting_of_ref": "indicator--2ea03890-7bfa-4a8c-a9f3-8b0cea370bde", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfa5009-20eb-4a54-b776-f4971b50774b", "sighting_of_ref": "indicator--2ea03890-7bfa-4a8c-a9f3-8b0cea370bde", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2318ebc4-8942-4b84-99ca-d3b3f08d3b8f", "sighting_of_ref": "indicator--cd977512-57c9-46e4-9a99-d52f04bad4aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7340f503-a325-4973-bf0f-6bc0adf13736", "sighting_of_ref": "indicator--32278da3-0d1c-44a0-8c08-84b3a104da1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515818b3-4dd6-4e5f-855d-03f13bd227b6", "sighting_of_ref": "indicator--efe7bb0e-dfb2-4632-8693-c73025d03a51", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfaba2fa-3784-49ab-aaa9-31d3fe368379", "sighting_of_ref": "indicator--dfbe8dfb-3e54-4af3-b0a1-a2cb594e8a78", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d4963c-1c09-4c91-b2d3-81fc5a823022", "sighting_of_ref": "indicator--826d23bd-2d7a-42cf-a296-fee3173d7a96", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b380c40a-5c60-482c-9b70-1abe6663a83e", "sighting_of_ref": "indicator--91af0b0c-26b8-4f24-9e7e-c29405fc8d50", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e042fc70-11cb-4b94-af6c-ae3023d538ea", "sighting_of_ref": "indicator--7d5538eb-f33d-4fb4-b38e-1d66583e281f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689f730d-3523-46a4-ab7b-9880b9e0a295", "sighting_of_ref": "indicator--9b71d16d-0fb9-4213-86cd-c70e6d725901", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003c35b2-404a-4d77-aa9a-5592a397107d", "sighting_of_ref": "indicator--9383bab2-855d-49ba-b578-52c5f3b0102e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ad177f-b39f-4a8e-bea9-e31c980e42cd", "sighting_of_ref": "indicator--f2e5fb70-03ab-494e-93ad-7fb67ff32b5f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedb89b5-40ae-4792-b717-9f39f4843d0e", "sighting_of_ref": "indicator--06db0e2c-c4e2-4ad0-a811-a065452c2294", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3987c37a-cf47-4548-aa75-ba88e234318f", "sighting_of_ref": "indicator--49ceee6b-cb7f-4f6f-b0fe-325d1fe14c5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4483dcb9-4241-4b97-9754-1284f1a4dddd", "sighting_of_ref": "indicator--a8bc0441-9f10-4f1b-8608-a6fcbb8a2cf4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081a6df7-8d0e-43b4-bd10-099eaf2d3bac", "sighting_of_ref": "indicator--b852ee89-865e-48bb-9635-38e3800184e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab8fdff-55e0-4543-8cdd-18d8065aecd9", "sighting_of_ref": "indicator--e459213f-57d2-403c-925d-a3f29b84914a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3ca399-4f17-46f9-bacf-f6bdce475f08", "sighting_of_ref": "indicator--2febff98-2fee-48e1-8718-569ed096cbf2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eec36eb-84dd-4856-9c85-056cb5dc719f", "sighting_of_ref": "indicator--ef03761a-bee6-4682-89a4-11b18480fe95", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05c3250-ff5e-4db0-bfbb-49361e1a3655", "sighting_of_ref": "indicator--ef03761a-bee6-4682-89a4-11b18480fe95", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80b57f3-09bc-4e3c-9663-4c22d655696d", "sighting_of_ref": "indicator--1948dcb3-0333-4204-bbcf-566dcea71ff4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e59134f-a35e-4c7c-be63-6e418376b557", "sighting_of_ref": "indicator--1948dcb3-0333-4204-bbcf-566dcea71ff4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9720dc3-20b5-4a70-9755-ab415df093eb", "sighting_of_ref": "indicator--cc3f3d15-f37c-4a5c-9144-16803d5ff78d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1588f092-9894-4d4c-bdcc-93c4e0256833", "sighting_of_ref": "indicator--d9c47b7f-60d5-4516-be17-cd47b8733701", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0ca531-f3af-4786-8eee-2882db3a9d14", "sighting_of_ref": "indicator--1640f056-d44e-43e6-bb7c-ba093c1c11ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bb1dd8-095e-4c7c-a144-61af7e5df029", "sighting_of_ref": "indicator--c065f8cb-13da-4a49-aa60-3c90a3c1a9c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7befd0-2ac5-43de-88f3-ee7559022d54", "sighting_of_ref": "indicator--e084fcdf-1966-48b2-8ac1-d36906749369", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ab268b-c73d-4cb8-b190-35d2aa4222a3", "sighting_of_ref": "indicator--eb8f6ba3-2437-4d20-a6c8-9381ca2ff95b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91111d88-b209-48ce-90ee-d191abb51b9c", "sighting_of_ref": "indicator--72c5bcb2-e1c9-4484-b8ae-851c3a151e9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47aa931a-1505-43d8-8c65-dba49adc8e21", "sighting_of_ref": "indicator--72c5bcb2-e1c9-4484-b8ae-851c3a151e9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bb889d-20c8-4ca4-8312-c24513b9a267", "sighting_of_ref": "indicator--f54f8ed5-b978-4eb8-97bd-0d2e6d066c57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ca855a-45a8-4098-b636-297057b9f551", "sighting_of_ref": "indicator--1610b554-de94-43c7-a796-9fd881f1c9c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d9209c-fbe6-478e-91f2-d345db36d0da", "sighting_of_ref": "indicator--2846d258-3072-4414-bc8c-7eb750eacd61", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4bfb7e-9571-488e-bc77-30a8268310d4", "sighting_of_ref": "indicator--e06141e5-049a-456c-8248-ce115d679078", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c076c787-7593-424e-824d-82da54cee5a3", "sighting_of_ref": "indicator--3e64906a-cdad-4e0e-b398-dcce62686025", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715658ab-f27d-4386-b003-413e9af6c87c", "sighting_of_ref": "indicator--7669ea52-3c31-4180-b19d-1e3ead9d43ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e2c5c7-c56a-45dd-b659-f4d03c56cc95", "sighting_of_ref": "indicator--fb47089a-308f-467b-807f-0638678aadef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef06aea-2d95-46ab-b0d4-3195fe4a0a1d", "sighting_of_ref": "indicator--fb47089a-308f-467b-807f-0638678aadef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5955345-36cf-4833-9564-d9c332c8ea60", "sighting_of_ref": "indicator--bb834bb6-6170-415a-ae86-c6b6da6997a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142cb413-3b93-4951-b2d0-b8d724250df3", "sighting_of_ref": "indicator--bb834bb6-6170-415a-ae86-c6b6da6997a6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c65086-4568-4770-bbfc-683f40433104", "sighting_of_ref": "indicator--e3791b66-8cce-405a-8734-1620a909f6ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b19ae05-7f25-4445-a218-b1a8db25ca9c", "sighting_of_ref": "indicator--a40fd170-1e02-4a31-b644-13eecdeb99f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0957334-c94e-4939-ac66-89fa72954093", "sighting_of_ref": "indicator--8963ac0d-9f99-4729-8522-7cca8b62fb40", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218033d9-e836-4fad-b93a-bbcd4e9a323b", "sighting_of_ref": "indicator--73154f8d-47f1-4357-820c-bdc475c31621", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5fe619-e28a-4294-9103-637cb1c96736", "sighting_of_ref": "indicator--73154f8d-47f1-4357-820c-bdc475c31621", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3630bc9-bc4a-486e-bdda-9ef097960fcd", "sighting_of_ref": "indicator--6e7ccc18-9fad-46ee-9db4-43be1abead9d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f14956d-6595-4ccb-8fbb-2d906e069c6d", "sighting_of_ref": "indicator--bfe91f05-d68d-48c2-9b34-d783ee914b4e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a5729d-a4bd-48fc-a705-1550380dbb23", "sighting_of_ref": "indicator--0c3e351a-d627-4460-a646-b1c2ebdf9a53", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fd1541-fcb4-4e5f-8de1-e39749f8c0eb", "sighting_of_ref": "indicator--0c3e351a-d627-4460-a646-b1c2ebdf9a53", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2123131-a32c-40e7-bc64-ac0261fc5c36", "sighting_of_ref": "indicator--cf1a1b5e-a918-42d2-b862-17159e41d162", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a030a9f-b4f8-40e5-b92a-ca05f223413a", "sighting_of_ref": "indicator--f82f806f-6d93-4617-9ab9-6e566eed34d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89921f40-4d72-4238-8a97-4d2a0ea24619", "sighting_of_ref": "indicator--a8b807ef-05ae-4bbf-9410-ddeea5aecf87", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91aaaf2c-c115-40a1-a8c3-c7863462412d", "sighting_of_ref": "indicator--086baf6e-9e23-44ad-b931-12a4a0399d1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f849884-5701-4eec-97fc-0d11d5a9a647", "sighting_of_ref": "indicator--3a3f0ac4-6379-40f0-8f3e-026d7d3016e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7525e9d7-9ceb-4686-a49c-c863183683d0", "sighting_of_ref": "indicator--b0c82dbe-bb38-4132-af35-e9c25d9a2c36", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bbdc0d-06ea-4ce6-a368-fad3b802bd6f", "sighting_of_ref": "indicator--23a49dfd-ff35-4cda-b81c-2089c98e5fa7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532fc3c3-29c4-4ff5-8dd8-e82151f50785", "sighting_of_ref": "indicator--24b2ca59-95f3-4847-b117-d7aba37d995d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb4e76e-f6f8-441e-ad35-c46fe723ef19", "sighting_of_ref": "indicator--24b2ca59-95f3-4847-b117-d7aba37d995d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034b056b-3a15-4969-8c00-8b61701b81ef", "sighting_of_ref": "indicator--1a5e9fb2-124b-4590-b0e9-73e45aa2fb17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e09aeda-ac8d-4e1a-aa87-4e55324e710c", "sighting_of_ref": "indicator--1a5e9fb2-124b-4590-b0e9-73e45aa2fb17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5145bf5f-9929-4312-a978-b1a3a3eb5eb2", "sighting_of_ref": "indicator--1413c596-48d8-46c8-ae7e-1bfef5b4a816", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6e9d01-b6be-459e-91c3-aec69ab407d6", "sighting_of_ref": "indicator--1413c596-48d8-46c8-ae7e-1bfef5b4a816", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e938c2e-f488-4019-9c74-10e3cc57183d", "sighting_of_ref": "indicator--6665246f-6466-43dc-acf7-bdabd64b80d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1297683f-d38f-4db5-b07b-54eab49d2ff2", "sighting_of_ref": "indicator--6665246f-6466-43dc-acf7-bdabd64b80d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d554ba27-46b3-4599-888b-af4386c3bdf0", "sighting_of_ref": "indicator--29f96496-09b3-468e-98ea-e1dd9f0e22cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cbb387-d162-4767-8d96-d52038886e3b", "sighting_of_ref": "indicator--29f96496-09b3-468e-98ea-e1dd9f0e22cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fac597-81a9-4497-b1ae-6a63b58f9d92", "sighting_of_ref": "indicator--9ffcbbde-4175-44e6-930d-3deeb9baeb2f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d14da6-1976-4c52-875d-5e00a71b9f10", "sighting_of_ref": "indicator--c7850e2b-575a-4f2f-a673-1f978ccea79f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a11705-bc1f-49f5-9e3a-9ca65c81cc60", "sighting_of_ref": "indicator--3e0a7c4e-2317-498b-8f38-45c4a2d8cbdf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e7a029-8fab-417a-a669-23580c339c41", "sighting_of_ref": "indicator--d863edbb-1b5b-49f3-ade1-863f271ad776", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d20386-80a6-46bd-b41c-536cca0767a0", "sighting_of_ref": "indicator--f9f85bb1-7cae-4f26-bb1c-97865d391b25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec31db63-fd53-49a9-babd-f6010e8da491", "sighting_of_ref": "indicator--f9f85bb1-7cae-4f26-bb1c-97865d391b25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247b6887-7b5a-455b-a6ae-ba622e8842f4", "sighting_of_ref": "indicator--d69414e9-155d-4ad8-8bca-a8adcfcb3c54", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573d6dd1-ab7c-4596-b512-adf807e6b0ee", "sighting_of_ref": "indicator--d69414e9-155d-4ad8-8bca-a8adcfcb3c54", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d94aa9a-572b-4ac4-b177-567df55d86a5", "sighting_of_ref": "indicator--3ba2b92a-fa13-480b-96e3-b7406ee4688d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8d691f-c35f-4899-ba7a-bd85f1957a70", "sighting_of_ref": "indicator--3ba2b92a-fa13-480b-96e3-b7406ee4688d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e04b50c-e722-49f6-9f9d-32a11d39ce79", "sighting_of_ref": "indicator--1cc531ff-1a40-494f-93cd-22770a34ce36", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64157b1-4fa9-4c1e-90de-e9577f83dc9f", "sighting_of_ref": "indicator--1cc531ff-1a40-494f-93cd-22770a34ce36", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba35ab31-839b-473a-ba70-68076d032e50", "sighting_of_ref": "indicator--0ddb8cf7-d301-464c-acb0-1c2cbef4cf11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11647ac0-0ef0-4c85-9399-a1423d565dc9", "sighting_of_ref": "indicator--0ddb8cf7-d301-464c-acb0-1c2cbef4cf11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca87caa-43b2-4db3-a5c9-e9cf10302de9", "sighting_of_ref": "indicator--df5ef943-20af-4ac2-9dc1-4053e6f95126", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ba23ff-7c44-4351-84d1-ad0433c2f56c", "sighting_of_ref": "indicator--df5ef943-20af-4ac2-9dc1-4053e6f95126", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5990b8c7-d0dc-4446-b64f-4767328884e4", "sighting_of_ref": "indicator--dcac787f-5f5d-4065-b56d-fff8d5828d6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d4b128-b580-46fd-991a-ba96da1a2784", "sighting_of_ref": "indicator--dcac787f-5f5d-4065-b56d-fff8d5828d6e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fca58c0-d923-4cd4-85e7-caa472340d42", "sighting_of_ref": "indicator--dcac787f-5f5d-4065-b56d-fff8d5828d6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd57fbda-da5f-4c8f-9d1e-3cbe82bbb696", "sighting_of_ref": "indicator--89344730-97af-4365-9a7a-59830d97a3a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdc9242-10d0-4e8e-a326-44a88932019d", "sighting_of_ref": "indicator--89344730-97af-4365-9a7a-59830d97a3a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787e9107-f1d3-49db-b8d2-2328c170f33b", "sighting_of_ref": "indicator--889db226-2e22-4b46-9ed5-0e1586022240", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf16c86-cc47-4764-8ebd-e4ca9bdb6856", "sighting_of_ref": "indicator--889db226-2e22-4b46-9ed5-0e1586022240", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95d94d0-bd75-4a1c-aadb-ea0d8c262c4c", "sighting_of_ref": "indicator--4d5ad2fd-3d9f-4ef1-830e-520ee60e355b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c0258b-a791-437f-966a-3904d5202ea1", "sighting_of_ref": "indicator--4d5ad2fd-3d9f-4ef1-830e-520ee60e355b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f987d352-567b-424e-be16-5de1771896e2", "sighting_of_ref": "indicator--b03db292-967d-42bd-9d60-e84c8664abe1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ef96e1-bc9a-45ff-b7f6-ee88b6d8fb0d", "sighting_of_ref": "indicator--b03db292-967d-42bd-9d60-e84c8664abe1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ca8fb2-f68b-4b45-b969-9cdc5b096213", "sighting_of_ref": "indicator--d737c5c4-44a7-4cb4-aa6a-ea7e6e00fcf6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8676a5a6-6306-49cc-baec-64aa0e569293", "sighting_of_ref": "indicator--d737c5c4-44a7-4cb4-aa6a-ea7e6e00fcf6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754c8322-f568-4518-9e5d-d07a4b051995", "sighting_of_ref": "indicator--ff1ecebd-f8ef-4b24-8c22-152b2038ee0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8684e869-aace-4206-9763-093196810d73", "sighting_of_ref": "indicator--ff1ecebd-f8ef-4b24-8c22-152b2038ee0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead384d9-46e9-41ba-a8b5-433cce729107", "sighting_of_ref": "indicator--fc13c639-d4bb-4f1e-880e-4552de261c5b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559f87bb-050b-4c49-b581-05c8af9694ad", "sighting_of_ref": "indicator--fc13c639-d4bb-4f1e-880e-4552de261c5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900f4f60-bec8-40c9-a710-9ffa9c44d381", "sighting_of_ref": "indicator--469cf5d6-68b8-46a1-a91f-4b05ef39a9ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869b0755-d4f9-4b53-a597-d057f6958e39", "sighting_of_ref": "indicator--469cf5d6-68b8-46a1-a91f-4b05ef39a9ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b150e00-bb8c-4952-b218-8d0f0417bac9", "sighting_of_ref": "indicator--bfef0194-73c0-4f88-9ad6-2b0dea496f19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6260e35c-4378-42d2-8d41-61404dd9b707", "sighting_of_ref": "indicator--bfef0194-73c0-4f88-9ad6-2b0dea496f19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d9336a-8789-4be2-ba5e-5cfdbda73357", "sighting_of_ref": "indicator--eef4e0a3-cf57-4520-9211-84c9308c6994", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52bac1e-9c04-4cd1-84a5-26831c97fee5", "sighting_of_ref": "indicator--eef4e0a3-cf57-4520-9211-84c9308c6994", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d5c593-e92a-439e-b0f1-e5483902c210", "sighting_of_ref": "indicator--67e7f6fe-9b5d-4bd5-bd7f-742f4476be20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584e021e-f965-4aef-9a59-87e6921250d5", "sighting_of_ref": "indicator--a0da58e8-c2a8-496c-9242-9bf30ebff30f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abcf455-bc06-4c4e-b1ba-9e719a45543f", "sighting_of_ref": "indicator--c8f9aa5c-87d6-4727-847b-155225f0d359", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7a3e9e-33dc-40d8-828f-5e5661432eed", "sighting_of_ref": "indicator--c8f9aa5c-87d6-4727-847b-155225f0d359", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220f8c81-db19-49a8-8090-f98f4899379f", "sighting_of_ref": "indicator--9ddbcf52-abc8-486f-84ed-5e854f5d3c9b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0823c690-de21-4a4b-b5c5-a465bb9ea3ff", "sighting_of_ref": "indicator--9ddbcf52-abc8-486f-84ed-5e854f5d3c9b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c0139d-6bdc-411d-9295-cab7413d3c5f", "sighting_of_ref": "indicator--dc48b6f6-10e9-4036-9e5b-aa1adbbc910b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e102867-f654-46e6-aab5-cd514f61ccbb", "sighting_of_ref": "indicator--8deff629-3a10-4d41-80b7-8911f95b03cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afe8df6-29fa-4eeb-abe9-674a9838f322", "sighting_of_ref": "indicator--ae518dd4-4970-482e-9118-f48a5b4c6ea5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9baee0-1200-4791-8103-a27571efcb8b", "sighting_of_ref": "indicator--ae518dd4-4970-482e-9118-f48a5b4c6ea5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63df7c97-be9b-4622-bcc5-fc840f18f7e7", "sighting_of_ref": "indicator--8bf7e9c5-2253-4b61-a9d8-81b28b7a858f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9c8f2e-fea6-47b8-b263-fc5361223903", "sighting_of_ref": "indicator--246ca7a0-4484-4ada-95a9-69b8f7592fec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534143be-4828-4f92-b5be-1ba5a8c87eab", "sighting_of_ref": "indicator--668dfbc0-df8d-4fc5-956a-d5bea6d34b91", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f08811e-cbd8-434d-8f1b-f5cc80660025", "sighting_of_ref": "indicator--615640b8-2415-4f04-b8d2-f822d4c2ffee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e96516-a8db-46d5-a537-fd2d03df5ba1", "sighting_of_ref": "indicator--f51dab40-869d-4d06-84f3-bd9e7e97d6ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a11c24b-b44c-408b-a923-ef5f44e75f50", "sighting_of_ref": "indicator--f51dab40-869d-4d06-84f3-bd9e7e97d6ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12071d23-99e2-41bc-b0d2-fb426e37fa02", "sighting_of_ref": "indicator--e34d340a-74fb-4c6b-8300-845aac19479c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667ac42b-6008-4889-ae32-84c6fa8d41e1", "sighting_of_ref": "indicator--49a7d76c-0c5c-4ea1-a543-777b6b7115a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01f2e95-9245-44ee-b1de-933f1525bc22", "sighting_of_ref": "indicator--d9358bf7-d67e-4f0c-b171-5ec572e5bfa5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803c7c47-bb88-4a07-a681-cee763f30835", "sighting_of_ref": "indicator--146b566e-df42-4a6d-ae89-23eaf9ebe1cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2520a00c-5631-4406-9a0f-0a3c0e53a2ee", "sighting_of_ref": "indicator--3cbb0bde-0f4a-4a7b-bea9-e358b93c00e9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1379236e-e16c-4710-95b8-27337467f5c4", "sighting_of_ref": "indicator--3cbb0bde-0f4a-4a7b-bea9-e358b93c00e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bdf245-28af-4cee-8948-d6d4c76c89a8", "sighting_of_ref": "indicator--2fc6b087-7e6f-460d-856b-55243a71d646", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc99da4-7db7-46f1-a205-bd8a9cfe6d5a", "sighting_of_ref": "indicator--93a37ea0-2d40-4d70-b753-3dc1af01f8c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad43a75b-912e-4b9f-8692-8316748ce8b9", "sighting_of_ref": "indicator--93a37ea0-2d40-4d70-b753-3dc1af01f8c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c860443-2c58-4974-ba84-cbad184910bf", "sighting_of_ref": "indicator--9bca2315-0989-471c-aa2a-7f88f83561ad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b462b0f2-12e9-4b7d-b117-9576d67c35c6", "sighting_of_ref": "indicator--dd4000d8-3fac-4339-8460-f6e9280280f7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7269f761-dc0a-4930-bc2b-7fe21d4b13ad", "sighting_of_ref": "indicator--dd4000d8-3fac-4339-8460-f6e9280280f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f51e57-55ef-44fd-97f0-2c6af6635890", "sighting_of_ref": "indicator--6dca3060-ec3f-4fdf-a85e-2f37f2eac8dd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963bd7c9-ea10-4f2b-9c93-f54b0d17ddf3", "sighting_of_ref": "indicator--6dca3060-ec3f-4fdf-a85e-2f37f2eac8dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def8bea3-2fe0-4a74-9a2a-59b2daa796ec", "sighting_of_ref": "indicator--4aa0f565-8e8d-44bf-bc04-d0b9179bb16d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b114c5d-b562-4b9f-afdc-77259a09d430", "sighting_of_ref": "indicator--4aa0f565-8e8d-44bf-bc04-d0b9179bb16d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7498e20e-63d9-4d0c-9619-bb7062a6e7da", "sighting_of_ref": "indicator--bcc0b345-186d-4e17-addb-f2dd316366e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b9e65e-44dc-4b1f-8827-7e4811112371", "sighting_of_ref": "indicator--ee59dbd9-261c-4eec-88dd-2d07464af363", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129a662b-0fed-451b-87d9-d87648fc2393", "sighting_of_ref": "indicator--c5ccb254-16be-45ca-89c1-c6303e7a2f00", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968c9c2e-22de-45df-8a4f-98be8a4455f0", "sighting_of_ref": "indicator--38587196-1a43-4f01-82cb-31e81f8c630e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d542952a-7334-43ee-b494-ca6bffddbe39", "sighting_of_ref": "indicator--38587196-1a43-4f01-82cb-31e81f8c630e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee5a9e7-fdcd-4424-96a7-a88b0a3b0973", "sighting_of_ref": "indicator--19544e59-473d-4853-abd6-ba9e35ff5a8c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796d7a26-978f-45ec-a561-6d958900f1a2", "sighting_of_ref": "indicator--19544e59-473d-4853-abd6-ba9e35ff5a8c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11e55bf-0130-43e9-8f9b-a548accbf070", "sighting_of_ref": "indicator--7ec9905f-b2d1-41e7-8a48-bdfbec186983", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547421e8-53fe-4aaf-97e6-abb86c125cfd", "sighting_of_ref": "indicator--7ec9905f-b2d1-41e7-8a48-bdfbec186983", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6c6918-c598-4ada-bedb-6f3052cc5cb9", "sighting_of_ref": "indicator--728b6c57-f4f7-4522-9e7d-612b039a2a57", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39de2876-af9f-431e-9c8f-7c8662cb3e59", "sighting_of_ref": "indicator--4d825fb2-fde0-4001-819d-99231cdc6407", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af76b385-de30-4291-9c8b-f3c98bbcf756", "sighting_of_ref": "indicator--e274e7bc-bf2d-4638-a623-fe093de43fb4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d82ffa-7713-4069-9db9-a3e63c09b9b5", "sighting_of_ref": "indicator--a25bbf2a-2dc8-4807-b821-921019e05629", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a711bc90-9902-4dc7-bba2-0d3025cf4686", "sighting_of_ref": "indicator--817c80c7-5dbc-41ba-afaa-e0fc1ef3d69c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b237773b-565a-4c28-906c-6cd2f4938d82", "sighting_of_ref": "indicator--33329a2e-77ea-4dff-8c9d-e049d727c7b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4a56d2-c3b5-4bdd-b73e-862b68efbbfc", "sighting_of_ref": "indicator--35cf1da7-c61a-4172-bc31-2cc837d06698", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cffa69-2ef4-4c64-a0f3-a882e1742f38", "sighting_of_ref": "indicator--35cf1da7-c61a-4172-bc31-2cc837d06698", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa60fb9-1ee3-46f0-b229-b56207bbd31b", "sighting_of_ref": "indicator--cc230e7e-d7a1-4fa7-87eb-498c60f7031d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace5d8dd-8962-42cc-ab4a-98fe3c4c8ed6", "sighting_of_ref": "indicator--cc230e7e-d7a1-4fa7-87eb-498c60f7031d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c0c74a-d002-4d86-8346-2318c7fd2658", "sighting_of_ref": "indicator--53cdc302-b086-4ff1-bc74-1e22d194d940", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54757243-d494-40e8-9b37-04b10f055732", "sighting_of_ref": "indicator--027723dc-6e00-4413-b2ec-658444626f20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7240764f-c78d-4f53-8bb0-11eb7ef814d2", "sighting_of_ref": "indicator--b7ff8094-8d2c-414d-b1aa-ce3c2f1e0c36", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51789484-1223-4fd0-9a5e-c416e72fafe2", "sighting_of_ref": "indicator--b7ff8094-8d2c-414d-b1aa-ce3c2f1e0c36", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ad6c83-e853-4413-a93b-1ddf276df11f", "sighting_of_ref": "indicator--a25eda89-ee4e-49ac-8a3e-d46ba1d85af3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21759b64-0a56-4b70-be07-2e85470f6632", "sighting_of_ref": "indicator--910ba0a4-7fd9-488b-b361-ea0acc578cf7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a05eb2a-2a2c-4935-9eb9-3ba1e9ed2c77", "sighting_of_ref": "indicator--910ba0a4-7fd9-488b-b361-ea0acc578cf7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8695be06-5575-45bc-9a6b-affaf254f9bb", "sighting_of_ref": "indicator--a1fae24c-a148-4b23-a141-8e424c85e4dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5228b0-2615-4a08-9810-a6e7560839ff", "sighting_of_ref": "indicator--a1fae24c-a148-4b23-a141-8e424c85e4dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a07734-3206-4357-90ac-7ea3a516fb66", "sighting_of_ref": "indicator--f738cd06-fe90-40ff-aaa0-febf0b3e68a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f822a9-bbe5-4f4d-9bb9-33c0f8dfb1f5", "sighting_of_ref": "indicator--924b2892-3120-4712-b63d-ed87f239a494", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502c6c7f-0f5c-43eb-a05d-a283fd0e6ca3", "sighting_of_ref": "indicator--924b2892-3120-4712-b63d-ed87f239a494", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a088734-4a7a-4663-accc-63568f6c5e7c", "sighting_of_ref": "indicator--1d4aee0b-5a54-4d7e-823f-3dca2743f370", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664a1f31-c7ce-4f5f-a6ea-842dac8e0201", "sighting_of_ref": "indicator--1d4aee0b-5a54-4d7e-823f-3dca2743f370", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623d1496-5a65-4035-b903-8febff833899", "sighting_of_ref": "indicator--48e7828a-32dc-41ba-82f2-1766a35b0cf5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c44d1b-de0c-4bbd-839a-d83e80fa6d14", "sighting_of_ref": "indicator--48e7828a-32dc-41ba-82f2-1766a35b0cf5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fae018c-0e33-41ee-b727-467982766bbf", "sighting_of_ref": "indicator--7e7275e1-2209-4ef0-b094-39f5edae850e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb3831f-d1d9-4fa1-a13e-90a67a52f84b", "sighting_of_ref": "indicator--51b53702-d051-4d3c-a66c-8a3118d0fe00", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c49970-f46f-4814-8474-474522ea3c97", "sighting_of_ref": "indicator--16acc251-6970-417e-a123-0f0ccbcb08b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a343edc-a185-4774-8bf3-41eba9af5a00", "sighting_of_ref": "indicator--db46087e-ca68-4dce-b802-61755247af33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016eeaea-d998-4f35-a221-fb003b18a7fc", "sighting_of_ref": "indicator--9c67f2dc-cfbf-4f11-882b-2901122eeca4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6487d854-d33f-4bec-80e6-ce7d6a986032", "sighting_of_ref": "indicator--6cd5942c-3338-4af4-9a1f-4314ff6ad25d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef57176-a661-44f8-bbe5-2a68b7dd9cb5", "sighting_of_ref": "indicator--018efac0-92c3-492a-87eb-face68618fcf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404ca126-3a1e-4246-8a59-cb9ab0fa9dbf", "sighting_of_ref": "indicator--b373014c-3afb-49f5-a096-5972e5883023", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d517b6-b60b-475c-8bc9-26fd0414b91a", "sighting_of_ref": "indicator--1098c0a9-cd40-4829-beab-a395933af603", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119a536e-3335-4f5f-8e98-3f7f67e8aa08", "sighting_of_ref": "indicator--1098c0a9-cd40-4829-beab-a395933af603", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca1694a-ed2b-4033-83ec-044e35334580", "sighting_of_ref": "indicator--1081f555-3803-4399-970a-e6d0747b0c83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474093a9-8697-443f-a059-b6ac3a2e5a9c", "sighting_of_ref": "indicator--1081f555-3803-4399-970a-e6d0747b0c83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b49d12a-e137-4e1a-a743-a12784e10f65", "sighting_of_ref": "indicator--4ac5ab49-56dc-4423-98c6-22b26ea9c43f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106eb9cf-788b-4ee9-b14b-9cf69f897024", "sighting_of_ref": "indicator--199ae3e0-a45a-43ab-ad35-bb9d432eb694", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadd56ac-f925-486e-a3ec-854154fb3095", "sighting_of_ref": "indicator--b1e020ce-7a1a-4d28-8e0a-4dcacfdd219d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3adbb95-df0c-473c-ad46-f5135194d780", "sighting_of_ref": "indicator--d9c15061-5e5c-4424-8f38-1a621aa5f42e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290e8312-42be-4616-b151-eb01be02f8b4", "sighting_of_ref": "indicator--cc921da1-4633-4098-b1e1-84aa27536a06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a8fcbb-2820-453b-91dd-9683258c579c", "sighting_of_ref": "indicator--498e73ac-3d95-4f39-8b05-b323ade7a983", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7217bab-069c-4431-b4c1-34c948e996c2", "sighting_of_ref": "indicator--aa3b0e93-a6e3-4d6d-af5c-ec6e8d6a23e3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f32574-dfb0-445a-ab50-e5ad2f62ff69", "sighting_of_ref": "indicator--e213387b-ca02-439d-a7e7-25e1d1483ed8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c4c8fb-19ed-45cf-b455-977e13a8155e", "sighting_of_ref": "indicator--cd313520-446b-4264-b413-6a00cbd4bd39", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03822de1-746d-407c-b81d-0143c4631229", "sighting_of_ref": "indicator--d761d1b0-ca42-429a-aef5-97fe1432f88d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf0b6fc-a606-4727-8bca-8a643701c9ab", "sighting_of_ref": "indicator--10d8cbc3-8796-45c7-83a2-707caf5164d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1098d7-f214-4b93-a092-6ab8c9a9fa98", "sighting_of_ref": "indicator--aa11aff5-332a-453b-8d62-b1402d59dc08", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ced723-da83-43b9-b13e-5af40dd96bc2", "sighting_of_ref": "indicator--cdb4c1dc-c284-4e60-a4f1-2ce794903ac7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d322bcf1-5b16-468c-89b1-d6c5ecd8afe0", "sighting_of_ref": "indicator--2789270c-e5b1-4d65-a62c-b51f10954e99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74683429-7840-4e4f-ba83-e7de9ae0c571", "sighting_of_ref": "indicator--21366356-4691-4c89-b038-dec1e4484400", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a0c413-0e4b-457c-bd86-29e6c1806cfb", "sighting_of_ref": "indicator--2aa050f6-eda6-458a-bc35-633d6aa9f4bc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6cc659-d360-41d2-b9e0-a3bd9635c948", "sighting_of_ref": "indicator--93260fe5-5ad0-49b8-baeb-bdcea5b975d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbcee4c-8509-443c-9135-ec7c8cc37aa5", "sighting_of_ref": "indicator--ebf0f424-c60c-4e46-8a21-da47e7389f89", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bbba13-b952-496d-ab12-87bd120897c5", "sighting_of_ref": "indicator--888ec14d-f162-4eb3-8377-8dfbf6c50414", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919e2bc3-ee54-4f43-992f-48afd518dd7b", "sighting_of_ref": "indicator--9daf3e78-fcf7-4bfe-aa7a-c47c7622978a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff35d25-bacd-4c36-bdc7-abeb9083e3dc", "sighting_of_ref": "indicator--c84c870a-5428-4df3-8d64-72a860c15771", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfca3c5e-2769-4bbe-a6a0-dfa7e41bb993", "sighting_of_ref": "indicator--c84c870a-5428-4df3-8d64-72a860c15771", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742f95ed-deb2-463b-9181-8f8f2656d593", "sighting_of_ref": "indicator--15cd23a1-464c-4c3b-912b-a136f564b8ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef36ff5d-a80b-413c-9e84-518c74a35fe7", "sighting_of_ref": "indicator--361415f1-1387-4901-a011-15a70f17d097", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5313a0a1-08c0-4512-b511-5387ca40695a", "sighting_of_ref": "indicator--361415f1-1387-4901-a011-15a70f17d097", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72821166-cfa5-428b-b822-49afd465c16d", "sighting_of_ref": "indicator--582f15f8-9849-414a-895f-7a262507d316", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4fd474-82ac-4b5b-b972-5bebabb70d1b", "sighting_of_ref": "indicator--582f15f8-9849-414a-895f-7a262507d316", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100a1b26-6067-41be-bb18-ecc444a9aaa9", "sighting_of_ref": "indicator--ae96c190-79df-4638-91f2-291655f8845a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb0500c-7cc4-4147-8d58-5b74186a4cbf", "sighting_of_ref": "indicator--ae96c190-79df-4638-91f2-291655f8845a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa4ecee-9157-4be9-966d-79f1640afda0", "sighting_of_ref": "indicator--2f01d4c2-7a22-471d-ab75-d2b9d380c979", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47982e3-921a-4726-8a3d-66cb8efc45ef", "sighting_of_ref": "indicator--19644bee-130a-47f8-ac89-c1c3ce83a8cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec0153b-46ab-4690-a08b-ef83f08e086e", "sighting_of_ref": "indicator--66d685fc-99e0-49a5-857b-81df077f5786", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c0a395-8908-4771-b3ae-ce827a77689c", "sighting_of_ref": "indicator--66d685fc-99e0-49a5-857b-81df077f5786", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3080af71-5b65-40f8-8a08-ed69c51e058a", "sighting_of_ref": "indicator--10cf5946-5dae-40e6-a5bd-d5230fc5cb95", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14f18d5-1cf3-4379-a4a3-e8ac188cecb0", "sighting_of_ref": "indicator--513464f8-54aa-4527-a3cb-e8ca9f250f0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5c4c29-aab6-4fd6-9570-6526ab87c52d", "sighting_of_ref": "indicator--70c77893-19b0-4135-8eeb-d8b57eacecf7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5a31ba-046d-4750-96cd-b36dd38c0dd4", "sighting_of_ref": "indicator--83f8c7cf-8f3e-487d-93d6-ba770e604d71", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c58ab7-cdfb-43c0-a652-9dd1cfc90a2a", "sighting_of_ref": "indicator--12313751-40d5-4c19-ac32-5a07d93d8876", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26c8180-84ab-4c7f-9b78-303aa74ab7ae", "sighting_of_ref": "indicator--12313751-40d5-4c19-ac32-5a07d93d8876", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e9f1af-6523-422a-9bb9-9ff713269cb9", "sighting_of_ref": "indicator--f3a8bd4f-4187-46ae-8811-3df55a7ccb8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580cb92d-1741-488c-9b78-babbb3c2aec7", "sighting_of_ref": "indicator--f3a8bd4f-4187-46ae-8811-3df55a7ccb8f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc20247-a259-41b1-8b21-5e1d61088194", "sighting_of_ref": "indicator--3e467e90-2ad5-4689-8c0c-4c981906136b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e65419-ce77-4608-ad99-237375f5b36b", "sighting_of_ref": "indicator--3e467e90-2ad5-4689-8c0c-4c981906136b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21eb6db8-b818-438d-b5cc-7f5ce1e5ea01", "sighting_of_ref": "indicator--e9ba024f-883e-4e88-8657-b8d1efa8da96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4c5bdd-c523-498f-bf28-85b315c52f18", "sighting_of_ref": "indicator--e9ba024f-883e-4e88-8657-b8d1efa8da96", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6f9d7c-7f16-4cff-bb25-bcd4425b382f", "sighting_of_ref": "indicator--c08dc5a1-0379-412d-9e55-c638923c7e52", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43756b5f-9312-4990-b19a-9f929d05b136", "sighting_of_ref": "indicator--c08dc5a1-0379-412d-9e55-c638923c7e52", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19330070-cdaf-47f6-b331-bc2c6eedf8b4", "sighting_of_ref": "indicator--ef34473f-9604-4a02-beb5-1831b84c2a11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c31607-b7f2-4862-8080-55376f0173bd", "sighting_of_ref": "indicator--ef34473f-9604-4a02-beb5-1831b84c2a11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8e4d2a-3e1a-4475-8897-7360c45ceeb2", "sighting_of_ref": "indicator--c58f0970-a408-4879-8b93-2b06ce57608c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d29d40-36ed-410f-bbef-e1d9e5af717b", "sighting_of_ref": "indicator--840cad0c-2f48-4b03-b7db-2605afe3cca1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a849e4fd-ffd5-4021-9dec-feb9dc962cc0", "sighting_of_ref": "indicator--840cad0c-2f48-4b03-b7db-2605afe3cca1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4840c600-3e5b-4caa-8848-a931caec5a9c", "sighting_of_ref": "indicator--2e5de1b0-5c09-40a2-9a35-5ad4ee0242a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9987e39b-09a6-4171-a481-8c1b49e7f780", "sighting_of_ref": "indicator--43bcd9f3-8bef-44d4-8954-abee5efc4259", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1de5c31-cdc6-465e-8865-d13231c6d957", "sighting_of_ref": "indicator--9de41d9f-89fe-4d76-89a7-92f52391f541", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f27ab1-b202-491b-9e77-eb239900b5a3", "sighting_of_ref": "indicator--b2115099-5de9-466e-84b4-4e95d3bc0e91", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75a210c-27a1-44b4-ba01-d68bfb1f2442", "sighting_of_ref": "indicator--691f0fd6-87c8-456d-a133-fd931ab603b6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fef47c3-7500-4f69-bd39-57993e4acc14", "sighting_of_ref": "indicator--fdbb4ec7-ddb5-4ab8-abcd-54a9f7e757e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519443fc-250f-4519-9c88-2b507a6d134e", "sighting_of_ref": "indicator--4a28c543-0ac0-47f1-876e-dd0ecee4a360", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f92081-74b1-472c-bdd0-467c6861b456", "sighting_of_ref": "indicator--cad3cf9b-ecb2-44ed-851c-133ea77ad18d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8255a7-aea9-47cf-9cd9-46a28d076f88", "sighting_of_ref": "indicator--738c4609-26f1-41d9-8e09-52e991d6eb75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edfc23a-234d-4e7a-b191-aa64364beb90", "sighting_of_ref": "indicator--c088bb7d-f923-4b62-b0d2-331f3680ba70", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0551cd-3885-4888-b1fe-b1d74d24fd5c", "sighting_of_ref": "indicator--877fe050-9cd8-48ec-a7b3-aa6df1aa4b28", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56746fa-7c88-462b-a744-22bcf9a6f429", "sighting_of_ref": "indicator--ddef4301-4b28-4b0f-a7aa-fd02b670312c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98d25bb-e738-4fe9-af18-a3ae6f2963d5", "sighting_of_ref": "indicator--6a3caab3-8e94-4870-8858-ce95deb98cf2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc07c5b-3dac-4ce9-9359-b0fb83d882d8", "sighting_of_ref": "indicator--40e35de5-0ff0-4977-89bd-16eda12c33fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4dd32f-377f-4ea3-8574-ed0a55c1b24b", "sighting_of_ref": "indicator--0bac9277-228f-42c4-9960-d18128c7c76b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf913ae9-e222-4bc2-a0bf-60c5846deb08", "sighting_of_ref": "indicator--79bd23ba-9b84-4244-af62-22e3f77b5ac3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62924aa6-2ad7-4221-ac20-dd792789221b", "sighting_of_ref": "indicator--79bd23ba-9b84-4244-af62-22e3f77b5ac3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a58dc4b-538b-4437-bd35-e95e0de04a70", "sighting_of_ref": "indicator--6cc99e12-99cf-4599-ab0e-d0dd7b31aa24", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487b124d-1d94-4299-bf30-0b4d1a5e7327", "sighting_of_ref": "indicator--6cc99e12-99cf-4599-ab0e-d0dd7b31aa24", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4eadf5-baac-49af-8a23-de1c94f9c4c3", "sighting_of_ref": "indicator--48604410-9088-4d16-aa15-2f728d87a770", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732f8b31-93f1-41e1-8a1b-39c195044d80", "sighting_of_ref": "indicator--03f29100-f6fb-4b76-991d-59556ac48450", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d23c83-4feb-4aa2-a0d0-cd673896185f", "sighting_of_ref": "indicator--aec50ad1-f252-403d-b903-42b3e3be402f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68570bf7-c728-4965-b19b-90d58f552c62", "sighting_of_ref": "indicator--7a82f0ab-16c0-4ae3-b1ff-24e07711ea3d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7046e9e3-600a-413c-9c82-71ff08e4c31b", "sighting_of_ref": "indicator--ae46c5a1-f9ab-4fab-8b14-4e9083201c2c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc042006-25c9-419b-b753-2e5a51ba1edb", "sighting_of_ref": "indicator--81759039-2d86-406b-892a-9ab290e4039c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1a8932-b3a7-4f42-a2bf-5b3fa4a4b013", "sighting_of_ref": "indicator--b7e76dbf-8bf6-4685-821b-c6807e25ee43", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3898b3f-b897-4ec3-b5fb-3034fc386ad7", "sighting_of_ref": "indicator--e0d31b1c-b44b-4fc1-8b59-ce37216c4817", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ced5c0f-981a-4942-a3df-1ed48d873378", "sighting_of_ref": "indicator--5a987d17-bdcc-483d-a51f-dc9a5182d761", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b3aca8-3180-4f9d-b9c7-a230c18bdf10", "sighting_of_ref": "indicator--9a1c9bed-d726-45bf-a634-211f2fa07acb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945e0497-e9db-4aed-84db-477172a5fc92", "sighting_of_ref": "indicator--d7ccfa89-8a73-42dd-83ca-e50a227769fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019d844b-3e16-4948-a710-127650c1e773", "sighting_of_ref": "indicator--a6c9c01c-1d37-4c21-8e31-48f8d3baa802", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a292cb-de00-4506-aa64-804e02c2e588", "sighting_of_ref": "indicator--722e7d2d-8a36-4b6a-ae17-6b7613e5e8d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6444ad86-72f3-410c-88e9-99b4837c2304", "sighting_of_ref": "indicator--bac79272-6b1d-42ed-8b8b-8b2e781eece9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a95ecb7-6296-4fad-80ea-e4718eb75a95", "sighting_of_ref": "indicator--e32ae431-f379-48d2-8c43-b46f398f8415", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f467bc-bdbe-43ac-8c6c-d7d01903d44c", "sighting_of_ref": "indicator--e32ae431-f379-48d2-8c43-b46f398f8415", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154c6af1-c148-41d6-a276-3098a3d6fba7", "sighting_of_ref": "indicator--f6de56cb-43e8-4174-9479-81c8b664827e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cfb4a2-e3c3-4da9-b45c-9c11e5f369d6", "sighting_of_ref": "indicator--da368c37-da6e-4d2c-b799-ff2c18b9641f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04486f30-d556-4d29-aa34-b2add30b4eb4", "sighting_of_ref": "indicator--df9d44a1-540f-4727-90c2-4a3b28f264b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc8d5f4-c879-4184-a30d-40ee4aa4531d", "sighting_of_ref": "indicator--83f10c77-cf44-4ae0-b09c-5ea79f5ab361", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a64ed51-772d-4970-9373-68a5e485a891", "sighting_of_ref": "indicator--d5ebaa8e-c97e-4c19-88e9-14a235f965b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e737cf86-68ee-4555-ab12-c50c58625bb1", "sighting_of_ref": "indicator--d5ebaa8e-c97e-4c19-88e9-14a235f965b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39706ec-562a-47f3-9cab-3b846a312e58", "sighting_of_ref": "indicator--298b3dbf-2073-4e8d-ac49-ab43a0de56fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ecc3e9-c55d-4f9d-975e-529e167e7c0d", "sighting_of_ref": "indicator--24415bb7-2ffb-4b9e-8903-c3a20d2baaf2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d21a37-1619-44a7-aee1-5f86ecac2da7", "sighting_of_ref": "indicator--573be75a-e081-4e1a-b894-e94232a2bbde", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba08efa4-faac-4679-8d03-a1fe610b7bca", "sighting_of_ref": "indicator--573be75a-e081-4e1a-b894-e94232a2bbde", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4aa2ef-200a-415f-b085-64dea1837630", "sighting_of_ref": "indicator--2585680c-ec89-43ba-8760-06aec297c0bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957b1604-fbdb-4d4c-ae05-f775f68fd1d1", "sighting_of_ref": "indicator--2585680c-ec89-43ba-8760-06aec297c0bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcacd14b-3d8a-4e32-a9d3-be195aadd107", "sighting_of_ref": "indicator--70074ac1-e235-4394-818a-ec6140bb7442", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1138bfd9-b4e9-413d-9d84-119d48e1f8a1", "sighting_of_ref": "indicator--70074ac1-e235-4394-818a-ec6140bb7442", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230b7281-2270-44b3-aac6-55516bf7edfb", "sighting_of_ref": "indicator--d228935f-644e-4618-889c-ea18ba3f7e8a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2363a4-ed16-41cd-88b5-282bf02e91d8", "sighting_of_ref": "indicator--5c24fbae-b48e-49e6-8329-15973cfe8c21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6406e1-096c-4887-b8f0-cf58b9b54a04", "sighting_of_ref": "indicator--05c4454f-0e8e-4876-8606-3fe417e71f69", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2933772e-f83e-41bb-af35-6ecc6019dee4", "sighting_of_ref": "indicator--05c4454f-0e8e-4876-8606-3fe417e71f69", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a579dac7-22c4-4628-8b95-9d000651b65f", "sighting_of_ref": "indicator--624d3f20-7fb0-43ec-98ce-788aa8801baa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60a2835-8633-4158-93ea-c4979cab1c3f", "sighting_of_ref": "indicator--624d3f20-7fb0-43ec-98ce-788aa8801baa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08422354-fdbc-4cf6-ab9c-0b7994e80cc3", "sighting_of_ref": "indicator--39897aad-4416-4a65-811c-b6d1807f1e83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad51d3f6-ffce-4536-adf7-a34f627f9ab6", "sighting_of_ref": "indicator--39897aad-4416-4a65-811c-b6d1807f1e83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a56e9e-5191-4ee7-962c-5a8ab264062e", "sighting_of_ref": "indicator--bd81b95d-e242-4004-9a65-35e35ac80aea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fe826e-57aa-41cd-a210-66b3e0e98126", "sighting_of_ref": "indicator--bd81b95d-e242-4004-9a65-35e35ac80aea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e693bebb-69e5-40bf-ae1b-ec2971b65f55", "sighting_of_ref": "indicator--dcb6a8c5-a0a0-4280-93a0-9ae31d92e9c6", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b38a82-c391-437a-9838-8661bb2aa6e6", "sighting_of_ref": "indicator--0b2ed5f9-48ed-4923-a082-6c1d5b936dcb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ce1bf5-dae5-4eb5-a6a9-19ae9729864e", "sighting_of_ref": "indicator--ccabddb4-5221-43db-8aa6-4b0010749f1b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69b3bbc-e39a-4150-94ed-748432c8f110", "sighting_of_ref": "indicator--ccabddb4-5221-43db-8aa6-4b0010749f1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdc0e7d-07e3-4001-aaf2-458fc3577ab0", "sighting_of_ref": "indicator--efa47f84-ec3f-401b-a5c7-8c04e67aba7a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f02757-e4de-4b7a-8d4a-8987ffae4dc6", "sighting_of_ref": "indicator--62a7b12d-b075-4f12-b16f-de701b104b08", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95caa086-893a-44df-b3c1-322488c6bfd9", "sighting_of_ref": "indicator--62a7b12d-b075-4f12-b16f-de701b104b08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372e05d2-dd38-4abd-891a-46c11f65fa80", "sighting_of_ref": "indicator--c6bda57e-7575-429a-9341-c1c967ab75f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54d9101-146e-4c4e-bbd1-103dbf1c0610", "sighting_of_ref": "indicator--c6bda57e-7575-429a-9341-c1c967ab75f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85282fa9-a3ac-426a-8adc-ca67892392d5", "sighting_of_ref": "indicator--608c4890-5b5c-4dbf-95a8-9141fd37aae2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b30d85-1d98-4210-88a6-e793f2e87e07", "sighting_of_ref": "indicator--608c4890-5b5c-4dbf-95a8-9141fd37aae2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117ae12d-1404-46e3-b6ba-c2d3bbfb8735", "sighting_of_ref": "indicator--2083e9f2-b07f-4a5e-afca-3c1e0f6f91b4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c685afdb-24a2-4230-a10b-717d9f39c0f3", "sighting_of_ref": "indicator--f6479bb0-95be-49b7-b875-3fdac2d07a59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791063d4-78e8-4163-97a5-aaac2c32f68f", "sighting_of_ref": "indicator--07c8a6b9-2b34-470e-836c-837195addf7b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7deef1-8d4f-44f7-aea1-d90d1e801159", "sighting_of_ref": "indicator--07c8a6b9-2b34-470e-836c-837195addf7b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d643dd08-e952-4b72-8a5e-b59c069161be", "sighting_of_ref": "indicator--629eea8c-6220-4f9e-9f5a-0ab0f1bd0e95", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1fadec-b6a9-47b7-a4a5-030e3032f9be", "sighting_of_ref": "indicator--9d7f58cd-f89e-495b-8c4a-8d91b1a03855", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952c758f-f037-4bd0-b5bf-f944b38466be", "sighting_of_ref": "indicator--ab11fbe9-0c82-4429-8f40-814b0c5a9983", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800e0ed7-23fb-4eb2-ba18-e805cf1f27e6", "sighting_of_ref": "indicator--fb88316a-7024-4771-a29d-2fe94d62cc46", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef752d3-75da-444d-8455-e063bb889ea8", "sighting_of_ref": "indicator--382aea56-a74c-47ea-8d9c-9f498a55ce37", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d8defd-7b59-42c5-9082-aa7003ebebcd", "sighting_of_ref": "indicator--382aea56-a74c-47ea-8d9c-9f498a55ce37", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234ad61a-bfc0-4cf2-bd56-371465156911", "sighting_of_ref": "indicator--3c82fed4-9b73-4ef6-bffb-0daf16c194b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37bdac0-5efe-4667-85e7-136ec5648c74", "sighting_of_ref": "indicator--3c82fed4-9b73-4ef6-bffb-0daf16c194b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4045db7-92ef-43fa-b0b3-f8dfc663e4d6", "sighting_of_ref": "indicator--5f549327-a385-4589-a883-df7225254454", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbac8d80-2d36-436f-a59e-e34e1a46fd48", "sighting_of_ref": "indicator--9d95d562-6da0-4c1a-b2bf-c8fb064a6bf6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d1f785-eedc-44c1-95e4-a54df6d2ecbd", "sighting_of_ref": "indicator--9d95d562-6da0-4c1a-b2bf-c8fb064a6bf6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162ad74b-8dea-4b92-87ad-12248703f672", "sighting_of_ref": "indicator--e2d55260-0e2b-4b2f-90fd-0292ab1ba459", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2bbd4d-44a2-40f9-a6dd-268d32d37e0a", "sighting_of_ref": "indicator--e2d55260-0e2b-4b2f-90fd-0292ab1ba459", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0340e9e-53c6-4040-9eab-e74cbaded713", "sighting_of_ref": "indicator--2252cc49-c03d-44dd-8da2-13aa29134b16", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e06ad1d-a51c-4b03-9bbe-f20b70163837", "sighting_of_ref": "indicator--2252cc49-c03d-44dd-8da2-13aa29134b16", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f40425c-ca54-492d-8d0a-7d3149f77d1e", "sighting_of_ref": "indicator--b2ffa75f-d534-4ade-a32f-c7c2cf7d48ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eca275f-28d4-49ac-806f-42d3cff1b9f8", "sighting_of_ref": "indicator--b2ffa75f-d534-4ade-a32f-c7c2cf7d48ee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8377d2b4-eca4-4168-91ff-cf66af240424", "sighting_of_ref": "indicator--378d4e2d-4942-4bb2-9de6-e30215484dd3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1c0764-70e0-4956-93ae-f1ffdfe0d3a7", "sighting_of_ref": "indicator--378d4e2d-4942-4bb2-9de6-e30215484dd3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58d136a-b960-47e7-bc61-b26a78f05ef4", "sighting_of_ref": "indicator--6cdd4894-c599-4a89-b238-4ad1d8d136b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f632a78-4964-4a71-af9b-549456c065d3", "sighting_of_ref": "indicator--1b116fc5-b655-419d-8afc-810635a00f40", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192c8458-df9f-4633-97eb-e3bbe22ce14f", "sighting_of_ref": "indicator--1b116fc5-b655-419d-8afc-810635a00f40", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43139e0-e7ae-4ca8-a8c3-427fdf425841", "sighting_of_ref": "indicator--76e342c4-7511-4cc0-ba59-d87e78fc8139", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2af7f97-51e2-4e09-9804-6c8310b2ef07", "sighting_of_ref": "indicator--76e342c4-7511-4cc0-ba59-d87e78fc8139", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3477c9c7-cf30-42a0-a071-c6ac9ee30316", "sighting_of_ref": "indicator--37aa113d-6133-4643-8545-451e46daaf42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6ea698-f5e0-4b65-89bd-adde968be2a9", "sighting_of_ref": "indicator--37aa113d-6133-4643-8545-451e46daaf42", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b970c0-786b-48a1-bd0b-ca992552992c", "sighting_of_ref": "indicator--e8b951ad-1422-4873-b958-0e323e8a33e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be5a079-3092-4103-b05f-0dee48b6bab2", "sighting_of_ref": "indicator--e8b951ad-1422-4873-b958-0e323e8a33e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a683fb0-a7dc-417f-b32d-18d985657068", "sighting_of_ref": "indicator--ed73544f-00e9-48c4-b548-4e45e78b7b6d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a926752-d216-46a2-b374-f031640c6c05", "sighting_of_ref": "indicator--ed73544f-00e9-48c4-b548-4e45e78b7b6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236f9558-60de-4bea-ad2b-1c627de0b307", "sighting_of_ref": "indicator--3824f264-e085-4590-a051-348e52e693df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df5fce2-1fa2-4736-8e60-f87eeb151986", "sighting_of_ref": "indicator--3824f264-e085-4590-a051-348e52e693df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1d4501-0887-4a49-94b4-054845e1acc8", "sighting_of_ref": "indicator--99404905-ac8a-4832-bfe5-0261cb2a7308", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873d45b6-69b1-4986-b490-b74b9782177c", "sighting_of_ref": "indicator--0afe7960-7bcf-4e2f-99a6-a1f6a005ec4c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbbd02f-f79a-4405-915c-79635007f8f3", "sighting_of_ref": "indicator--0afe7960-7bcf-4e2f-99a6-a1f6a005ec4c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c837a68-e40a-4eec-bc76-2f377680ec3e", "sighting_of_ref": "indicator--86eaf724-c6c5-4351-ac46-1a96b0a889e3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d048f07-abc3-4044-a25c-69756a6fc67e", "sighting_of_ref": "indicator--86eaf724-c6c5-4351-ac46-1a96b0a889e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d1e05b-6f19-4bb6-8a97-9a6d93b4e77b", "sighting_of_ref": "indicator--ec6c5ce9-b932-4aa0-bde5-d2426e8a03d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98541da-2676-4af3-84a3-5cc6b1adbfc0", "sighting_of_ref": "indicator--a44492d7-b0a2-4536-8a49-f73780cfbf79", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae42175-9838-4c67-b30c-c5cdaed0c774", "sighting_of_ref": "indicator--a44492d7-b0a2-4536-8a49-f73780cfbf79", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de1dba0-3c4f-4a69-a941-4a83ac3f4714", "sighting_of_ref": "indicator--396e92d5-82cc-4d93-ba63-f814f8988a54", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cef9d7-9b8b-4dc0-99ee-6b4d3e073303", "sighting_of_ref": "indicator--396e92d5-82cc-4d93-ba63-f814f8988a54", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364c6d19-7e2d-452b-9005-29c792e83a38", "sighting_of_ref": "indicator--1dbe3cf6-b2e3-45b8-8231-51bd5e3fcb9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5531d402-df07-47e2-9b1c-795b97fbbf2f", "sighting_of_ref": "indicator--1dbe3cf6-b2e3-45b8-8231-51bd5e3fcb9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81bef16-bd33-4b82-a17e-015a665b0d2d", "sighting_of_ref": "indicator--d0dba83a-045c-4497-b6d7-62f784dba5fd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8234e511-4e62-4524-be63-7d66395512bf", "sighting_of_ref": "indicator--5bca4acf-09f3-44a4-bff2-5649409279dd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f177d689-2aaf-4feb-b536-4c59aa12bff8", "sighting_of_ref": "indicator--5bca4acf-09f3-44a4-bff2-5649409279dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bcaa83-046e-4f2b-965a-dc3236bb30ea", "sighting_of_ref": "indicator--eaa6a1e6-344a-4d60-97de-851621c02c77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8056b4-1567-48ae-b661-ebc24f87bf61", "sighting_of_ref": "indicator--eb23c828-91e2-41a7-ba00-677caffc253c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18df4b06-c6ff-484e-a4c9-e1d725e80e59", "sighting_of_ref": "indicator--b352b9cb-ab4c-464f-b013-f334bd056129", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cb7ee7-1ed2-43db-88a7-59bd6b54eed2", "sighting_of_ref": "indicator--305c1ff2-6eed-4b65-9ad3-111f700e7633", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee02f35-606b-4d62-81da-9fc629a4bfe1", "sighting_of_ref": "indicator--1fa5278f-ada2-4dab-9893-06078b28ba94", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52aed5d1-0ba3-4f2c-9f5c-fb732fdc6f12", "sighting_of_ref": "indicator--1fa5278f-ada2-4dab-9893-06078b28ba94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3cdd62-3f51-4bbe-a617-dee6e65cb0e3", "sighting_of_ref": "indicator--3fb146a5-f80a-4ae8-b1b7-63c6880771e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b99193f-f00b-465c-b8b7-5e97c7019545", "sighting_of_ref": "indicator--fb0d10bc-ce7a-44e7-b7e8-79fa0068961c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66740e3a-8296-4fff-9f27-448851d29371", "sighting_of_ref": "indicator--fb0d10bc-ce7a-44e7-b7e8-79fa0068961c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80743d6b-d204-41ea-b3d2-810e8c6266d9", "sighting_of_ref": "indicator--f12ad63b-3a26-4843-8eb0-a9cf104db13f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de611ee-787e-4391-a3f2-fdfe7400e03c", "sighting_of_ref": "indicator--f12ad63b-3a26-4843-8eb0-a9cf104db13f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46718506-492b-47ae-beba-5775d8429ad2", "sighting_of_ref": "indicator--33720e73-2ef8-4495-911c-a81a7f7971f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afab2237-a4a7-4057-b76e-31fd292d23ca", "sighting_of_ref": "indicator--cebd9a4e-22b3-4339-8087-dcd6804e5a68", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238f4a8d-cda0-4a0a-9bf3-bf01a9152240", "sighting_of_ref": "indicator--f4c346bb-3e22-4c48-a405-9aaa0b085b9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21529799-503f-4c06-a41e-9ad538cc9b00", "sighting_of_ref": "indicator--ded7475b-f0e0-4416-a8ad-353341434910", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207f9657-1140-4fa1-8b8e-560812dd4873", "sighting_of_ref": "indicator--bd71a3e3-c843-49b4-9d2c-3c97ee7cc9ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb95bec2-a873-4000-b76e-1596dfaf5fff", "sighting_of_ref": "indicator--90ee4e10-b4e0-4535-b5ed-84e7e122fe0d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8bd904-60a3-4490-8295-6ba97783d3e8", "sighting_of_ref": "indicator--90ee4e10-b4e0-4535-b5ed-84e7e122fe0d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92518ea4-b8a7-4623-a878-53b03ca16f38", "sighting_of_ref": "indicator--c909d665-4efa-4107-a9d1-717ce375df77", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a814c1-5d28-4542-96d2-3571ff1d850a", "sighting_of_ref": "indicator--81c7d18d-177b-4fd7-83f6-b68676de4c53", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393ae956-9b83-4859-bb43-870a7bc97ae4", "sighting_of_ref": "indicator--7ab65c24-abbe-4312-9c88-51cd5e524aef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4762063-a44f-4da6-9f08-c03f9097dea3", "sighting_of_ref": "indicator--7ab65c24-abbe-4312-9c88-51cd5e524aef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c162b3-e0da-40a8-a5df-4db129ef2be4", "sighting_of_ref": "indicator--c7a49176-bf7d-4d09-9e2b-720cfadf99b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc425aa-1b8b-4d2e-abc1-4e8318d250b0", "sighting_of_ref": "indicator--cb057e91-ae87-4187-9712-f748bf483cf5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27661ef1-5346-445c-8edf-faf00b2fb073", "sighting_of_ref": "indicator--35b752f6-6b15-4679-8f8a-9c366b2b9d66", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09ae4e2-c6cf-4442-87d5-3e2465ee7fad", "sighting_of_ref": "indicator--3b302f01-f1d3-4089-8a5e-f71a70c9394a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8facc3-4978-4dae-8b05-1d83894f4132", "sighting_of_ref": "indicator--3b302f01-f1d3-4089-8a5e-f71a70c9394a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2347a9b1-c1fa-4175-bb14-a40acbf056a9", "sighting_of_ref": "indicator--5b188243-a8cc-4217-bfad-1a8f73b7d838", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f319a085-e52c-4d0d-86b7-ceefcadbc783", "sighting_of_ref": "indicator--91506750-23cf-4d42-84d6-54b91f830474", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead089c4-f02c-4484-a102-1e86a5e24fa0", "sighting_of_ref": "indicator--3a7452d4-5015-4069-aa99-748c697835ca", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48b12d1-d1e7-4546-837b-0d7ec94b16cf", "sighting_of_ref": "indicator--3a7452d4-5015-4069-aa99-748c697835ca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9669e2-1485-4723-8ab7-2b5b977523d9", "sighting_of_ref": "indicator--a01999f0-9b59-417d-8c04-a3fc77ffb109", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3319578a-9a91-45a9-bd7f-201913c37bee", "sighting_of_ref": "indicator--79356e27-7774-4d04-8c10-c52c2b9a85ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1897444f-3e9d-4c96-9d44-a2a1048f03b3", "sighting_of_ref": "indicator--79356e27-7774-4d04-8c10-c52c2b9a85ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f969e8-6721-4e89-aa0c-e772918679d1", "sighting_of_ref": "indicator--ec43a038-d4ac-45e0-906c-332df46749bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed46d6a-78b2-44a9-a176-aace07bded7e", "sighting_of_ref": "indicator--ec43a038-d4ac-45e0-906c-332df46749bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75545ee9-c7fc-4b61-a3b4-27aa18013bd6", "sighting_of_ref": "indicator--f57656f0-60dc-4fd2-8d5a-65e5aa47d9b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e658f24-9a8a-4761-b733-56792c9e15fd", "sighting_of_ref": "indicator--f57656f0-60dc-4fd2-8d5a-65e5aa47d9b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a057751e-7c6c-480b-a808-442177c9a21e", "sighting_of_ref": "indicator--2af17e57-fac9-460c-8519-cdaeac43cac0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6fd69a-d21c-4596-a377-4936e2c6d9cc", "sighting_of_ref": "indicator--10df6b7c-c32b-46e7-a6c7-d6b4b3aeaa0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e42b5a-517d-4e4e-926f-d0390e5888c9", "sighting_of_ref": "indicator--10df6b7c-c32b-46e7-a6c7-d6b4b3aeaa0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029f0449-a340-4ab3-8c76-8b3dbd847aa6", "sighting_of_ref": "indicator--c7b597be-bd27-420b-ad6e-f62f3d33836e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c26d7a2-8e97-48c7-93e6-8b83a352a0df", "sighting_of_ref": "indicator--b3d04ca5-1ed9-443e-a162-9a6794c5d0b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc48e8f6-da3e-4abc-8a6b-92e5310140dd", "sighting_of_ref": "indicator--2cd9b61c-01fd-4eea-8bb4-4034654db886", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbd8257-3eb9-4ef0-a899-b21c8dfb9d5d", "sighting_of_ref": "indicator--81301aaf-860c-4741-990d-a595b3f93d85", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d203b260-7e10-4f77-a747-db21a980aa83", "sighting_of_ref": "indicator--cb3ca342-f05e-4e8c-a647-da1c596dab2a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80079985-2a31-4b55-850a-a8165eacf260", "sighting_of_ref": "indicator--cb3ca342-f05e-4e8c-a647-da1c596dab2a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b460efb-4dc5-4fc8-8d6d-766ecd080fb9", "sighting_of_ref": "indicator--cb3ca342-f05e-4e8c-a647-da1c596dab2a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6d9741-d2bd-47be-ae40-4d135f253ea8", "sighting_of_ref": "indicator--d288d090-aae9-43ae-96ea-fd4626f658e9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd112a79-b47f-4eba-a3b6-9994e24fa310", "sighting_of_ref": "indicator--bf05e975-8d55-4fa9-ab5d-6f521adfe55b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f140ab9-bb8c-48f2-8cb5-32aeabbf8980", "sighting_of_ref": "indicator--abf55ad7-1a1a-474e-a512-a0bff7448fdd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39320563-89f3-4a0b-8913-eeef046be398", "sighting_of_ref": "indicator--abf55ad7-1a1a-474e-a512-a0bff7448fdd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95822208-11c8-4abc-9c0e-bc547ee53ca5", "sighting_of_ref": "indicator--84e84feb-400d-4911-ae63-6c4c64a3ab34", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd56100b-3ab4-48e3-b96e-929f95b69f46", "sighting_of_ref": "indicator--48e8ab56-1ed5-4af3-83ec-ed2f1ca710ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a43535-1206-4301-86cd-2904bad2c13d", "sighting_of_ref": "indicator--070b35e7-df9b-4076-9487-3c3b4f507d51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f74f671-4e63-4f05-8f07-0a131a2867a8", "sighting_of_ref": "indicator--200c1e92-4e61-4a58-a8d7-42c863e6f4f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670ff2a2-e91a-4d7c-be8d-2768e8735e43", "sighting_of_ref": "indicator--9ad4f243-b70e-49c9-bd8e-2b160f0712ad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931520d9-45d1-4817-aef6-acdbd7bc3ede", "sighting_of_ref": "indicator--e3b49051-2074-44c0-a94f-0677a76b4ad5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c63fded-c95e-4dc7-a783-f32d227376cb", "sighting_of_ref": "indicator--0fd91730-ec58-41ce-8e1b-e0e1e9730148", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef2e536-ba66-4d3e-9c87-702b301a2d17", "sighting_of_ref": "indicator--d1b19758-0e97-40fb-8611-f1149e5730f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bada873a-efaf-46e5-95db-bf6196e5c180", "sighting_of_ref": "indicator--acab22ff-b83d-4e9f-8588-497f89ce377a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a0ab0a-ceb5-420e-8f41-de03f34870ff", "sighting_of_ref": "indicator--98066458-eea1-4b40-be48-047cf818fbf4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cc8e90-924a-40f4-ae79-6a2d1e65c265", "sighting_of_ref": "indicator--6e875d8c-3dfb-457a-a8ce-a6f386d76e5f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763f9968-ef91-4abe-9f56-12120af17608", "sighting_of_ref": "indicator--c1cf82be-e2cc-4785-b30c-82ee8d30dcaf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f0e649-a520-42d7-8d74-521cae8c0411", "sighting_of_ref": "indicator--f565c360-116e-48b3-83ce-ee66b5a6f158", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef081e8a-2391-43dd-87bb-34c77b5a0d5f", "sighting_of_ref": "indicator--1330f3e3-2820-4f5c-8426-debf3fe2d687", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7238f3bc-f95b-46a0-b2a6-6da567216375", "sighting_of_ref": "indicator--e081104f-047d-469b-8148-f451fcba95d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91088450-c7d9-4488-84f0-86087a6e6f50", "sighting_of_ref": "indicator--4bd010d7-5d18-4638-9111-862e3e7b9f43", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9fbe34-6b97-43c8-9b63-848efb56ce31", "sighting_of_ref": "indicator--47edb3a9-b1fe-4038-a5dc-4b0d9a310430", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d222450-5472-4c07-8bb3-59dba0230c45", "sighting_of_ref": "indicator--27e3c51f-8046-4c78-bb78-aa135d3485eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9884c3-d42d-48c4-84ff-f24324ee27d4", "sighting_of_ref": "indicator--3a5be0b0-97c4-49cb-9982-23dc2b3d0567", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c21d7ac-f914-4d3f-840a-52d4cdc345ee", "sighting_of_ref": "indicator--81d48018-ca3b-4c61-8c34-af72984b56be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76e69dd-b5f5-49c1-9049-af3268e2644c", "sighting_of_ref": "indicator--fdc7b778-b2ae-4365-a38f-a492721dcbca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fcb78c-948f-4cd6-a222-760a695ce168", "sighting_of_ref": "indicator--cb2ac44e-fe22-44a8-bc3f-99259835b366", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01deaa4-7fd4-40f5-a9af-82a91785556b", "sighting_of_ref": "indicator--3e9d8698-0675-458c-9cb5-e17085258eee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8ba1e4-ef1f-42b3-ae9d-7e60dae4f334", "sighting_of_ref": "indicator--e58dec60-1d0c-4108-b7eb-5f949f08f568", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0c0447-ab4a-4a0d-a916-fbe2c1f22bf9", "sighting_of_ref": "indicator--2e4927de-32e5-43f6-b7a1-051012d86580", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e535fbb8-3cf3-41ed-a739-faf060317a27", "sighting_of_ref": "indicator--4014dfdd-bdba-4b82-b559-82503942395c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385bafef-1605-435a-b6e2-12cb3fa10e21", "sighting_of_ref": "indicator--4014dfdd-bdba-4b82-b559-82503942395c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa768502-8696-40c8-b3f4-6dfaedaf85a7", "sighting_of_ref": "indicator--d0d6bc73-aff9-4c6d-b287-1f3fea803657", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00509d7-a394-4758-9c04-891214084175", "sighting_of_ref": "indicator--ba3d6aeb-32e4-4463-928c-f80dcc8c0564", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52229383-247f-45ad-926b-39d3e422ace5", "sighting_of_ref": "indicator--69a71bce-fd80-42fb-932f-20089264dc69", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1a1aa2-eb05-4eb0-883c-356af8db4e72", "sighting_of_ref": "indicator--69a71bce-fd80-42fb-932f-20089264dc69", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca62477b-b035-4f94-819c-b80f0afffcde", "sighting_of_ref": "indicator--31c146d4-285c-419d-bfd2-e01f1d7fa67a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdc2d8a-8d39-4342-94b2-e896201ff9f5", "sighting_of_ref": "indicator--cbf45ca9-82d2-403c-8001-8d9c9b85787b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e612806a-8ebe-47f4-80e7-e1bc3e556809", "sighting_of_ref": "indicator--ba9beea4-955c-4beb-ad65-e8b4e151735f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecfc00d-54e0-43ed-a4bd-a78189fdb24a", "sighting_of_ref": "indicator--abdb59fd-3bf7-4b04-857c-85d83d6fdc75", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45ce969-ec06-4b19-ac33-caebe83c9af3", "sighting_of_ref": "indicator--0a7653dc-7f60-4949-a9e7-786a0bef8b6a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0207c6cf-3c9d-4636-92f2-f8ecae8e8d3d", "sighting_of_ref": "indicator--ba65e137-7965-4d2c-83d8-3c691c352cb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb46ecd-bd02-450a-b73d-230af898d128", "sighting_of_ref": "indicator--3212ed63-e983-4507-a245-dd63f48c3f0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1604f46e-ebd4-4079-82dc-550947f0325d", "sighting_of_ref": "indicator--76b4543e-05d1-4cd2-8ac8-5e52ac8acbf4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379dc45c-5ca2-4b7f-89c2-d82458da39b9", "sighting_of_ref": "indicator--b6878922-4f17-47ae-b2d8-0e1f0619e12c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ebf26b-cace-48b3-9e5d-f13c68d1bbaf", "sighting_of_ref": "indicator--95d5dfdf-d6a9-43c9-bbcb-3287875e724e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cb34e9-6b4c-48e5-8eb6-24f6419f3f39", "sighting_of_ref": "indicator--b43529d0-10f0-405a-b8c0-eee32d21c8f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8e1471-8234-465f-b56b-715194b62cb9", "sighting_of_ref": "indicator--9b55af98-97fb-4fd4-99c9-7889ebf5aaf3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2c48ac-ed22-49a6-aa20-05001ea51fb9", "sighting_of_ref": "indicator--ecc83cc3-6379-4b3b-909c-986074bb9a7f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6068be-8f1c-409c-a7ad-abd5512aada6", "sighting_of_ref": "indicator--4141be16-8a22-4dc6-b1eb-529c7755d89d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dc7572-17be-4489-9cf8-c67690c3c902", "sighting_of_ref": "indicator--29a3125b-b4dc-4f72-b08b-b1c85e1b9ba3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c99e07-a475-441e-b606-512517a4907b", "sighting_of_ref": "indicator--452e6fc1-d3bd-49f6-819f-3455987d6196", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b5c0e0-72ec-4022-8db0-e75936cf066a", "sighting_of_ref": "indicator--219a2bfe-5f02-4528-a51a-073c5d4d3492", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bcdfeb-88bd-41f1-9705-0ce97dd5f253", "sighting_of_ref": "indicator--fe78b1ac-ac1a-4a43-869c-7499c5ac656f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dc496e-3049-4793-b9a5-34e0574aa0be", "sighting_of_ref": "indicator--3bef35c9-ce2c-4155-a8bc-da2173ccbbec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4a22f3-fb8d-4991-be38-27acf61e286c", "sighting_of_ref": "indicator--2e43ca8e-5344-44e5-97b3-28fc1d46520f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36568f37-751a-4e84-98bb-85481d750e97", "sighting_of_ref": "indicator--0281fb10-e298-4f80-a7ac-9d8c5d743c46", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8bb74c-5852-46f5-85bf-923654807cb8", "sighting_of_ref": "indicator--0281fb10-e298-4f80-a7ac-9d8c5d743c46", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a83303-b002-4ba8-bdf9-c4e0c5f3ee16", "sighting_of_ref": "indicator--01ed3334-5d33-4cc3-98f4-6d16cb745ee2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59d08da-df57-4a5d-9c40-622095c4bd84", "sighting_of_ref": "indicator--9fef02d8-3d0b-4e3e-b69d-9464cdd276e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97dbfbf-33c9-4a00-af2d-20fa5e68d1e5", "sighting_of_ref": "indicator--7ee18b69-5a46-4df5-99f6-8b6c68f1cfea", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c4d1b6-014d-4c3a-a834-671c8f0ba131", "sighting_of_ref": "indicator--ebfc4ad4-20aa-418e-bd71-05e711e41334", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9769af-ae2f-403b-a401-449042767a20", "sighting_of_ref": "indicator--65dacc33-2ea8-4b2a-b0be-b22352c12569", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679a4cbc-3054-49be-b1cd-84cba81a13d1", "sighting_of_ref": "indicator--c5ff0261-677e-4be2-8236-8bfef91c4088", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a542bd45-e376-49fe-b168-c35ccc2b6280", "sighting_of_ref": "indicator--9273d898-cccb-4aa7-b424-d0de3c7fefad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9923e1-89a6-4574-aa62-8aa7012c268e", "sighting_of_ref": "indicator--36b33716-e066-43f1-9a2d-49dfbc304f3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3712715-446f-427d-8b42-55ee8ea60a4b", "sighting_of_ref": "indicator--c726605b-13cd-47fc-acac-69b2b92e592a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8009f9d-7c50-40e1-87ae-6319f41d2416", "sighting_of_ref": "indicator--e80f912d-8251-417d-9925-ae0a32a2fe3e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57f9693-09f7-4fd4-9ea1-22f1cee7dc28", "sighting_of_ref": "indicator--d48523cf-0417-4901-8e40-1dd2c1871de2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0a3239-7e4b-45b5-a342-7d444a78ef23", "sighting_of_ref": "indicator--768a37e8-3fa5-4a79-9a52-4ffab680c510", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefce652-e327-4eaa-846a-c3db81ea221f", "sighting_of_ref": "indicator--f06f0cbe-9364-4386-8313-910627713a9d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135a86a1-5270-4ed8-b1a3-8bbc84ef45ad", "sighting_of_ref": "indicator--2b70cf53-9588-4246-bccb-228d3009bc11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66c488c-a619-42ee-a136-d1c58f5ac7a7", "sighting_of_ref": "indicator--ff157cf0-c2db-410d-873e-d1ac264b6f03", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38358161-a1a2-43b6-b752-593c34866809", "sighting_of_ref": "indicator--c144a67e-2e71-49e6-9f60-a1fa046814d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f756c1-a019-4348-9848-4047b3de222c", "sighting_of_ref": "indicator--c144a67e-2e71-49e6-9f60-a1fa046814d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cd5647-8057-45a2-9d49-378c75c94e0f", "sighting_of_ref": "indicator--cd776014-b909-45cb-bc3c-a2c4ed0f4996", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ffb696-21f6-4ef4-8b8f-6895bba71930", "sighting_of_ref": "indicator--fb46451b-fd29-4840-8055-10ee63ff4ee0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cef537-0616-48e9-b92f-aa0bdc2282c7", "sighting_of_ref": "indicator--d19fa223-7a78-49b9-8c58-d154c50bb9c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0efae94-7af2-46c3-b46c-59b1dcd617ba", "sighting_of_ref": "indicator--21d0a02e-048f-4410-ae8f-0b51223ae636", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430cab0d-ee28-42c3-bf3a-9df3a6f05bdc", "sighting_of_ref": "indicator--e893c6a4-9924-4caf-a179-6d8bddc083f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dd5c86-88e4-49ca-93ff-33d47c1ae5fe", "sighting_of_ref": "indicator--3afc5076-a5c7-4c07-90a9-5bbe79a29f38", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e1f372-1bce-4643-9016-f92116a45314", "sighting_of_ref": "indicator--be1ea56d-d860-453a-938a-abb0a7d691c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837550e9-220d-4983-852e-945d9f3fd3b5", "sighting_of_ref": "indicator--731de61d-4ede-4cde-b1ba-3f43d3f8d8d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811a74e5-5174-404c-b950-8b64e1fc568a", "sighting_of_ref": "indicator--df18fddf-c746-42e2-901e-8bef5e1871cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720732ba-f399-4133-a311-ff1647419e66", "sighting_of_ref": "indicator--842f09db-cd66-42c3-b77e-7ef0da3c2c88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04a4cbe-5ea0-4928-b7ce-21236a40cb23", "sighting_of_ref": "indicator--47c0ac73-5fde-4271-9d7f-6534dccb064b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588aba46-dab3-4393-89bb-2de603e76d25", "sighting_of_ref": "indicator--0c92de2b-9108-434a-88bc-a5c035be35e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131128ad-9611-4f30-a5b3-da5c2d21fb6e", "sighting_of_ref": "indicator--8f0376d6-f794-48d9-9369-e18bda086fb4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70665b81-7111-444b-bd41-d8aeffd04420", "sighting_of_ref": "indicator--d8f6d2a5-b364-4304-99ce-77450908620c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c8b463-33b0-4d58-b424-9a8f47170e53", "sighting_of_ref": "indicator--97427e86-eb41-4059-9081-508b7b111e89", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06c0373-c21d-4158-8853-3453d23ca38d", "sighting_of_ref": "indicator--840c408e-ef9c-489c-af20-5012b8256963", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33251b8-3fff-4923-8dd7-f4a6e2ff6fad", "sighting_of_ref": "indicator--9439110e-c824-4200-bbb6-ee85e012fbd7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfd9f2a-3457-4f60-b372-03a81928dd2a", "sighting_of_ref": "indicator--116e6764-e08a-48be-9c06-08aaaa797ee2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078a50d4-b6d6-49ec-a3c4-92e55e20821d", "sighting_of_ref": "indicator--516a515a-a2c3-4d1a-a307-5b75698d3159", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225d07fb-fce6-4166-9517-01a017aaffbb", "sighting_of_ref": "indicator--21114096-72ee-4145-a4af-377c5cbfac08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8a9f5a-98c5-477e-88db-bb604d77e2d3", "sighting_of_ref": "indicator--75512653-91c9-47a4-8d84-949daf9575cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069ee391-1625-4b7d-86fc-c7eab3cd2105", "sighting_of_ref": "indicator--515918d2-b933-4fde-9d68-420c7c992a1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4764199c-67a5-496e-ac69-3983d4c2413a", "sighting_of_ref": "indicator--515918d2-b933-4fde-9d68-420c7c992a1a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f2bc19-d542-47dd-9578-ca0c7a531425", "sighting_of_ref": "indicator--88cc505a-2087-4699-9d03-b6f1d6e5e3c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7790835c-51e8-4ca3-9eb4-a30841e14655", "sighting_of_ref": "indicator--67e476ac-9798-4981-b05d-583e5e2beb6c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a789a88d-049f-4a9e-99ae-5b3f933afe57", "sighting_of_ref": "indicator--d78d4eb0-f1b4-4252-a978-bb6b37a33f86", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e82a912-a41e-4abc-a866-8b216f64772c", "sighting_of_ref": "indicator--0bb7d9c3-8ff2-47cb-bfdd-76dbb36c9daa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c27485-408b-4012-aa11-9c7057480bb5", "sighting_of_ref": "indicator--4b9ae5d2-aaa2-43f9-ae78-bd3bc4951fe1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f777520-2952-4885-8887-5ef967d11818", "sighting_of_ref": "indicator--b1d76228-83dd-41ec-b088-5809086247f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e4d5c3-2564-4369-8ad7-3ba405b7a65c", "sighting_of_ref": "indicator--b1d76228-83dd-41ec-b088-5809086247f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a50c7d-cd1d-4127-8b8e-1ff65d68146e", "sighting_of_ref": "indicator--4cacae24-339b-4715-ae40-3a36195f8e24", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32868434-3e1c-4c5a-b50a-de0e205848f3", "sighting_of_ref": "indicator--99b91104-d26b-4d6d-8a5b-d06fa40f91eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768eae5a-edc5-415c-bb5e-cab5374b8d26", "sighting_of_ref": "indicator--43fa07ed-2e89-4674-a84f-500f1395314a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67526a7-78f7-4354-afee-53274efe03fb", "sighting_of_ref": "indicator--1f79fd5d-a2df-4c36-98c6-638c4c722725", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f11692-2d13-40d5-a0ac-6f7e0adee725", "sighting_of_ref": "indicator--51825874-851f-46d6-a041-1d6c448710e2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aed96b1-5c5d-4aeb-a419-1fb3e4f94675", "sighting_of_ref": "indicator--29d9e654-08f9-4224-bffa-94cd0895cfd7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f08b37b-39a4-40af-b20c-7e7b60a9adb9", "sighting_of_ref": "indicator--8d60cd19-ac2d-4259-9324-5427dba47ce1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe22535-587c-464a-82ac-227f2823aa99", "sighting_of_ref": "indicator--9bf1129f-3913-4055-9e1d-aa60a204f36c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad87c83a-5500-43bb-8764-d0373eddd8a2", "sighting_of_ref": "indicator--75c9a6bf-a8db-4418-8564-020a746c4422", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee021ef-97f8-4a03-b99d-2e06b55eef6c", "sighting_of_ref": "indicator--be7f2a94-a399-4d71-9ad1-19487def75ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454c05d7-8206-405d-b89e-f965fd07e238", "sighting_of_ref": "indicator--3ee171ea-b9bc-4f41-b87d-fb97964d164a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29391af1-2a51-4182-94d7-b4f0b4700536", "sighting_of_ref": "indicator--f4178d44-7511-46ad-84e9-597ee03eab88", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c935cad9-7ec2-4614-a2cb-ea8d1ac41483", "sighting_of_ref": "indicator--f4178d44-7511-46ad-84e9-597ee03eab88", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35106c2-7a0a-4627-b7e6-2619791f944c", "sighting_of_ref": "indicator--960bb83c-9f2b-4632-af6a-0cbd3a6e30fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fe35f5-8a61-46c4-84d4-db5dbb09693a", "sighting_of_ref": "indicator--5d8828b6-d78d-44cf-bf58-8bd30b80384c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7bb9af-e57e-427f-b33d-ac6ad3389a15", "sighting_of_ref": "indicator--7324fc1e-02f9-4cd8-908d-4871df267637", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48df0a07-48c4-4950-913d-4a68f403cf27", "sighting_of_ref": "indicator--7efb633c-c120-4a56-b3c0-c112cd6fcb49", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c1e5de-dd8e-4d27-82d2-cb80b9676d41", "sighting_of_ref": "indicator--8ff9f465-5ea3-4908-8c12-356505c86825", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7781b870-97af-4733-9c17-bf08084aae23", "sighting_of_ref": "indicator--591e7262-6cc0-4582-b0a4-b4291a8b8a26", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1bce06-4d66-47c5-9bae-4390b701d747", "sighting_of_ref": "indicator--5ea5f492-e38a-49b5-9597-2bb9c0c4147f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4857e2-0c7a-4d09-b472-88256ba2e754", "sighting_of_ref": "indicator--6e4f6e67-089b-4a8a-9565-3d6e146cfaac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36085210-4084-4901-b696-483761c68370", "sighting_of_ref": "indicator--8dfc959d-8f1d-4e89-8f1e-2f3fd66ac3e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6786b111-b19d-42c3-93e7-efc1bbc4adf5", "sighting_of_ref": "indicator--9d25b93b-4642-4bd3-9b8b-bb57afc07fc0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac3bdba-f61b-45ce-bd9a-53fd7cab6bba", "sighting_of_ref": "indicator--6126bb46-1fa1-4624-a3ef-166449a95355", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7999e48f-b5cf-4b2a-a160-f401d710d33d", "sighting_of_ref": "indicator--46e975ad-2bdb-424b-bb2e-cb70ff3949a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3936b40-1e98-45ef-9efd-3dc8ff72ea30", "sighting_of_ref": "indicator--7bdc82a6-2833-4fd7-9640-79f6a55ee784", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937622a0-7c09-4088-8479-2d62820eb2dd", "sighting_of_ref": "indicator--22a6eaae-0724-4708-aaef-ce7d772bfbb7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fc34b6-7e90-4aa8-b68a-3fa3fb2b4990", "sighting_of_ref": "indicator--8806ad96-5d4e-498a-a2ca-87d3bafde1ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e21a69-d3ed-436f-8660-76a2fbccd3d9", "sighting_of_ref": "indicator--af3abfd4-7ffc-4ef2-99e4-7e88df36eefe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b935cda-bc72-4dd5-83eb-ba118e49e519", "sighting_of_ref": "indicator--b00fdcce-878d-434c-9c6e-b8ae9e7d7e19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f64dd7a-e8e3-4c3c-9773-d158aca5cb8e", "sighting_of_ref": "indicator--fe788cd0-835d-4788-b643-17e9729fe4a4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e70663-50c6-4257-843e-1247c9bd9a83", "sighting_of_ref": "indicator--784a73f2-ead6-4ad4-b96b-b91af8a2f988", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4364952-a96c-442f-bbb5-bfbf74d9221b", "sighting_of_ref": "indicator--bcc82b8c-73ab-4a35-a3db-b4684d86f62d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fa99d2-183b-41b6-a8b1-c2a4acb59d5a", "sighting_of_ref": "indicator--dbba81d1-29c6-480c-9e7c-87dffcc1576c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ea347b-a9bf-48ef-bcbd-aaf8a7524a3a", "sighting_of_ref": "indicator--87f5cc1f-92b0-45ce-9b73-d91cd7ba3dd2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a37bfe5-e966-42e5-979d-192c83aa4b2e", "sighting_of_ref": "indicator--38db616c-014f-4bf4-a7fb-0160de6760e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667ff7f3-d928-40fe-b944-2a3d4b82de83", "sighting_of_ref": "indicator--ab4ecf59-1625-4a49-a86d-8465b6771d00", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ace2dbf-6f12-4813-baf8-fbb29e0177bf", "sighting_of_ref": "indicator--87327689-2513-45cf-90ea-6abf4309a65b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6f6977-f146-454f-bbe1-ef860571cbff", "sighting_of_ref": "indicator--278e88e9-318a-4ace-a3a8-811b555d59fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e5c6e1-0573-43a0-8141-366403c519c9", "sighting_of_ref": "indicator--f32b54ef-68b5-43f4-ada4-c566990e70f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b06b45-de7b-499d-835c-50fe925d2a9a", "sighting_of_ref": "indicator--b18ded55-18e2-4cae-b618-a3ad849497d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ddaa29-d592-4ee8-8dcb-c869b11b40ca", "sighting_of_ref": "indicator--d232c5be-ca0c-4a99-bfab-7f6cd024b7a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00768220-c21b-4dbf-870e-70079f4f72c1", "sighting_of_ref": "indicator--3cdcf08f-f4e2-4221-8511-88a72097a504", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a8341a-7768-4876-a2fb-c813759d9ad7", "sighting_of_ref": "indicator--a3fbab1a-3498-4314-ab27-6e7d0736c7c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe2aae5-25de-44b4-93c5-5608bee325b0", "sighting_of_ref": "indicator--e746304e-bf32-45f5-909d-022d31dd5fca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8d4e9b-39ee-4252-8251-fb190be6ad3e", "sighting_of_ref": "indicator--d42b4d0c-35aa-4523-aece-4241cfe97527", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e2bf61-460d-4f40-ad78-fd01e662ec02", "sighting_of_ref": "indicator--d42b4d0c-35aa-4523-aece-4241cfe97527", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b638d03-28f0-461e-a13c-7f4ae4edf342", "sighting_of_ref": "indicator--57e61cee-6116-4737-9beb-6cc267e2d705", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12cbddba-a450-4aed-ac48-7e2c6bba6e32", "sighting_of_ref": "indicator--11f46f3b-2f3a-4c65-b7a7-4eaac3e1ea85", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92ab10f-91bc-4729-800c-7061e479d370", "sighting_of_ref": "indicator--0014b5e2-2d8a-4d86-8b27-c4fa09ec31ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1e168f-1342-4f93-bf7b-79a3088a68e8", "sighting_of_ref": "indicator--fad7ae1b-5669-4723-a6ad-d2a653aac43f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac846432-be99-4490-a473-bcd1f5aaca46", "sighting_of_ref": "indicator--54da7c51-fd14-4165-aebd-36a7dee6a9ce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc68bf5-3bd7-49bb-81c3-86dbb6b55f17", "sighting_of_ref": "indicator--5ff9cb9f-2f04-456d-98f4-9a9143eae94c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ee2f53-4e0a-4e08-a57e-a7be4f25946f", "sighting_of_ref": "indicator--7fcedc50-3cf5-4a48-8da3-3df19741cc52", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e041d3b5-829f-4190-a1fa-e0e46b695a5d", "sighting_of_ref": "indicator--4b022163-21d0-44cc-8890-7057e4d74551", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895ff37b-c009-4062-9126-bf837e8e2c1a", "sighting_of_ref": "indicator--18e45e66-8033-4acb-b9e0-0506157729c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc00bb7-55e8-40b6-9871-b612e4b7cf4b", "sighting_of_ref": "indicator--bc7b61b0-42c7-48d1-8172-119d669bcfca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827ce634-c59c-4bcb-a8ee-336fc55c99a3", "sighting_of_ref": "indicator--ac28b00c-619a-4fbc-a58f-36520e281dd8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307d633f-bad2-49ad-8146-281f5f7ba48e", "sighting_of_ref": "indicator--9428595c-19ae-4608-a151-ef0b2d1b2f36", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c6499a-4f85-4071-96f7-35f46d072e75", "sighting_of_ref": "indicator--f31056da-3ffd-4f66-aa76-b74c7e22cc8a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9954e5a-cde4-4d85-8d24-afdfa20af8a8", "sighting_of_ref": "indicator--fd3fcdd6-7d76-4f37-a732-df83f0b24242", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27183510-4f00-48a7-9290-9df9493d7f45", "sighting_of_ref": "indicator--4753e2b3-c569-40ad-9a8d-278f833cbfc5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6faf788c-10ff-4855-827d-bfd8482a5603", "sighting_of_ref": "indicator--9d68f870-8bd7-4bda-9061-b303797d4597", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea976c19-b240-4e81-91d3-76ac0697908c", "sighting_of_ref": "indicator--afb18a60-163f-4261-9992-e22d105a1cf8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2b694e-d6be-4141-bf54-e214f0096360", "sighting_of_ref": "indicator--2cb24b5e-6b07-401c-9b03-49468799c95a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd10e190-d1a5-4ea8-8571-c7cd68724f45", "sighting_of_ref": "indicator--bf86d476-20f4-489e-9d49-4d95729f18b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ed716d-e169-4da7-8164-064890a57103", "sighting_of_ref": "indicator--d9c4cc5b-a5e2-4a22-bafd-5f4a1963501a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f0d313-4fdc-432b-82e1-1736679fd100", "sighting_of_ref": "indicator--d9c4cc5b-a5e2-4a22-bafd-5f4a1963501a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c473dc5a-97a7-47f8-bc5d-c109e6909e5e", "sighting_of_ref": "indicator--6c09c5ae-12a5-4686-bd81-8f7e9684e6d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7371ebfa-13f3-4363-8813-625121e10101", "sighting_of_ref": "indicator--6e8f9f7f-da45-46c8-bd67-0e40d4b47bb3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a6a863-ec2d-4e6d-a065-06e950f54965", "sighting_of_ref": "indicator--14ef35bb-50eb-4703-a8af-5d2464966295", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef68498-f8e5-4fdd-922e-2bcbaaf74eb6", "sighting_of_ref": "indicator--14ef35bb-50eb-4703-a8af-5d2464966295", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91996a18-84ee-4668-aa12-c2a5836ef93c", "sighting_of_ref": "indicator--4eb32be1-9524-4ed4-9795-7a425c532c3c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fb217f-e4f9-45e6-9d8c-b1768b9de2b5", "sighting_of_ref": "indicator--6b48c5f3-4491-40b7-8b7c-450d93534e55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bbf52c-310f-402a-a61d-dc7369ff8bf3", "sighting_of_ref": "indicator--fbc269a0-71c7-49d2-bebe-7c3a68aa4f76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb04bc36-27c1-4ad4-987e-671defd3acc8", "sighting_of_ref": "indicator--9434ecf5-83a3-4b81-9480-c5171bff2da8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99807d6e-f8be-432b-8f66-77f6c7d08939", "sighting_of_ref": "indicator--8f95bf2f-f038-4b8b-ae23-b286ebb7bfbc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faec14ee-c095-4e1a-a39e-85606e5bfcee", "sighting_of_ref": "indicator--d8ec6852-c8a1-473f-9d39-4358234e5918", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e326152a-4ba8-4962-8476-c97c4cbd54b5", "sighting_of_ref": "indicator--ae3852c9-bfec-4646-a706-876672a290f8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceac5956-bc58-418f-b1a8-dda326439f76", "sighting_of_ref": "indicator--ccff63d2-99bb-4647-8220-29e51685de56", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b812e4d-fd8d-4a46-99f0-75fb62e4ed58", "sighting_of_ref": "indicator--2a34b5a4-b36a-4aa6-8ee1-b819678bf074", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8758a5ca-343c-4ea9-a1bd-6c0d39329352", "sighting_of_ref": "indicator--57b2c835-86d1-47b4-97a3-8026028d62e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc24b566-fc1b-45be-95ae-47fa3cfc999f", "sighting_of_ref": "indicator--41e4bc40-ab67-4811-8157-41bce90f892a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75c45f1-6ad5-4226-8c1f-8bec4ed88d69", "sighting_of_ref": "indicator--6be1fa44-fd61-4d87-ab2b-779ff55bd963", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bab6bcc-3274-4c47-a503-eec6f2cf4af9", "sighting_of_ref": "indicator--6ceffa4e-6e8f-4f67-ae6f-3c909d69ac01", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491bcd0a-9186-40a1-9195-2a4637f8dc46", "sighting_of_ref": "indicator--751ed333-29cf-4f2f-a5eb-477565054ec8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2173e6c-2d4c-48c7-8910-53d48596835e", "sighting_of_ref": "indicator--e595fd8b-68b3-45f0-92bc-6a9d50183859", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eebb5bd-4e7c-422d-ba63-a598603e7b56", "sighting_of_ref": "indicator--547caca2-56d8-479f-b514-d3ad4ec86300", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49029b5-83b3-4043-ab99-b95ed728eaf7", "sighting_of_ref": "indicator--b533b15e-8a38-4b3b-b716-fe38b5e41340", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95eb8324-8226-4297-8726-1e804fc8c583", "sighting_of_ref": "indicator--eaa95a03-b8aa-4e9a-91ef-95dc4c89102c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9226c44b-464e-425d-84a0-d100d02612c6", "sighting_of_ref": "indicator--2f6aafee-dca9-4a4a-b8fe-4e881f1254b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b38ef2-4e35-4496-839c-7b79e1770b37", "sighting_of_ref": "indicator--4dbfcc11-5471-4f25-afeb-b79106431851", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be0d10d-0820-40f2-9cd3-90185c306a82", "sighting_of_ref": "indicator--c8454a28-5f6f-4bf0-9b93-c52fffcdd691", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9905ed4-00f5-44ac-ad92-8f6960fed72c", "sighting_of_ref": "indicator--d05eec5a-a1ba-4041-b8f4-f945a7e94077", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb17bfbe-20c2-4bcf-b52d-757866026dc0", "sighting_of_ref": "indicator--3ec7dff0-51ef-42fb-bde3-9e512d9b38c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e4e887-88a7-45ee-84c4-eab2e2aa521e", "sighting_of_ref": "indicator--4c70374e-0e09-43e9-ae1b-efe85bd28a82", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d23ec8-04df-41b7-b54a-afcf7f51849a", "sighting_of_ref": "indicator--1b2ad2a9-b6df-414f-9761-3904158e92d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1efdcf-f06f-474a-8835-555d9c8b5d38", "sighting_of_ref": "indicator--90236513-0113-4295-89e8-ab76686449f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c4dd30-dd53-446d-8b42-b78a0a5daf54", "sighting_of_ref": "indicator--6fd6ed45-400d-4a43-91ec-39d6d050fba9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41336205-189f-4d1d-975d-c09c3290082f", "sighting_of_ref": "indicator--e5d663ad-b627-47c6-a00e-7a759e60d976", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dc06c1-bf0d-4c8d-becf-8ddad4612212", "sighting_of_ref": "indicator--689e2723-c162-45ae-8a9e-ce7542c20040", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116f6b5c-5418-452f-a212-539c66a5c994", "sighting_of_ref": "indicator--1483a692-b659-4344-8dfc-218b4d616a19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fb728e-6d2d-4a5c-a875-3699fe464c76", "sighting_of_ref": "indicator--005b11dd-4025-4a3b-a10a-a7423b947333", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26754e1a-a7fe-4939-a641-8cae76fb059d", "sighting_of_ref": "indicator--e7848944-f4fc-4ab0-b6c2-3d094b688842", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b42885-c998-43f1-a0ce-11dc0973c84e", "sighting_of_ref": "indicator--b6f69892-956b-4bc4-84c0-af799ed54051", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d8ffbf-d0df-48cd-9d24-cf229b609dd9", "sighting_of_ref": "indicator--3ed3bcd1-fa48-4f0e-805d-4c9a2312c746", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe82b778-d3cf-4710-a272-45d521681cf4", "sighting_of_ref": "indicator--c6fa04ee-3320-49b4-8683-3472d043c40d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4059f3c5-4794-442d-9191-8e2193623e6a", "sighting_of_ref": "indicator--e197a101-605c-45f1-92d6-886e53c26dc9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6504f2-cfb9-4d44-a882-756dc6fce112", "sighting_of_ref": "indicator--7de688b0-6e23-410d-8458-e9d4561eeb33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f84324-94c8-40fd-8dda-d7d13fd5e493", "sighting_of_ref": "indicator--99694b20-ee38-4d0d-b8ec-5c255cd27da5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669f5a82-654a-4c1a-bb61-ce10f0257aae", "sighting_of_ref": "indicator--85d39fd5-c53d-4f3d-b834-b9be5b91bbf5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b659b6eb-cdf5-48ca-ae32-9e3e559514d7", "sighting_of_ref": "indicator--bea5aa20-9dea-48ed-aa26-87b55ac98bec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf2b58a-9fb0-40a5-867e-9e80c1be2e0f", "sighting_of_ref": "indicator--31a51cb5-f0bd-4c39-bb70-a4a914921460", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed623334-0140-404a-afb8-bb2c2dd11127", "sighting_of_ref": "indicator--91cc911a-2056-40c6-8c9c-a669fc8fa3c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3115518a-72c0-4a8a-854a-8f1da9c11d93", "sighting_of_ref": "indicator--41d76346-33d6-463c-9f40-a2ea67a7f327", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8fa81c-f7a0-415e-a05a-40cdf5d724fc", "sighting_of_ref": "indicator--41d76346-33d6-463c-9f40-a2ea67a7f327", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a841064f-e61d-4ca9-8ee5-50888bdb9b17", "sighting_of_ref": "indicator--d404572e-afc6-4885-8b48-0eebcce0462c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6d446d-1c5e-49d6-9ff9-be34bf0f229e", "sighting_of_ref": "indicator--1c3bb515-bad9-4ff2-888d-449bde26b87f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59db27cb-ffe5-4541-8a35-f12656dfba37", "sighting_of_ref": "indicator--44195f69-768e-41c3-b1cd-ea4ef9ac80f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058e0635-ab46-4271-a57f-d571ce184caf", "sighting_of_ref": "indicator--44195f69-768e-41c3-b1cd-ea4ef9ac80f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b258cf9-0f54-44b5-9996-19965bea73be", "sighting_of_ref": "indicator--680f4c7b-fe2b-439e-823a-906329189a4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425435f5-b39a-41ee-bd10-a41554e09ed9", "sighting_of_ref": "indicator--eecb0ca3-e835-4fa6-88b9-adc1aa4d3018", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31eaafdd-b13a-4f8c-ac1b-17610b07d656", "sighting_of_ref": "indicator--5d14fd39-1f88-492d-8cdd-08da4cb2a1ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebb8eb4-8b22-4b96-b1fa-d27f158af9f2", "sighting_of_ref": "indicator--fd3b0b94-2ba7-40fa-92d2-785210759ddd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4ec85f-b05e-48f7-b81a-2ea1b71d7c54", "sighting_of_ref": "indicator--4774e8c8-6c31-4f9a-a264-0e2c93970d7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f0182f-1d72-46fc-93c9-e3f473b8ae37", "sighting_of_ref": "indicator--17146eee-c6cb-4222-b737-12de3ff38e45", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a6f167-8563-465a-82f4-c917140d3ea6", "sighting_of_ref": "indicator--26541407-c018-47b6-ac3c-f998b4eb8416", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe24157-8038-455e-91ad-17fc813af3fb", "sighting_of_ref": "indicator--71d34340-166d-4580-951a-a9b0b4272b16", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19c66c3-1397-4816-bb93-6d0c78969c23", "sighting_of_ref": "indicator--8ccad40b-539c-4a4d-9ad9-acb8557172a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329a8a30-1c57-4d0a-bce4-dded55519c4d", "sighting_of_ref": "indicator--86aa7aa9-a277-434b-a5fb-0329c08d482b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444d4e4f-6c59-4b34-b2bb-86249996fdbc", "sighting_of_ref": "indicator--5ef7f951-9ca9-45f1-9f76-45b55f10a3e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f52601-ca4d-4354-9bdd-e0107db9ef57", "sighting_of_ref": "indicator--5593e1ba-0334-4e84-8c30-9033e140a538", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a079742-bfd2-47b8-900b-5da015190018", "sighting_of_ref": "indicator--1087e771-ad97-414d-be24-07440b604de0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ada924c-2db6-47b5-bf92-1a7186b105b7", "sighting_of_ref": "indicator--20a70b9a-0a8a-48f4-9b56-f15aa18ce314", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffec697-4b31-42c8-bfeb-1cae2a60d05a", "sighting_of_ref": "indicator--f4056866-45ad-4601-94f4-966a54a67e81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abe0028-0011-41d2-b81c-0d0adc0fb3da", "sighting_of_ref": "indicator--bd21cffd-f81d-43da-a7a2-5d04f5d6a290", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c69d01a-ec6c-4ad2-ae6e-f98be0d898d0", "sighting_of_ref": "indicator--bd21cffd-f81d-43da-a7a2-5d04f5d6a290", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64e466d-48dd-4eff-ad0c-301e71178943", "sighting_of_ref": "indicator--55d9cddf-5f11-4b54-a8e3-b6a20bdaf541", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096a010b-48f6-4027-9cca-e5b20d1571eb", "sighting_of_ref": "indicator--b62cdab0-8d71-4b47-a8a7-b351df5e68e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db635bab-3e96-4cc3-b4aa-411793e94540", "sighting_of_ref": "indicator--b62cdab0-8d71-4b47-a8a7-b351df5e68e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8442ba44-5bf5-416f-9bff-c8c9896bee7a", "sighting_of_ref": "indicator--06ff633e-1f85-4d46-a3bb-8589d0b34d69", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52038be0-dc6d-4d4a-b9ed-cca6f05ea963", "sighting_of_ref": "indicator--775e3b52-b662-44c4-94a1-7bdf9c377ddf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77cfa9a-ff04-4c1c-9c3c-f454acaade91", "sighting_of_ref": "indicator--7ce185fb-3854-461e-8dea-3fa5d79765c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a17f84-984e-493b-9cf3-86aa0f723c87", "sighting_of_ref": "indicator--689b13e9-925f-40bd-b052-fdc4e77f93f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777e014f-3584-4faa-afd0-aa346d9e3311", "sighting_of_ref": "indicator--bb54256e-71e3-4263-98a5-0743c47e35f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b40283-2386-48ee-8688-36ceafc5c490", "sighting_of_ref": "indicator--ec57eac6-6ec1-42ba-83f5-dd2451cfd99d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d01b17e-da56-4753-a41b-eac0b2897670", "sighting_of_ref": "indicator--ec57eac6-6ec1-42ba-83f5-dd2451cfd99d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf22f3c3-60b8-4c70-9b98-8132bfe55650", "sighting_of_ref": "indicator--c6e56ea5-3f1f-49a9-9456-320b1b0229ca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125c17e6-15dd-4707-a2fd-0ee706c83be8", "sighting_of_ref": "indicator--3fc27d21-daeb-432b-b456-c50379124f43", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46aa4d0b-a9d0-4896-a4a7-2d6117cb8f46", "sighting_of_ref": "indicator--811f2556-a331-4b98-982b-f747ee5acb5f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a455a75-995c-4efa-8576-384752b23a8e", "sighting_of_ref": "indicator--f2333f8f-36ef-47f2-9d99-8c38e91ef2bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be721d7-f4a1-44aa-bf4b-e0f5af2fb353", "sighting_of_ref": "indicator--a93ebab8-b7c3-42b5-9fdd-0eab959b209f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bda497-c4b5-4b77-b796-8188b03a7a4e", "sighting_of_ref": "indicator--7290bda9-3e51-4139-90ee-ead7566e121e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c06da8-c32b-42fa-b01a-5ec9b983ac8c", "sighting_of_ref": "indicator--eee1e400-6676-4acf-be16-72ba576377e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72eea48-7502-4585-8f92-684239c254f4", "sighting_of_ref": "indicator--c447d516-9673-416b-bd24-35de596585ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cc5a9e-e65c-4730-a142-47465a490751", "sighting_of_ref": "indicator--681ba948-353a-463d-95a1-eff8f4199ac1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f736436-c204-42f5-a272-e2608eee8b90", "sighting_of_ref": "indicator--681ba948-353a-463d-95a1-eff8f4199ac1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d936ef59-f5b6-4199-bca4-199a11318c44", "sighting_of_ref": "indicator--41f0a357-518b-4d36-bc3b-e05a5ecbd695", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92239075-c1f8-4f1e-bf92-4fac8326b208", "sighting_of_ref": "indicator--6fbe0ab9-f250-42a1-b7eb-294b8cda0b7b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca946aa2-f1dd-4e80-97d5-2d1cf4d725ad", "sighting_of_ref": "indicator--2bedff25-0e0d-4517-83c0-866246290def", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b12177-1bf8-4780-ac49-2095d5a78768", "sighting_of_ref": "indicator--ce35812a-d454-48aa-8d4d-97c95549ca10", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0939d66b-c90f-481b-b856-15407d373ce8", "sighting_of_ref": "indicator--ecf40010-5038-49f1-b8f7-36d79f8493ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93305fcc-6e05-42a7-a860-ac51e591de31", "sighting_of_ref": "indicator--65ddc6eb-1318-49dc-ba0a-fbfaf59add98", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b8abf5-846f-49aa-a973-8485e03e93ea", "sighting_of_ref": "indicator--162904c8-d0ba-46d8-8a02-7b9dc18d54ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f6d3b4-e424-4b9b-bac3-9f02d0f88b98", "sighting_of_ref": "indicator--87e8e70d-7e8f-458b-86d0-40fab0046fb6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dbbfe3-0da2-43e5-aeea-74ea1c62fb15", "sighting_of_ref": "indicator--0ebd89d5-e06d-4177-88ea-c72a32347362", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a27da51-2f26-4f23-98b1-57ea0c5777a9", "sighting_of_ref": "indicator--c5f5a9e2-c873-4227-bb46-a6f29bb8c01d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8f0d32-d4c7-4d58-a2e9-49b9865a85c7", "sighting_of_ref": "indicator--df299341-da77-4102-870d-4fd3a0fa540d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d4ad00-a5c1-46e1-8327-9db17f2469be", "sighting_of_ref": "indicator--db67d3dc-f2c0-4074-ac5f-fbfaa5edca77", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1466a4a-a36f-4e70-88d8-0eda682898e2", "sighting_of_ref": "indicator--8c42edfd-2ce7-4ec4-bed1-944606b389be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cc8b06-8731-4e43-abd7-b0b1d500ecad", "sighting_of_ref": "indicator--f4df4a35-a19c-4ec6-b0ca-496b41e282b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128e8270-31ea-4637-a5bd-936f7323d0bd", "sighting_of_ref": "indicator--89215621-bc48-441e-969f-1219ec719d1f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534818b1-4a89-4251-9241-dcff37f257ce", "sighting_of_ref": "indicator--14ed12ae-9481-4a35-8599-db2a8d3ae649", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a9fa7f-04ea-4abf-8ec0-3f352f4079e5", "sighting_of_ref": "indicator--bf6a5b99-8284-4d9e-ab57-04f74d65512f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbdfa5b-e71f-4c5e-b27c-2cfe11243db6", "sighting_of_ref": "indicator--fd1e3c44-18cc-48c3-a4a5-47f16a44012f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c0386e-3cca-4860-bed8-0ae44cd029ed", "sighting_of_ref": "indicator--8c8a4b27-ca31-46a5-aa35-cb774706ba07", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c736951-aa30-4fdf-ad86-ef512f2a5db1", "sighting_of_ref": "indicator--dc8d6259-b5e4-4795-82b9-c6e4cd97e974", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16936648-56a5-4f4f-97c2-c6891a9851d5", "sighting_of_ref": "indicator--dc8d6259-b5e4-4795-82b9-c6e4cd97e974", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d58da3-d649-4b71-a2e7-32c34e1064cf", "sighting_of_ref": "indicator--6a7a4706-0ac2-4e98-9226-41ad2cbc782c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a0c5b2-e3ff-4219-b25b-ebbd5ff124a3", "sighting_of_ref": "indicator--523a0007-4f1e-434a-aedc-6d82d10cb5c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77cecb3-e608-43a8-914e-820d718b8bce", "sighting_of_ref": "indicator--68450722-0c61-4f15-bd9e-4860ec91623e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f27423f-b33a-4db7-b029-2849745852ac", "sighting_of_ref": "indicator--dcee73c1-11db-4172-b140-af383c740840", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7120af1-8fd7-4c6b-9a3a-2d66092decf8", "sighting_of_ref": "indicator--2bbe3bc7-dff7-42a8-b90e-ed697a370c74", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee0c5f9-5bb4-45a0-8dbb-7a27c11858e9", "sighting_of_ref": "indicator--aba52a62-4d29-46e4-af3b-467edbd004bc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff5de38-7a6c-41c0-8cba-3cf3f8fc2428", "sighting_of_ref": "indicator--ba64b5ca-e2c0-46c4-a734-6e7cf8e005ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7520a2b8-9707-4c1c-a808-d9dcc99fdb3d", "sighting_of_ref": "indicator--fb621e3f-4491-47f3-9e04-94ad1be64757", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718c0ae0-6041-42ea-8528-90b79208c758", "sighting_of_ref": "indicator--27f5fd89-14d6-4a10-9e85-f51aee4b5417", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16d1170-cd20-4af8-b0ed-7411251b69b0", "sighting_of_ref": "indicator--ed2a243b-fafa-42bd-8065-4d962f58f44b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7175598-88f2-43b0-ba93-03516f5ed35c", "sighting_of_ref": "indicator--c6fcc884-031f-4b64-9015-ab0365c3d619", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af6494e-e6a2-4349-a501-c1064cd2b29b", "sighting_of_ref": "indicator--504ac72c-1003-4750-9596-9dc5dd068d9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ddee57-531d-4fe7-bfd6-8f9e23915d33", "sighting_of_ref": "indicator--0799b7f1-6b2f-4af1-8a33-33fed3e6ee32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a117249-b4c3-49ff-b094-55099b0bb2d6", "sighting_of_ref": "indicator--8b5119a4-cd20-4168-b85b-e1a5336cd83b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd5f7cf-7b45-4403-ad12-f1e1c0fe807c", "sighting_of_ref": "indicator--3dbadac5-d0ab-4a77-9e36-c62de8affb4f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831b6e29-edb9-4c57-a7c3-bd3ce0e5aa88", "sighting_of_ref": "indicator--59db964d-eca5-4d97-814b-d30abf2de172", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9590aa4-6029-4c78-965f-7b412e091f70", "sighting_of_ref": "indicator--75af84e3-3ff9-45bc-b8c9-f1dbee720587", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6179e5d6-20bb-4522-a36d-8d87065d1b28", "sighting_of_ref": "indicator--86030e37-e6de-488a-9852-3a053e766176", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e95eba-add7-4e73-a4e5-d8d127b35ea4", "sighting_of_ref": "indicator--98249b0f-beea-4de9-8af9-13d4cfcc8a06", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f03bf51-5108-4256-925e-76d87917364f", "sighting_of_ref": "indicator--2dd24af8-413b-454f-9abd-d2974d6e5afa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d6e745-7e05-404d-96cf-42848d31a405", "sighting_of_ref": "indicator--3d84e313-8d69-4a77-bfb7-23dea19033ad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc9a84c-c924-42fd-8727-066870eed676", "sighting_of_ref": "indicator--b94057ec-6bec-4cd3-af9a-cf20adff0c3d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b604893-1e73-4274-9ba9-6bfd9a33a358", "sighting_of_ref": "indicator--4583ffb1-c46e-4dd5-aad6-7e09bf06faff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba8afe2-925b-44f2-b244-37a5ac297ef0", "sighting_of_ref": "indicator--833cde93-8400-443b-b437-1c78e73ba1c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be9e95b-297e-4177-9df8-e6a6760ee1ef", "sighting_of_ref": "indicator--ee089865-11d2-43c9-9241-319ec1876395", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41507d72-ce59-45a0-894d-671464b8068d", "sighting_of_ref": "indicator--9ba56340-5718-4b1b-a014-bd3be46d56b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f093f63c-3390-48d4-a4b2-f88a1092ba1e", "sighting_of_ref": "indicator--d1139ac2-d05c-4f6b-8399-3fc06cd6673f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd99e24-a8ce-4e61-b06d-a32ddd9a4455", "sighting_of_ref": "indicator--ce9197e2-2526-4d67-8f23-fb3ba45bd352", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f7d5ec-0d29-4a48-9fd2-6426b987761d", "sighting_of_ref": "indicator--5bbd4014-34b4-4ea7-b1eb-d33bc397de75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3e9d2d-ff48-46a0-9bdb-196f46677b39", "sighting_of_ref": "indicator--52f4bc89-73a7-40c4-8341-b8f90dd4a581", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54eadb9-f11c-41d1-8bb2-3beb54cc533d", "sighting_of_ref": "indicator--c8934dc3-c7a1-4544-baf8-c966d3531aa7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c134dc1d-56eb-44a4-9e5e-6aa1a70f801c", "sighting_of_ref": "indicator--ea95e803-9c60-4028-944e-711adee42106", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a971371-27c3-42f7-a472-ad04456a7bf6", "sighting_of_ref": "indicator--0aaa8c1f-62f4-48ca-8663-6923a0b39526", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ea078e-11e4-4aed-80f2-c17a4a7730ea", "sighting_of_ref": "indicator--54850e25-c0cf-40b2-84ff-a01fe6cac220", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c8c588-6695-4b14-a911-d16193d6d73f", "sighting_of_ref": "indicator--6db9258b-aa1e-43c2-acdc-2c2a73d109dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ebaa28-8ea7-4ae2-b169-27f6d7f143a7", "sighting_of_ref": "indicator--6753938f-0354-45fc-8362-aa145e818377", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aaaf0fa-cf4d-400f-bf31-f5bbb92810ef", "sighting_of_ref": "indicator--dcf34970-23b9-435b-af4c-389c037c8b3c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8b7430-4ad6-4775-a4a4-0883c6c761c6", "sighting_of_ref": "indicator--dcf34970-23b9-435b-af4c-389c037c8b3c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89916919-212f-4720-9f09-6b2869fef9b4", "sighting_of_ref": "indicator--de944d66-a1b5-4327-b079-9d596318560c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26807c5a-a4c0-450a-acf9-317c3cd3d432", "sighting_of_ref": "indicator--bacd1ed1-1d35-4996-b774-b8d8343c8a3f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0e4643-4788-489d-a7e3-5b0624c608c5", "sighting_of_ref": "indicator--c7b2e8bd-8e49-43ea-b9ed-7a77e5baca09", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f3692a-db34-4b8f-96fa-ba1971a7622f", "sighting_of_ref": "indicator--c7b2e8bd-8e49-43ea-b9ed-7a77e5baca09", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b1c791-c133-4c68-9e50-a53a10cb2b68", "sighting_of_ref": "indicator--48c1bc0c-ce73-4dcf-b687-1745a84e44ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d07424f-e7f3-4327-9b46-c06927cb8bf8", "sighting_of_ref": "indicator--d65ff320-10ac-4f52-a96b-65dda011f75b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450662a0-23b3-434b-af91-a8b34ecbf471", "sighting_of_ref": "indicator--23ecc690-d7da-4c19-9e73-332d575b0283", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e754af18-d9a1-486b-997f-d12505977134", "sighting_of_ref": "indicator--23ecc690-d7da-4c19-9e73-332d575b0283", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823855ee-66e9-45e1-85c1-7043aab3a21b", "sighting_of_ref": "indicator--fc804cdc-4c17-4a7d-a3b7-5225d250d640", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce1d696-aaa4-48ba-aef8-7cf960b43408", "sighting_of_ref": "indicator--f83f71c7-2115-4d2c-b53b-f9428bcb54ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8eb320-142b-4138-995c-3d37810098c0", "sighting_of_ref": "indicator--01e42a17-ddcc-48e1-b61a-d0a325deb93b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831c44b1-7d42-4125-a6e1-b05fe6a48777", "sighting_of_ref": "indicator--2ff221b0-ffc5-4cd7-9fd7-94d910ec6468", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ad1083-f577-4cb0-b16d-0338417cb538", "sighting_of_ref": "indicator--260200ac-7fab-47bb-b516-6ed99a7e018f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65e3de7-cc91-4b50-aa79-4f8c69a96ac6", "sighting_of_ref": "indicator--c62ff6dd-a0cb-4901-b9b7-8545956cb813", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ca7670-fff4-4990-ac4c-bc13d24961f7", "sighting_of_ref": "indicator--c0a6889a-76bb-4c5d-b900-f8a8470f283a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95c58ef-8a1a-452b-9b39-21aaa2cb9635", "sighting_of_ref": "indicator--9f18ddfa-6871-4331-a6ef-05445eafb7f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d153904-7927-459e-90c7-628a8131ac4e", "sighting_of_ref": "indicator--7cd88f39-06e4-4b98-a4ff-60505fb1b824", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba6be9a-6c66-4ee7-8c08-e16770f8fb46", "sighting_of_ref": "indicator--5f25640f-929b-4d69-ab0a-5642372b27a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f916c6-f59e-4d5b-9b8f-d68945583165", "sighting_of_ref": "indicator--99080b62-f067-454d-bce4-cd4174dbb1c3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa624786-109a-44b8-8902-6c314cddc1aa", "sighting_of_ref": "indicator--1b3b10d3-bc30-48fe-8ab7-f659069fd2d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bb4232-caf0-48c6-9ac3-002946b22d2a", "sighting_of_ref": "indicator--46eacb70-5fa0-4179-9b5f-8be98e9e4841", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea57583-5a81-4119-8cb0-cdeaddaf5815", "sighting_of_ref": "indicator--84e1a157-871b-44c4-88e7-b9f502978d50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0b36ab-c57c-46f5-a12f-0669303e17b9", "sighting_of_ref": "indicator--f837479d-0b8b-4ff4-a3cd-9549c2f457f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101a12ab-a0b7-4f1b-afec-b8d9c5b1e34f", "sighting_of_ref": "indicator--541cc70e-8931-473c-8ad5-f0df25e3cf96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81765f7-f92f-481f-ae12-8b0e3520a645", "sighting_of_ref": "indicator--2155556c-277f-4180-9520-dcebd1acdb80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858dc51b-de12-4f79-8354-b23a0f96500a", "sighting_of_ref": "indicator--c9b02c5a-d723-4c73-9b81-9e6e87945fe3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a678bf8-2d64-4d70-a737-6a739c5215ee", "sighting_of_ref": "indicator--e9860967-725f-48b9-9706-32bf3870f475", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67491d5b-c023-4ec3-8500-6d5acc0e6533", "sighting_of_ref": "indicator--b4e36b92-ce75-4144-ba01-905e568cb0f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1164d28-64bd-4d11-a64b-e978c03b6fa0", "sighting_of_ref": "indicator--3030f744-d652-4ecf-b151-7bffc4ea1f0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487b5d2a-242d-4219-9e6e-ffe5333f8d44", "sighting_of_ref": "indicator--5f013ed7-4706-4da7-a2ae-1dd616cc45f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e790bc-5591-409a-8d3f-2e1514921216", "sighting_of_ref": "indicator--ddbdcf96-8aa7-4440-96eb-413cacd59de2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b000dbd-32c7-4faa-849a-c111858b35a8", "sighting_of_ref": "indicator--8761ea95-f787-4c7f-a2b1-e07c7b6a2e28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da517529-37ba-4983-b9a2-112b44f52479", "sighting_of_ref": "indicator--386a498d-ff72-4207-b361-3311983a8550", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46338200-359f-458a-87f2-360b8b82ac17", "sighting_of_ref": "indicator--bba84898-1ce6-4721-9d12-7579d7dac7a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1ee31d-1af1-488a-95cf-69ed37d1e617", "sighting_of_ref": "indicator--bba84898-1ce6-4721-9d12-7579d7dac7a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771b5b9b-e4e7-458f-91ca-372ae71b2f93", "sighting_of_ref": "indicator--e57886bf-4bbf-4858-bd29-e0c828fd0114", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa43e01-854c-4c2d-a7e1-7a3c38d6f023", "sighting_of_ref": "indicator--dc6f7a40-0a63-48cb-9cde-3a028ba760f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e685fc-f976-4c00-9631-ac7d2de67dbf", "sighting_of_ref": "indicator--5dd5b098-259c-4775-92bc-dce4f40fe643", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f96b2f-6887-4fef-8c40-aabee83740a2", "sighting_of_ref": "indicator--3b0910a4-3ffc-4f74-a7a6-842a985ce554", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6e6439-ecb2-415b-a120-66e2979db4b3", "sighting_of_ref": "indicator--ebe18ef4-11a6-4bb9-9a92-de7b39f6bb61", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c3eaff-904b-4dab-b9a3-40d755c769a6", "sighting_of_ref": "indicator--6d9f7860-ff10-4925-a073-a6ebb6b4a5b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54733ade-9164-445d-a2f3-6e610ea34f97", "sighting_of_ref": "indicator--6d9f7860-ff10-4925-a073-a6ebb6b4a5b9", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0811cfd3-d350-4cea-bd70-b249341832d0", "sighting_of_ref": "indicator--6d9f7860-ff10-4925-a073-a6ebb6b4a5b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640f67eb-5cee-4350-8555-7f73c6fc7783", "sighting_of_ref": "indicator--166effec-ee10-4a42-a0f6-d12d4fa89202", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee5cbc9-3488-4329-a3a2-a02999f55247", "sighting_of_ref": "indicator--12479beb-3519-41eb-9a2b-a3e69303c513", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f174e9c7-1cef-46e8-981e-74eab2ce77a4", "sighting_of_ref": "indicator--3bb456ec-766c-40cf-871d-ccd64f932004", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60c3aef-2e86-42a9-891e-a96d3fba22bb", "sighting_of_ref": "indicator--2de53a36-5ef3-4c90-949e-fc38044b69ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28d3f23-00b7-4639-b3a0-6303cf1ca84b", "sighting_of_ref": "indicator--ecf1694c-2618-4496-9d56-14c15b2df92b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f98ab5-af8f-4fb4-ac13-85d15bb213c9", "sighting_of_ref": "indicator--61df1831-8af8-4a55-8bae-f9b3f80699e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205d743e-a95e-4981-99e2-4dd2dd2b0f32", "sighting_of_ref": "indicator--ab14890a-91aa-4fee-b6c3-26b7bf813de1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8443cae9-1b97-40da-bb1f-e26f74fa3c7a", "sighting_of_ref": "indicator--2c551d09-d8cd-4d12-85ae-0abf7200ed32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b952b9-6c33-4592-ba64-3929ca350668", "sighting_of_ref": "indicator--2c551d09-d8cd-4d12-85ae-0abf7200ed32", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97931fbf-a2ba-49a5-bbd2-d10d85bcc889", "sighting_of_ref": "indicator--49667341-0b3b-44d3-99cd-4a5dd5fccc07", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821ab30f-3531-488f-a004-42535cd197dd", "sighting_of_ref": "indicator--49667341-0b3b-44d3-99cd-4a5dd5fccc07", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6542b6f-51df-46e5-8864-a7f0ab0d9a82", "sighting_of_ref": "indicator--49667341-0b3b-44d3-99cd-4a5dd5fccc07", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9158cd9b-e660-47cb-9851-7e9d8fb4962d", "sighting_of_ref": "indicator--3ac13ba8-8914-4123-b2da-17fd011b85cc", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d33ef7a-1d22-4c83-b9ce-0d7a1687ac15", "sighting_of_ref": "indicator--343e7ca8-34c0-4d3e-b6e5-5a3e6ae6b95a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600bdd40-96d8-4d32-8a57-41dca07ed508", "sighting_of_ref": "indicator--c3f61ffd-b6bd-4013-aa90-a51391af1d53", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d613491-2c47-40a0-b356-adb11945cd85", "sighting_of_ref": "indicator--705d7e27-1e2c-4f99-963a-5bb5e8bc41fd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bf5643-67e9-457d-93c9-2da72ac3f448", "sighting_of_ref": "indicator--b7ce05ec-9712-4df5-9bd6-177e75dd8e37", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d96af26-26e3-46a6-a24f-90b6d5bee983", "sighting_of_ref": "indicator--6e062889-a50a-4d75-b64d-e647ea4dc733", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0646394d-d7b5-41cd-a152-a56043ba31ee", "sighting_of_ref": "indicator--8d06040f-62b0-43d6-8d0f-e5731fc5d065", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41786d46-4430-4ddc-9119-98114b72af83", "sighting_of_ref": "indicator--8d06040f-62b0-43d6-8d0f-e5731fc5d065", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68b7bb4-b713-4a47-8ba1-ed0f1d3ee223", "sighting_of_ref": "indicator--11cf660b-2772-485b-8b1a-8eb557a72b4f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db65d03-0b8c-454b-befd-c2c92e318ece", "sighting_of_ref": "indicator--11cf660b-2772-485b-8b1a-8eb557a72b4f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416e0e9b-995d-4daf-bb03-3396a975defb", "sighting_of_ref": "indicator--4e128246-e091-4527-8877-81266531c0df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139ef961-bbce-4ac0-9d98-fe4d11a9ebcd", "sighting_of_ref": "indicator--4e128246-e091-4527-8877-81266531c0df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec51b7c3-1a70-42ae-9178-73f7704cd00f", "sighting_of_ref": "indicator--b4308567-3758-4e25-85e6-59f7760fc466", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b721a27a-5358-4b99-b1ad-bc25e49e0f06", "sighting_of_ref": "indicator--b4308567-3758-4e25-85e6-59f7760fc466", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bbbbb8-7bb0-4523-a600-620e980eb160", "sighting_of_ref": "indicator--838bec62-6755-4021-abec-4534597b58ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12c8cb2-604c-4f82-a737-cf02ce876724", "sighting_of_ref": "indicator--838bec62-6755-4021-abec-4534597b58ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beceff93-5707-471e-b898-175e48a6f960", "sighting_of_ref": "indicator--857461f7-730c-4661-b8d3-84d540f7022b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4dded7-af39-410a-af7b-bf63538e1735", "sighting_of_ref": "indicator--d4b4bc61-4832-43f6-92c8-6c51a6c1a394", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcb622a-6a7c-4c8a-a43f-7fe51c96b10b", "sighting_of_ref": "indicator--d4b4bc61-4832-43f6-92c8-6c51a6c1a394", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d01648-13bc-4dd8-b7df-cb11fc7c3542", "sighting_of_ref": "indicator--536c76c4-180b-43c3-b3da-4c1bcb11cd31", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a0b8ee-e853-4c7f-91b7-3d257a5d42ff", "sighting_of_ref": "indicator--536c76c4-180b-43c3-b3da-4c1bcb11cd31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dced59-1b20-4fc4-af59-a75fb2b705ef", "sighting_of_ref": "indicator--0656cdc3-c185-4388-944d-b59bf6be5ea1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df70573e-a09a-487e-a886-94756b92d87d", "sighting_of_ref": "indicator--0656cdc3-c185-4388-944d-b59bf6be5ea1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce52164-24e5-4400-a904-7b17ea4b287d", "sighting_of_ref": "indicator--8e87559e-e59a-4174-8fb6-2c00ca6af551", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bd60e2-a8cd-45ad-b9ab-2b3191b6b9f0", "sighting_of_ref": "indicator--8e87559e-e59a-4174-8fb6-2c00ca6af551", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90f2e4a-47e8-405b-8612-8ca44374e2aa", "sighting_of_ref": "indicator--f07df6b3-9d0f-4e1b-8fe1-05a0cbcbb81d", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b9c548-3740-4289-9bf5-cbc4f50d865f", "sighting_of_ref": "indicator--2b339159-0f5c-4760-91df-980d25b9fd7a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9125182-d8a9-43d1-b874-ef5e8c8e6db7", "sighting_of_ref": "indicator--c0a89918-fc07-48b7-963e-59a70d2d5e27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ccb0e0-fa04-4897-ad83-8a3d727451cb", "sighting_of_ref": "indicator--5965bc64-3854-4f18-9bd3-aee114393c25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00290f51-ebce-44ea-a196-5218817fb0bb", "sighting_of_ref": "indicator--67ef88d6-6ce3-451f-8df3-ee5657614a35", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8881b2-0671-4c78-95a2-fbd4cc92178d", "sighting_of_ref": "indicator--37adb057-045d-4355-83d6-0558dc19f11e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73540162-80dd-46ab-9345-fcb635d85d44", "sighting_of_ref": "indicator--ced889ee-3b7a-4b02-938d-d9c66cd217d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0f5ff3-0b80-4d3d-ad56-31ed7ec99723", "sighting_of_ref": "indicator--c7f51d8e-77f9-4c94-8c79-13b119d344be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d38d5a-83d1-472f-91a0-4e35f2ad78c6", "sighting_of_ref": "indicator--c7f51d8e-77f9-4c94-8c79-13b119d344be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760a38e4-74b5-491a-b4b1-7e695c5377be", "sighting_of_ref": "indicator--6767b5aa-3469-4cf9-9fed-db3d3b5d083b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69568a70-f2df-4951-91e1-49cbc95b5156", "sighting_of_ref": "indicator--6767b5aa-3469-4cf9-9fed-db3d3b5d083b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c313c5d-e3c7-4359-bfdd-81490d8fe319", "sighting_of_ref": "indicator--efbbf155-2526-4a9e-bef5-1cc92175bfda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bf5118-1173-4aec-ba75-8c9424af087a", "sighting_of_ref": "indicator--c2e76fef-f7bc-431d-9545-114246376c8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ec5308-43e2-4af2-b62a-0b01549cea50", "sighting_of_ref": "indicator--67019cec-6d4b-4efa-8ff5-0cf001c14f33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96869331-946c-4068-ba4a-87570fa0d08b", "sighting_of_ref": "indicator--c407cc61-fb68-4c7c-b052-abf90138bb40", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d40166-ed33-43d4-8284-27bda0c29702", "sighting_of_ref": "indicator--55e6683c-e5eb-42f2-af40-d3be200d6f73", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9b06b5-8352-4b90-a1cc-8419ac3164b5", "sighting_of_ref": "indicator--55e6683c-e5eb-42f2-af40-d3be200d6f73", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03150a46-a655-462b-b399-a3223e23a696", "sighting_of_ref": "indicator--953b7a2e-9f22-435c-af2c-79df705ed7d2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60110e18-66e7-44d7-9176-99df41210239", "sighting_of_ref": "indicator--4e3ab42e-ac6c-44fa-a053-48fd67358b75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3149f0e5-4116-4965-ba3f-57ce834eaac1", "sighting_of_ref": "indicator--65e35e91-ccc0-473c-9104-ca96f26eddef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82558e20-9533-4cb9-96e6-6f3b285d7da5", "sighting_of_ref": "indicator--936d3ddc-2f63-4fe2-a5ff-a5a0fc1b71a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c5f6a4-e893-402e-8268-55e62d2ba44b", "sighting_of_ref": "indicator--d7f7c7cf-acf4-48fa-b80d-3429f67e1adb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37e8261-c3c0-4b11-83f3-b8758d86e164", "sighting_of_ref": "indicator--95519dbb-9a4d-4bb5-98e2-cc8a7a026472", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c764a81-a124-4736-a70f-fcff98dac428", "sighting_of_ref": "indicator--04571616-9aa5-4888-8877-6570c717a135", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33990c25-5cf3-4ba9-9c5f-d9c1d39cfa6e", "sighting_of_ref": "indicator--19a6ad67-5ad3-4588-b063-f66a05ac25e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32526417-9a54-48e1-b5b2-166be8c3153f", "sighting_of_ref": "indicator--6447d9cb-8a80-4ac2-9d2d-c7b685fb0218", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd9bb9e-37a3-4842-9d7a-8925f9445b36", "sighting_of_ref": "indicator--5916ffd0-5cea-40f9-8180-d91dc5c944db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37a7255-cc78-458e-8c88-9e3a695a6117", "sighting_of_ref": "indicator--5916ffd0-5cea-40f9-8180-d91dc5c944db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b81defb-037b-4365-875f-722df2d8ba75", "sighting_of_ref": "indicator--5bb9f216-7c0b-44b5-ab68-ef1979db8fb0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475f5ad5-cd66-4e6c-9fbc-b296ef4ea826", "sighting_of_ref": "indicator--6421dae1-49f3-4750-9f50-426b2a813e4c", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd442b9-16df-421e-92d1-4d9ea2449667", "sighting_of_ref": "indicator--54cf643e-ecef-49d5-a7fc-e0d7d6af7fee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0533adb0-a989-498a-8e7e-df02119364bb", "sighting_of_ref": "indicator--54cf643e-ecef-49d5-a7fc-e0d7d6af7fee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca5ac2b-e50e-490b-98b9-46a592606036", "sighting_of_ref": "indicator--3c0216f5-116e-4893-9457-d89e98bdd628", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d665b7-57fb-4a06-af4b-faaae0947680", "sighting_of_ref": "indicator--3c0216f5-116e-4893-9457-d89e98bdd628", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc64998-83ac-40a8-abcf-9660fe1e49eb", "sighting_of_ref": "indicator--b9f30cc0-c9ef-44bb-8c05-38ce7af3ff33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328613d1-80d6-4292-8350-6e91b837e371", "sighting_of_ref": "indicator--64025007-d07f-4ab1-8aa1-3fcebdf45c8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066e66c4-3ab3-45c4-9f19-27beebc30035", "sighting_of_ref": "indicator--a4343f37-f601-431e-8d45-2da981503e68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bd991e-6395-4390-9c94-7e31b04ea872", "sighting_of_ref": "indicator--f7646e5d-de85-4abd-8052-7409b9cd45ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951619e0-b994-4a20-9b0a-9190ddd425a1", "sighting_of_ref": "indicator--6fb646d7-1c5a-4145-81c2-8680bdc5043e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337dd188-b38e-4adc-a835-b060f6954ccf", "sighting_of_ref": "indicator--d574b406-be38-4df7-83e0-4eb2f20b91de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6e5d4e-82b8-48a5-8a45-f0328ddfb8f2", "sighting_of_ref": "indicator--d574b406-be38-4df7-83e0-4eb2f20b91de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4836a6-775e-4928-82e6-52247e8317e1", "sighting_of_ref": "indicator--07f5d948-c2ec-44e5-9202-3fee11c4dd5a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997138c4-e7f0-4def-b01f-7fcbcaa6e017", "sighting_of_ref": "indicator--07f5d948-c2ec-44e5-9202-3fee11c4dd5a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03361f3a-d417-4cb8-9293-585f21e5b63b", "sighting_of_ref": "indicator--1887e318-7643-4ea5-8c9a-4405879219c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac985445-424e-49e9-96d6-790293c0714b", "sighting_of_ref": "indicator--1887e318-7643-4ea5-8c9a-4405879219c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51376468-41ae-48ee-8cec-1d314b8a8442", "sighting_of_ref": "indicator--4fd2ee5f-88ba-4cd6-b13d-5adda6c21ddc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ce1e1a-f7fc-49ca-b258-ef8c89b0cff9", "sighting_of_ref": "indicator--4fd2ee5f-88ba-4cd6-b13d-5adda6c21ddc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef7bd5a-fe96-4738-a73a-d47107b8c20e", "sighting_of_ref": "indicator--43f26b5b-bdbf-4db1-a6ab-4b97d54e94fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3484b610-a6f3-4c17-9c55-135a4a9afb0b", "sighting_of_ref": "indicator--f5b1bd34-bef9-4931-8d37-f3818b586631", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25cfca8-742f-4f9c-869c-4b347f15e03f", "sighting_of_ref": "indicator--8e2ac632-e495-4280-a7f5-fbfa5df98c69", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a41b53-13ec-4393-89ec-f89911663381", "sighting_of_ref": "indicator--8e2ac632-e495-4280-a7f5-fbfa5df98c69", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7b02fa-dab6-453e-8646-691aed13ddc9", "sighting_of_ref": "indicator--5e480845-c7b9-4762-b837-885ce66f4596", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358f8a06-01d2-4bc7-a869-37e839f4f580", "sighting_of_ref": "indicator--f1cfcc7d-06c7-4019-a67f-33cc19d2269a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf63f59d-0f26-41a2-8358-4507ef5330a4", "sighting_of_ref": "indicator--f1cfcc7d-06c7-4019-a67f-33cc19d2269a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fba806f-4f58-48cb-9749-a43d03cfcd11", "sighting_of_ref": "indicator--2571d626-5e2b-436f-b239-e845120bb814", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4355cb9c-f6f1-4769-85f4-935969bc485b", "sighting_of_ref": "indicator--2571d626-5e2b-436f-b239-e845120bb814", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1084eb9-497e-44de-b64e-cc2c4f01b0ac", "sighting_of_ref": "indicator--87028556-7204-4f15-b71f-500ff149ec89", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca66589f-9b25-45d5-9926-58ed0b89476e", "sighting_of_ref": "indicator--a17a5b0b-eedc-4a32-864f-65ccfb06bad0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d91c2b-4d66-4c47-9a02-7e7432d728fd", "sighting_of_ref": "indicator--a1650809-0daa-450c-9f1e-04eafc162825", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4636e9a1-1458-4076-8a52-6bc18459dc27", "sighting_of_ref": "indicator--6caba5c2-8de9-4628-be40-23938e0ba4cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3fcfc0-d100-4ef4-9d43-325d7a8a97ff", "sighting_of_ref": "indicator--7e678c07-9a91-4589-af30-77f52a4b4d86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591751c1-c5b0-42f8-bae9-560858507293", "sighting_of_ref": "indicator--fc256b92-18df-4e8b-97c0-719eee424140", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffc594d-44f6-4948-8954-49c579424bac", "sighting_of_ref": "indicator--4208f88c-60cc-43da-87c4-83bda8a9579b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37dc7ec-d2cc-4f29-958f-e8d3b1c89937", "sighting_of_ref": "indicator--fdd4cfd2-62bf-4071-94ec-1e6552743211", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce89ab56-0af5-40da-a198-4ed5daa9435a", "sighting_of_ref": "indicator--5f66d13f-56d8-4f63-b62d-26327983e979", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820aba71-0e12-4569-b4e9-6eeb5e3c99b3", "sighting_of_ref": "indicator--5f66d13f-56d8-4f63-b62d-26327983e979", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c3619c-d774-49e4-ab2c-93605d8d97b1", "sighting_of_ref": "indicator--a63b829d-a12d-4576-9cc6-8363b08a5351", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2aee73-e70b-414e-91e8-57259206fcce", "sighting_of_ref": "indicator--49013efe-e99d-46fb-801e-e5bd6df54a96", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08529d1-1689-4497-aeb1-803b79934804", "sighting_of_ref": "indicator--49013efe-e99d-46fb-801e-e5bd6df54a96", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550a4a96-629d-4477-a617-4e798da5ec3d", "sighting_of_ref": "indicator--49013efe-e99d-46fb-801e-e5bd6df54a96", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d2b950-470c-4b66-9621-2811d4d9245d", "sighting_of_ref": "indicator--51f7b270-d65c-4482-8ef2-1faedd6c2db7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b6ee38-51a9-497a-8866-de2a0b91f342", "sighting_of_ref": "indicator--fa3347c4-cdb4-4bab-819e-b33a3d151fca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ed072b-9bb1-4e58-bac3-afc8abaddcc8", "sighting_of_ref": "indicator--fa3347c4-cdb4-4bab-819e-b33a3d151fca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5a3e4d-a54c-489b-9218-ff2d5e714f6a", "sighting_of_ref": "indicator--5992ca28-ea93-4037-9292-df8317a99845", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b4fdc5-5bbc-4c54-8ce3-88dfbb704fda", "sighting_of_ref": "indicator--5992ca28-ea93-4037-9292-df8317a99845", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81183d16-d179-4903-a35d-02aab9ab7697", "sighting_of_ref": "indicator--7102983d-928e-4be1-8379-c9b6fb1d4c01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6b1f0b-4ff0-47be-89c5-b820a0167e12", "sighting_of_ref": "indicator--7102983d-928e-4be1-8379-c9b6fb1d4c01", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f251c1e9-5197-44fe-bbdc-f9c06ec0f280", "sighting_of_ref": "indicator--006f7b50-b117-470e-9196-2bdce1d14c75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e9ba45-e750-4c99-a018-a25b79e5e4d7", "sighting_of_ref": "indicator--50a35aa0-be5f-4210-8b31-5e927b328d02", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8dd416-612f-4bdc-a88c-74b1f2c197c1", "sighting_of_ref": "indicator--8b6bce2f-07cd-4408-9242-075b08f7fa25", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48973ea7-ea5a-4749-9acd-4e9fea33a73a", "sighting_of_ref": "indicator--8b6bce2f-07cd-4408-9242-075b08f7fa25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dca1fc-59bf-4a2f-a869-d065e0b4f431", "sighting_of_ref": "indicator--7f8a6144-4f33-4ac1-b089-5360debd8a11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae419a2-8422-4ce3-962f-c6e316d5e2d4", "sighting_of_ref": "indicator--76af443a-8155-4f71-bd74-030bd4d018d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17687a9e-7e0a-41df-ae9f-cb0ca3c5e270", "sighting_of_ref": "indicator--525ec2b1-8d34-4e2d-b3ef-b6d829615684", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f87796-d735-40b1-9984-8351e3321cb5", "sighting_of_ref": "indicator--d5c99bc7-d8e0-4992-91ec-b411e967eee3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b91429-3297-4453-a541-4f7dedb4f051", "sighting_of_ref": "indicator--3e3ebeb0-dd36-4b47-bbb0-70341a3dcc27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782ef2e8-1d64-43f2-ad1c-0dbc6e6fbb65", "sighting_of_ref": "indicator--d72e7b28-a249-4f1e-8bfc-80fdafe3eeb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c122f154-b3cf-4afa-8c7f-1ecc36c4491d", "sighting_of_ref": "indicator--dfffbc45-4753-49c2-92f0-5926f5f46391", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7624db1-3be4-4068-850a-4358516f9b00", "sighting_of_ref": "indicator--e1ffa2ad-9dbc-491a-bcaa-6f5458e0916a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f743a29b-3257-456d-85af-7d3dd3431a7f", "sighting_of_ref": "indicator--65db3db6-1238-4064-bd30-22138511716a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94450db7-f7a8-4bd4-8939-221d8bf61058", "sighting_of_ref": "indicator--235922d3-56ef-4382-9d4b-b53796fa3d09", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6090ed10-6d77-497c-abf2-191608d77c8a", "sighting_of_ref": "indicator--27b2d648-4caf-4759-a751-169faeae36d2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255356cf-947f-474f-9e99-02c14ec08784", "sighting_of_ref": "indicator--2945e0fb-6398-41b5-a84f-8644ee76b6c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e8144c-790d-4f0c-af69-7faaea6ea872", "sighting_of_ref": "indicator--2945e0fb-6398-41b5-a84f-8644ee76b6c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be721c0d-5a6a-47be-851a-4b0284a17623", "sighting_of_ref": "indicator--f1cd73ca-12de-4e66-90f7-9b72ad5d9bb8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec904b1c-bfca-4d39-979e-d1dfdf396498", "sighting_of_ref": "indicator--cb446eb6-2018-494e-af60-882af40f163d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2733d0-2585-4e1b-925f-3686e9265c41", "sighting_of_ref": "indicator--c12ccd90-d654-45a4-9c87-d7b30826e914", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70b1eba-80c9-4a11-b715-9eb3eb6e1720", "sighting_of_ref": "indicator--5913d02a-7872-455b-8cbc-9530b90c955e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e5a4f3-aa81-46cd-960c-2e3c4e1707a6", "sighting_of_ref": "indicator--b5176c28-d5af-4ed9-9a86-b4f6544a2038", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6d590d-7ee6-408b-b66d-c8a7986c2bcd", "sighting_of_ref": "indicator--229eca3a-8a9d-43f7-acd5-3247063581ad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9d0c81-21ae-426c-a36a-732f2e603363", "sighting_of_ref": "indicator--229eca3a-8a9d-43f7-acd5-3247063581ad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f037fcd-7b7b-4fb0-a0d2-24ac02c23ea6", "sighting_of_ref": "indicator--7b7f027e-c0ac-4af5-9f36-466604670564", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0b9125-5572-4e86-930d-cd8d13feb66a", "sighting_of_ref": "indicator--0492464c-b82e-482e-aa79-b6475a15bc78", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba57aef-32ca-445b-98e5-cd66b26f6673", "sighting_of_ref": "indicator--2347c81b-0d97-4344-9f2f-367d3c8cec16", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963884b7-3595-416a-aa5c-532c8d811f5f", "sighting_of_ref": "indicator--87007012-84fb-4166-b9a9-684021179696", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343484cf-b662-47c1-b4aa-fed68abc3ae7", "sighting_of_ref": "indicator--14f46dcc-245d-476a-bf6b-2c3b25164241", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205d9776-0256-44d8-871b-1455348e8b45", "sighting_of_ref": "indicator--4bcaa787-635d-4ad2-96c5-e74465e1412b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51fce41-f85a-4576-9519-fc3b69b7b633", "sighting_of_ref": "indicator--4bcaa787-635d-4ad2-96c5-e74465e1412b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003514ae-ef3f-4fbe-ae8a-333938187b52", "sighting_of_ref": "indicator--999a0336-6455-4dfa-9bed-8b4447707b06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0142ed3-bb26-4574-a266-49f67b1deb15", "sighting_of_ref": "indicator--999a0336-6455-4dfa-9bed-8b4447707b06", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a7f7fd-9f9e-4bf7-9e11-8da2fbf5d9d6", "sighting_of_ref": "indicator--72081744-6d66-4867-aa0e-7c7063d61a03", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5f6cc8-3083-465b-bd59-258bf9b8a524", "sighting_of_ref": "indicator--66ed015a-0764-4b42-bacf-c1c47cb5d56e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4986f3e4-00d7-446d-9b87-f35b58273002", "sighting_of_ref": "indicator--68f5c0d7-f53f-44de-8bf1-e8fa370b9863", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da67900a-3fb3-4b64-b6ad-3f9d4d6cca3d", "sighting_of_ref": "indicator--68f5c0d7-f53f-44de-8bf1-e8fa370b9863", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88493b6-0ebd-4004-88ee-dfdd15fbf7dc", "sighting_of_ref": "indicator--6a9a2f27-437a-47e2-ae50-a2601f8f6093", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c62868b-e955-4aeb-8513-05b99c105673", "sighting_of_ref": "indicator--89c010f5-9646-4a6b-8fed-cbaf2b2dd0f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f3ec99-cf3f-461d-bf87-1dfcd7413b70", "sighting_of_ref": "indicator--89c010f5-9646-4a6b-8fed-cbaf2b2dd0f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4ec884-ff81-4c67-99b2-c9baee32e1f2", "sighting_of_ref": "indicator--d0fe7c17-05e4-4ee4-888e-be764a39b87d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a1f503-2ea0-4e03-8fdc-86f9e5373a78", "sighting_of_ref": "indicator--c598fa37-fca3-4abe-a017-b7cc1bc03a6b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6b549e-ec50-4ff0-808e-67c8d6651b7a", "sighting_of_ref": "indicator--e426b0f3-6d48-48b4-81f5-af749a636d67", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac329b11-c46b-4a18-995a-5bee887d85d4", "sighting_of_ref": "indicator--e426b0f3-6d48-48b4-81f5-af749a636d67", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1d4d3c-b493-486a-859d-7ac13aa9f2be", "sighting_of_ref": "indicator--dd9c832a-83f0-484a-8e13-d8b116ff9dc6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d24e83-ac85-4b75-ba66-3870fc25929c", "sighting_of_ref": "indicator--131d79aa-6fe6-4762-b347-91eb7a46c3a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd249eb-200a-4803-9b06-e057b13eb68b", "sighting_of_ref": "indicator--ae7983bd-94d0-4e6a-a7a5-b527ce0cde41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce342b5a-b6b0-4db1-9059-8f8f5462d87f", "sighting_of_ref": "indicator--95123cd0-2cbe-4288-943f-87c49d26a651", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73cd1e7-8406-4ef0-879e-e186a63d4aa2", "sighting_of_ref": "indicator--18b3edde-27df-4aab-a018-b8e748a78271", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a681072-b6b2-4543-a5a0-bfbc12f92b07", "sighting_of_ref": "indicator--c7b0f716-e2a4-4b5a-81ac-ff6fe2a31f56", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b47c8f-8818-444d-a228-0a94c03f6fc9", "sighting_of_ref": "indicator--ff7c7f71-6419-4fd9-8e5d-4c758cc127dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e982a56-6370-42e1-a957-5ae84dc69f77", "sighting_of_ref": "indicator--da043379-aecc-4fd8-9b02-4d726a88ec6f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331383db-5560-4ee8-8f60-41f9e013bf99", "sighting_of_ref": "indicator--bcfbcb2b-af2e-4eb5-a74e-b5e1d1707801", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a138681-ed85-4784-97d6-48cb78dd8e5d", "sighting_of_ref": "indicator--1d68a8b2-e66a-471d-bfbd-6c6e4da40e70", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad00770-70b0-4d9b-8151-a9cccd757f56", "sighting_of_ref": "indicator--0ba15f65-aa0a-4c93-9b4e-32cd5f30e2e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c242423-e852-409c-a74d-362608cb2793", "sighting_of_ref": "indicator--8c999152-5ecd-4dbf-bb08-b3f847328e28", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73416094-8a12-4eab-8cb9-fd8a2be9e979", "sighting_of_ref": "indicator--ff4e99e4-38a0-4a60-aa38-e1cb57903f3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc069a8d-1ba7-4cc8-8626-bf17c72b0a8c", "sighting_of_ref": "indicator--ecfd212f-29c3-4179-abaa-147bfab927cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429bc120-569a-4569-895a-03c7f79b7010", "sighting_of_ref": "indicator--772e39a7-a210-47fa-b8c1-1a1dfe87e73a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54f0cb0-6a9c-4ea3-a5e3-2c39a3c94c8d", "sighting_of_ref": "indicator--19c7f69b-6db8-4d4d-af69-b4cb62573bb5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cca1ae-b2d5-4323-8590-810e0f88a65c", "sighting_of_ref": "indicator--d6e4a22a-c48f-4db9-afc8-23a1735fe2a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3edfdb1-ff08-46f9-a902-4fbd2784fb61", "sighting_of_ref": "indicator--83b88b48-091f-4631-94c4-119ad5078acb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5263e4ee-ec79-4477-95d3-adaa49be4d97", "sighting_of_ref": "indicator--bca60d42-c600-45fe-bcde-38c0ed6bd048", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9275f53a-5ca0-4902-89d3-1990b978347b", "sighting_of_ref": "indicator--097e655b-b3e6-4907-b2cd-7db41edbe71a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537eca46-a973-454e-960a-b6c1dbd85bac", "sighting_of_ref": "indicator--7efd3ed9-cb36-4c9f-8024-625b1ecc5518", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3358b32-80f3-41a4-a248-c2d4f8438fed", "sighting_of_ref": "indicator--5d5c415a-0a9e-4c6e-a89b-9d8c2b482b29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df81a5f-067d-42d1-919f-36f4c18165c8", "sighting_of_ref": "indicator--dc99a221-1f73-4129-8667-812672239e4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711914ab-71d2-42c7-9b37-d12f9c291073", "sighting_of_ref": "indicator--874734ff-be0e-4fad-89c1-81d846a413f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc01f9e-2101-4499-8dae-cee3255e087a", "sighting_of_ref": "indicator--dc793f48-cbca-4410-931c-17b5fbf8695a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8479012-a6d0-4a14-9536-79fa25d801b4", "sighting_of_ref": "indicator--e50563d1-6e43-47ba-ad42-7b435e88fbc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384ef5f3-f80b-49ae-aa51-0d881bbb2c96", "sighting_of_ref": "indicator--e6cbe2d6-cdf8-4f4d-895a-b0d65ef3d083", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd17af6-d9d7-48f8-a401-bd9429f0caee", "sighting_of_ref": "indicator--0589ec27-5587-4713-8e97-e29ce426dfb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0348efcd-7ef9-4678-8eb8-ccdcef80da5f", "sighting_of_ref": "indicator--d811b08f-0a69-4e37-ba27-4d3b4345c902", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11352e04-4487-4449-8323-b162c2ef9866", "sighting_of_ref": "indicator--bd6f16bd-e86b-41d8-a38e-a14291504bd2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1af87f9-33dd-447b-8b7e-9f568777eb26", "sighting_of_ref": "indicator--1a85bfe3-9be0-4c11-ae03-e84ce1e80ab8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ca90cc-a078-4f25-bd62-5315d8cd942d", "sighting_of_ref": "indicator--79f2c595-38d5-42b9-90fd-f7623a2446d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259924bd-0dfc-4de1-9666-fe7b84557aa4", "sighting_of_ref": "indicator--1a9e0169-42b8-40c6-b78e-498efe107a66", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcaef253-3ed2-432e-a2ca-dca6756544d2", "sighting_of_ref": "indicator--1a9e0169-42b8-40c6-b78e-498efe107a66", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdc33c3-e4c5-4dac-8b3b-26ad4feeaedd", "sighting_of_ref": "indicator--6fbe90cc-c572-4f8e-9a4d-9f79349555ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484ff573-d331-464f-a513-52e732b73b48", "sighting_of_ref": "indicator--6fbe90cc-c572-4f8e-9a4d-9f79349555ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f33c75-050b-4252-bda1-03637bb4c61a", "sighting_of_ref": "indicator--37f752a7-2ea1-430e-b3d4-9788e3fd7fad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e420d9-933f-4945-87ac-84a3010fcf3e", "sighting_of_ref": "indicator--37f752a7-2ea1-430e-b3d4-9788e3fd7fad", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869d0b7a-46ab-4881-8021-c47decb0e01e", "sighting_of_ref": "indicator--400f3aac-74d2-4d09-b0cf-f8bcc2c372ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a8e310-ea5a-4f24-8b83-701c7af402f2", "sighting_of_ref": "indicator--35aca94f-bf38-4d57-8f66-a4d735c81859", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0e2e0c-a41f-471a-9b5a-a622e4e51e3e", "sighting_of_ref": "indicator--35aca94f-bf38-4d57-8f66-a4d735c81859", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ceb35f-be29-475d-a3c3-151e7cb4ac05", "sighting_of_ref": "indicator--d1662388-200e-4bce-b1e1-3760a59da886", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3bc337-4310-49fb-b7bb-5ad60771c825", "sighting_of_ref": "indicator--ac3829db-550f-4e30-90e3-854771b88e29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420432e9-90fb-421c-9366-2281ed8190f3", "sighting_of_ref": "indicator--6f5053fc-80c8-45ac-bdce-73034eb52988", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77d8049-eb03-4276-aa0d-9aaae802c527", "sighting_of_ref": "indicator--94591650-83c3-4b3d-9895-f7c33f5afa98", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d906de-b729-43d6-afb7-d0231a7dc397", "sighting_of_ref": "indicator--d02bc5b6-60f1-466b-8214-7ab2affc7551", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a65358-96fd-4fa2-a850-cc37a4f21154", "sighting_of_ref": "indicator--8c2a8762-eae4-4712-b13c-4f4e1f1d7dd5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef724bc-97e1-4d3a-9250-9a3d094ca145", "sighting_of_ref": "indicator--8c2a8762-eae4-4712-b13c-4f4e1f1d7dd5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2abbd3-e24c-43a1-a2da-20d4d487af16", "sighting_of_ref": "indicator--02cd308f-2b28-4c19-8c8c-444abaa19b20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dd0978-c6f0-4d0c-915d-6cd80cf0a5e9", "sighting_of_ref": "indicator--75b44086-786a-46ba-989c-d0e4ada73f5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19ba332-13e3-42e4-8a20-4016304c3224", "sighting_of_ref": "indicator--90b3dfd2-8f2b-42cc-9896-940eb8f0ac44", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4a682a-8469-457a-a8e6-d87da5815cb1", "sighting_of_ref": "indicator--d8286d9f-5426-46b6-8ccf-dd7baba80472", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e83320-5d45-4da2-87d0-502d99f678f5", "sighting_of_ref": "indicator--d8286d9f-5426-46b6-8ccf-dd7baba80472", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848e447e-3e83-416b-8be2-3e8f59a42230", "sighting_of_ref": "indicator--2c7740de-6e0c-42be-966c-58d8bdb712f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3267ad-f5ea-42b2-9a1b-cf5488d7ea92", "sighting_of_ref": "indicator--c7961ef7-188d-492c-80d9-d75b42c33b6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59dfdf7-a30f-430b-bab8-1d5fe27a8679", "sighting_of_ref": "indicator--351a7018-8202-408b-8771-857ae002583f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa59cb1-fe3e-41e2-91b0-7ed19d49e93f", "sighting_of_ref": "indicator--6c0eb6c9-992b-47e7-9483-3b41f434140c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6372c2-d21e-488d-a3f3-c5a98b5f1c71", "sighting_of_ref": "indicator--6c0eb6c9-992b-47e7-9483-3b41f434140c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ca1f65-64ef-430e-9936-494e80d98923", "sighting_of_ref": "indicator--8450a61c-9547-44fa-88b5-a4b8e7a620e3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceb8119-e195-44d2-b94a-0d9fd02ef5bf", "sighting_of_ref": "indicator--8430354c-f142-431c-8c2e-6ca6574f32c0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1605158b-d16b-4918-a984-d057be1e246b", "sighting_of_ref": "indicator--be7d2c69-18e4-4be7-863b-2f30eaf024bd", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f52704-5d54-4830-9c7f-f04263d9f462", "sighting_of_ref": "indicator--ddf1abf7-24d3-4e54-bc62-2377230aa5ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fccb2ad-a20e-47e5-a6e5-4100e7261299", "sighting_of_ref": "indicator--ddf1abf7-24d3-4e54-bc62-2377230aa5ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b1c97b-d94f-4174-8732-4b409e5607d7", "sighting_of_ref": "indicator--3fe739d9-0c53-48ba-81bd-c2e65580faec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3236aa86-2a38-4dc8-8728-d248982a455d", "sighting_of_ref": "indicator--56d597cd-5b93-4532-97c1-84c69aec5096", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cce5bc-878e-475f-941e-2729a1bdefee", "sighting_of_ref": "indicator--03fc3979-bbf8-4839-86f6-399485989948", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aec9c65-97ec-45af-a1b0-190e48bc5455", "sighting_of_ref": "indicator--f53c88db-1575-423e-bccf-d1f364e7cd48", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5648f6-4db1-4b39-a9b8-04088ac6c643", "sighting_of_ref": "indicator--ae2e6d6d-cfde-414a-b186-f2b27cad05ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141fcdf6-c805-4457-a338-8e4f84657b9e", "sighting_of_ref": "indicator--007b33aa-19b4-4f8a-b1e6-16180340d55d", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22f48a6-aca1-4eac-831b-35b2c624fb81", "sighting_of_ref": "indicator--007997cb-fd2d-4f83-95aa-e2e6c6abaff3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb8bbda-cd28-4cae-93ea-033137fd47d2", "sighting_of_ref": "indicator--007997cb-fd2d-4f83-95aa-e2e6c6abaff3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0a8a21-df2a-4c93-b7bb-c3c8ba1f70b8", "sighting_of_ref": "indicator--7bd39c8e-1aa1-4755-ade5-0bf3ee65f74d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20d6094-8773-4075-8785-6becce43cadf", "sighting_of_ref": "indicator--8fc22efc-e11c-436b-8e25-af9b77c1f572", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46be5261-88a1-4df4-bf22-fedc57b368a0", "sighting_of_ref": "indicator--11665916-3e0a-4fa2-bcef-179b939b6c2c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6391fe0-03e1-4a1c-aee3-cc151e89555f", "sighting_of_ref": "indicator--390c253e-d0e4-46e6-abae-42c6eac073a4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f71979-0a6e-4a0c-a6c5-18523b1fd34a", "sighting_of_ref": "indicator--390c253e-d0e4-46e6-abae-42c6eac073a4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c79f41b-b9bd-4c6b-b44e-3c2444eb1727", "sighting_of_ref": "indicator--72d8ff82-aeb3-41e3-a957-c362256ffa32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75b5f2f-c54f-4430-8995-52920a1757d8", "sighting_of_ref": "indicator--a8e0c360-4f06-430f-8bce-a6d75c1d15dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267f835c-be43-41e6-91b9-b872de1d8075", "sighting_of_ref": "indicator--7bc18aa9-6068-4528-ab42-33b69df03190", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38219205-7feb-4975-8a41-b0716f78db27", "sighting_of_ref": "indicator--040d4cd5-c63f-4509-95b6-21445fa194c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489721dd-5538-45fe-b2d9-9b5b32fb6acd", "sighting_of_ref": "indicator--040d4cd5-c63f-4509-95b6-21445fa194c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da2599c-204a-4649-8fb3-e08776122e5b", "sighting_of_ref": "indicator--43d08176-39b5-4952-b265-783131759f48", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14091964-4b04-452b-8c1e-c8edea40492a", "sighting_of_ref": "indicator--b4fd4cd9-4840-4d73-a905-f3ea60569034", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a44d011-b331-4bc3-9386-7a1df0e20f84", "sighting_of_ref": "indicator--8a734f44-e279-409d-a7de-352dd0cd3955", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85fe973-83c0-4243-9c1e-16a79e61cdb7", "sighting_of_ref": "indicator--249cd282-a7a1-4e05-92ca-a84b22063de0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cdfda1-4cdf-44fa-b0b1-8230e4d026f8", "sighting_of_ref": "indicator--b49e315b-8971-4494-80aa-88d877158c13", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd20b91-e2e1-4e80-b38f-fcb6e14aea21", "sighting_of_ref": "indicator--5a6e593d-378c-47fe-8d3b-d69532c3b97c", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bde2f1-06e5-408a-bda3-730f8ea1aeed", "sighting_of_ref": "indicator--26f6ce43-05f9-4176-801d-d56c20c73352", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0d329f-a0ad-4a21-b799-1fab71769b91", "sighting_of_ref": "indicator--ec13a13d-1a93-465d-973e-c4bdc83d417a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2980927-0e65-4e2f-ab33-5d0c63082309", "sighting_of_ref": "indicator--ec13a13d-1a93-465d-973e-c4bdc83d417a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa9ca38-01cc-463f-bcd9-290ea730f276", "sighting_of_ref": "indicator--102c36f9-e9a1-41f7-a61e-e60cfacd5350", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9809a7a-ddbd-44fa-af1d-59fafcef2a09", "sighting_of_ref": "indicator--102c36f9-e9a1-41f7-a61e-e60cfacd5350", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7701710d-01e0-46de-972d-321b4b5000b8", "sighting_of_ref": "indicator--a1324e3e-aaab-4fa8-8a64-f5a96f24f65c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cc3deb-157a-4467-a52e-9aaff2e70d30", "sighting_of_ref": "indicator--a1324e3e-aaab-4fa8-8a64-f5a96f24f65c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee30e3e-48a8-41a3-9f43-2a2fccf2ae54", "sighting_of_ref": "indicator--7007a03d-1563-423a-abe2-74be4c1738d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294aa78a-7153-4a56-a5c6-5bc4cd6072c3", "sighting_of_ref": "indicator--7007a03d-1563-423a-abe2-74be4c1738d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c377357d-0afe-4d67-b0ad-f92cb9823d04", "sighting_of_ref": "indicator--360f0078-15ff-4c7b-8db3-c682903a61d4", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d078bd53-98a7-4da6-bd0f-b94d74c12f49", "sighting_of_ref": "indicator--e243820c-ba89-414e-ba13-40e5a395d93d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8a76fe-f4b1-43ac-88e1-f7b91097f57e", "sighting_of_ref": "indicator--e243820c-ba89-414e-ba13-40e5a395d93d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93507a3b-e124-4d63-bb79-0a0b5e959a9d", "sighting_of_ref": "indicator--bac68e8e-a5e2-40e2-83e7-df7afc4533a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafb715f-37b4-416b-9afe-5350ef650dd9", "sighting_of_ref": "indicator--951fd36f-c741-4733-934d-677a75c6cd21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede07937-7790-4914-a456-627f562b00b3", "sighting_of_ref": "indicator--951fd36f-c741-4733-934d-677a75c6cd21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9277d39c-f762-403b-b7f8-a5355052c558", "sighting_of_ref": "indicator--23318af4-0c6a-450b-aa84-eff4a2917ab4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e662651-fc1a-4134-aed4-c8a61817f732", "sighting_of_ref": "indicator--23318af4-0c6a-450b-aa84-eff4a2917ab4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcff6d7-b117-4909-a23f-d963fd3c60ec", "sighting_of_ref": "indicator--fbf1e65b-bf0c-43a7-9ded-1bb2411fe7ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4b3ec8-9583-4744-8f28-a7a7ee25a748", "sighting_of_ref": "indicator--4d4f88c1-2ab4-4656-9431-8ed9c48d1dcc", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1b1d61-1a84-45d2-ae96-1f626ebe4805", "sighting_of_ref": "indicator--de9805dc-afe8-45b6-b3ce-9226aa7d6a27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1858cff-6873-47a0-bb05-a2578f658269", "sighting_of_ref": "indicator--4f84617c-302d-44c2-8d7b-02b839070604", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb3b531-6287-463e-93c2-f0d547bab849", "sighting_of_ref": "indicator--4f84617c-302d-44c2-8d7b-02b839070604", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6ec208-a038-4be5-b35e-4ad6eae108fd", "sighting_of_ref": "indicator--3f4d6604-78fb-4463-b084-c848c5e721e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326c7dc4-b5c4-4c32-874c-2f9ebe3fbf18", "sighting_of_ref": "indicator--3f4d6604-78fb-4463-b084-c848c5e721e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238f5f8f-d5ad-4548-9066-f5284756ba99", "sighting_of_ref": "indicator--cc5c9d20-dae3-46de-aefb-8a6e1d384603", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903712b7-e432-4573-84c2-be18882fafdf", "sighting_of_ref": "indicator--4549ec7f-40ac-4679-b22e-eeb1dc71be13", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc45f65-c548-432f-85a0-ddcbec503a2d", "sighting_of_ref": "indicator--b778abbc-28df-482c-a278-bfbbf90e2f5d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83020085-94ec-4138-aa5a-c5e9559764ef", "sighting_of_ref": "indicator--b778abbc-28df-482c-a278-bfbbf90e2f5d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0d89c1-b954-44e4-8e02-26d3fa11808d", "sighting_of_ref": "indicator--d8048a0c-8550-4a26-b021-e469c9dd9eb5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71568efe-08a9-497d-962d-4c4a5ced404b", "sighting_of_ref": "indicator--7496b5a9-26cb-4e88-a393-9f6bf4511921", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53a9b25-1355-47e1-ada9-97f98936d3fc", "sighting_of_ref": "indicator--87d9348b-6135-4afd-b462-3a0077427cc6", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1a1a90-be7d-411b-ba33-0ad8393deb55", "sighting_of_ref": "indicator--606a787f-bb54-412d-b4ad-c13644327574", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcfc28b-9591-4225-83f8-818c0d1e4ef2", "sighting_of_ref": "indicator--64fb3405-27fd-408f-970b-e4fefda76774", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93ac49b-2045-410e-b533-202c3abde9e1", "sighting_of_ref": "indicator--b9fcb69d-9996-42ec-8690-b5a6f28cb75c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0f205d-85b6-4360-ae2c-5952289f1d30", "sighting_of_ref": "indicator--1cb8ad24-fbfd-4a6e-b074-67056b2734d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c023505-4330-4471-9215-a601fae46cf7", "sighting_of_ref": "indicator--1cb8ad24-fbfd-4a6e-b074-67056b2734d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b1511b-3ae8-4448-9a87-e9230325c0b9", "sighting_of_ref": "indicator--4e45d60e-b115-4cfe-8f1c-ceb44de4266c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afef74c-a937-4432-ab03-cf996e2b5e85", "sighting_of_ref": "indicator--4e45d60e-b115-4cfe-8f1c-ceb44de4266c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6d0caa-45ed-45e3-826f-791f4d32e208", "sighting_of_ref": "indicator--99601f98-1fa6-4d68-911e-f94fc68f1c21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03bb54a-0a1c-44b4-b0be-86f799dc0464", "sighting_of_ref": "indicator--7abae39d-370b-498a-9277-28dd3a91f749", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3399eba2-fbd9-4f80-9b2c-2752f4128a67", "sighting_of_ref": "indicator--870bc9f7-64e8-4a9c-88b1-c89a13b437a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d273d60-a76e-47cf-ac9c-dc1f25905b2a", "sighting_of_ref": "indicator--220e1c82-204d-4caa-a556-a2d0d7e0abc0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ec3d49-e246-4a7c-bfa4-685d4022987b", "sighting_of_ref": "indicator--220e1c82-204d-4caa-a556-a2d0d7e0abc0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3134de23-d62a-4c5b-9afe-a06e9e323e6d", "sighting_of_ref": "indicator--e8b9b599-7c77-488f-b8e6-cf929397fd20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b8340e-9ad3-49e0-bce9-792846f92f06", "sighting_of_ref": "indicator--e8b9b599-7c77-488f-b8e6-cf929397fd20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ed4ab8-ef5f-4038-9b53-ebf8248d4d75", "sighting_of_ref": "indicator--79510d62-a423-44f8-8c52-fda9851f5504", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef84ab1-c9b9-4849-b16c-7414c3d7b2dd", "sighting_of_ref": "indicator--79510d62-a423-44f8-8c52-fda9851f5504", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4c2bfd-d6f1-4e2c-a758-dda639bbf458", "sighting_of_ref": "indicator--decde7c7-d817-4d18-bf40-ab0a032e5fc4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dc4652-7e2b-494d-a0c4-7b5037744412", "sighting_of_ref": "indicator--4130c58a-8aa9-457d-890e-275f66b579cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a9a5d5-a9b1-406d-a8af-b3906ab23edb", "sighting_of_ref": "indicator--5aa86afa-d12d-40f1-8218-d51daf00fc61", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814c8f35-b6e4-461a-8fa8-223b7e609cf9", "sighting_of_ref": "indicator--3f834225-9e35-493c-88bd-5e964e7535f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b7aa38-1473-41e8-abbe-ec6f4c80b1ee", "sighting_of_ref": "indicator--3f834225-9e35-493c-88bd-5e964e7535f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf6ec0b-1de7-459f-9e5c-853bd9bb64dc", "sighting_of_ref": "indicator--ffcf1ccd-73e2-4964-9e38-973149bd6340", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54967b1-baae-4746-b3f3-39c0135b0587", "sighting_of_ref": "indicator--ffcf1ccd-73e2-4964-9e38-973149bd6340", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fe86db-232e-493d-b9c0-9278d8da96fe", "sighting_of_ref": "indicator--086313ac-1811-47e2-afb1-ee043b928afc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bf6aea-b1f9-4f4b-abb0-81be7a04a969", "sighting_of_ref": "indicator--086313ac-1811-47e2-afb1-ee043b928afc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081c391e-c908-45f8-b8ed-521c334d68ff", "sighting_of_ref": "indicator--3713982e-c001-4d33-af90-8e257c974bf3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32f045c-0d4b-4d02-9b29-3c15757567b0", "sighting_of_ref": "indicator--fe9aaaaf-120b-46b6-a472-42945c70728d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f279359e-2701-42a9-b9ef-37282b1f9b2b", "sighting_of_ref": "indicator--9d1890cc-0bb7-44a7-91df-0db7271da418", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45132ed7-8004-469c-98f5-4dab10100a5d", "sighting_of_ref": "indicator--8c148b1a-acad-4b0c-8bb8-c78f8aa5f070", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb12754-0c4e-4b6f-ab1c-a47ca0560a1e", "sighting_of_ref": "indicator--8c148b1a-acad-4b0c-8bb8-c78f8aa5f070", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f154f69-de27-40dd-8910-a6538ffa4b2e", "sighting_of_ref": "indicator--3947007c-0b9f-4fc4-ad16-1d4df761034a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b784ec83-2a35-43f7-a2a3-9946ab60cb65", "sighting_of_ref": "indicator--cc90863b-be7f-4bbc-9973-100276ad65c6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be27f6a3-da9a-427b-96a6-fa91dd6a1177", "sighting_of_ref": "indicator--5d1638cc-6645-47d7-8dea-b39ad1bc22ef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a589149-14b3-45a9-ba1a-68f15d6a95bd", "sighting_of_ref": "indicator--8944d419-47ab-40e4-b251-fbe5fce0d6e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ef58cd-6625-4e3d-825b-edeae44fcd66", "sighting_of_ref": "indicator--b90d1b4e-d09c-40cb-8187-bbf395cb809a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14910160-9496-4685-a8f3-606d9293d9e3", "sighting_of_ref": "indicator--4c8c9ada-e499-43c3-932d-04dbd7d30d48", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e89fba4-caf6-434c-bd42-8487bcf37cb3", "sighting_of_ref": "indicator--c6f3c699-c1e3-4392-9efe-4e710036810f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe1ede4-797e-43e4-b81b-213f925daf38", "sighting_of_ref": "indicator--5754d9c1-c756-4880-9109-e1f564797232", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a524281-c2ad-4c7d-b8a1-b63906975f2e", "sighting_of_ref": "indicator--41ecfdc1-65a5-4bbe-ba46-51690153611f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7d0357-8d03-401e-93f4-85441a541e33", "sighting_of_ref": "indicator--4a192f69-52fd-49f5-bad4-2cc780aa30bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f339ea-5d44-4abe-a1e8-b65aab82cd9b", "sighting_of_ref": "indicator--4a192f69-52fd-49f5-bad4-2cc780aa30bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37600504-5bd6-46ed-beb2-cd2dc1b09bf3", "sighting_of_ref": "indicator--fc222927-8200-4e60-8b44-2d8859ce1259", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e47a99-f870-4639-9c0c-3727d8f9d352", "sighting_of_ref": "indicator--bf0f60b0-a08d-4519-9e2d-0b3e93ab7a60", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e77286-88cf-432f-91e7-0e7f2eb0268d", "sighting_of_ref": "indicator--bf0f60b0-a08d-4519-9e2d-0b3e93ab7a60", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d73b6a-fc12-4df0-8a2c-be17fb4cf3e1", "sighting_of_ref": "indicator--3df65736-40f0-4c1f-9ff3-662c93c21174", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4736698-1414-4342-a909-c6317826ab74", "sighting_of_ref": "indicator--fd2869c0-58ca-45d0-b541-f59670680b78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b1af89-005d-47cc-93ef-9f5e0db29b45", "sighting_of_ref": "indicator--dd2ecc06-1e84-4803-8a77-5097604fe9a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66efa1b-6dab-4510-99e2-2751f13b34af", "sighting_of_ref": "indicator--5a45e4eb-8219-4018-9abc-2cc75547151f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90132cd0-5695-4dab-907f-bccd16b5bcbe", "sighting_of_ref": "indicator--dcbe3fae-b0d4-40c0-a57d-88c806f93878", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd7a4ec-cff7-484e-b244-731123a5af86", "sighting_of_ref": "indicator--d7c26848-2846-457d-8637-656ba09db024", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4570126-02b4-4bf2-bbf6-d7c3082e7fca", "sighting_of_ref": "indicator--d7c26848-2846-457d-8637-656ba09db024", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842bc312-6129-4b79-8862-f24709ca809f", "sighting_of_ref": "indicator--e282b15b-11c9-4da5-9229-7aadb46f4609", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed8252e-85cd-46dc-989e-a363bd534056", "sighting_of_ref": "indicator--398cb59c-be18-409c-a3cb-9875baebeac2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc34f65-e60d-4fe8-8dde-218cfa6bb868", "sighting_of_ref": "indicator--34153a66-d819-48e7-9baf-99629a50ff4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bee2fb-94c7-4aeb-be94-3d32b0e2d3c1", "sighting_of_ref": "indicator--d97b8eab-511f-4ffa-9e66-37f2f196d879", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf8c330-e9d8-4dfc-97c9-7ec480f5fc55", "sighting_of_ref": "indicator--e8856dfb-cb28-4f9a-affd-8137284c67af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704460f3-456e-4a3e-9a47-77aab8d7b588", "sighting_of_ref": "indicator--f922dc80-3728-4e6f-876f-bbf2eb3c7d08", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2218bd5-0e56-4bd0-93ce-585a395c3e48", "sighting_of_ref": "indicator--6f1ef736-35f4-4dcc-b807-7e5e468d6bf1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a265d3a2-1103-427d-b2df-ce796d79e9eb", "sighting_of_ref": "indicator--6f1ef736-35f4-4dcc-b807-7e5e468d6bf1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58057654-5cd4-47f3-be75-89abe35ce491", "sighting_of_ref": "indicator--4521e8fc-0391-4b95-936d-26edab3ff497", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82b707e-9909-4b7e-a81a-a52657541575", "sighting_of_ref": "indicator--8637acfa-6e49-4879-8920-297c2c0f413a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac953bbf-54f8-4b19-963f-bf5715de3401", "sighting_of_ref": "indicator--8637acfa-6e49-4879-8920-297c2c0f413a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbcf497-d4ac-444a-9115-3209425f5bd4", "sighting_of_ref": "indicator--e7ee4ff6-23a5-43f8-97c6-ddbcac1cc19c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb75897c-6dac-487f-8b42-bfb7dd46843e", "sighting_of_ref": "indicator--d3e17787-e77f-475c-9e31-478e75975516", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2e00ac-6e85-4df0-a1d7-4d20760d5aae", "sighting_of_ref": "indicator--f73419e6-9178-43cc-98d2-ceabfb38482e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba480b2a-c456-4944-945a-f8955e8c9262", "sighting_of_ref": "indicator--794f7863-2a4a-4112-aba9-8bb2928b44bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958c5557-bc3f-4b35-9ad1-ab95056e29a2", "sighting_of_ref": "indicator--2025b242-60a4-4abb-ab45-618c8339df9c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa7ab36-778e-4b09-b077-318de40c429a", "sighting_of_ref": "indicator--2025b242-60a4-4abb-ab45-618c8339df9c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f13f0ac-afbe-40cf-99c7-b63630ec0c7e", "sighting_of_ref": "indicator--ad1c9136-d2d6-4de1-82c9-25cf16457709", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db002d21-eb13-4378-b12b-9403e892cfdc", "sighting_of_ref": "indicator--12a3d72d-0374-4737-a126-0f3f62e189cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf8a7cc-6cb4-4a0b-888e-2d0bac78e4c9", "sighting_of_ref": "indicator--12a3d72d-0374-4737-a126-0f3f62e189cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e2c7ea-e1fe-4a71-b9c8-c743394fb89e", "sighting_of_ref": "indicator--74e4aebf-6252-4469-96f7-db5b0a5f32f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535ec44d-6fd1-476c-b753-7af401a8e73a", "sighting_of_ref": "indicator--e25d21da-e5c5-491b-9b89-30c51cb9aa73", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc44f916-4871-49cc-81f7-82182366479f", "sighting_of_ref": "indicator--e25d21da-e5c5-491b-9b89-30c51cb9aa73", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323b5bd4-0722-4653-98b8-cb95af86f321", "sighting_of_ref": "indicator--5bbeff46-0fbd-444c-882b-40e6efed2fd1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcc3334-f3c0-4bc1-a01a-57676735aecf", "sighting_of_ref": "indicator--97009fa4-cfb5-40e0-9e14-c4d5f1830031", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854f02f4-339a-40ef-85e8-2ba991b43c3d", "sighting_of_ref": "indicator--248419aa-44b0-4696-a40e-e2a4f4ff5dd0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe2dad1-45d5-4f7e-8bbf-f2481a7cf8b3", "sighting_of_ref": "indicator--248419aa-44b0-4696-a40e-e2a4f4ff5dd0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9a31aa-82e4-4830-8577-c48d085ad6f6", "sighting_of_ref": "indicator--e9739198-e35b-4088-aa13-75526dd5af80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbe4fa0-300e-4b8d-8e2e-8a8d188e7ac0", "sighting_of_ref": "indicator--be8c0f0f-c2e5-45f3-94a0-8a183f221d5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ae18f7-2a7f-48b4-9159-80b0d30525cf", "sighting_of_ref": "indicator--d6f1d661-86ab-45f2-9402-ecc36ebce714", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7062d9d-4cae-40b6-9ef3-88ea86c7f089", "sighting_of_ref": "indicator--d6f1d661-86ab-45f2-9402-ecc36ebce714", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fb81b0-b328-49c2-9454-e5903ef65a53", "sighting_of_ref": "indicator--bec2e8a4-a3c9-4c0e-b18b-640c2bc462cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055c992c-4b12-4262-bace-c7c0d1c8cece", "sighting_of_ref": "indicator--bec2e8a4-a3c9-4c0e-b18b-640c2bc462cd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421dd4c9-973a-4dcf-a5a5-1d222270548c", "sighting_of_ref": "indicator--ea1df516-4e5d-4a97-88b8-e19ceb614a37", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a23ee4-817d-4c77-9324-f9aa841bed62", "sighting_of_ref": "indicator--eef8cd2a-2a6b-4c72-91ff-100b7917f8e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e6ed87-dc6a-4131-9958-70f6e5627ec1", "sighting_of_ref": "indicator--b181f225-3935-4306-b16b-f612a1ebe4e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc2409f-83ad-4b38-b8a7-48366e9d8b4a", "sighting_of_ref": "indicator--9489e647-07c5-4d04-9736-ac68ccc71759", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b69524-68d0-407b-9f74-5beaa548210b", "sighting_of_ref": "indicator--932f584e-ca4b-4bda-ba43-682840a682ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcb2c81-c1a1-498f-a71c-44e1af15c3d4", "sighting_of_ref": "indicator--77bb6dc6-2b07-43d0-a33f-5d482571597e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f7891b-16d2-478a-a95e-9151f0195a35", "sighting_of_ref": "indicator--095953b9-d42d-4e29-879c-a3747449f5b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114ef8db-de8c-4f87-8ac9-1a0091e5867b", "sighting_of_ref": "indicator--d8091c6d-cd09-4f30-b8e7-486115d63100", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01cbf4d-182a-4f91-a70f-7c4735cfbcdc", "sighting_of_ref": "indicator--d8091c6d-cd09-4f30-b8e7-486115d63100", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f663148-9789-41f7-8cfd-fca48efc9df6", "sighting_of_ref": "indicator--d3afcc22-3beb-42e6-8eb5-c511c63ee641", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01645a37-9fd6-4ca7-bde2-65e954b8d3c4", "sighting_of_ref": "indicator--ed3c6dca-84f0-4c13-a7af-887d80e49d6d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452eb64a-06af-48c1-9041-055d799f8467", "sighting_of_ref": "indicator--ed3c6dca-84f0-4c13-a7af-887d80e49d6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee580f08-4cec-4a1d-a3e4-1f8d6cac1ec4", "sighting_of_ref": "indicator--32cb0564-08c5-40bb-92d1-be868ed6384b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcf9d8d-44f3-40de-8084-84a992474869", "sighting_of_ref": "indicator--bebab45a-2552-4a3c-a754-3b6fd306f48f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b52f871-9eec-4341-9951-91f7db96f728", "sighting_of_ref": "indicator--56b74f28-dcb4-4c1a-81da-d08ec14ddac1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c62035c-e6fa-40f3-88a5-741a1f7eea12", "sighting_of_ref": "indicator--b002515b-9b0e-4616-a2c5-30507256eac4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a05842-264e-421b-b77f-24b7098d83cd", "sighting_of_ref": "indicator--b002515b-9b0e-4616-a2c5-30507256eac4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaae70a-ff8c-4fd6-9809-4d02a22b0728", "sighting_of_ref": "indicator--6768908c-d737-458d-9a79-cea43fc93c8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00141e1-0ae9-464d-a08c-6f127397ef35", "sighting_of_ref": "indicator--73e599e0-76e7-42f1-9b85-048ec46e7bb0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81266e00-0e85-404e-bd93-9185bfea4d8d", "sighting_of_ref": "indicator--aa4b884e-8169-4dec-b2da-1bd68197350c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878d6e17-6cdc-4f9d-9bbd-cce46ec77ec7", "sighting_of_ref": "indicator--9d983afd-93a9-4ff1-88ee-675435dbcaf8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7fa695-b2b4-4aa0-8d7a-a32d1d223495", "sighting_of_ref": "indicator--95b0016f-d7cc-4c77-b9f0-54b1e79569f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5303f5e-25b6-430f-b3e6-bbe4e5373e45", "sighting_of_ref": "indicator--d723b7d2-b8c8-43e1-88b5-465fcba8b575", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d2c8f2-9b2f-442a-961a-5e3cc72aa973", "sighting_of_ref": "indicator--43627e41-a38d-4735-bfd9-f840fdfb81df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b899f4-e8df-4997-933a-c13929c2096a", "sighting_of_ref": "indicator--71b48a8a-c190-4424-aa0e-0ba3b3820869", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bdc712-f294-47d8-8475-60e657aebf6d", "sighting_of_ref": "indicator--ded78c0f-3528-48b0-9308-97f57a72ac5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba170c96-588f-4318-9ad6-b2d7f5f1ffae", "sighting_of_ref": "indicator--cb43cd62-b1a8-4346-b306-18f27662a849", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e33927-e430-4eee-86f0-be378dd67db0", "sighting_of_ref": "indicator--69d4a005-f0e0-4e08-8309-797b7e3fe8c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f94f7fe-a1af-430a-b8d0-a44d5b6bed2c", "sighting_of_ref": "indicator--31ae37d5-d164-4672-8394-12300a7b3b9a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41656cdb-eec5-43a0-a4e4-7fedcfa322ce", "sighting_of_ref": "indicator--cbc3a704-230d-4207-99ae-9e7086e97a99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746533ff-5ab0-4b4c-99ba-e425ccae236b", "sighting_of_ref": "indicator--1b74a661-04fc-48d1-bf2e-0988a54808de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c82b502-bc85-4203-8dc0-d58dfce3a4bd", "sighting_of_ref": "indicator--6685e0a4-a73b-4b9a-8603-24536e1f4fe7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cfded8-3c7d-4c38-90ea-0c9aeb164aac", "sighting_of_ref": "indicator--36760809-445a-4177-a5a8-e24f3a9d781d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79fa707-e711-4070-8c5d-2d339e376fc7", "sighting_of_ref": "indicator--a1a8327a-67e4-4eb0-9c33-8e3390082fb6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b574cbf1-c2de-421a-8cf2-5f699e230a90", "sighting_of_ref": "indicator--205738da-efe3-4f05-bfe8-104d04881287", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f5dbf8-5803-4f7f-ad0b-c06fa7fefe58", "sighting_of_ref": "indicator--a926f7c5-926d-47d7-a6d0-9b906463c8ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f7c92d-d035-4805-9c37-28d8ae694938", "sighting_of_ref": "indicator--a926f7c5-926d-47d7-a6d0-9b906463c8ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b35ffd-5017-430a-a2f8-36ba21375f0c", "sighting_of_ref": "indicator--09c44471-fd6a-4958-95b5-5e71d3f29918", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d31a581-16a5-4d69-abb5-dec26e2b9f37", "sighting_of_ref": "indicator--09c44471-fd6a-4958-95b5-5e71d3f29918", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d183eb9-13e2-4470-a21d-b5493ba033e1", "sighting_of_ref": "indicator--7e0ec43f-9783-4968-b853-166836e57ce2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af55de5-7b83-4c1b-9177-292bd6ec4c85", "sighting_of_ref": "indicator--a7064b31-00c8-4d0b-af89-e3f92e5b7c93", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af3cb87-6e6f-492e-b77e-2f4e046dea1c", "sighting_of_ref": "indicator--151713be-a092-4935-bb6f-c9364233f521", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2788e6-aefa-4d5c-ba41-7ebf50fd7c4b", "sighting_of_ref": "indicator--216476d9-9403-4083-ae65-a77000ed7a75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e32207-4562-4c1e-861d-0a45310cc22b", "sighting_of_ref": "indicator--216476d9-9403-4083-ae65-a77000ed7a75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8bf87d-e87f-4f68-bf99-b50aab71f002", "sighting_of_ref": "indicator--35ff98b4-ed45-4eeb-b918-871d1acfa26a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c78339-a62e-4556-93bb-201fde52ebb7", "sighting_of_ref": "indicator--d8baf9ad-2e99-4ce0-8e24-cd358679f4d7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e426aaaa-65f5-4db0-91ab-88dc72805a40", "sighting_of_ref": "indicator--d8baf9ad-2e99-4ce0-8e24-cd358679f4d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faefac9a-cb81-4dfd-a96b-d978ba075f74", "sighting_of_ref": "indicator--062f7d7d-ea98-465c-a422-ef65c8075e74", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852e36fa-7cf0-49c7-9a5c-d6a9ad77309c", "sighting_of_ref": "indicator--8f7e4bf8-c6a9-4060-b6c2-bd38e7f7dd40", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7071a2e1-a640-433c-9d2d-18db447159b2", "sighting_of_ref": "indicator--16eb6cf5-e6ca-403f-97d7-b42a832473bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e92872-5c84-48f0-a72b-1678358fcc36", "sighting_of_ref": "indicator--3f64f582-37a5-4641-a0fe-6618cf4aff41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcd1ae4-6ed9-40e5-8b45-1c734b400fce", "sighting_of_ref": "indicator--88da2701-559a-4ffc-bc73-69c9506619ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04339bcd-37ab-40bf-ad7a-0164f31aef9d", "sighting_of_ref": "indicator--88da2701-559a-4ffc-bc73-69c9506619ce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5f2944-7ed9-4b73-a63d-f0f180ba90bd", "sighting_of_ref": "indicator--81e6c6b9-8d26-4b13-84b9-fe1872eeafcf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07399088-6509-41ec-81b1-169934d1baf0", "sighting_of_ref": "indicator--cb91a031-4f43-474f-9640-092a2633a83e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d92163f-20a0-420f-8091-66dd0540c387", "sighting_of_ref": "indicator--30078f6c-ff29-4fde-b373-cebff2c07412", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8cb38d-6d71-4d1b-9799-04a577746ec0", "sighting_of_ref": "indicator--be8d7b70-708c-4684-9170-91dcda38737f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94da688-3faf-4dbd-97d7-e66fe09a8948", "sighting_of_ref": "indicator--0f1f1c92-8e05-4ac9-8edf-2d34a99b31f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e96a934-8272-4846-a58c-bc41f99993b2", "sighting_of_ref": "indicator--0f1f1c92-8e05-4ac9-8edf-2d34a99b31f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8315b35d-1ecb-4f6c-9e95-f340c6c5a83b", "sighting_of_ref": "indicator--eb6317ca-4938-41a3-96d9-3598e41db1d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40d227a-7016-404f-99a1-fc90f12dd743", "sighting_of_ref": "indicator--97db3cb6-e21b-463e-8e0d-003c3abe963b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf96edd-b994-4a1a-bab6-b6e7f78a5700", "sighting_of_ref": "indicator--97db3cb6-e21b-463e-8e0d-003c3abe963b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deffba12-52c7-42ad-9059-2eb06c5d7907", "sighting_of_ref": "indicator--f112074a-84a0-47f8-9392-b06b0315118c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a0a983-a69c-4092-a8fe-5c4946e60ebc", "sighting_of_ref": "indicator--2cfe1b1c-83f1-432b-b4ab-45443a294ee6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7942ac7-31cb-4b55-a4a3-ad783064bb3f", "sighting_of_ref": "indicator--2cfe1b1c-83f1-432b-b4ab-45443a294ee6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2319aea-6a06-42c7-aef6-c377d24ff1f0", "sighting_of_ref": "indicator--dcf94da8-cd0b-45b8-ae29-992d05d57420", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b8c15f-0f60-4dc3-860e-7e410a0c3965", "sighting_of_ref": "indicator--dcf94da8-cd0b-45b8-ae29-992d05d57420", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c1e4e5-d329-4eec-bbaf-612e0dafa9d9", "sighting_of_ref": "indicator--26e1b551-4584-40c2-bc2f-d95161845b92", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf72d35-4d27-4ff6-9dd5-ee2a00fc9724", "sighting_of_ref": "indicator--2d7631e5-a189-4f3f-83e0-b5df909c7ee1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18d1453-bafb-4d4f-91ed-fe43f1912dfb", "sighting_of_ref": "indicator--1d251cd9-1a41-4791-8632-b7451e6d1fdf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da736d2b-8b33-4500-ac91-bd430c6d0c90", "sighting_of_ref": "indicator--14df80cb-2cea-4c23-9885-e30713b3529f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219c1bd6-11ca-4834-ad35-6a9df14964f0", "sighting_of_ref": "indicator--be6d1203-9421-4a6c-9ef3-92c04bc82837", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cf405f-bbd1-43e5-8de3-b90b07813515", "sighting_of_ref": "indicator--6cda6e31-f3ce-42c2-af74-7d41da68a7fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eea7a83-7d51-4edd-a1f5-58cb006333e5", "sighting_of_ref": "indicator--6cda6e31-f3ce-42c2-af74-7d41da68a7fa", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605f37e3-aeba-4cf5-8166-4b9c5795454d", "sighting_of_ref": "indicator--f69dc7a6-41fd-4ef2-987d-5042361355a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33eded1e-6b73-4acf-b350-456f56874663", "sighting_of_ref": "indicator--156af834-d2bd-466f-8fcd-59a8ea44f732", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab88c06-748a-4b89-962c-ca5e56f240ac", "sighting_of_ref": "indicator--41a6036d-0f5d-4a35-96be-dd89326df9cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119121f9-d79d-4731-82de-5acd03f669c9", "sighting_of_ref": "indicator--61da4e88-1d7e-4a2d-a67c-8e0eeb128f37", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594c4b28-535e-4cd4-9e40-bad54f8c75c1", "sighting_of_ref": "indicator--79ebaa79-7819-4800-a850-14cc39d3f8fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d51cd8-d561-4d30-a61e-802d02ef9449", "sighting_of_ref": "indicator--207ed22f-bb1c-4343-9f6e-a453234cd447", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113f7ee7-0a36-4693-8e78-e2823f9b9d34", "sighting_of_ref": "indicator--207ed22f-bb1c-4343-9f6e-a453234cd447", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f75d85-4719-4a1c-924f-aad61b0af1c0", "sighting_of_ref": "indicator--7832201e-784c-43de-be93-e076adbc82ba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80480db-779a-48f5-97f4-62196dbb74aa", "sighting_of_ref": "indicator--9758031c-0c3c-414b-8c42-443c0949dac6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e7d4fc-ad23-4123-899d-a7cb11389e70", "sighting_of_ref": "indicator--9758031c-0c3c-414b-8c42-443c0949dac6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3c2465-a52e-4308-af43-a007547c2e5e", "sighting_of_ref": "indicator--5900797f-c31a-4a9d-bb36-27fee1e98f29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0845c36f-5d3b-4e25-ab26-e9856a042bd9", "sighting_of_ref": "indicator--038d8fed-d7df-4561-91cb-3eef77d389d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b0c0dd-ee65-4292-8265-7608c63ab7ae", "sighting_of_ref": "indicator--b2165e61-8fbe-4fe3-9b01-4073977dfe55", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069b60e0-2d2d-4ac5-8238-ba9ecf513a24", "sighting_of_ref": "indicator--d2b36efb-8755-44d9-8e40-eb091e873299", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee610ebd-c462-4c41-8a71-11889cd0588e", "sighting_of_ref": "indicator--d2b36efb-8755-44d9-8e40-eb091e873299", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbfd90a-a1b9-4f61-a6fa-f03833b9050d", "sighting_of_ref": "indicator--08a172fb-61a1-4672-b474-15378bfe12cd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000f2ac8-0145-4f01-b4bf-c44c63b84c7d", "sighting_of_ref": "indicator--801dee8d-e6d8-4710-8313-7cc0d9551c0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec26e78-e32d-4b4b-96cd-a9df1bd72191", "sighting_of_ref": "indicator--d9a63db2-a342-4e7f-a865-5e251c062e31", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba2ad23-9f35-42c7-a18a-417663793ab5", "sighting_of_ref": "indicator--6a5639d9-9609-4c24-ae11-fe934b4220cd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b88dcaf-1880-4b27-ae94-ec74877a8d9b", "sighting_of_ref": "indicator--bd6a6fd2-0287-4181-b9b2-f77160c2273e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d51a890-71c8-41ed-a8d4-2a134b98193c", "sighting_of_ref": "indicator--2f7c4666-b65b-42c3-bac1-66e070ec9af8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec684335-e3e2-4f35-8ace-2f6181e8c9e5", "sighting_of_ref": "indicator--4d4db625-6011-47af-9495-eb69ca848e8a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7587436-90a3-44ae-bb06-53469214d965", "sighting_of_ref": "indicator--01e4477f-4978-4013-96bf-74fde7b316d5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42a91c9-d7a3-4ab4-8e74-10a5384d5aae", "sighting_of_ref": "indicator--ebf061fb-9f8a-41ac-b5eb-c63d34286723", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd94ae06-d2b3-43f7-beaa-a5f9082aba61", "sighting_of_ref": "indicator--96d8130f-2d25-4b2c-8316-7e35fd90c2da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c88cb0d-4d3b-48b6-8389-d9dc5601846a", "sighting_of_ref": "indicator--b71faa7d-c4ba-4202-a89b-52d08fb7e784", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14abe2ce-243d-4000-9711-a91dcc9cb624", "sighting_of_ref": "indicator--04654d1e-2790-4131-8f24-29b3855b22e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae963413-bee1-420d-acfa-a296068ca462", "sighting_of_ref": "indicator--3e7bf2b3-20da-4387-80d0-158d069f03f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102442dd-0c23-4e35-8912-9fb66c57afa0", "sighting_of_ref": "indicator--fb57d623-4e12-498e-9f9f-dda4ca33a1f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2e2919-6a31-4d3a-b095-01a66ce20187", "sighting_of_ref": "indicator--fb57d623-4e12-498e-9f9f-dda4ca33a1f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f721c87-8e91-41d8-8919-051ca630ca12", "sighting_of_ref": "indicator--5ebe7c90-bd4e-417d-a7d1-751772bcee52", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d83d384-76b4-4976-bfb8-ee97cc26475e", "sighting_of_ref": "indicator--5ebe7c90-bd4e-417d-a7d1-751772bcee52", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaad400d-5b46-4800-b043-9e3f91561505", "sighting_of_ref": "indicator--76699206-1b84-4a41-ad47-40bae6c9f140", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4e2550-f6f7-4458-b32c-cfedaf322c8c", "sighting_of_ref": "indicator--a8c4c371-1f91-491e-908f-bf74951b33ca", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f65df6-de3d-4982-bb4a-bfe5a871847b", "sighting_of_ref": "indicator--de12d700-5d72-4e3c-8260-44e686539f6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b104f34-f2d0-463e-b37f-f47c15964e83", "sighting_of_ref": "indicator--25ec81a1-c93a-48dd-91cb-541cb14297bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6919fd14-797e-4a53-907f-35fec039a2bb", "sighting_of_ref": "indicator--2cda02ec-bd05-4afe-a28e-272531d76a39", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab649b7b-6d69-4cf3-ad77-7152e3f9238f", "sighting_of_ref": "indicator--640916f3-fa5d-4036-864a-7c07689b9769", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210f1798-de8c-4905-8692-fba532d34eba", "sighting_of_ref": "indicator--07e106ac-01a8-49de-9106-920fd6689241", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff977a5-94b8-4526-bdd6-4cad31c9f4f6", "sighting_of_ref": "indicator--b2e571ca-9c2c-4027-88f2-4caf90bf64e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd795777-3d59-4a20-8223-bda20db66ba9", "sighting_of_ref": "indicator--d9769ea7-07b3-4ff5-a8c9-6829dea72b75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29912ac9-ac8f-4c29-b9a7-85692571caf8", "sighting_of_ref": "indicator--2584ff66-a959-475a-8dfb-1ff7510a2cef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bb3d97-dc3d-4b94-819f-505f2da1a5e2", "sighting_of_ref": "indicator--49550aa5-98cc-4703-bac4-ff20f959c46a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf7fee8-c870-4ab3-b30e-df44254dc9bd", "sighting_of_ref": "indicator--f9fa860e-69d4-4775-9bcf-a2c96939ea15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52a15ec-0996-4499-913e-6de0e880fc08", "sighting_of_ref": "indicator--e08f69b2-23a7-4169-a200-f2ad7cb61712", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1348232d-b3dd-4985-be58-19c912ebcad9", "sighting_of_ref": "indicator--1af17599-b1f1-47ed-aad5-4078dbd0c7ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bb9c45-1ae2-4e9c-8f55-5753b2824379", "sighting_of_ref": "indicator--f96a7689-7c11-4c3e-94e5-43c6a72e0d09", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24832f63-71da-4c1d-beb9-825eb9e93c31", "sighting_of_ref": "indicator--89a1f9a0-b2f4-42c4-8950-cb4d6217bf16", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61167a2-8796-4cf4-9e35-8396bd844156", "sighting_of_ref": "indicator--030468d3-37d3-416c-9a6f-87201e7b1f7b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2581b0f1-4e8d-4294-8f4e-8ea37667013e", "sighting_of_ref": "indicator--981ceda1-2b43-41d6-8a5b-4631b9324ed0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fd103d-c0ca-496c-9149-d84e0b6c85a3", "sighting_of_ref": "indicator--586f88d4-b44d-4cdf-b8af-dd598a6b05d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a1cfa5-94d3-46b1-9875-9958ff7ae9d7", "sighting_of_ref": "indicator--7d8fe49e-4596-4444-bbf2-6c03db5fa943", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194b3ab9-cd17-43ae-92d1-cf6079749260", "sighting_of_ref": "indicator--291375c4-6ff0-4fad-801a-67e391060aff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235ca0ee-31d5-42f7-94dd-de61a1d032bd", "sighting_of_ref": "indicator--291375c4-6ff0-4fad-801a-67e391060aff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c603f9-4aea-4cc5-a9aa-13992ed23157", "sighting_of_ref": "indicator--15bcc341-bf01-47d4-ab89-500a8c262c18", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24249c11-f8a1-4d07-bd8b-4a5aa03763ae", "sighting_of_ref": "indicator--353c32bb-5a63-4e02-aec5-c55777539bbd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5b7509-6356-499d-bbe1-d46c0ef6b678", "sighting_of_ref": "indicator--03887d09-efea-49ec-aec0-01bcfaf65a5e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553d1275-62f1-4f62-9dc8-ed8673efc8ec", "sighting_of_ref": "indicator--1b125e72-cb86-4aca-8d4b-e53e55466fc8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430bfb9c-8f93-4048-9db5-1341590ac5d7", "sighting_of_ref": "indicator--bd9c53dc-ff29-4155-ba74-d63de94164e5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e79b1d-c71f-4c30-b2c6-ccb1bbf6d484", "sighting_of_ref": "indicator--4a22046f-a666-4606-8a1b-2f10b2507ab4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022ba790-7a57-47b3-90f3-d722c83d257f", "sighting_of_ref": "indicator--60aa8518-d529-4c6b-a5f0-325552d88149", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90c99b7-e647-4c45-8d5b-656f93732e28", "sighting_of_ref": "indicator--f1490c74-183b-4a2b-b062-22d9436bae19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447f4f9c-ddd6-47b7-a23f-c14358e6b838", "sighting_of_ref": "indicator--c8232ba1-9090-4544-82e5-edc333a898cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78692151-7bb6-4646-b32e-318c311c82c3", "sighting_of_ref": "indicator--b49ee06c-d3c1-488f-99f2-0015f7f18a9a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2272dccc-82b6-4838-a238-7f852553dafc", "sighting_of_ref": "indicator--80fd61bb-f2bf-417a-bfaf-49c586d0c459", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b60f58-4687-480d-b233-316d9f1c00fd", "sighting_of_ref": "indicator--702b8054-eec2-4155-a80b-2ebfb3ef70c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899b44a1-ee40-4579-b432-1a09d49164b5", "sighting_of_ref": "indicator--5308ef80-3805-4875-8731-b7acf0f8a984", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c68ccc-ec0a-47a7-b9f2-06b5e48b66cd", "sighting_of_ref": "indicator--5e32aae0-6bc7-4bc4-848f-5e1712cbe5d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeb18b3-0bdb-4de3-b232-c90d74a3da82", "sighting_of_ref": "indicator--84570181-6513-42dc-8106-6a9e0c7134be", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb51c3b-b5f9-4a8b-ac52-71df87870d36", "sighting_of_ref": "indicator--84570181-6513-42dc-8106-6a9e0c7134be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44668872-7b80-4710-9f04-c53066ca0b3e", "sighting_of_ref": "indicator--8a844c4f-2a5f-4b6b-b6e2-4d2be4112804", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96369d3-62d4-49e2-acfa-abfc76e48b8a", "sighting_of_ref": "indicator--b3d3b61c-a2ac-4237-a36d-11c998f5891a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2515a939-bdaf-4cc6-90b3-5fbf2c1ef4b5", "sighting_of_ref": "indicator--e01205e9-843c-42ba-a7d7-73f2ce7bb578", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e1fdc4-b386-4cae-917a-9b172e8b5dfd", "sighting_of_ref": "indicator--e69f00c6-6aad-4872-81c9-2e37f28d3be6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178cbeb1-e9bc-4026-a5a7-4958c5d1c448", "sighting_of_ref": "indicator--6df6d1c0-09f1-47e5-bf8f-1eeaa9eabd2c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fafec50-056d-49d5-9683-4f99ec8859da", "sighting_of_ref": "indicator--1550e899-3e94-4ba7-8270-802baa254df3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6730f62-0dd6-473b-b580-87c0be2f6ccc", "sighting_of_ref": "indicator--65484b15-32ad-4daa-bb3d-2a56a092827d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b0a462-af8a-438d-94c7-de3a43bf7ba7", "sighting_of_ref": "indicator--0af00627-7474-42df-be72-3ae9c5de3f76", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b923b98-20c2-4cbb-b4d1-62e8e07059eb", "sighting_of_ref": "indicator--1e811501-3948-4473-a67f-f754b88a0b18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66884a10-53fe-4703-9927-bef503ef4a27", "sighting_of_ref": "indicator--19252725-a203-4dee-a7f7-98e83b8e5483", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e10e4f6-9164-45be-9dc7-f729e94e463d", "sighting_of_ref": "indicator--63e1a4ad-b873-4856-a8ff-6a9d2f36c55e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e90995-a1eb-4ab2-9b97-438d94834d72", "sighting_of_ref": "indicator--3dab7539-4fef-4898-b1e6-4161b8398891", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130585ff-ffb1-41f1-b761-1543eb423ca7", "sighting_of_ref": "indicator--3dab7539-4fef-4898-b1e6-4161b8398891", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a97620-cbe6-46a9-af2f-800d2e638abd", "sighting_of_ref": "indicator--6f46d1b0-0e41-4589-86e5-b523e11ba65b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3213840e-91d2-4069-a93c-da594dc2d4c5", "sighting_of_ref": "indicator--fb66457f-e6f6-49c5-bee9-4b78c0b55011", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfd5061-5ac5-4cb1-8313-fcbcfbcd37d3", "sighting_of_ref": "indicator--bdad1b41-d407-438a-8d8f-759ba4f9bdf7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d643960-fdad-49a4-8c8d-b79f1ab65662", "sighting_of_ref": "indicator--ee9b534e-93a7-4659-a8ed-6994913ffa64", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88670c3-8e41-45da-b194-118dd301ec6a", "sighting_of_ref": "indicator--8401849a-4d4d-45f8-9f13-5776ef856b95", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84398593-7e79-4f89-a3e4-c111e4b5d5e0", "sighting_of_ref": "indicator--13327961-5102-4d28-800e-07e5a64b1f4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4bab94-c3a9-402b-a5e7-be6257fa4e35", "sighting_of_ref": "indicator--23048f93-61c3-4d07-8fd5-500892c33989", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6719116e-b722-4c01-8b7d-6b79147adcd9", "sighting_of_ref": "indicator--6e95ad26-5361-48e5-8590-599b3d403510", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c1553d-da4e-454b-ad5c-f59f3ae40f8c", "sighting_of_ref": "indicator--6dff15e9-c91e-407b-a667-bb4a46f2dc45", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d31c076-eee7-40d3-9872-8840fb76316e", "sighting_of_ref": "indicator--dab88924-5da5-440e-b993-aaa56485922b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eadc7c-b98a-4262-b531-34eabdce9ad5", "sighting_of_ref": "indicator--d824df66-43b0-40d1-b8f7-6f2ee7175906", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2caf29-c716-4c4e-afe9-c1332ab7d5b5", "sighting_of_ref": "indicator--f1ac3e1a-46a2-497a-8872-0197eb46d942", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd1724d-fdbe-4aaf-86de-b8caeb15dd50", "sighting_of_ref": "indicator--2f788a30-6c94-4555-a564-af83b3d9c466", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e5266d-c100-47c9-84e6-a2c12fe3e1ca", "sighting_of_ref": "indicator--2aa1f074-0b5c-43e6-ac98-09dc8c12ed57", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb959243-d4ad-450c-ab80-93622c5f6f3d", "sighting_of_ref": "indicator--ca22dc5e-5ace-4573-8ce0-e580b47fc251", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bc4edb-352a-4467-ab86-4233d3b7cbe4", "sighting_of_ref": "indicator--a9b2e566-08e0-4c29-ae33-a10b849fb4e2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422f71a2-8d5a-48eb-b4c6-4c2b1a033c04", "sighting_of_ref": "indicator--b37e922b-2d45-40b2-a974-440c54cdfa45", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b4c1c8-551c-4558-8121-3270bccb69a8", "sighting_of_ref": "indicator--da4ec919-a38d-4af4-a2b5-a621cef2e77b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafd946a-6526-4d6b-9f4d-be54f4a47b84", "sighting_of_ref": "indicator--e82198c9-8cc3-48cc-9dec-618ae0fc5c83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efad9db3-7c18-4656-8972-988d5c36ffef", "sighting_of_ref": "indicator--e82198c9-8cc3-48cc-9dec-618ae0fc5c83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a19d65-72df-4630-b38b-517f5be6d486", "sighting_of_ref": "indicator--854a8012-dc87-4560-97a8-556783147b2f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365a96c5-3c98-43ae-bca0-f6f2633b0694", "sighting_of_ref": "indicator--854a8012-dc87-4560-97a8-556783147b2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d106627a-4fbe-4d20-895a-d703eeaedab2", "sighting_of_ref": "indicator--45b623d6-3a5c-454e-a931-f804205811bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4fb72d-cf2e-4ff6-bb7d-96365580f973", "sighting_of_ref": "indicator--bca01477-65a1-4070-86d6-8cd3af07a1e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baef2750-643d-4bc9-9da7-667b9a66d449", "sighting_of_ref": "indicator--365f656c-448e-42d4-b4e7-0d7cb4d8afd9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf61bc0-a2a7-40ed-8b5d-6b2974e8bee3", "sighting_of_ref": "indicator--b8d13e73-5b02-4a1d-bcd6-4ac56fb97f12", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d938d164-f76b-4f9b-a716-a21627b7f576", "sighting_of_ref": "indicator--ce5b77d8-bd84-476b-8555-a97b7dc0ead1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d1e584-9fd5-4527-a73c-987af9084f8a", "sighting_of_ref": "indicator--ce5b77d8-bd84-476b-8555-a97b7dc0ead1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e68e2b-7154-4e28-982e-854298481b0c", "sighting_of_ref": "indicator--b8e8e4df-2b60-4bdd-ae6b-322c234e11dc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2183e943-3062-4ab1-8e10-763427bbf9b8", "sighting_of_ref": "indicator--047705e8-ca02-4bee-b7e2-e27dadc5d9f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1283f21d-5f94-4b9d-8c26-630a5d20723f", "sighting_of_ref": "indicator--84b232db-ee1c-44a7-80ab-d8365a5a36e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f2cba0-a439-4f84-9ebe-9cc8a0330aef", "sighting_of_ref": "indicator--bddb10de-3d0a-48ad-989b-fa2734c48d03", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a325b0af-2f42-472e-925a-e9accd778afc", "sighting_of_ref": "indicator--e5de1fe2-34c2-44aa-b1a1-76ef3c8fb9c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fd09d4-d8c9-4f30-940c-6da4927a6c93", "sighting_of_ref": "indicator--e5de1fe2-34c2-44aa-b1a1-76ef3c8fb9c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be15538-cdb3-44ff-9c8b-5d38b2d9144e", "sighting_of_ref": "indicator--f97e06ec-1d49-45f3-8b57-696b6bd2b049", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013aff34-8b48-470d-a7c2-e4826f845d87", "sighting_of_ref": "indicator--bf98ae43-4a87-4776-9468-228f90738889", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab11912-11cc-4202-985b-295a3c42c1cc", "sighting_of_ref": "indicator--cf427eb0-a5f2-4188-9987-498a243fae0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d7555f-c192-4db4-8ffb-aa00614e7c26", "sighting_of_ref": "indicator--eff4d1c9-8e27-4dd0-98a3-9987384bb410", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237610b8-4db3-47c4-b7fb-c600f8964b37", "sighting_of_ref": "indicator--eff4d1c9-8e27-4dd0-98a3-9987384bb410", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f6378a-cff2-4a41-ab1f-2469535fd495", "sighting_of_ref": "indicator--0ef1db4d-fdb2-4868-8c05-4046bc69b493", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4168a45d-d465-4157-8bbc-5482173568f0", "sighting_of_ref": "indicator--2dee6cf9-873e-4320-8722-8d22ba0f9d8a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6835da40-2d27-4fe4-b727-390a865e6815", "sighting_of_ref": "indicator--0cccabb4-7632-4f8b-9326-1301f9c94450", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b152a9e-c277-439b-b89d-c3dd300fa140", "sighting_of_ref": "indicator--f66d6da6-01b7-4fdb-96eb-2af21d5dc52a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4fdc45-fbd9-4df5-b149-84f57431171a", "sighting_of_ref": "indicator--b82aa962-e105-49a8-8196-ed765d8f33aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3a57f3-42fc-41de-962e-6d550138c91d", "sighting_of_ref": "indicator--8a434263-4f96-403a-bdce-5745e2a25058", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc90240b-b28a-469f-8261-b26983bfe531", "sighting_of_ref": "indicator--8a434263-4f96-403a-bdce-5745e2a25058", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df23a31-60ee-4536-97e3-73365cd943a1", "sighting_of_ref": "indicator--9a99f53e-f620-496c-bc84-6cd4882d62ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ac77b6-4983-45c3-a448-9b9d83b4b460", "sighting_of_ref": "indicator--9a99f53e-f620-496c-bc84-6cd4882d62ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbbf019-a797-49b3-8c3b-6ddcdb6a548e", "sighting_of_ref": "indicator--9cd6ed26-10ba-40ce-be65-63010d531bb8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43f7696-f46e-4545-847c-358203e6a257", "sighting_of_ref": "indicator--3e13c96b-5d63-4d76-89b5-e76156e9f02a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2f2730-c23c-432f-ae0a-6a91ecbc5636", "sighting_of_ref": "indicator--2498629a-628a-4aea-b9b0-9b14720fc24e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6424f00-76f3-4968-89ac-793afad62bbb", "sighting_of_ref": "indicator--31a29800-a31b-41ea-ae48-41d5055d7bb3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf7c86f-e26c-4628-89b2-7096b10ba23f", "sighting_of_ref": "indicator--7d1fdf2a-4fc7-4dd8-910f-eaebaec96405", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15751e12-e5e0-4ce0-b9b6-8d594e498549", "sighting_of_ref": "indicator--38d43099-1b59-49fa-875f-29958635f0cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84df8d36-58ec-4573-ad62-f11002f183ac", "sighting_of_ref": "indicator--041b5dda-85ea-495b-839e-a46628e53807", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8a18c0-59b0-4bdf-a2bd-4f127f5f6e9d", "sighting_of_ref": "indicator--83a0f043-a285-48ec-a463-1e1a05b35acf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5900df1-f1f9-4028-8274-466536a3a9b4", "sighting_of_ref": "indicator--417058f6-7dec-4403-a690-04b0dc7b16df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b230974-5383-4e93-af29-3191f03b9aca", "sighting_of_ref": "indicator--09c04908-41bd-48d6-b23d-8209ea74da27", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12750c22-2fe0-4cd6-9002-1e2cd002b023", "sighting_of_ref": "indicator--4238866c-0360-495c-a142-e1395ac29f4e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc727b8a-4eb8-4c04-a992-de8c877022b3", "sighting_of_ref": "indicator--f33d0e3f-de58-407c-9daa-7d2b181dcd9f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416e46a2-03bb-42b3-bfc2-b37aad391821", "sighting_of_ref": "indicator--f33d0e3f-de58-407c-9daa-7d2b181dcd9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3726b943-bde7-4c7c-85ae-0454f9f4c624", "sighting_of_ref": "indicator--aeeaf962-525c-4a5e-b720-58fcbcb8c318", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ae5b2e-2521-4633-bdfc-c18884c604d7", "sighting_of_ref": "indicator--b545d042-b8f1-4e89-9298-797a1d128105", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7a421a-c55b-4042-b46a-1f383acd8080", "sighting_of_ref": "indicator--5f3b12cd-bca4-45da-af8c-434c6100bb82", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f764f805-e520-4a89-bd6e-61ead707f6e2", "sighting_of_ref": "indicator--ca7bbe02-6d4e-4b79-bb81-854d6a043384", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df4a4e4-e76c-46ec-8cad-65de4090fd49", "sighting_of_ref": "indicator--58418eca-6e7d-495d-9c7e-a3c93be9df66", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea4436f-f395-4181-bef1-fcf016691de8", "sighting_of_ref": "indicator--58418eca-6e7d-495d-9c7e-a3c93be9df66", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c772b1-e5b1-43e3-9563-94592a74db72", "sighting_of_ref": "indicator--600c2b85-0069-40a1-923e-7ec637b0e5f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a9ade1-bf64-49d8-ace1-a82b73fda645", "sighting_of_ref": "indicator--55f16f69-53b1-47b2-b273-5ebee575d31b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061b4314-b560-4b55-9d2d-130f1dde9cb5", "sighting_of_ref": "indicator--98aa20ce-f72a-4c7e-a9ce-89f06f42571b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060d5c20-7bd7-4d75-92fe-c6eeabefbcaa", "sighting_of_ref": "indicator--5ad14ee1-49be-410e-bfcb-58c1c68ffad3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82de236-b405-4a65-a0ef-52224015edd6", "sighting_of_ref": "indicator--5ad14ee1-49be-410e-bfcb-58c1c68ffad3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f04d2fb-c618-41a3-bb5d-b8575ae109da", "sighting_of_ref": "indicator--5ed70ab6-f6d7-4331-9eb5-e18332d0a0cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bdc875-483c-469d-b11b-757686813088", "sighting_of_ref": "indicator--5ed70ab6-f6d7-4331-9eb5-e18332d0a0cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6401c921-e4a0-4c4c-a50c-7e483cb73f2b", "sighting_of_ref": "indicator--10530540-1522-48c5-b1bb-94a38a063ff9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf256b6-95ec-4e94-9635-1a20e842c8f2", "sighting_of_ref": "indicator--a16799b6-1aa3-417c-b40f-d58e2a74415d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5de363-4979-46ad-a886-5f8792cf30c8", "sighting_of_ref": "indicator--a16799b6-1aa3-417c-b40f-d58e2a74415d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b732636d-3396-4bd8-bee3-ceb887f01b4c", "sighting_of_ref": "indicator--3a40d99f-f93a-474f-9399-5346cdcc5ab8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bb7067-6c04-4838-be2e-8690c3974aef", "sighting_of_ref": "indicator--3a40d99f-f93a-474f-9399-5346cdcc5ab8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655ba420-9ba5-480f-a2b9-b0b113f3ebc7", "sighting_of_ref": "indicator--afc8f3f4-69e9-408e-9315-36d6492c1041", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263ba023-57b0-4eee-8ea3-b95e003fbf13", "sighting_of_ref": "indicator--afc8f3f4-69e9-408e-9315-36d6492c1041", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6004233-454b-48d9-afab-9e752067f4ca", "sighting_of_ref": "indicator--3963f815-d4eb-44f9-857b-83bdbfc7b5d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cea547f-6e47-46fb-914d-c14fb63bab7c", "sighting_of_ref": "indicator--5743a8d4-7e56-47fc-b813-e80f9d06d147", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba56e6c-5b85-4cd5-ab33-2693240bcc8d", "sighting_of_ref": "indicator--3c1a2854-bdce-41f4-9f5a-160f806d0f6b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc2fcc9-506c-4b8b-be22-0477aea48602", "sighting_of_ref": "indicator--899d906a-ed5d-475d-b762-fea6c56a00f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fe006c-1a04-494f-a589-f6836d2f465e", "sighting_of_ref": "indicator--899d906a-ed5d-475d-b762-fea6c56a00f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e78c9d-e5a4-47c8-86aa-f81eeec8a871", "sighting_of_ref": "indicator--4b7f2cfe-8200-4244-b6ea-fc0afb1b09c2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01120ac6-5625-44bd-97c8-15aff3d0b6e0", "sighting_of_ref": "indicator--97b92f24-2f9c-41d0-aae6-a27f95245787", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e14718-1767-42a9-92ef-5961e6f96be4", "sighting_of_ref": "indicator--49e1f86f-fbc2-4a0e-9a99-c2abb6d31ac1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8862ca-48f0-4291-91f3-b67b49f6ae5c", "sighting_of_ref": "indicator--49e1f86f-fbc2-4a0e-9a99-c2abb6d31ac1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496d33d3-49dd-4b76-b247-6a83eee31eac", "sighting_of_ref": "indicator--53cef2b3-4317-4400-b2a9-ac6bd1431bd2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b059a9e-a5d5-4cf1-9345-dbbee76f52f7", "sighting_of_ref": "indicator--53cef2b3-4317-4400-b2a9-ac6bd1431bd2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a697da9-ffc8-4d71-bb10-9bb93045b035", "sighting_of_ref": "indicator--953bd971-2b07-4731-8e40-9c691b3ffb18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5674b9-cf22-4cd6-bbf6-4808f77d0af6", "sighting_of_ref": "indicator--7db75957-c7c6-48a2-a6b2-c3c941f69152", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c639571b-9c59-49ad-85f9-a860235de6a2", "sighting_of_ref": "indicator--7db75957-c7c6-48a2-a6b2-c3c941f69152", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dd3215-3ba6-41c7-97d1-850a3dc426a1", "sighting_of_ref": "indicator--e7f36778-971c-4505-9a98-7b675052e4b1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be95c897-86d2-48ce-9539-2682917352a7", "sighting_of_ref": "indicator--070284f1-27a9-43fa-aadf-2049877adc70", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962d3f41-20a0-4232-b222-e79d321e0100", "sighting_of_ref": "indicator--4b54ffc7-d29e-4e55-8c96-eadb3a9fb9fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d0de10-ba34-407d-8d71-c2dc5e522a17", "sighting_of_ref": "indicator--41ba3d9c-1580-4dcd-9418-bd13a12cdf0a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a43f03-6213-4508-bf00-4d4bfee67fe3", "sighting_of_ref": "indicator--c7dd530f-3d63-4449-9d21-e348b06b5b8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c7e942-0cdb-4e0b-af49-e82c92fed87c", "sighting_of_ref": "indicator--17b1001f-c1f2-4607-a01b-71a9e670c598", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907d2da6-68a5-466b-a10f-d18fe0ec9fc0", "sighting_of_ref": "indicator--5d348654-8453-4a1d-ac7e-714fe6c0400d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5988ac72-638a-4ece-bd55-90a91e3f257a", "sighting_of_ref": "indicator--3f55e7fb-f034-4de0-84e6-5b05d0ffe19c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7f58e9-e988-4041-9aa0-05d29e62b5c1", "sighting_of_ref": "indicator--88c1841b-a999-4c29-8100-b197ca913eb7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00c1f3e-ea73-4c05-ab2c-f7de0b9c0792", "sighting_of_ref": "indicator--88c1841b-a999-4c29-8100-b197ca913eb7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8415f65-28db-4adf-ad95-9695c622807b", "sighting_of_ref": "indicator--7d1e19bf-4e17-457d-a679-89b8d535e27a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee03f86-f6a4-426e-90e8-01f5338cc119", "sighting_of_ref": "indicator--81e9a2ae-c5ea-4fcc-b958-5a36e979a901", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a1b0e0-2558-416d-af7d-00de7b19745c", "sighting_of_ref": "indicator--7b8d2e99-7aba-4db1-bb0b-97626ec9db2c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d767e2fb-d418-4900-9382-d36650bca16c", "sighting_of_ref": "indicator--49fa878c-7f8b-4163-94d4-06d310d971c7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dce5898-f25b-49aa-a866-d65c39942d21", "sighting_of_ref": "indicator--a1c66209-a120-467e-9917-feee60c75c52", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f926477-cdc6-4e06-a352-eaf9a9c7d485", "sighting_of_ref": "indicator--d2398a5a-ded7-49db-aea5-267fb4ba885b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118da51c-a50a-4bb1-bc57-c6fe777199e0", "sighting_of_ref": "indicator--53e21310-a72b-4011-b0c0-2882397edb9e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f12200-4997-4a71-95fa-443c7b5af711", "sighting_of_ref": "indicator--53e21310-a72b-4011-b0c0-2882397edb9e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571d4a8d-077a-4d82-bda5-9297da85a099", "sighting_of_ref": "indicator--cd0bce94-1932-46f3-8aac-37373f04c021", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39caa334-98e2-47f0-890e-da9f7eecca54", "sighting_of_ref": "indicator--c00a4934-cbe4-4a31-b701-325b91295dae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6d0217-aa0d-4c90-9e12-00d9650f76dc", "sighting_of_ref": "indicator--754086ce-8b17-49e6-9add-bf1c5a830502", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4ca4f7-8eb2-473e-8d31-5da6031114a1", "sighting_of_ref": "indicator--0ce2c4e9-0d0e-40c6-9464-65d902038f5d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4633c9d6-d743-4362-adc5-c96d10b7fc5d", "sighting_of_ref": "indicator--0ce2c4e9-0d0e-40c6-9464-65d902038f5d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57aac562-6b89-4bc8-93e7-01c53e52776b", "sighting_of_ref": "indicator--61eb6e06-0870-4476-88b0-caf263b2beda", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b5fc71-4155-49a8-a8b4-53a22a33eb57", "sighting_of_ref": "indicator--bb8e1daa-f920-4382-99cd-c117090bd426", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e69614-8747-476b-9698-b50f391b6178", "sighting_of_ref": "indicator--fd2700a2-c384-4722-b95c-cfbdde6d3a21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bf2c8f-4fec-467f-83f6-a354dbb30d6f", "sighting_of_ref": "indicator--9fb104d6-b98e-4676-889c-404c0e64d9fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbecbdfd-50ae-4fc4-84ad-84d484d63bc3", "sighting_of_ref": "indicator--e0f550e8-5953-417c-84dc-f58b7185e5e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201abe5b-f131-4d31-a14c-d2bb4c57290f", "sighting_of_ref": "indicator--78a7900d-5d96-43cc-8b2b-4f233349c414", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f75505b-e8b0-4437-bc4c-8f11f7891388", "sighting_of_ref": "indicator--78a7900d-5d96-43cc-8b2b-4f233349c414", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9a0bf1-bc28-4f27-91ac-711ac8a96b76", "sighting_of_ref": "indicator--2af611f0-4c0f-4e35-aaba-9f4548e92533", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ce8820-ed3a-4a78-8b15-6376604d3976", "sighting_of_ref": "indicator--2bef7f2c-03aa-41b3-bc79-dbc065d22b5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29da5eef-f2cb-4846-bc37-17af43c227c1", "sighting_of_ref": "indicator--2bef7f2c-03aa-41b3-bc79-dbc065d22b5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1431d7-2c42-4539-aa3b-2e1d1d9f0677", "sighting_of_ref": "indicator--15afdbd4-0eee-4719-95b3-53b77da4433c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1b7195-74a1-4a10-b04a-7b0867c79599", "sighting_of_ref": "indicator--c2e27c4a-46fb-4934-82ef-76ace9301187", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ba0f4b-46e9-451b-95ae-8cdfab2932f7", "sighting_of_ref": "indicator--720b6600-8358-42d0-88e1-322995861220", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0d493e-ffd3-41da-8c40-cce1cd1ba659", "sighting_of_ref": "indicator--391eec40-9024-463c-a97e-54b4f9764e84", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498ce207-547a-4223-80ad-b28218edc5a7", "sighting_of_ref": "indicator--6371821c-e8b2-4bd9-994d-c7afe36b2b50", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5730957-73e6-4227-afc7-e83d833c8d3d", "sighting_of_ref": "indicator--d53c146f-52c8-44b4-8790-d5ff642db98b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab7f862-b72c-4ccf-b0c7-9192b574ad7b", "sighting_of_ref": "indicator--d53c146f-52c8-44b4-8790-d5ff642db98b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e702e9f8-3273-4bd2-b798-bcf897b8678d", "sighting_of_ref": "indicator--0ea2bd0c-863d-47e8-b514-343c4c27af40", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782583e0-3b66-4bb7-8652-5885f905215a", "sighting_of_ref": "indicator--75125007-8ae7-4d30-8603-e0c3ef8c5532", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f530f854-916f-4370-8ff6-d5eb687a5efe", "sighting_of_ref": "indicator--68467620-0847-4717-84b9-99629c5d3269", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d70a4ab-df28-4242-a4c0-0eb15cb401e3", "sighting_of_ref": "indicator--d462cc31-689a-48b5-ae2e-397eb2934c1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88eec10-07f2-43fd-ad44-95aa782f0ab7", "sighting_of_ref": "indicator--7883bc39-6f03-4222-9b83-a78e72d2e53f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbe34b8-4514-451a-a9fa-44ed4c4b60a2", "sighting_of_ref": "indicator--0d06f787-dc30-428b-a8d2-7424db0af7e5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4aa812-beb1-456d-a583-4308f716c4e8", "sighting_of_ref": "indicator--0d06f787-dc30-428b-a8d2-7424db0af7e5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e74564-95e1-4f7c-9f71-650ec5a08ad7", "sighting_of_ref": "indicator--20db5818-3b18-4e5e-beea-8c817a581014", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ef0a8f-adcc-459a-b09a-fdc4b4ac9fd7", "sighting_of_ref": "indicator--20db5818-3b18-4e5e-beea-8c817a581014", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e65f329-a216-4c64-8cda-45a18b32ca1b", "sighting_of_ref": "indicator--eda84cfd-9cb6-4e66-a23b-4a9b9ab30c0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad22aee-65ad-4f7a-9f37-809ff9f7c49b", "sighting_of_ref": "indicator--eda47000-108d-4c0a-a1a2-23981438fd3f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be244bca-7ef0-4b70-989a-ced3adb3e810", "sighting_of_ref": "indicator--41dcfa0c-0ba3-4f37-b981-8af438ac969a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2710913b-8450-45c7-ab96-928ba1d8243c", "sighting_of_ref": "indicator--d2f5f9fc-e492-4114-a596-5ed86897ec51", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1b0075-0a7e-4bec-8af7-ce70aaf21ec8", "sighting_of_ref": "indicator--63f1611f-05f1-4098-bbf3-efb2a47781da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e9d076-da64-4483-9327-09e5301f38ef", "sighting_of_ref": "indicator--63f1611f-05f1-4098-bbf3-efb2a47781da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7b711f-eb13-403f-827d-5d89dacc5f0f", "sighting_of_ref": "indicator--9c84d273-87b4-4414-9e52-3ec8ddfcb220", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ff9819-07f8-4ec0-bdba-021171b24d98", "sighting_of_ref": "indicator--9c84d273-87b4-4414-9e52-3ec8ddfcb220", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73869d7b-5bb4-4185-887b-0593e1605146", "sighting_of_ref": "indicator--37e4916f-aaa0-4d62-89af-13f7a387864d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5f3acb-45df-462b-b61a-4c340c0428ac", "sighting_of_ref": "indicator--dfc92c4b-9160-4886-9e51-eab0eaf91368", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2d6231-336d-4e86-863a-6997e179d414", "sighting_of_ref": "indicator--dfc92c4b-9160-4886-9e51-eab0eaf91368", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b88715f-4d5a-4a6c-83c3-ee937b1e16e0", "sighting_of_ref": "indicator--97c06ede-01dd-41b4-8378-a04344058f80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf996017-f1bb-412e-8457-f07337af44d6", "sighting_of_ref": "indicator--97c06ede-01dd-41b4-8378-a04344058f80", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eac5432-31a9-4d94-a453-79f48bf3f8fe", "sighting_of_ref": "indicator--9cdd9864-918d-4d00-bd7d-3bca3da6137f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a16843-e39e-42c1-821d-1d3a93558f27", "sighting_of_ref": "indicator--ef2e6dd5-984c-4ab1-ba09-268844f6f2b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5bd856-11b8-4273-84e5-f08ac59114d3", "sighting_of_ref": "indicator--a9b1b3f9-b91d-4a08-ae8b-b8af529343aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d845b9d5-47aa-4de2-981d-d6316e1204e0", "sighting_of_ref": "indicator--0bb3e8a5-67c2-47fa-be2c-e1588f4e628f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c1eed8-c519-4ae4-b72a-af8096dc915a", "sighting_of_ref": "indicator--3ac23ea8-8c74-4171-a942-c87051517f3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3375c0e1-b4d3-488e-8185-ad4224765c8b", "sighting_of_ref": "indicator--3ac23ea8-8c74-4171-a942-c87051517f3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40b2384-e68a-477b-a047-5093df9bf1c0", "sighting_of_ref": "indicator--aa693b33-7ab9-4ee5-be85-b5b33872eb52", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c405a3cc-ee68-412e-9cfb-a0171772a75c", "sighting_of_ref": "indicator--0ae7b00e-de9f-47f3-a5ac-0707bf14768a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f36a7da-7394-4832-88a7-c4bfe7b66b95", "sighting_of_ref": "indicator--b053e206-eb40-4639-86f2-aaa6e36c9028", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a45d84-b08d-4441-95a7-170554179e70", "sighting_of_ref": "indicator--5a2533af-7974-4c81-9cb3-25259a3e7be2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f18faca-51cf-42b7-aa7d-d4b09c48fe82", "sighting_of_ref": "indicator--da806583-7e8b-4dfb-94d9-dcc7036a8d30", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ce0b1d-89f5-4a67-a6e9-9de5bb63b6f9", "sighting_of_ref": "indicator--c81ee602-755e-47f0-889e-7c1801cce657", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5790729-b698-4fda-b6bc-8f4679047645", "sighting_of_ref": "indicator--9df7f212-ade9-4284-82c3-d09ba0bcc67a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ace07a-005a-46ce-b4ab-818e58dc90c6", "sighting_of_ref": "indicator--9df7f212-ade9-4284-82c3-d09ba0bcc67a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ccbf6e-09ec-4ba0-938a-4c5f4bafa9a7", "sighting_of_ref": "indicator--cda55f46-f4a5-4149-8a63-731a09235985", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d331c26d-ea27-4c42-a205-1d51729bed8c", "sighting_of_ref": "indicator--12a5c1fd-3bc0-4c95-83f8-34fb0d305da8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22311af3-f9a7-4d63-9711-f157bf53ff6f", "sighting_of_ref": "indicator--9a54348c-1590-4bf8-80c3-2538b6b00757", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edef92a-6df2-412c-91a0-5ef42f91e58b", "sighting_of_ref": "indicator--13e9c589-c900-4b64-9dd3-a5168120f47c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752819d8-47ba-45e3-850b-dd65cc03bbc9", "sighting_of_ref": "indicator--fb8b8a6c-0f0c-44a0-8407-36b7739722a3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cc7cad-a7a5-4545-9054-9d47ac2cf702", "sighting_of_ref": "indicator--78ebcb57-ba9d-4343-97ff-a34a18959b61", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3431c6c-20cb-4d36-a174-75772e675d5d", "sighting_of_ref": "indicator--78ebcb57-ba9d-4343-97ff-a34a18959b61", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c3bb08-4e18-408f-b19b-eed56cda6800", "sighting_of_ref": "indicator--79d7748a-1470-463e-9503-39249f11798f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69c6c3f-6027-4f41-ab7b-49a8bf50a258", "sighting_of_ref": "indicator--993d7217-18aa-474e-8dcb-e3ac3bfa6ac2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32499e5b-a93b-42ee-b657-bed4f6b18af1", "sighting_of_ref": "indicator--680a7fc4-bde7-46f3-8f7e-dafbe7ff39ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5ce040-3e5f-4dd4-aadd-2ab4e7fe031c", "sighting_of_ref": "indicator--bdd245ca-ecdb-4212-b1ca-ebed97014bbc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca57baf8-70c8-4bfa-b65e-e92ccd302acc", "sighting_of_ref": "indicator--63a7e3d9-369d-4c62-bab2-a6f5acced1a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2858d2-74d5-4378-841c-aa4a1a3b1793", "sighting_of_ref": "indicator--8adfb910-8ede-4190-9e66-f8c06b695e0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f868911c-778f-4d02-8c9b-45bc71f60aff", "sighting_of_ref": "indicator--8adfb910-8ede-4190-9e66-f8c06b695e0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcadbaaa-5755-482a-9051-82760d8d990d", "sighting_of_ref": "indicator--20dd233a-9ac5-41cc-9984-74239a019ff4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af81e77b-98b5-4a27-8218-0ec2cdf161f6", "sighting_of_ref": "indicator--20dd233a-9ac5-41cc-9984-74239a019ff4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5181337a-38fb-4e55-9bbe-359fa9d276ec", "sighting_of_ref": "indicator--5c527332-84d6-42e5-8b6a-3847ff2fc8f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d20325-129d-48bb-92ae-705eef197ba2", "sighting_of_ref": "indicator--bb336470-caba-4023-84f8-b85a6ee4f7f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ef8bed-432c-43c7-9293-39a64362367c", "sighting_of_ref": "indicator--367fe426-6f24-4f85-8d3e-aea7a16f6fee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad7b6f8-c62c-454d-a5c3-c92ec6303a48", "sighting_of_ref": "indicator--00679986-d595-4c96-af6b-2c93a4127f73", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8633772b-af7c-415d-aafa-0787d33ad65a", "sighting_of_ref": "indicator--00679986-d595-4c96-af6b-2c93a4127f73", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c5210e-6b9e-497c-90ab-1eafa33bc2d3", "sighting_of_ref": "indicator--90e6869b-f0ee-409d-b1f4-b57509c0ce46", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b4e9ef-76c9-40c5-bc0c-5b2c5ed3f84d", "sighting_of_ref": "indicator--c90d0299-48b6-4564-924e-5b347390fa8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fe38f7-9a4c-4b87-bee4-90d369303632", "sighting_of_ref": "indicator--c90d0299-48b6-4564-924e-5b347390fa8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c326f6cb-5eb8-4908-9b35-c1c6b21e6ad8", "sighting_of_ref": "indicator--0249a96b-a127-4e49-8faf-23b467c6f292", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6273c0b-8d6f-4dc5-8d28-4c8557d7572f", "sighting_of_ref": "indicator--7f1a301e-700c-443e-ab80-330f9395b00e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de6f2e9-016d-426e-a4a4-09633fff34f8", "sighting_of_ref": "indicator--27d022a0-80ff-4d0f-82f3-2f31acd4d913", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300520e3-67d2-4879-80a5-4cfcef3492cf", "sighting_of_ref": "indicator--27f6e509-fb42-4abd-8145-6f0564976ce0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf72ee0-0eee-4a57-8b57-e665430db778", "sighting_of_ref": "indicator--0f7c94e6-96dd-46f8-9ee5-96ec895a9659", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5f51de-080c-45d5-9668-0e7ae00c54b2", "sighting_of_ref": "indicator--c63191a6-fb8a-46bd-baa8-87ef7ac83f66", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c460e619-bd68-49c9-932c-d0ff1a728012", "sighting_of_ref": "indicator--c63191a6-fb8a-46bd-baa8-87ef7ac83f66", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64879a6-6c44-4de3-a0e8-fda4aafdde46", "sighting_of_ref": "indicator--4e80c734-6481-40d2-9f3d-ed1ede6eca4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6658aa6e-557e-4db3-8e1a-0f86da941e62", "sighting_of_ref": "indicator--cef44fe7-b442-4c01-b676-00f392cc6a6b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebaddf8-1fea-4eee-9bc9-6aea6ba8f067", "sighting_of_ref": "indicator--8386b249-971f-4f8d-b212-52f877a4521f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24efede1-1a02-468b-9a1a-717e442c499b", "sighting_of_ref": "indicator--8386b249-971f-4f8d-b212-52f877a4521f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944ae25f-4086-404f-bc38-a51cf6dcec25", "sighting_of_ref": "indicator--103584c9-5084-403b-bfd8-77bc509887a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2781a6-d813-4434-85c1-dac4f87b3f04", "sighting_of_ref": "indicator--684a9fd0-8329-49d1-b6b9-4a4e5a2ea408", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4ee940-5096-4cc2-80d7-b1c4cc55fdca", "sighting_of_ref": "indicator--34eb2fe6-1cc3-48ea-b524-2bdc02472379", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b70f67-3e2f-4f56-91d1-ea1fd381f8a2", "sighting_of_ref": "indicator--2120200a-3d5f-46ab-b7be-c1c462335cb2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a515bb-ef48-4a51-a1af-f72b47424e85", "sighting_of_ref": "indicator--52213fca-70d7-4463-aadc-ab18c82b2827", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1968c550-ec12-49af-b5aa-b0395b80da88", "sighting_of_ref": "indicator--c758f000-c649-4b52-b60d-679c9f7efa25", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cf85bb-43a0-424e-811a-874f3c582832", "sighting_of_ref": "indicator--23a289e3-d190-4304-8609-dc1cf55a5513", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f553e199-b30a-4bfe-86c2-80d4780714da", "sighting_of_ref": "indicator--23a289e3-d190-4304-8609-dc1cf55a5513", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb14373-6789-4545-9fb0-5810e7cf45b8", "sighting_of_ref": "indicator--06c78e7a-9fd4-4565-b462-dc939e7ecd97", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301f614a-11d9-44e4-b776-9231c6366ea8", "sighting_of_ref": "indicator--06c78e7a-9fd4-4565-b462-dc939e7ecd97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc785c3-fba9-49f7-9f94-b63bf0bf938a", "sighting_of_ref": "indicator--93ebbe7a-94ff-4ffb-9975-4a445539979f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f705371f-130e-4e10-b81d-fbf5216a880e", "sighting_of_ref": "indicator--a4089a30-57d7-43e1-949c-9111842e123b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a181e4-da90-4bc5-a8ba-efada688d204", "sighting_of_ref": "indicator--e7dabced-2a40-4c58-9446-d12293000890", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b3f2f8-4d2f-4bcb-a5bc-247cac35333f", "sighting_of_ref": "indicator--474d4511-f985-4ef1-a899-194077c5357a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605b4bcc-fec5-4378-b3a0-c76d7e1d58fa", "sighting_of_ref": "indicator--c4e97ebf-a5b1-4f0d-ae17-c77d3b31b9a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136cdf89-a8db-4bb6-94c5-c3a71fe029a9", "sighting_of_ref": "indicator--c5edbc20-47c4-459c-a240-687876746b09", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857f1ed4-ecc1-4985-bb1d-dd375f251b0c", "sighting_of_ref": "indicator--df05e863-cce1-4774-9c8f-59043d130429", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6dec5a-e248-4e70-8f86-5d266c2f215c", "sighting_of_ref": "indicator--b3ace576-d2ae-4ddd-b36d-fbd95fb875db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903f19d5-096e-4d83-be38-011b0971060b", "sighting_of_ref": "indicator--f903a182-0366-4e42-aa4f-0ee17a9ede0a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a278cf6-56e0-41ea-ab80-d20dac876c63", "sighting_of_ref": "indicator--98f31566-0253-4eb0-b475-89b5fe76dd65", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94936a97-f14d-4791-9193-57547bfaefea", "sighting_of_ref": "indicator--98f31566-0253-4eb0-b475-89b5fe76dd65", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e318d59-50ac-4d88-b29a-e06752a8f59a", "sighting_of_ref": "indicator--675b569d-70a5-4124-b8b5-abdc74dc3f65", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a1b621-d979-4be5-a3a5-7398305769b9", "sighting_of_ref": "indicator--897ca03f-19cc-467c-8b5e-7fe9be150f0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f478a96-eec5-4ccb-a910-2b9b1a2defba", "sighting_of_ref": "indicator--1fd3fe0b-b3bf-451d-8618-66a57df454f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22260fa5-9a78-42a9-ba0f-4738509d9516", "sighting_of_ref": "indicator--80180408-d922-43df-99cf-b7ed2f742027", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a22f11-0b43-48c5-aea0-c53e69962a37", "sighting_of_ref": "indicator--5952ab27-1f42-4699-ab28-0d9abe83bed0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09669719-3f48-4215-97d9-83ee2d00e9ae", "sighting_of_ref": "indicator--b84bea61-38b5-4215-be96-2a04f0afe34a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e5ec1c-7430-4da1-8264-b49d4553e5b8", "sighting_of_ref": "indicator--a7a6b421-9aaf-419a-8ee7-0526d62f91fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa9036b-3d78-4aa9-9b69-aa3d2a655373", "sighting_of_ref": "indicator--1a2012c4-29bc-4f48-a38e-6327c66d53c7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1d001f-8cf9-4c27-bf20-f28f8e592fc9", "sighting_of_ref": "indicator--ca8fb1cb-3496-4128-8faf-13e32176ebfe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d510a165-3bc4-4204-ab23-70fde1309deb", "sighting_of_ref": "indicator--ffbeaf90-500d-4b08-95db-ea1573b21a81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3021291b-8ae3-4cd3-a39c-559a59845dba", "sighting_of_ref": "indicator--9213a457-a0b3-4773-a7ec-5157fe1ed45d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a31e34c-d31a-4346-9a30-56affdb71b78", "sighting_of_ref": "indicator--5ab52f70-a4de-4a4e-9b1e-fc5c09984f34", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b38fd0b-76bd-4ebc-bf9c-e3cb80acda23", "sighting_of_ref": "indicator--6b1a56e6-b568-46f1-8296-76f7dfa33530", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473635ae-fd87-4217-a651-afa0402584f8", "sighting_of_ref": "indicator--3f7b254c-6292-4257-9209-1fd012a03daf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33d2825-990b-4b1d-982c-a42550565971", "sighting_of_ref": "indicator--6e1d7aa7-19f1-4459-af0e-8c391713f747", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561726fd-a18f-4ff1-9e71-5aa54970d410", "sighting_of_ref": "indicator--6e1d7aa7-19f1-4459-af0e-8c391713f747", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a81ea61-1205-436d-9e50-e7a9c4c3d444", "sighting_of_ref": "indicator--48072948-df6d-4884-bb81-7a8ccf6f2a12", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de9457d-5e6b-450f-bd6e-2222e3d7c620", "sighting_of_ref": "indicator--03782015-df53-4f46-aa00-c9b4511d0ae9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fc4341-aaf6-4421-b3bf-ed9ce161a1bd", "sighting_of_ref": "indicator--9f6f2deb-2a13-464d-8e8e-f6356090d02d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96af88c-3a59-41a6-8734-77d40fb19eb4", "sighting_of_ref": "indicator--15182441-b20b-47e4-9249-52a099e34d3d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee1b10a-a976-468a-bfeb-236cf7cedd39", "sighting_of_ref": "indicator--9b7fc9e4-8969-4bc8-a652-aae849c2101b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35783e37-990a-4e23-8791-5d2b7356ec89", "sighting_of_ref": "indicator--e7250c78-abaa-4351-8682-54c54d8a1e46", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356737a2-6ac4-4b0d-a904-46f293f1690d", "sighting_of_ref": "indicator--fe4c5ba3-ef97-4af1-8831-40d922243557", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0946656-a61b-4c23-9477-8b60b8382632", "sighting_of_ref": "indicator--c53f1fd3-4d2f-415b-b1d1-492a7c945d59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1201181-6da0-4bb3-b0a6-03d0a36842f0", "sighting_of_ref": "indicator--c53f1fd3-4d2f-415b-b1d1-492a7c945d59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea658c2b-8d24-42aa-8e45-78e59a4a22ca", "sighting_of_ref": "indicator--acc45abe-1268-4a00-8867-cfe62a3b3e91", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa9c8bb-daae-4b68-a315-514e8461907f", "sighting_of_ref": "indicator--57a32ff1-6c8c-4954-9b4c-635d9f4bb2d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1086e2f1-5c0a-44ab-81dc-39766f966c7a", "sighting_of_ref": "indicator--57a32ff1-6c8c-4954-9b4c-635d9f4bb2d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1f57cb-7beb-4ba5-9d31-b2a41761cd7d", "sighting_of_ref": "indicator--6f3f7e39-bbed-4bbd-bab3-9caa233b7936", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538b0480-78dd-490a-a8a2-70019a21fb12", "sighting_of_ref": "indicator--112b5697-2139-4ab0-90f9-3a62bfeaa348", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec27bdb0-15d3-4af8-a7c4-d7cbec04f589", "sighting_of_ref": "indicator--112b5697-2139-4ab0-90f9-3a62bfeaa348", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1016c251-9fa1-4353-bc1b-ec72f8e5a946", "sighting_of_ref": "indicator--814086eb-d4a9-4c45-908c-e90b08d61ca4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b93f5b7-46c8-47ee-b504-144d017be0e1", "sighting_of_ref": "indicator--9829a9fb-67a8-4859-a980-b93bb0fc5f12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4ade29-81c2-404c-b4e0-ba76b7a28611", "sighting_of_ref": "indicator--cd4de957-1357-472c-aa10-0768a7423fd1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84d32d2-49d1-41f7-9cfe-908916f2cf81", "sighting_of_ref": "indicator--ecb8def2-927c-4a75-87a4-f55b217e79c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb381b80-cac0-4795-87f2-7473b3b04940", "sighting_of_ref": "indicator--3035ee9c-4541-481a-ae35-92bd0a94fcfc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e01438-8694-43f6-92c5-41dd97e8fc0d", "sighting_of_ref": "indicator--d311b8c3-946c-451b-a3f4-ecb35f6df02c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4081492-175a-47fa-b4e9-cf2aed967a59", "sighting_of_ref": "indicator--7db40f54-d25b-4d05-bb19-e33144dcc89c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f23ec6-fe2a-430b-8d4f-a86f92de2cb2", "sighting_of_ref": "indicator--cffcb7fd-7e4d-4f45-96c7-210f401e9ec3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5685dc23-400f-4d4e-8cd7-8029981aace3", "sighting_of_ref": "indicator--b2d3fb79-de88-47fd-960d-82eff56bc972", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bf15e8-fcc0-4682-9595-1e023461f28c", "sighting_of_ref": "indicator--d6a7f3c2-3224-4175-b673-2833b31b940c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00192891-5d35-476d-86d8-d09fc53eef38", "sighting_of_ref": "indicator--bb2cf494-9fc4-4d25-915e-8dc23308c7fb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02ec2ad-f2e3-4f99-9833-b1600cd470d2", "sighting_of_ref": "indicator--bb2cf494-9fc4-4d25-915e-8dc23308c7fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441195a4-ca72-4658-b0ef-bccf8be4d55b", "sighting_of_ref": "indicator--8f1f6a03-82b5-460e-a684-e0ff4c750ffc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fc1375-bd21-4170-bb96-ee823852beac", "sighting_of_ref": "indicator--11954115-eff8-4f2a-aa4b-939599531a7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450d4d20-3f72-4448-8c9c-479268752668", "sighting_of_ref": "indicator--0f2f6382-c19c-484d-bc79-b0427c325191", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4732e51-4dd4-424d-817a-596af442c832", "sighting_of_ref": "indicator--0f2f6382-c19c-484d-bc79-b0427c325191", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35237f6-62d8-40e7-85a1-0b99e65db04b", "sighting_of_ref": "indicator--5940e216-f4e1-4100-a8fd-eba2d2f20a5d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d418436-994b-4691-b246-4a96c98c8d56", "sighting_of_ref": "indicator--98255432-f755-4966-9d66-6ba841d2e144", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfec762-7958-441f-ab77-c5d98d18ed98", "sighting_of_ref": "indicator--339c362b-7adf-4182-aaae-9b48f2cd67cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2461ed58-893f-42c5-965f-6353bc3cf566", "sighting_of_ref": "indicator--396b90e0-9de9-4d47-bf69-c86bb80ac024", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d328e9e3-e72f-4dcf-900d-e553085ceee8", "sighting_of_ref": "indicator--86b83269-bfa2-41d8-9870-a7fff3474fbe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd81fc3-578f-47b8-96d4-48cc627dcb2b", "sighting_of_ref": "indicator--86b83269-bfa2-41d8-9870-a7fff3474fbe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce497a7-c7a0-40aa-bd5b-e4d92efa4859", "sighting_of_ref": "indicator--2abcd60b-cdfc-49a8-851a-9eaa49c173aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a640420c-0f77-404e-be80-821b4a3abd12", "sighting_of_ref": "indicator--e3db93d1-369c-4a72-9d80-6ee91e678f3e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486d3c7b-7f33-434c-8aec-2c8c47ae53f1", "sighting_of_ref": "indicator--e3db93d1-369c-4a72-9d80-6ee91e678f3e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d8d37f-c427-423a-aed3-9ca369c86753", "sighting_of_ref": "indicator--91d9ddb7-9ca5-443b-a2bf-80f7149091aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc1f75a-b735-43ed-9f6d-5a217073a41d", "sighting_of_ref": "indicator--ecf2b3ff-c8ba-469d-bbe2-4ee9fe8542cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e91155b-24ea-402e-82e9-0eba44dbb04d", "sighting_of_ref": "indicator--ecf2b3ff-c8ba-469d-bbe2-4ee9fe8542cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bc2f12-50f2-4a4b-9f76-c30f2f4a95bc", "sighting_of_ref": "indicator--048cc7a5-9e03-458a-9361-1d048bfe0aac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a42699c-4300-4313-9e1e-af4a0b511161", "sighting_of_ref": "indicator--048cc7a5-9e03-458a-9361-1d048bfe0aac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b0506a-98ad-4ecb-a3f2-d876a32bd7fc", "sighting_of_ref": "indicator--a1cb47f0-c2f1-4503-8b07-bf424c91a551", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028496d0-77c2-44d2-90a6-c2ac7b15ff8a", "sighting_of_ref": "indicator--fdf8cc32-0d7f-497b-b774-8d57ee192642", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419302f6-1dd0-4e83-b54f-1778ded9f321", "sighting_of_ref": "indicator--0fb3bfe7-e032-4602-96ff-8ce5f63063d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9383ac-80ce-4be8-8859-7fe082869030", "sighting_of_ref": "indicator--0fb3bfe7-e032-4602-96ff-8ce5f63063d2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d02d639-db2f-41ec-b14d-d3e91798f100", "sighting_of_ref": "indicator--b3ef29c8-8576-4a94-912d-cd17949c925a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3529feb-868f-4744-b9e3-b09b74fea909", "sighting_of_ref": "indicator--b3ef29c8-8576-4a94-912d-cd17949c925a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66985209-6386-45ad-a228-dff1dbbea92f", "sighting_of_ref": "indicator--c39413c7-9919-4721-8f0d-c3f06fcda61f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde047c8-ba95-4c24-826e-8120cf996236", "sighting_of_ref": "indicator--89885107-f561-4f08-b7a9-30493f6f7e01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d71241-e991-468f-9015-82af40f22b51", "sighting_of_ref": "indicator--89885107-f561-4f08-b7a9-30493f6f7e01", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f929b70-d9bf-4938-822b-3a0788d8af7c", "sighting_of_ref": "indicator--efbb2080-7cd3-436e-8b80-70a75b66ef58", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea08d8c0-6049-453e-aeae-c27dd9be92f1", "sighting_of_ref": "indicator--efbb2080-7cd3-436e-8b80-70a75b66ef58", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4105e1c1-689b-45ee-9f33-bd3a28c725ad", "sighting_of_ref": "indicator--1ade3c62-01c9-4295-ba21-cf90ab25d9ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b076436c-d67e-42bc-8fff-cd54fbc0dbbd", "sighting_of_ref": "indicator--64f8a7c2-7daf-461b-9074-bb7219883f22", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7613c039-5afe-48af-9d8c-9767fa77e9bb", "sighting_of_ref": "indicator--a4bbaecb-626c-4049-b4f5-e53aee5eb526", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eef7ebe-0010-476a-bf64-fa2365e8e41b", "sighting_of_ref": "indicator--a4bbaecb-626c-4049-b4f5-e53aee5eb526", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d191d00-8eb7-4695-9cdd-c592791806cd", "sighting_of_ref": "indicator--9eb8f221-d89e-4cc1-be8e-715953a78510", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb1c33e-f083-4ee7-8cb2-3c7fe9eda0d4", "sighting_of_ref": "indicator--9eb8f221-d89e-4cc1-be8e-715953a78510", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125c0cc9-418c-4043-b46f-c5add7bbb195", "sighting_of_ref": "indicator--dcffae58-4168-4faf-9333-069d6d81225c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c3f368-6f58-4d23-bda8-c997805badaf", "sighting_of_ref": "indicator--f7d02dca-0cf0-48d3-bb58-2382448e5ff2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f0fe44-5e1f-4139-bdb2-796fac912733", "sighting_of_ref": "indicator--0037a2df-86cd-4ef4-b92d-212c058923f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b6984a-30f4-42e1-8fea-14104c37a2dc", "sighting_of_ref": "indicator--0037a2df-86cd-4ef4-b92d-212c058923f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb87c8f-4a67-4f49-974e-c03137496ea1", "sighting_of_ref": "indicator--6abe8889-2214-48a5-aa52-07e827eba063", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a2e62a-1d9d-43a5-9093-df16d762b2d5", "sighting_of_ref": "indicator--52993f63-a58d-44d8-8b98-049ce71b183e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176b1186-948f-4349-90ed-625da0a3d21f", "sighting_of_ref": "indicator--523864ef-1fb7-4158-93f7-2c1ea4019d2d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067a5fd6-a35a-46e6-b047-ab0a44047585", "sighting_of_ref": "indicator--523864ef-1fb7-4158-93f7-2c1ea4019d2d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29a2e02-bacb-443d-9dfb-c83f44861229", "sighting_of_ref": "indicator--9cee9347-725a-4f37-a365-8f40d13bfa1f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b279cef0-a7e0-41ee-97c5-56691b1584a8", "sighting_of_ref": "indicator--e4c75a3e-5cf3-4389-9591-747e7ee8437c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af7ea34-3cdb-49a7-a4cc-8ecd0fde6167", "sighting_of_ref": "indicator--85202172-d94b-413b-87b9-d3672d970389", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa253bf-bd37-4d07-9942-3987eeeedda8", "sighting_of_ref": "indicator--85202172-d94b-413b-87b9-d3672d970389", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2181cf8-f3db-4a26-9326-c8a67bfc4242", "sighting_of_ref": "indicator--31d01f08-29ca-4e2d-b460-ef316bfeb2c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a01ab9-679e-43bb-890c-2fb65ba4759e", "sighting_of_ref": "indicator--d407c4bd-481c-4aaa-9c6d-96cde282590b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a08aa15-cc43-49ca-9562-9bbf214b97f3", "sighting_of_ref": "indicator--1f243391-4c22-4e20-95ef-c7b0135e6252", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ce33e3-9a35-4460-a997-c52ec0b42b0d", "sighting_of_ref": "indicator--3a59d098-b003-4f61-8850-87c966fc1030", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4272790a-6963-4b1e-b128-ec6e51adb562", "sighting_of_ref": "indicator--cd5d390b-67a8-4a70-b0c2-9e8721e4fe70", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d73adb-3fd7-4e4d-9b28-20b04b6e9a4c", "sighting_of_ref": "indicator--cd5d390b-67a8-4a70-b0c2-9e8721e4fe70", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c7f932-23da-4bbe-b672-bee24bb8f23c", "sighting_of_ref": "indicator--fbe736b5-1d74-44de-82a0-a642f19f3147", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f337422c-1b3a-488c-bcd9-4e6767cd3a79", "sighting_of_ref": "indicator--fbe736b5-1d74-44de-82a0-a642f19f3147", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a940743b-347d-4ac7-8207-3760f6ad8e49", "sighting_of_ref": "indicator--eaa24cac-72bf-45f8-893b-5ca6a621303a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d57c9a-e2c2-4676-8e85-81600929129c", "sighting_of_ref": "indicator--84f9502a-35a8-4031-90a4-631541d36231", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8946f024-7ddf-40ff-bec3-38e27164199f", "sighting_of_ref": "indicator--28153b03-9281-4bb6-850c-faf16fa668f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce366a9-5505-464e-b793-d89cbb6ffde7", "sighting_of_ref": "indicator--28153b03-9281-4bb6-850c-faf16fa668f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aaa6cf5-474f-4648-9163-7577973ca6a9", "sighting_of_ref": "indicator--b9c5a213-a7cd-46c6-a8f6-f0f53f0276d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0ffa82-36e0-4842-b209-503c15562230", "sighting_of_ref": "indicator--b9c5a213-a7cd-46c6-a8f6-f0f53f0276d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f7e313-1d9a-461b-a80b-a29a28510a80", "sighting_of_ref": "indicator--8b0e9ccf-d8c5-4131-8674-867fb3b9ad87", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dcd40b-5659-45c9-a2b8-f64371a47683", "sighting_of_ref": "indicator--f3dcd013-5b88-4781-9cbf-25b058bfe298", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f27dec-4d89-4c95-8031-c1e008e26b7f", "sighting_of_ref": "indicator--3f267eee-3aec-4145-a61b-6eecb8898991", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0f0851-617f-4d0b-9f58-72a52121e650", "sighting_of_ref": "indicator--3f267eee-3aec-4145-a61b-6eecb8898991", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdeea728-e005-4489-9384-7980e78205e2", "sighting_of_ref": "indicator--9619ddf9-83dd-45ec-b548-c46bd73efc77", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339d3a76-6a70-4409-9f31-53ff2a866308", "sighting_of_ref": "indicator--9619ddf9-83dd-45ec-b548-c46bd73efc77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2c22e8-46f6-40ad-aab0-0fbcba36c393", "sighting_of_ref": "indicator--d38cd6e7-6ace-48d3-9a1a-2f3f390bcbfd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcc52e1-9f0c-4d91-ba2d-a671ed942c53", "sighting_of_ref": "indicator--d38cd6e7-6ace-48d3-9a1a-2f3f390bcbfd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d80b40-fe55-4467-8911-fec965234172", "sighting_of_ref": "indicator--bd4420a5-6a33-4fb6-a107-8ba2a3d70657", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f1caa5-0aed-4cc8-8076-2c98685330b0", "sighting_of_ref": "indicator--bd4420a5-6a33-4fb6-a107-8ba2a3d70657", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac76ccd-f758-42c9-9c5b-a4ee40354632", "sighting_of_ref": "indicator--66090978-f8de-41b4-942e-abf7104a1414", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5d9813-894f-4e47-8e60-52299ae35612", "sighting_of_ref": "indicator--66090978-f8de-41b4-942e-abf7104a1414", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e99817d-ec28-4e0e-a19d-76c31db53d3a", "sighting_of_ref": "indicator--dcfb6c32-2cb3-4ab5-a349-b40200cc64dd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ed4ad6-d604-4b8e-ae6f-f9b8fbe5ef79", "sighting_of_ref": "indicator--dcfb6c32-2cb3-4ab5-a349-b40200cc64dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d89cf6-d3ec-4778-8c48-84fcefd34006", "sighting_of_ref": "indicator--2d9438a6-6cd0-4445-8ae8-4d18dfb6d400", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c6a5b7-4898-4f90-a272-1ee2e4b24ee0", "sighting_of_ref": "indicator--2d9438a6-6cd0-4445-8ae8-4d18dfb6d400", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41023b4-2665-411c-9ddd-08ff75324660", "sighting_of_ref": "indicator--1b6b1dc0-b762-4fea-81bd-b872a3ba0d39", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bf263f-f013-495c-863e-448582ed3d59", "sighting_of_ref": "indicator--847690f0-daa9-40f3-976b-f0d2184b356b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b650dc7-fc46-4bce-972f-9778d3ff0a72", "sighting_of_ref": "indicator--4f93ba64-df71-4180-8627-fbf9a48d050a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef995db-d5ed-4b6b-8f08-3333d305b708", "sighting_of_ref": "indicator--848f2b19-1082-4ae1-93b8-d5aacf96e7d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bee93a-1cc0-454f-87cc-6e0b1a0379cc", "sighting_of_ref": "indicator--6f0bd40e-32a0-4db0-be1b-feda4d36d834", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6b07c6-8d65-4f20-87fe-895adcd70729", "sighting_of_ref": "indicator--76abb91d-b1e8-4826-b012-b206b0cfecd3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3c73ee-458c-4b5b-83ed-3da545f8cff3", "sighting_of_ref": "indicator--bd682faf-96c5-4ac8-8e60-e629f9c989d4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3c6f00-1d1f-4f73-9444-7c0088bbb17c", "sighting_of_ref": "indicator--ad4dc4b8-c1ca-4c88-a2ad-9289d6f8a2b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2b45b5-0799-462c-ab70-ae92b9b2652d", "sighting_of_ref": "indicator--1cff1d85-54dd-4eb5-987f-fbaa74e4f9c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c2c47a-c9a1-4274-a0d6-5bab806858ae", "sighting_of_ref": "indicator--8e9cd686-1dad-42cf-8e9e-ac293c05c708", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ee5f82-b7c6-4e66-bbfa-9d3411299948", "sighting_of_ref": "indicator--7b8c1ad1-bb4e-4bd0-ae5d-1e6c8c49373c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bb02a2-5b34-4596-9cd5-575b205ec4cc", "sighting_of_ref": "indicator--e578d29a-1646-49c9-b581-b5d2372e6d23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f8ba98-9ede-41e3-ba1c-e688be029cc5", "sighting_of_ref": "indicator--67aa5080-d993-4302-9bdd-abd29330d9aa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fea719-0687-45e7-99d3-f4c493feac29", "sighting_of_ref": "indicator--ae365a6b-bc32-4b70-8889-72aede9672c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1518fa29-aa56-4126-bfb8-f79f2a9e4758", "sighting_of_ref": "indicator--55afd43f-80a2-464f-a336-4fac262dc25f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34952d4e-5cb2-4af2-b233-68d20df50e57", "sighting_of_ref": "indicator--924028cd-ffaa-4dd9-8564-568b90fa943f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a923bd-f4d6-4e85-ac50-4beab9bb4c24", "sighting_of_ref": "indicator--924028cd-ffaa-4dd9-8564-568b90fa943f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8935b834-4203-480e-a121-6f1f0a066458", "sighting_of_ref": "indicator--17542f3e-a975-479e-a8fd-ae11c3649c65", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ad64c8-2e3c-4a2a-949e-5fc31fea0f5d", "sighting_of_ref": "indicator--17542f3e-a975-479e-a8fd-ae11c3649c65", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979cf927-8c6b-4f20-aee2-63834c183b75", "sighting_of_ref": "indicator--5f57c41e-d8d4-44bc-848f-a0ba52ac540b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709b81fa-33e1-4d48-be6b-fd174d142f38", "sighting_of_ref": "indicator--dab15908-fb4f-4533-90bc-08119603bcb3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9522c12-16ab-45c7-9c66-d9fba3f402c5", "sighting_of_ref": "indicator--c4184759-11e1-4443-b29c-c556c4685238", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a69744-6b72-4d72-a193-bd1f9045f667", "sighting_of_ref": "indicator--c43e4d4b-3b77-4aa3-b80a-905ecd7de6f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd38a3d-1e93-4f64-8c99-d23c8e1ef6ba", "sighting_of_ref": "indicator--12d95001-2639-4a96-add8-f83e7d601395", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336bf36b-409c-40ca-b318-1dc10a01e09c", "sighting_of_ref": "indicator--12d95001-2639-4a96-add8-f83e7d601395", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee4c4b3-0572-4b9f-b1be-d34d8438db76", "sighting_of_ref": "indicator--4a968e40-48dd-493e-9e43-4597cb1bb2b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f1076a-a9a1-4455-9308-436689cfec6f", "sighting_of_ref": "indicator--4a968e40-48dd-493e-9e43-4597cb1bb2b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daffca5-24e4-456b-8d07-127982715df0", "sighting_of_ref": "indicator--4006575f-5c90-49bf-a166-9aa2275984a9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08e1366-6773-49fd-b4d2-d9c39540e0c1", "sighting_of_ref": "indicator--60b8e8c1-23aa-43b5-b2da-5ec9150e89d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a2eb5a-318f-447d-9b4f-28bc279af4da", "sighting_of_ref": "indicator--60b8e8c1-23aa-43b5-b2da-5ec9150e89d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c7f79f-2910-4e4b-9d0d-156bffbd046c", "sighting_of_ref": "indicator--fc890fc8-2293-407c-95da-9779eb3c0c91", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb374a1-5fb0-4a52-99c2-b51859118b9f", "sighting_of_ref": "indicator--fc890fc8-2293-407c-95da-9779eb3c0c91", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f46e87-6088-4f70-ab28-1bc3bd516273", "sighting_of_ref": "indicator--379bcc37-bb86-48cd-ad8d-9bcf9c6628c8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be12e4e0-94ab-4c19-a7a8-f000d5d9f024", "sighting_of_ref": "indicator--379bcc37-bb86-48cd-ad8d-9bcf9c6628c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b4a294-4602-4798-bd8d-06d32d83cc47", "sighting_of_ref": "indicator--9359b44e-b6cc-4e71-9682-a36404289636", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f30b263-ed16-40bb-968e-ee61ef355595", "sighting_of_ref": "indicator--9359b44e-b6cc-4e71-9682-a36404289636", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cfbc58-242f-4ceb-b5e9-4fb5a24fafb3", "sighting_of_ref": "indicator--69371e63-2855-4811-ba74-4a7ff5bbbaee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce41161-d94f-4795-bbc4-67eb1d1fe625", "sighting_of_ref": "indicator--69371e63-2855-4811-ba74-4a7ff5bbbaee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d306d8e-3ff9-4db7-a246-fb972b117aed", "sighting_of_ref": "indicator--b3b32d6b-fdc7-48f0-8c83-8072256c911c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094c16a1-4615-4ebb-a4a4-7b53fbb6e506", "sighting_of_ref": "indicator--b3b32d6b-fdc7-48f0-8c83-8072256c911c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102649d2-fa8e-4e1e-ae02-5b285c66a758", "sighting_of_ref": "indicator--9927265a-6490-4654-8d5f-3f61488387e0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43185fcd-e02b-4d52-8d85-dbe5dc9c015e", "sighting_of_ref": "indicator--b261b2a9-0824-44c0-95df-55279add8128", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d13330-734b-4359-875b-0a4eeaebaec4", "sighting_of_ref": "indicator--b261b2a9-0824-44c0-95df-55279add8128", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efa5245-ce2c-41f4-9d30-a8cd644c01fd", "sighting_of_ref": "indicator--6300de39-dbae-408c-a84e-1d2f6ccd874e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbbdfb6-132d-4875-9654-20f3d81c9d52", "sighting_of_ref": "indicator--6300de39-dbae-408c-a84e-1d2f6ccd874e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ade212b-ec0e-47e2-bb44-62ad49226c3b", "sighting_of_ref": "indicator--1ed91f27-e310-4300-a9c2-2b58309c1a2e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6b070d-3e71-4e58-a9ac-690cead36b71", "sighting_of_ref": "indicator--1ed91f27-e310-4300-a9c2-2b58309c1a2e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2830f04-95ed-4bf0-b342-6dac868f23e8", "sighting_of_ref": "indicator--1ed91f27-e310-4300-a9c2-2b58309c1a2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9c1330-573b-49cc-9aa5-4aa33c9f81be", "sighting_of_ref": "indicator--e3cfb939-494a-4002-8a81-76ff29ac36e1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4b1c2e-ce38-47f4-9e32-937fcf46175c", "sighting_of_ref": "indicator--e3cfb939-494a-4002-8a81-76ff29ac36e1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6e8e85-7de8-406c-a7da-507ac871d5f9", "sighting_of_ref": "indicator--1a051340-72cf-44d5-90af-bb7f3e180288", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df78b07-84ec-4002-b218-ec44bfe07fc3", "sighting_of_ref": "indicator--1a051340-72cf-44d5-90af-bb7f3e180288", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e775b5b-4351-4940-9d5f-bca678149b9f", "sighting_of_ref": "indicator--defca8db-13f7-4295-a0da-f0feddac7e1c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41a37d9-e6cd-4d40-89a6-fce13c156bac", "sighting_of_ref": "indicator--432dbc2c-205c-49c9-b7db-ebb3a273a822", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c6cc0d-f910-4ad7-a204-e13b4bf2b59c", "sighting_of_ref": "indicator--432dbc2c-205c-49c9-b7db-ebb3a273a822", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6375209c-a13b-40fd-8dcd-b3ecea8b1abf", "sighting_of_ref": "indicator--c90ec53e-7010-446e-b649-dec6fdb06fb6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b266a193-0b19-4237-8894-0ca88e478d37", "sighting_of_ref": "indicator--d39e81b4-9def-4df9-97bf-d37a40888726", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c14f84-9d19-4d0f-8f5e-2c9a4a97d148", "sighting_of_ref": "indicator--88549aa4-fd52-4f2a-a652-332caf4f7138", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d20055e-8694-4590-9d81-91a30e603436", "sighting_of_ref": "indicator--4496a288-3f9f-42a6-9553-be5d1a9238e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1208a60-af18-4f53-8947-fe9f47461866", "sighting_of_ref": "indicator--3f5b79f4-9738-46ad-9688-f09e8779087e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f0d898-cee9-455b-9fb6-1f94d9001a73", "sighting_of_ref": "indicator--5ae47d87-cca4-4672-beed-3df8ebf257f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7bd1c3-0b13-42c2-9a3c-a6a83ca462f6", "sighting_of_ref": "indicator--c3ce7bbe-344d-4b44-a2e0-2e2964f870c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd2e0d7-d47f-4da9-a0a4-507335db75b1", "sighting_of_ref": "indicator--c3ce7bbe-344d-4b44-a2e0-2e2964f870c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f49324c-5578-441d-9884-eb92969d594d", "sighting_of_ref": "indicator--f0f35998-d6a0-4922-8f58-c9936714d903", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d571a8-daf2-4272-a66b-5617cf7f2347", "sighting_of_ref": "indicator--4c83ff45-e1db-4961-80c5-37e2c07ebc94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c95685d-f666-4066-a0ea-ed9237a32d84", "sighting_of_ref": "indicator--823e64e1-ac73-4643-a7b4-052a5fac7360", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb042bb-bae7-4639-9fb7-4baf531a40ce", "sighting_of_ref": "indicator--3d019bd0-4eb7-4650-bf47-fb43cb16c75d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0319a8-b883-4601-acff-535c16f821e8", "sighting_of_ref": "indicator--b67a9198-2ad6-4ff6-a11f-a9c68f8e9c4e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e5e7a1-b676-46e1-ac70-e3cf6fd9ceb3", "sighting_of_ref": "indicator--b67a9198-2ad6-4ff6-a11f-a9c68f8e9c4e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76036766-1a77-4905-ae1c-cd5c11f75001", "sighting_of_ref": "indicator--c7a981c0-02e2-4240-95b1-b88b992f7480", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb00428-f851-4943-a2a2-2fc8d29befe0", "sighting_of_ref": "indicator--c7a981c0-02e2-4240-95b1-b88b992f7480", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa19658b-15c2-4e06-95bc-e01f3187a8b7", "sighting_of_ref": "indicator--456f6ceb-6dba-40a3-a0e6-12c023432f82", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e1c29b-69fa-4a5c-9748-6e6c0c198e79", "sighting_of_ref": "indicator--456f6ceb-6dba-40a3-a0e6-12c023432f82", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b590b5af-9965-4724-992f-e4992a389742", "sighting_of_ref": "indicator--69ccb62c-ae81-4dbf-b435-0bd8d655fc99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a439935-25f1-479e-a814-0146d52c9b4f", "sighting_of_ref": "indicator--69ccb62c-ae81-4dbf-b435-0bd8d655fc99", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e00484-e23e-42ac-bdbb-68249be237e1", "sighting_of_ref": "indicator--9c6a93ce-ff8f-4dc9-b87d-39f781338029", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3569c69-04c7-45fa-8237-f89b34fed219", "sighting_of_ref": "indicator--9c6a93ce-ff8f-4dc9-b87d-39f781338029", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc6bd1f-1e81-495a-b282-8bfb1e0db07b", "sighting_of_ref": "indicator--25415acb-7e8e-49e2-b6c2-2ba9877886de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f3e009-7e77-4e90-b344-f0dcfb768563", "sighting_of_ref": "indicator--25415acb-7e8e-49e2-b6c2-2ba9877886de", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fc98d8-58f6-4bea-a23f-6e71e63fdf17", "sighting_of_ref": "indicator--4386ce59-4001-47c6-8c4d-022a7712b168", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db8a607-880d-4a80-9e70-9bb6a8586095", "sighting_of_ref": "indicator--4386ce59-4001-47c6-8c4d-022a7712b168", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab37a01-e191-42f5-a1f7-9f6391de8658", "sighting_of_ref": "indicator--9f890b2e-3d27-4e9e-8c89-319601dfcf9e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d88b89-5c43-4725-bec7-0458a5158112", "sighting_of_ref": "indicator--e1d0979c-8c3a-4cb0-a8d9-278fad532128", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09975e06-1464-43bd-973e-8b29537d63de", "sighting_of_ref": "indicator--711eb52f-b436-4631-88d3-223cdccb881f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22c13bf-9fb7-4a4e-ac5c-d6d0e490b22f", "sighting_of_ref": "indicator--711eb52f-b436-4631-88d3-223cdccb881f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca06ae88-499c-403e-9fc6-fb791c686a31", "sighting_of_ref": "indicator--1b89a7ab-989b-4dbd-b64e-15d8006fe63f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b38436-b243-42b5-a70d-6aa2a52043b3", "sighting_of_ref": "indicator--06766b1e-c118-4a52-91db-0cb44d7042d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ae5e4f-dbf9-4327-a655-0b7b5fff3e8e", "sighting_of_ref": "indicator--06766b1e-c118-4a52-91db-0cb44d7042d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577d6194-0b94-4467-81ea-94e8499311da", "sighting_of_ref": "indicator--1d89efbe-d53a-4a14-9046-ea4694a0d264", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714d4a3e-16f9-4f41-ab77-bb6699adf09d", "sighting_of_ref": "indicator--3c66254e-6c6f-44b8-883e-c3f522401b3b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af15271d-fba0-4711-8c46-ba0615468e64", "sighting_of_ref": "indicator--3c66254e-6c6f-44b8-883e-c3f522401b3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5283ad-7aca-4e5c-87e8-845fbe12816e", "sighting_of_ref": "indicator--3f4bdf77-0acc-46e9-981d-b42641fdfac4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ffc26d-6cd5-477f-9ca3-9d64a6923d49", "sighting_of_ref": "indicator--3f4bdf77-0acc-46e9-981d-b42641fdfac4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec922145-878b-4b1c-866f-01f5f5989ea6", "sighting_of_ref": "indicator--41d0c4e4-1ad7-4361-bb47-313555ea31ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0c76da-e599-456a-a040-201acc2d8569", "sighting_of_ref": "indicator--673daec3-b9c2-4045-a528-dce138b07b07", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172e758a-5ab0-41df-bfbb-0a3707c8e358", "sighting_of_ref": "indicator--981f6c01-73f8-4786-85f7-20fbb85f8c16", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18637b46-60cf-4c85-8723-07cb523f9fd0", "sighting_of_ref": "indicator--40389557-aabd-4656-8595-31449d704713", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4af4c7-7061-4c31-a412-886908f52638", "sighting_of_ref": "indicator--30c83c6d-8f57-445b-bfc8-1007c0c8f5bf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22d09ce-dd27-4d79-997e-934a31cf42ac", "sighting_of_ref": "indicator--3341773e-0621-47a1-a8d6-bd1351ea2e00", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081bbbde-0652-42bd-af79-94564b8b4d1a", "sighting_of_ref": "indicator--ec74b710-5f2f-477b-8914-99078b1daf85", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac3b448-da2d-4318-ad5a-36b6167d42bb", "sighting_of_ref": "indicator--80413a87-8dfa-41a1-ad4d-aa935976bd97", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1461f69c-063f-40a1-af27-4925c82ff081", "sighting_of_ref": "indicator--4a5d38fd-ef81-4a6b-b6dc-99987ee7e2a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ede2cf6-5db3-45b1-afec-e8759c7d509e", "sighting_of_ref": "indicator--fb066bf2-affc-4ad2-b810-3bc715c26ce8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e85bd1e-deaf-4dc1-957f-d16dc3be6500", "sighting_of_ref": "indicator--fb066bf2-affc-4ad2-b810-3bc715c26ce8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff3b651-b987-4ac3-9994-d2915db2bf25", "sighting_of_ref": "indicator--91cdd1cf-855c-4020-92e4-ae7133f19bbd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de4034a-a999-409b-ad91-b546eafccc23", "sighting_of_ref": "indicator--412a6734-35be-422b-afd0-b2408bb8ec00", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dff4a3c-7ffb-40d5-b6c5-dc68d41514f6", "sighting_of_ref": "indicator--91e3c69c-0035-4396-9c49-c6e359c962a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633bf53f-91c3-46b4-91fd-7d7ffcf629f9", "sighting_of_ref": "indicator--45da3197-790a-4e3f-a45d-4ec2658725fa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7272a64-b8ce-4101-aa68-b0a1e0b92dcf", "sighting_of_ref": "indicator--69426caa-626c-4625-b156-6d15a8328b08", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd9930e-379c-448b-baf1-738191f7edf6", "sighting_of_ref": "indicator--0e6888d4-4a11-40d8-99e1-a588f0b3a54e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e0994f-0863-40e8-a0ad-88da4c5cc2d2", "sighting_of_ref": "indicator--7374985d-ec67-49d6-8330-6cb31a763ae4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0824d8-c3f1-44ea-b4c0-1f99685c3d3c", "sighting_of_ref": "indicator--80259727-992f-4313-80b4-4d382ba1ba42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b120af3-2210-4ed9-96b2-85486598b0bf", "sighting_of_ref": "indicator--bca33220-a9e7-4ca0-9b13-26c812c00a28", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59ef514-3971-428f-ae3a-928918b1888d", "sighting_of_ref": "indicator--ca73354a-ce2f-4b21-8c6f-c049441d25df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9494e781-71bf-4acd-ba4c-559143bd2400", "sighting_of_ref": "indicator--9950cc52-d6ab-4d5f-8cbb-4080b4282718", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900af009-8b37-40f0-9f5b-c5d8582a39cd", "sighting_of_ref": "indicator--10f8af65-8bb2-460f-87be-9a165fd65608", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06ac08a-0cd4-4b97-ba4b-9c9ee584c357", "sighting_of_ref": "indicator--10f8af65-8bb2-460f-87be-9a165fd65608", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0f9756-7b13-44fe-9b59-dc038d90b890", "sighting_of_ref": "indicator--6af97c82-d1c0-4b17-b9f8-e6854963bab5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fc8dcd-25c5-4ecd-8d8d-59c9a3d6c395", "sighting_of_ref": "indicator--6af97c82-d1c0-4b17-b9f8-e6854963bab5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2101b2fc-ac04-4ae4-b5ae-0ff07d8575bf", "sighting_of_ref": "indicator--523fe69d-19a2-4116-aa53-0191e316b097", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dfcc3e-a48d-439f-a2a5-d92243a23278", "sighting_of_ref": "indicator--523fe69d-19a2-4116-aa53-0191e316b097", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a531d9e-e4ba-494a-bc69-9682a4473825", "sighting_of_ref": "indicator--6467688b-5d84-4e31-8520-d5be80d7e6d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05f1fd4-9bb5-42af-8007-a7f6849a6556", "sighting_of_ref": "indicator--6467688b-5d84-4e31-8520-d5be80d7e6d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7435ddad-bd78-475d-9df2-805893abc31e", "sighting_of_ref": "indicator--93af9467-2655-4903-8c0e-3daae1a59ede", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f1d598-4b45-4feb-85da-203c803f92e2", "sighting_of_ref": "indicator--93af9467-2655-4903-8c0e-3daae1a59ede", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6be5107-af88-44b8-a859-0b276be0573e", "sighting_of_ref": "indicator--7f19f99b-ecc2-44fc-acc8-b50d45351ae0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592c399d-741a-4f36-9eb8-1fcafb219f99", "sighting_of_ref": "indicator--7f19f99b-ecc2-44fc-acc8-b50d45351ae0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077badf5-5bc0-4679-81f3-3c4a215a93d5", "sighting_of_ref": "indicator--876bb9e8-3460-4b48-96cf-2c0e41082f9b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cb1a2d-bcbd-4d4b-bb9f-53d462c60bed", "sighting_of_ref": "indicator--876bb9e8-3460-4b48-96cf-2c0e41082f9b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61833a49-88a3-475d-829f-142780db823c", "sighting_of_ref": "indicator--839d45f0-8365-471b-849e-8c49c5ba84ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcbfbaf-9961-4ebe-9873-c036c3614108", "sighting_of_ref": "indicator--932ab3a5-d56e-4b10-83f7-c3c471e6f688", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0ed5a2-976d-4de4-81e4-b93ca21a0ba4", "sighting_of_ref": "indicator--932ab3a5-d56e-4b10-83f7-c3c471e6f688", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07de6396-27e5-4977-95f5-cd6b808f96f8", "sighting_of_ref": "indicator--cefe4bdd-9c2d-442c-8852-65cc7b59279b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b848c5dd-ca6c-4625-808a-c75e2e437bd2", "sighting_of_ref": "indicator--cefe4bdd-9c2d-442c-8852-65cc7b59279b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac3a5d3-4d7f-45bd-aae1-d65964d24923", "sighting_of_ref": "indicator--63ffdbec-5833-490b-b6a4-a2292f61b80b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f8a77f-6eb0-4d47-aa0a-bf774713f1c0", "sighting_of_ref": "indicator--15bbeae6-0ee3-4751-9596-542cf53f4e3c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbff8bb-b96a-4afb-8cfa-c6c340c61292", "sighting_of_ref": "indicator--15bbeae6-0ee3-4751-9596-542cf53f4e3c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66f7415-971e-4fb5-9cfc-ea7b7cb32859", "sighting_of_ref": "indicator--060e052d-990b-4019-be20-e0ee881504ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a4aefa-89b8-4580-bab4-0aa4f9b2a668", "sighting_of_ref": "indicator--060e052d-990b-4019-be20-e0ee881504ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb81de85-852f-4b87-ad3d-152291868711", "sighting_of_ref": "indicator--d6a3dedb-2075-4a72-9e01-370e6dc5a594", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9da498-6ecb-4f79-80fe-6c3e1e1ffa09", "sighting_of_ref": "indicator--d6a3dedb-2075-4a72-9e01-370e6dc5a594", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77613e7-8803-494a-9616-4edaf8109e4f", "sighting_of_ref": "indicator--e9d5a99f-3fd2-448b-a206-d4cf291cb972", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48db4bb8-ba25-4974-a364-b85196e5ccf4", "sighting_of_ref": "indicator--e9d5a99f-3fd2-448b-a206-d4cf291cb972", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcab50f6-f3fa-4b63-8868-ee40d224e99d", "sighting_of_ref": "indicator--960f9a21-6e87-4cbd-9c85-779425aa6e2a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b6534f-47e1-4ba3-9da7-40915ea3e6c4", "sighting_of_ref": "indicator--960f9a21-6e87-4cbd-9c85-779425aa6e2a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6604e4d8-d4ed-4909-91ab-5bde31e36d0e", "sighting_of_ref": "indicator--3b2e3cf8-aa54-489e-bbf5-f40f89afddbf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1bd7e1-3e75-4d61-a0cf-4f3bb6600b69", "sighting_of_ref": "indicator--3b2e3cf8-aa54-489e-bbf5-f40f89afddbf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221c1c3b-01f8-4d50-a4d5-585ce218fc0b", "sighting_of_ref": "indicator--3465ff76-aee8-4d16-bafb-d094cb436082", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04c74f4-0697-490d-83e6-5b27c9c02e70", "sighting_of_ref": "indicator--8abff9c4-c050-4186-8519-be199f85b9d7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fae0ea-f903-4da4-96e5-14e20b4b9875", "sighting_of_ref": "indicator--8abff9c4-c050-4186-8519-be199f85b9d7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9382b4-d4d6-47b1-800f-df6201397dd7", "sighting_of_ref": "indicator--41483fca-ef6a-48e1-a1fe-1c8c504d9251", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52ba390-b91d-4b58-8c84-cc9d87299946", "sighting_of_ref": "indicator--41483fca-ef6a-48e1-a1fe-1c8c504d9251", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1c826f-93a8-4c10-92fa-5c23e6042354", "sighting_of_ref": "indicator--cedc45e6-962f-4535-a01c-943793400390", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95b98c7-dab6-4051-beba-29867e7df267", "sighting_of_ref": "indicator--cedc45e6-962f-4535-a01c-943793400390", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062e88cd-8091-4a24-9dd4-3b33d431d2c4", "sighting_of_ref": "indicator--496de5f3-8764-4c0b-95ea-4d54e3d76af2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21c216e-bde7-42eb-bf25-cd4a025b25f9", "sighting_of_ref": "indicator--496de5f3-8764-4c0b-95ea-4d54e3d76af2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2bd6ce-452a-450f-83cb-4e3f13ce2633", "sighting_of_ref": "indicator--64b0373a-13f5-4b37-bb32-073f45af66ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57ed287-4070-44a8-913b-a175c98693cf", "sighting_of_ref": "indicator--64b0373a-13f5-4b37-bb32-073f45af66ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13932e2f-63ca-4c71-9af7-6a7b3460403c", "sighting_of_ref": "indicator--dca3b063-7228-45eb-ac4f-cf9c86580c23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d205e6e-509a-4635-88a5-7f5f5ca76a42", "sighting_of_ref": "indicator--5c97187d-1c10-4a6f-a1ee-79f6ca7954f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de903611-f87f-4247-bec7-a8a87637c160", "sighting_of_ref": "indicator--5c97187d-1c10-4a6f-a1ee-79f6ca7954f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8190896-ed8b-490e-91f5-ca59012fa5d0", "sighting_of_ref": "indicator--dc51e75b-e157-403f-b4e3-47d4b170164f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816378e2-3567-4b7d-9023-bc131650ecc7", "sighting_of_ref": "indicator--dc51e75b-e157-403f-b4e3-47d4b170164f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c7f10e-a754-4a52-a5d5-23e848f4eeb5", "sighting_of_ref": "indicator--1458af60-d475-4f84-a476-e46522d5db15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2fb685-22cf-472a-a913-c6ec76670138", "sighting_of_ref": "indicator--1458af60-d475-4f84-a476-e46522d5db15", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec60d3c-fefb-4c17-9c1a-334f02b33b3c", "sighting_of_ref": "indicator--51942c2c-4e88-4d8e-8830-b0993367232e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6063ff-69b5-42d5-9dec-9d237f225335", "sighting_of_ref": "indicator--51942c2c-4e88-4d8e-8830-b0993367232e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86d06fb-2535-41d0-b41e-a1fa6a46c088", "sighting_of_ref": "indicator--e541a318-1408-4e6d-a62f-dd8211a0b914", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f1d7d0-3cbe-4968-95a2-9e953a3e1cfb", "sighting_of_ref": "indicator--e541a318-1408-4e6d-a62f-dd8211a0b914", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51f5515-95ec-444d-a229-12cd564cc3af", "sighting_of_ref": "indicator--8240a273-20f5-4242-9242-eb5c12365d10", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c675943-e6c1-4887-b70e-0896e78d3497", "sighting_of_ref": "indicator--8240a273-20f5-4242-9242-eb5c12365d10", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0139ca3f-5758-4550-8577-65a48a2b3b24", "sighting_of_ref": "indicator--89ef8cd8-2b0a-4c53-9428-e1d246f7a9da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2015a75-80ae-4fb2-92c8-556a42d59302", "sighting_of_ref": "indicator--89ef8cd8-2b0a-4c53-9428-e1d246f7a9da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c083b6f-a2d1-4999-b6a8-7ff1f0a1208a", "sighting_of_ref": "indicator--bd95d250-b4b9-4dc7-9f41-36939f3c6da9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fd60bb-6aaa-4272-97da-67906cca5d36", "sighting_of_ref": "indicator--bd95d250-b4b9-4dc7-9f41-36939f3c6da9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690aa2c5-07cb-4db1-abde-06f459511f60", "sighting_of_ref": "indicator--b03ee730-7d40-4057-8b92-23fa310d9dd7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bc34e3-72a5-4975-ba19-b21f7219e51f", "sighting_of_ref": "indicator--b03ee730-7d40-4057-8b92-23fa310d9dd7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b8eedf-2e24-4118-92c9-097695a627b5", "sighting_of_ref": "indicator--9576f491-849e-4aed-9427-de4d7fade7c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fe8f22-eb4f-4a25-9be3-c6767244ba74", "sighting_of_ref": "indicator--9576f491-849e-4aed-9427-de4d7fade7c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be59ec08-02a2-40e2-9575-5d6c30f41a78", "sighting_of_ref": "indicator--aeb519c7-7f2c-4eb4-a056-687d099edab6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15026ceb-16a4-4fb7-8d02-0f8608a8a58a", "sighting_of_ref": "indicator--aeb519c7-7f2c-4eb4-a056-687d099edab6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd296c69-e5ef-4772-9d4a-d9e6b88776a3", "sighting_of_ref": "indicator--bb1ba92f-db4d-44aa-97dd-98b34c8a39a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16e8db3-78df-4e29-ac33-62eb19d3a178", "sighting_of_ref": "indicator--bb1ba92f-db4d-44aa-97dd-98b34c8a39a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09be172b-381e-47fa-b0c2-1808bb56b0d9", "sighting_of_ref": "indicator--6d2fbc60-96c1-4ce7-ad23-6dbdaec8aa06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b6582d-db08-4099-b970-0fd640163e64", "sighting_of_ref": "indicator--6d2fbc60-96c1-4ce7-ad23-6dbdaec8aa06", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae946f5-838d-4f01-9706-b08cfd2d5faf", "sighting_of_ref": "indicator--938e9bce-1a16-4be0-8134-fc7530124b58", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9a3d4a-7b78-4081-acbc-6d349c618ff9", "sighting_of_ref": "indicator--938e9bce-1a16-4be0-8134-fc7530124b58", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446f0c12-c481-4a5b-b338-fe193ccc0e59", "sighting_of_ref": "indicator--7a261c29-bcf8-43eb-a86f-a4dbef069f3f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9aa14f1-a0c7-4002-b94d-507bf0af35d0", "sighting_of_ref": "indicator--7a261c29-bcf8-43eb-a86f-a4dbef069f3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1c1b19-e621-442e-8fe4-7006bcf8c0be", "sighting_of_ref": "indicator--692d6c9b-0cb1-4029-892d-3ce15eca9a27", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e3e299-7a6b-47c5-a01b-0b9371e3e4cd", "sighting_of_ref": "indicator--692d6c9b-0cb1-4029-892d-3ce15eca9a27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70ad09e-0575-4ceb-8b71-d5d04e1748e1", "sighting_of_ref": "indicator--649f8b95-3cfa-43fd-bfe3-4d08ba19fa26", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e3219d-9022-412c-9c12-6a46190e3110", "sighting_of_ref": "indicator--649f8b95-3cfa-43fd-bfe3-4d08ba19fa26", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f2b1d3-f07b-4949-898e-a75b7250d957", "sighting_of_ref": "indicator--1c328c12-6c79-41f7-a443-5f706480d7ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a74659c-02ee-49ee-9aac-d5fe2d2b002e", "sighting_of_ref": "indicator--1c328c12-6c79-41f7-a443-5f706480d7ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0856f2-01ec-450b-b02e-38f55b29b3c9", "sighting_of_ref": "indicator--e9e05875-d42d-418c-a36e-1a8afc83bd46", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a69e622-1233-4af6-b6ee-6f25b2e26a0e", "sighting_of_ref": "indicator--884b45bd-e590-46df-80e0-a6525d594c87", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78365f29-0c4f-4976-b334-d957f6da8f80", "sighting_of_ref": "indicator--884b45bd-e590-46df-80e0-a6525d594c87", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38995efe-df77-4b5e-b0e1-a4b69b855a1d", "sighting_of_ref": "indicator--fbb3c0be-6ad9-478d-9348-82d731418f82", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415be80a-dcc1-4da8-8c90-92828ea16b45", "sighting_of_ref": "indicator--6cde9d79-2a99-462b-82cf-5551b5a12577", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced3ae62-751c-45fc-90e9-aef435e69afc", "sighting_of_ref": "indicator--a7bb1938-830f-47a5-b7b4-ab9b5f92b8eb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63f1b75-2c53-4055-873c-9dc13f9e7004", "sighting_of_ref": "indicator--a7bb1938-830f-47a5-b7b4-ab9b5f92b8eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acc6479-6d98-4d91-b04a-5ef0cd8d831b", "sighting_of_ref": "indicator--bcd3bcb7-cac1-4107-b830-6060288441e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24c192f-770f-49e9-a909-cdc011ef3d3f", "sighting_of_ref": "indicator--07e5ff57-553f-46ea-8643-a665b04834e9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1896f37-8891-4058-b851-18a2d5f1e63a", "sighting_of_ref": "indicator--2b8bcd11-42c0-4781-a282-41e4b110ba7f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94c613e-a532-4489-92a6-a1f3c43d6d82", "sighting_of_ref": "indicator--d98752c3-403f-427b-a4a6-7bb704f1e293", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926c0c5e-7bfb-43cf-b66e-bb3f73fd9122", "sighting_of_ref": "indicator--99e4884a-6a63-4a2e-b54b-59ad32f54fce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8671344e-5a35-4c83-bdc0-f2fae8946a1c", "sighting_of_ref": "indicator--f011bef6-857d-41b8-8a73-3db5317ef15c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35c3cd6-2691-44f8-bb62-34901a5dcbd2", "sighting_of_ref": "indicator--5a7e3217-1b54-4cd4-ad8f-1919b0a1b5db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a8223b-fd73-4363-ab47-a4e1169dd550", "sighting_of_ref": "indicator--18edf3ae-caa4-409c-9a14-6c420cb8f4cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688e05b8-1500-4557-9b52-a779da7414ca", "sighting_of_ref": "indicator--b956b348-220c-4b7a-86c7-ed50dd861bc7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98e25b4-f703-4af3-90c2-1f4184660518", "sighting_of_ref": "indicator--b956b348-220c-4b7a-86c7-ed50dd861bc7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc979b47-4f16-443c-aaf6-79b70b56174d", "sighting_of_ref": "indicator--8cfa37c0-483a-4e41-815c-1a67b7f4f575", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fd2b8b-9112-479c-a608-d4b85dc5fa5f", "sighting_of_ref": "indicator--ffab28ad-54d7-4dc4-9a58-c6847d24df11", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95935cb1-9e39-4e3b-8a96-ab45377ddb2f", "sighting_of_ref": "indicator--650b0ed4-695f-4377-add8-b4cbcc38c749", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283d738d-6e4f-4d4b-bdb4-6f900491b7e4", "sighting_of_ref": "indicator--25e002d2-1e95-48d8-a386-85e0c11b90ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a4b42a-6bd6-4fc0-b290-b55796124578", "sighting_of_ref": "indicator--3d34ea86-5b3a-4fbf-8e77-60e06db2afe6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee2caf3-6bb3-4ef2-b78e-e2c79c10d666", "sighting_of_ref": "indicator--3d34ea86-5b3a-4fbf-8e77-60e06db2afe6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07fade1-2532-4643-a925-3dc0dfe20928", "sighting_of_ref": "indicator--bbe598ce-9d6e-4ad3-8211-592cd95532ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe704608-7000-4d05-b3bc-096d3e555570", "sighting_of_ref": "indicator--57e597f4-139b-4128-b598-cdf87fb1621d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8a346d-829c-4483-91bb-d1bd77d9da61", "sighting_of_ref": "indicator--ab0ca4df-e8c6-4805-a4b4-5db01c212790", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383c5b68-c14c-45a3-808e-f82b1a288544", "sighting_of_ref": "indicator--1e5c2a78-822a-45f4-8b6c-896b0bf121d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f11b54-1cef-4f4f-bb03-9be992bd080e", "sighting_of_ref": "indicator--e9a3e025-640e-4446-adbb-0bf308f03a26", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43583a05-b9ea-4d24-9503-37e6dfb874d2", "sighting_of_ref": "indicator--e9a3e025-640e-4446-adbb-0bf308f03a26", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ebc0c9-86cc-40db-8dd5-32e8551c88d2", "sighting_of_ref": "indicator--e7f5f9c2-68e5-43c3-a9fc-468924223c0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969ecb0d-2c46-4f44-872d-98ab0d2af6ad", "sighting_of_ref": "indicator--ab6a85ce-d432-4e25-a9cf-ebf1a635dd47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c61dee-7a9c-451e-acf5-a6001954ce14", "sighting_of_ref": "indicator--ab6a85ce-d432-4e25-a9cf-ebf1a635dd47", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6619635-ce60-4607-aaa5-602f996ad660", "sighting_of_ref": "indicator--e1f450c7-10f1-4712-85dd-36522a4f6b29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf25d6c-bb2d-42fe-99c3-012167b76f8b", "sighting_of_ref": "indicator--e1f450c7-10f1-4712-85dd-36522a4f6b29", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cfcfe6-0be8-4afc-85f2-382f15bdbf6b", "sighting_of_ref": "indicator--7c08ace1-d154-4991-b4d7-6b95c3f6d890", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52509ef4-2d67-4d4d-bd47-85a4cc8db9f1", "sighting_of_ref": "indicator--7c08ace1-d154-4991-b4d7-6b95c3f6d890", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab5e660-41b0-40b0-a459-1a37dc47d558", "sighting_of_ref": "indicator--38450ead-f67a-4b91-bba5-21fb77571338", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22756123-342d-4577-b560-fdf0b78fb846", "sighting_of_ref": "indicator--78dcaf40-2600-46db-95ae-9c58264d993a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe1d73a-4d39-490b-8677-a96e10370a64", "sighting_of_ref": "indicator--feda25a4-1238-4710-a867-743096dad070", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16a14ab-fb12-47a5-ae2c-ff380ff2e621", "sighting_of_ref": "indicator--feda25a4-1238-4710-a867-743096dad070", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3938964d-223c-4688-8eea-a4a84ce8a7ae", "sighting_of_ref": "indicator--8243b06a-39b9-43fc-9a05-7c78f60a2d75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d7e217-d06f-4c11-ae1b-6e4ef97e3f3c", "sighting_of_ref": "indicator--8243b06a-39b9-43fc-9a05-7c78f60a2d75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5caa4e2-3cd1-4f7e-9b78-7e4a48626f28", "sighting_of_ref": "indicator--39c280cc-de49-44d3-866e-3a2df704a570", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48841ac3-de5f-4e00-8b6a-62424b334512", "sighting_of_ref": "indicator--39c280cc-de49-44d3-866e-3a2df704a570", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76370717-24f3-401f-a3e4-12bd59ff9389", "sighting_of_ref": "indicator--9c859fe1-8ce7-4301-b49e-33f0eee2f55f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeecfc7d-d6a8-4a75-8842-03da2d34c94a", "sighting_of_ref": "indicator--9c859fe1-8ce7-4301-b49e-33f0eee2f55f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef8bfe2-3aed-44e3-81f5-09c1acdf1af4", "sighting_of_ref": "indicator--3e5b6e91-1b4f-4a8d-9544-b784beaead7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d981ac-d7ba-4696-a813-9ef37e8f547c", "sighting_of_ref": "indicator--3e5b6e91-1b4f-4a8d-9544-b784beaead7d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16a9088-3a97-46c9-a536-a83affb15736", "sighting_of_ref": "indicator--d50750c9-0d05-48e1-8307-88a8f0dac513", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575a17b0-14cc-47d0-9cbb-217bd920dba9", "sighting_of_ref": "indicator--d50750c9-0d05-48e1-8307-88a8f0dac513", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04901b05-c0e3-44df-941d-091c5312d496", "sighting_of_ref": "indicator--43266c77-5f35-455e-92e7-fc4596415343", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db3b0d7-0c29-4e10-8ca2-991caa73434a", "sighting_of_ref": "indicator--43266c77-5f35-455e-92e7-fc4596415343", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8caf7e-a046-4b5e-9721-47c2e500c608", "sighting_of_ref": "indicator--1e2755ad-80b6-4cbd-8aca-2b418504046e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9a9106-f1e9-45aa-8d8f-872e9422f506", "sighting_of_ref": "indicator--1e2755ad-80b6-4cbd-8aca-2b418504046e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b621b4-a14c-458f-a9f3-33f86d80f857", "sighting_of_ref": "indicator--57251f68-833b-4852-9352-ed18caf3560b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cba6680-690b-4d99-85b3-078ea00c26a4", "sighting_of_ref": "indicator--1da56770-98d0-405e-b071-ad5c9af7b65f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75071de-1c7f-4f91-8491-0ffc1787d125", "sighting_of_ref": "indicator--1c6721ec-da71-48ba-b64e-95fe36be2bdb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd80f80-fcb3-4be6-9a23-818c66649e6a", "sighting_of_ref": "indicator--177aebe7-81f0-411c-8d01-97534a6a63a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf10061-24b0-438e-b0dc-ca8dc1c14bef", "sighting_of_ref": "indicator--a99c71dc-b112-4e04-b2b2-bae095e1c779", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66b268b-fe3d-4272-a09d-d343262811e5", "sighting_of_ref": "indicator--d6707fc1-4cfa-40b6-a125-0b4c5de3dbb5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2fe9cd-cb70-42ca-8d16-89f3d9db377e", "sighting_of_ref": "indicator--18a7bad9-4de4-4fbd-a61d-a4e163bbbde3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae646b4c-bb85-42b6-9a8e-ad0bd94756cf", "sighting_of_ref": "indicator--ff872951-d9a3-47eb-9522-3fb613196955", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baea321-7750-48e0-85ee-828801a6bb0c", "sighting_of_ref": "indicator--6c648e5c-2434-4452-bd7c-86da6492b2c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecd9444-2dc3-48f5-a43a-db48d583f1b7", "sighting_of_ref": "indicator--90f74d9e-8480-468f-9e23-047928fe3ce9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a0547e-8b67-4bbd-a2ad-21b55fbe743f", "sighting_of_ref": "indicator--d9b62f7d-2ef6-4278-b223-fce54a2fc656", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0635c920-39a7-4eff-baf9-85ccd2ebcf5b", "sighting_of_ref": "indicator--46545196-8e77-4b50-aaae-890fd3f0b947", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c377897-80ef-4a11-8659-4e179d11a127", "sighting_of_ref": "indicator--c24c27df-3258-45c6-b48b-e2233ad6a7a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160573d1-aa5c-4829-825d-7e084d7604a0", "sighting_of_ref": "indicator--d3e184a0-5ce7-41b6-8a07-dfe65b957d22", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bd556e-2de3-4909-a947-e127e218c30d", "sighting_of_ref": "indicator--e024bd48-31af-47aa-ac41-f277044194f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e7257a-3f1d-412d-bc88-f928c4c81a55", "sighting_of_ref": "indicator--d1855c6b-8514-4b07-a10d-01198bd969ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4848679-0a96-4618-a5a8-6698d6d4a046", "sighting_of_ref": "indicator--a925028e-0b3a-4c0f-a103-17cf155eb1a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd8dfc0-8de8-4b1f-80d9-2f9ebc98c863", "sighting_of_ref": "indicator--a925028e-0b3a-4c0f-a103-17cf155eb1a1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b04da6e-72d4-4da9-9720-283b103c5b04", "sighting_of_ref": "indicator--7ab6fb1b-7612-4046-b9e5-16209dd82456", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f479b14d-8856-47f5-b4a9-c8851fc5f233", "sighting_of_ref": "indicator--194a5802-3eac-41c3-94ec-297443a51751", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e24dc1-9604-44c2-9ca9-5f952c921e20", "sighting_of_ref": "indicator--a4472157-b91b-4c31-8bd9-f0551039e43b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12deb52c-281a-4e96-a11c-3ec9b0222d2e", "sighting_of_ref": "indicator--a54c5713-ef11-49ae-bdb5-4ff509e6c9b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4726b0-691a-429e-91f5-20a01c83a9e8", "sighting_of_ref": "indicator--a7eb2d44-01b0-4979-a828-f4e3fd4033b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65ed96f-a96e-40d4-a1ae-794652901df1", "sighting_of_ref": "indicator--0206941f-080e-438d-88cd-4b6bfc9f6dd5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b93dab-46ac-40cc-87e3-b2800097eff3", "sighting_of_ref": "indicator--ed1293f8-e1cd-425a-a8f5-93a0cfc52833", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24275ca3-9c7a-441d-b8d8-7b6130e096aa", "sighting_of_ref": "indicator--3db438b4-4300-45e3-9f34-45234fbfbdae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36232f00-db9b-4c5d-ba9b-486615a5c66b", "sighting_of_ref": "indicator--544c01e2-0ff7-4e1f-b304-01ef52b3a339", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072777f5-657c-4e52-93fc-76afea1ca617", "sighting_of_ref": "indicator--2ad7f4d5-a468-4713-973e-f14c8325d040", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da467e24-9448-47b8-951c-fb270d021642", "sighting_of_ref": "indicator--e9da17c3-251e-41ee-9214-c0a839e65d14", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ff45f9-007e-4e4a-8f2e-b80b5d3d084f", "sighting_of_ref": "indicator--e9da17c3-251e-41ee-9214-c0a839e65d14", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efe7cb1-a6f9-400c-98d6-c0d82cc72b3d", "sighting_of_ref": "indicator--df055325-e7f8-4838-ad6b-785a83beb7bb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a542dc-1031-4ee9-9d41-e8462403bb7d", "sighting_of_ref": "indicator--df055325-e7f8-4838-ad6b-785a83beb7bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1846e8-51c0-4b46-b570-558a862ff701", "sighting_of_ref": "indicator--937f0e32-66d5-4bf3-abb2-92218c07d5ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff95e71-d92f-47a9-b68e-cea59a8d62b0", "sighting_of_ref": "indicator--937f0e32-66d5-4bf3-abb2-92218c07d5ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3678b7ab-9cc1-4e0f-baa4-d313425fdd9a", "sighting_of_ref": "indicator--15302605-1e43-430d-81ca-ffc546386985", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ba8f12-a224-4ca6-8c15-d284db75abe9", "sighting_of_ref": "indicator--504dab58-eaa5-4d8e-b769-68e039f5a635", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64185e27-a5c4-437b-b0a0-d8aaa996a941", "sighting_of_ref": "indicator--73842bc4-29bd-4a96-9483-b49e324ed07a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb73b1cb-5032-4ad7-8ec5-8b5a01831a49", "sighting_of_ref": "indicator--73842bc4-29bd-4a96-9483-b49e324ed07a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ac6fb7-a1f7-4583-bf77-730548de5cb0", "sighting_of_ref": "indicator--80af51b8-3218-4dc6-bcf9-e45231670722", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f28a176-eb6e-4b5c-906d-3266a5e4a89f", "sighting_of_ref": "indicator--971933ee-3c37-4080-9760-6b50a368ca44", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18dd71a8-c4f4-4290-8880-9760b53e2d8a", "sighting_of_ref": "indicator--b5e4ec81-2e2c-4595-8545-c650d2fda99f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57531e13-c820-4f33-adef-629abdc16c0f", "sighting_of_ref": "indicator--bdaaefdd-da7a-4d19-9fc3-7332d4ff984b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e626a28-46a3-4608-9c1e-bb278a7a571a", "sighting_of_ref": "indicator--40fc9289-9e8e-4334-8fda-bf48262db1de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04672966-264e-40f0-a50b-7050e2d458ce", "sighting_of_ref": "indicator--986a9281-7d52-4c72-8ebc-8f1af21e7734", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c8d74e-d454-41b9-820a-b70fd24ec9da", "sighting_of_ref": "indicator--21f17545-b254-4fe2-8ffd-f7fed0a6b89c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de46de04-10eb-442d-a762-d1a4b33c42b4", "sighting_of_ref": "indicator--c7b6c2d2-b484-432e-a452-58adac33a639", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921f16b6-defe-4b76-a9a6-df696c32281e", "sighting_of_ref": "indicator--dc91344d-88c1-4066-8581-67616287be76", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eece2627-e60a-49b0-acfe-135cdc73c660", "sighting_of_ref": "indicator--dc91344d-88c1-4066-8581-67616287be76", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b547b96d-e110-4d7e-a985-c60da426d5d4", "sighting_of_ref": "indicator--39335864-4746-4c17-b6f0-dd708fa53c3c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fed770-3b73-417f-a558-b88041aef7c7", "sighting_of_ref": "indicator--39335864-4746-4c17-b6f0-dd708fa53c3c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a0a88f-bc8d-49e8-b982-4d06e62af0ed", "sighting_of_ref": "indicator--59eb0e90-490a-45e1-aa8f-36f38d142601", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8bfecc-c85c-4a1a-b184-a4779b660841", "sighting_of_ref": "indicator--3b95eecc-8870-494b-b2fc-ae1166a56c27", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0cea04-4b3e-4376-b41e-6d29962aa9e6", "sighting_of_ref": "indicator--3b95eecc-8870-494b-b2fc-ae1166a56c27", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8c7e94-cf90-45a5-b4af-f44fa028cac0", "sighting_of_ref": "indicator--7f3074ee-e48e-4262-a979-dc783f707444", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267a3e9a-c963-4841-a591-872b33a2546e", "sighting_of_ref": "indicator--23466a88-8e89-46cd-aa14-5aa329c610c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292936e8-2b5a-4bd4-b6ad-6591517d589f", "sighting_of_ref": "indicator--23466a88-8e89-46cd-aa14-5aa329c610c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c397990d-1648-46cb-83ad-1e8bc4a8dc86", "sighting_of_ref": "indicator--dedbae08-8048-4bc2-a8c2-5a304eabf13d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725884d4-3e51-4bdd-a6c6-2dc04f5fb72c", "sighting_of_ref": "indicator--55f6d481-8602-4d57-9dd8-3f3cb445da9d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9078bac5-6c96-4ebc-beb5-a5d5acea2cf2", "sighting_of_ref": "indicator--9433efb1-914f-4bc0-aa20-c4e88ebcc094", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6217b730-bd42-4758-8233-507820cdf9e9", "sighting_of_ref": "indicator--697c1fa1-8b38-4809-b498-1c559ca93938", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82bd3c2-9604-44fe-910e-0d5cd0bf1f0d", "sighting_of_ref": "indicator--8dcfcdc7-696d-4fa1-8118-c2db7bbee6e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8edfd3b-8c10-471d-aabb-0767fa3c763b", "sighting_of_ref": "indicator--382d506c-8db2-40b5-854d-6ea5332d45a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf7ace3-8ad5-4cbc-8530-e3f176d7665e", "sighting_of_ref": "indicator--382d506c-8db2-40b5-854d-6ea5332d45a2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eea27dd-6ab9-4756-8f30-4b97aab74fb1", "sighting_of_ref": "indicator--fbfc6412-3f71-446a-86ce-ce5a731d80bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe9a95b-5ec5-4a83-8222-4874dfee7395", "sighting_of_ref": "indicator--b90fc18c-bfef-4c28-958a-b8c1aab69dd0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faab92b3-dfbe-44af-8ec0-28c653935579", "sighting_of_ref": "indicator--f4cc46df-84c2-4187-b8ef-6dfc82f939fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912ebd6f-9e67-4047-8e1a-4339fd969e3c", "sighting_of_ref": "indicator--f4cc46df-84c2-4187-b8ef-6dfc82f939fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7175aa36-4b55-44d2-b893-c6dc93e0641c", "sighting_of_ref": "indicator--dc676344-773a-4914-b3eb-1e43dddc70f3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f04355a-25ba-4307-8efd-066d45b40100", "sighting_of_ref": "indicator--dc676344-773a-4914-b3eb-1e43dddc70f3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f25b03-9772-423b-8928-81b721f1c143", "sighting_of_ref": "indicator--96cd6075-6e1b-46ab-b147-cb55157945c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3babbbd0-390c-4877-ae7e-cee0751cff7f", "sighting_of_ref": "indicator--4925975d-2ab3-416f-bc63-979e6c09d323", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac48e76-a930-414a-85dd-492e5ca74668", "sighting_of_ref": "indicator--4925975d-2ab3-416f-bc63-979e6c09d323", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f20780-a83b-4279-b0a5-06c6075eaedb", "sighting_of_ref": "indicator--1904a939-8ba2-46fd-a334-13ba136cefc6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e412ceb-7416-4bee-80cc-6a9f7d91e842", "sighting_of_ref": "indicator--1904a939-8ba2-46fd-a334-13ba136cefc6", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091dba00-83a6-41f8-86b9-f7275e918293", "sighting_of_ref": "indicator--1904a939-8ba2-46fd-a334-13ba136cefc6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5469898d-8425-4579-930c-da835b907f04", "sighting_of_ref": "indicator--1f1f67d0-1091-4ebc-88ed-5d4795d89a79", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9858232-f9c5-4445-a22f-e4e44ef9bada", "sighting_of_ref": "indicator--1f1f67d0-1091-4ebc-88ed-5d4795d89a79", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0712c0d5-1d9c-4822-a83e-cf61f7c02938", "sighting_of_ref": "indicator--818a821c-0d99-4808-8d19-6c866223aabf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375ca23f-bdd4-41d5-a7bf-48e6793554e5", "sighting_of_ref": "indicator--7bb00e03-1ed8-4a04-b3b9-d65908d0c5f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1810fb98-ef7d-4fcf-bbea-8f9ed8482627", "sighting_of_ref": "indicator--55288624-fa04-48f8-b158-0cda460a7a6a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcab75f5-ff57-423d-84c7-868f338a8b39", "sighting_of_ref": "indicator--9251d5f5-4cde-4fab-bdc7-8f738a73a8a2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32be304-71ce-4e4b-90b6-d2c4e92ff9e5", "sighting_of_ref": "indicator--7c0f5c00-b716-4b0d-81c0-66a383d7acc0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8641aa24-d583-449e-98b6-5044334bb53f", "sighting_of_ref": "indicator--7c0f5c00-b716-4b0d-81c0-66a383d7acc0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790ba37a-41dc-417a-8088-e4fbfea83706", "sighting_of_ref": "indicator--942485bb-f45b-494b-8d09-6a2d2fb77815", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eca8b38-6b0a-4e24-9b1f-3c5937b7ed1e", "sighting_of_ref": "indicator--942485bb-f45b-494b-8d09-6a2d2fb77815", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4840033-7bb7-4445-b294-85cc26a0690d", "sighting_of_ref": "indicator--4f4b180e-439c-4d63-9660-e8668d5ec496", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f8e12c-7705-4007-92bb-326da27c5b86", "sighting_of_ref": "indicator--2771cff3-76ce-44fa-b1ae-9aa4d37f449c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372c8035-a6b6-4737-b9f4-c4bb5e15ac05", "sighting_of_ref": "indicator--c4adce1f-95e5-4832-9121-4c551df3228d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3030ab7-8632-4796-868c-4104ba36178b", "sighting_of_ref": "indicator--2f3f8dd9-48ba-46ec-88a5-c6c283ab75fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2677d11e-b503-455e-88ba-644a4c5640b9", "sighting_of_ref": "indicator--ff7192b0-7400-4ea9-bc6c-c9f17bd28131", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0be91f-e373-4314-b752-0ae747c3fee0", "sighting_of_ref": "indicator--fe13fc84-65d2-4708-b2ba-a546a4e57e07", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df99b85-f59c-45a7-815a-4150e26806ac", "sighting_of_ref": "indicator--fe13fc84-65d2-4708-b2ba-a546a4e57e07", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b75d67-54e0-44fd-a857-84fb6a20c519", "sighting_of_ref": "indicator--43798e9d-de02-4130-94c9-2cebb3398cd1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86e2c91-cc92-4b02-a749-0c6103f09bc5", "sighting_of_ref": "indicator--95a3bfae-af84-4209-815e-c92123495158", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce8c3ee-4b44-4542-9acb-0e476b38a03f", "sighting_of_ref": "indicator--7f35a869-2c9d-41e5-a8be-5a7aef19cb60", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a53ab1-f77c-4603-a924-1c5739ccf153", "sighting_of_ref": "indicator--09141d04-32fb-4272-8d32-d11d33fb0d53", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0868350a-ed1f-4e2e-8838-13bd0deeb793", "sighting_of_ref": "indicator--09141d04-32fb-4272-8d32-d11d33fb0d53", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e30ca5-cce6-4cb1-bc63-f4ced15e116e", "sighting_of_ref": "indicator--b83da3d3-26d3-4bc6-9312-6b56d9372623", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec66bd4-880f-4bfe-b143-139a41ca85e7", "sighting_of_ref": "indicator--b83da3d3-26d3-4bc6-9312-6b56d9372623", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef645d8c-78bf-4ed4-beae-074b00dab1f2", "sighting_of_ref": "indicator--d3e91b3c-d8f0-44b1-96bc-51b2886b89ff", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19dc08b-8cc7-45ec-ac8b-d0dd235bc7c8", "sighting_of_ref": "indicator--d3e91b3c-d8f0-44b1-96bc-51b2886b89ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1680a80e-374e-4530-bd2e-15c071c99515", "sighting_of_ref": "indicator--f0d1bbda-d294-46c1-bb2f-c4f8619aacf5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fad8668-d601-4468-bf6b-85cb0e8b1c8b", "sighting_of_ref": "indicator--f0d1bbda-d294-46c1-bb2f-c4f8619aacf5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc6043d-cdfa-4050-9dfe-8af2762a1c39", "sighting_of_ref": "indicator--0f87a0ab-71a7-458f-8a60-0d15032e406f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6615042-3997-4982-8c61-9a06bd3e0bc5", "sighting_of_ref": "indicator--bf42a4d1-dd8c-48ec-9750-06b19fab1d60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc290abe-0e33-4d96-ba34-dbfb95024fa8", "sighting_of_ref": "indicator--6661bba5-3184-40d5-ba11-41e22b669a21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64073eb4-05d0-4826-8d42-82f8e0a323a2", "sighting_of_ref": "indicator--a27cbd54-d6ee-4460-8533-eb94f60401b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72be805-f857-4c9c-ada0-9635c534c057", "sighting_of_ref": "indicator--26751383-a4f7-4e58-8864-525e6d9d4584", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906ebd59-2c04-4d20-9335-92af3a4de762", "sighting_of_ref": "indicator--9b4bcfc7-9237-4346-9936-1681d6dcdb84", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8fd3a4-5cf0-46bc-83bb-c4b84cd0c553", "sighting_of_ref": "indicator--7440d9d6-c980-4609-8135-e97de388051b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dca3db-eda5-40ed-a631-456c8751f60b", "sighting_of_ref": "indicator--7440d9d6-c980-4609-8135-e97de388051b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aaa64a-c2de-44e5-b175-911bbf8b1146", "sighting_of_ref": "indicator--c61b70ef-98e4-42d9-b7f8-0d4ad9b63298", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207a08b7-551e-40d3-8cdb-f42b1d2af482", "sighting_of_ref": "indicator--abea7340-c25b-49ed-be78-9e3174c8b4df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd151d2-d057-455b-8999-abc231e122f7", "sighting_of_ref": "indicator--149e9d51-d010-4a58-8398-55d15b50da44", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981642d0-cd22-4d04-a7c8-74956b05c7da", "sighting_of_ref": "indicator--ee1db90a-0e12-4949-bcb0-0d0a04f93aaa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9886b673-2ff8-499d-ada0-34d7a61ff74d", "sighting_of_ref": "indicator--45b75fcf-addf-4e71-88d2-e53651b3cb05", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db1fce4-c77e-40c9-b0d8-44f2f3955cda", "sighting_of_ref": "indicator--6eed2478-0014-4727-811a-61eb98c12c17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27fc9e9-f48e-4755-ae5f-4d13ef7fd861", "sighting_of_ref": "indicator--88bc4fe7-6a42-46c5-88c4-c307bac45fb4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7406132e-3765-46bf-98ae-9b5a91fbf2dc", "sighting_of_ref": "indicator--c8093254-d16e-4cb4-91a7-89f4f19e1308", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6516651-de6b-4ffd-bc50-5cd3deb35dc3", "sighting_of_ref": "indicator--5f17b6c0-a674-4784-9614-3a58c4db0fcc", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd1a3fa-0bae-4e1a-a192-6aa2886b7332", "sighting_of_ref": "indicator--3d97e02b-1d25-49be-844c-175b461767c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e67e63-a1ef-4775-8c4d-cf3d7e8ce581", "sighting_of_ref": "indicator--d2294710-8d30-4a68-b21c-1ec130472243", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b94436a-a1d1-44fb-8cd0-8cfd60c9a696", "sighting_of_ref": "indicator--d2294710-8d30-4a68-b21c-1ec130472243", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6b732a-601d-4d4e-abc7-965f635ac670", "sighting_of_ref": "indicator--5ca5fbef-a2ba-4747-b2c3-395ef692498c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eab272f-3d0b-4cf0-9c74-5ff5d14c369b", "sighting_of_ref": "indicator--5ca5fbef-a2ba-4747-b2c3-395ef692498c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c6ed11-bc08-428e-96cd-559b0da9a1b5", "sighting_of_ref": "indicator--f4527716-1168-4964-af8e-8d635bf20957", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25f5984-980f-496f-8e6c-3bfb796b6d2d", "sighting_of_ref": "indicator--f4527716-1168-4964-af8e-8d635bf20957", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ff6b2e-02f9-437e-a62d-957f5c7028b9", "sighting_of_ref": "indicator--860e2037-e615-422b-bf99-ac31913f7b32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8396e684-1140-4fba-a303-bd2fb6dd04be", "sighting_of_ref": "indicator--0e55e9c4-8a8d-487d-af2c-95135c6dc666", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7039e664-8877-40c5-83e8-491217a8824b", "sighting_of_ref": "indicator--0e55e9c4-8a8d-487d-af2c-95135c6dc666", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fe06a4-0b24-49c4-97cc-d3a71e43f57a", "sighting_of_ref": "indicator--a13a4c82-9414-42ea-b2dc-d6798e5bc9c4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055316bb-cec0-4d58-ba4b-6488f846a4af", "sighting_of_ref": "indicator--83821ed9-2908-4424-9b5e-8ee9f55019ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed269381-0761-44d6-bdd0-34ad34d0a8c5", "sighting_of_ref": "indicator--55a85a5b-cba0-40e0-884d-82ab1942c721", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365067cd-c835-4e0e-a446-dd46a91ac5ae", "sighting_of_ref": "indicator--8e7d1eaa-3ba3-4c0e-b36e-e218151b1e41", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3ad82b-cafd-4996-b332-1cebff4db956", "sighting_of_ref": "indicator--09c0f9c7-a29a-4ea6-8431-1913ac6c4519", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9447509b-7e71-43c4-9308-80a257699ba1", "sighting_of_ref": "indicator--66376ae4-74d5-431d-90fb-e20f2d17ae6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f30fd9-de58-4efa-a512-b03c0d804b89", "sighting_of_ref": "indicator--8a002655-de8e-4b2d-96fb-00edcfcd5918", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d18b7d-b84f-4489-a030-4ee901f2a6a1", "sighting_of_ref": "indicator--f6561d04-39aa-47f0-b870-ae1da2de5249", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65287b18-a547-4ba2-9926-a8dd803fe140", "sighting_of_ref": "indicator--10e2801f-a8a2-49fb-ac21-36138db8cf48", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8857c9ad-207a-45d1-9bc9-8f14c57b5cf4", "sighting_of_ref": "indicator--d2f582cc-ae77-419d-89e7-6414f5e40d39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9ebce9-a451-4fc5-abd0-8d7ab7472e08", "sighting_of_ref": "indicator--86e46d22-8c82-468a-9850-834607c8e0f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000284e1-ea7c-497f-8a8e-4abbf164b1e2", "sighting_of_ref": "indicator--55c662d5-fda5-428d-9b93-d37e4f259c85", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365793b4-1b89-4aac-ad2d-50fb11ec0984", "sighting_of_ref": "indicator--b631363b-2ff6-42bd-9576-8ce6cae5f409", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99261048-32fb-4008-aa54-77c1587608e3", "sighting_of_ref": "indicator--1b059aec-303a-4b3e-a0cb-30ebb6dff978", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba466fa-144d-4e58-90bc-64d39a3ad995", "sighting_of_ref": "indicator--1b059aec-303a-4b3e-a0cb-30ebb6dff978", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bac578-a415-4565-a69a-77cf37dd6638", "sighting_of_ref": "indicator--09297e5b-23d0-4e45-afd7-e77712f9a996", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04988823-5a29-4845-877c-8c5efc3f7926", "sighting_of_ref": "indicator--7339588d-6277-41f6-85b3-b50bc097d492", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b038c15a-3d52-4999-a6f3-09cd8797dd95", "sighting_of_ref": "indicator--245393e1-2020-43d9-b8f3-0910bde08891", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046b540f-5b99-4350-b77a-5ab28ca2fd4b", "sighting_of_ref": "indicator--446a0da5-fd39-47d1-8760-efcacd2e4820", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5530f76f-147c-434c-9cff-020de7e13bea", "sighting_of_ref": "indicator--3094498c-bc7a-46b5-9fc2-9d08c3a4ce34", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40686bc1-4523-498c-8895-ab1e6296d877", "sighting_of_ref": "indicator--7b20c50c-ec4e-41f9-8358-1a97b22c10d0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfd0fc8-b8cd-4a5a-ab93-f3771c582fad", "sighting_of_ref": "indicator--d773fca2-89b7-444b-be26-8fed74f422c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c230b2ed-f657-4c4c-9112-71be0e9b86c2", "sighting_of_ref": "indicator--d773fca2-89b7-444b-be26-8fed74f422c5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5821c82-c017-472a-a844-ab37be06e08d", "sighting_of_ref": "indicator--ced621ad-4ede-4278-90c5-41d520165051", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b589b42-1718-4efe-ac9e-265482b871d6", "sighting_of_ref": "indicator--0f80affb-1485-479c-8fba-1ec8c80084dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cf3050-2cfd-491f-b38e-fe357e22b728", "sighting_of_ref": "indicator--ad40349a-ff49-4154-b1ae-1a8ba8409ad4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5c0544-380c-4665-997c-54c9dad5f03f", "sighting_of_ref": "indicator--0c5fa8d2-9322-479f-9013-2710fe2fc855", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b94396-835a-48f2-932b-32651f530042", "sighting_of_ref": "indicator--85031919-461d-4b56-9eeb-76ea92e58362", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca0e760-3392-426e-814d-a2e6b79c6e4f", "sighting_of_ref": "indicator--85031919-461d-4b56-9eeb-76ea92e58362", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b69179-9e63-4d4e-96e9-9112fefea868", "sighting_of_ref": "indicator--1def97a7-d8de-4af2-bf3d-5909d15f3ee2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aab2592-60d0-4f0b-bb8a-97cd80dac41a", "sighting_of_ref": "indicator--83bcffc9-83e9-44d6-8866-2c9256f29386", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b28ca40-d1d2-42d6-b51f-d03737e75ae4", "sighting_of_ref": "indicator--83bcffc9-83e9-44d6-8866-2c9256f29386", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b4f9d5-b367-44aa-a813-5c1551d01a43", "sighting_of_ref": "indicator--bfffa799-7ce6-4121-a9d1-ff42451b495e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c846be75-f0bb-4081-a507-54b9a61a0f39", "sighting_of_ref": "indicator--bfffa799-7ce6-4121-a9d1-ff42451b495e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f86008-7c77-453d-8bd2-432f00d593ce", "sighting_of_ref": "indicator--45d36b65-83b5-478c-9633-8b24c3e6d262", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902ae2db-9014-4b0a-bb2a-7e8c4304bf28", "sighting_of_ref": "indicator--af6ce416-f225-46e6-8181-bb1259785b22", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb7d878-b451-44b2-b26a-844bec1d287a", "sighting_of_ref": "indicator--af6ce416-f225-46e6-8181-bb1259785b22", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9a2b9a-be45-43cd-b066-69c6383ec5f3", "sighting_of_ref": "indicator--5f01dd52-965a-4a44-abae-8945db37875e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f7621a-67f2-479f-98ed-6975089b9df3", "sighting_of_ref": "indicator--5f01dd52-965a-4a44-abae-8945db37875e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9303fe-c4c3-44d5-b224-9cb4f547cfd0", "sighting_of_ref": "indicator--b22cb1aa-e5c3-4e1f-bcc8-fee25a21a45d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b500945-00a3-4507-b980-0c0bdf512c24", "sighting_of_ref": "indicator--b22cb1aa-e5c3-4e1f-bcc8-fee25a21a45d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbd84f2-3adc-4469-9281-9b5531ce1b73", "sighting_of_ref": "indicator--22df414e-ca57-4e22-a66f-feb1b0302e75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dad3405-123b-4757-9f99-7bcaf2a385a4", "sighting_of_ref": "indicator--7f83112d-3512-4e13-b108-ef5d60a1ba33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ffd53d-e82d-4928-8d70-98b88463dd2e", "sighting_of_ref": "indicator--7f83112d-3512-4e13-b108-ef5d60a1ba33", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55e86b8-b2b9-4f19-bf64-9d37a4e5f1c8", "sighting_of_ref": "indicator--e5d6112d-419c-48c0-b210-15a3aacc0583", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f7157a-eebf-4430-927c-611895b2cefb", "sighting_of_ref": "indicator--e5d6112d-419c-48c0-b210-15a3aacc0583", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace5a053-6e7a-4bf9-b7ac-6726b67d99e1", "sighting_of_ref": "indicator--32b74b30-5e03-46ea-9170-60188aea61f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee7eb0e-a4b9-4196-8ac2-02173ff490a4", "sighting_of_ref": "indicator--32b74b30-5e03-46ea-9170-60188aea61f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907614a6-4b31-4925-bf31-07edeb7d74b6", "sighting_of_ref": "indicator--80982157-8293-44bb-a126-bd12fa3024ff", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128453e6-bdc2-417e-a6c6-2b96ca5fadf0", "sighting_of_ref": "indicator--4bc464eb-7174-4333-a16f-696a6d98d72d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae8d5b0-77e2-4d24-8ad1-01e8c2c5817f", "sighting_of_ref": "indicator--b144bc6c-a751-4021-a9da-02d6f4f51e1c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6db4e8c-bb3f-4ad4-a31e-6abbafd55675", "sighting_of_ref": "indicator--b144bc6c-a751-4021-a9da-02d6f4f51e1c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f2d8b7-76c6-424f-a558-3fd3a0e4d3a4", "sighting_of_ref": "indicator--775206b8-4c65-4703-b250-3a7e0d14c557", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28285bc-5b74-4417-adae-0d2a1f26902d", "sighting_of_ref": "indicator--775206b8-4c65-4703-b250-3a7e0d14c557", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2e5ad0-135f-40e5-948e-857dfa24627f", "sighting_of_ref": "indicator--a115c5e8-83b0-4db8-b09e-627c60954a12", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54059185-a793-45a4-bd36-fd7e6242d4e5", "sighting_of_ref": "indicator--a115c5e8-83b0-4db8-b09e-627c60954a12", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82c42ac-49ed-4cca-90d6-c7b1f83d8b04", "sighting_of_ref": "indicator--e3c9d70d-0f78-4b28-b58e-ef02051e58b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3bc867-7138-4431-8188-5e70325de764", "sighting_of_ref": "indicator--e3c9d70d-0f78-4b28-b58e-ef02051e58b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedd5fd3-e3c7-4009-b8f8-111ce202ad56", "sighting_of_ref": "indicator--ae8c9c11-a748-427b-9629-3ecf505315d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843d6eb3-a552-48fc-96c4-732cf88ad293", "sighting_of_ref": "indicator--ae8c9c11-a748-427b-9629-3ecf505315d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f62cbd-fa7b-4955-9f4c-e5c26221a11d", "sighting_of_ref": "indicator--49561527-2a1f-4610-bbe0-e0955ed24e65", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9958785a-a9dd-461e-97e3-ff98222c7294", "sighting_of_ref": "indicator--4763a769-f55a-4782-8f7f-24bf3ca8ee89", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ff947c-a39a-4d40-bf01-f0a71bef4b35", "sighting_of_ref": "indicator--6783d71a-60ed-4ac7-8e75-5538e3285a56", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415e382c-bf8d-4d08-b6aa-5a2d95199042", "sighting_of_ref": "indicator--69a20152-b45c-4e76-86d8-d1cb858f7929", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321c0f89-ead3-4493-8599-60d5f0564ebb", "sighting_of_ref": "indicator--8c1680ed-e24a-4091-92d0-6e470a61f293", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3172bee-2f08-477d-9b9f-e696a56b9395", "sighting_of_ref": "indicator--4ce75c3a-e73b-4b7e-b0cd-272fd39deee1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b399d2-90ed-4ccd-a1dd-57f060529698", "sighting_of_ref": "indicator--aab08a9b-2d1e-4122-8c60-c4c8c3b85801", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7462b475-3ee0-4f65-b622-2e9a45d71387", "sighting_of_ref": "indicator--d6c92c85-04d3-4511-aeb1-6a4b603c0b5e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1509a4c-fa8c-466d-989c-41d70810387b", "sighting_of_ref": "indicator--4493f82a-1c91-46e3-961c-44a182ee3629", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cd3d72-d035-4d51-89d2-75fa8897e31d", "sighting_of_ref": "indicator--43370031-5f83-48aa-9230-a531c8f861ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8b07e1-cdab-4525-8b4c-9a97f982b36f", "sighting_of_ref": "indicator--f5df4abc-877c-450e-a170-03367f077187", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7c780d-57fa-4e1b-b093-c25696b2436f", "sighting_of_ref": "indicator--67b5b407-dbd8-4295-8941-a632bbd3c41a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9abe27-72c8-46f1-9a38-2555ad46cdb2", "sighting_of_ref": "indicator--9b8d67fb-be81-452c-93de-81cc8f0b7cf5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa4b1a1-578d-46a8-b3de-e7f09932400f", "sighting_of_ref": "indicator--3310ea9d-34a6-4a6e-a88c-364aeda6c8e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ed6baa-0132-429f-930a-00dd9d1b4918", "sighting_of_ref": "indicator--fdeec44a-1135-4fe4-971b-6857cf498aa6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f34100f-2e79-4caa-b554-2ff84f863038", "sighting_of_ref": "indicator--ce41e712-4ada-4cb9-9d77-f6412f34c091", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23a2991-fa0d-4535-8799-592c465625d9", "sighting_of_ref": "indicator--4aa35fd9-f7a6-4889-8694-d0d3edd0fd87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22eddfa5-301b-463a-83b3-9d15e7ff25ae", "sighting_of_ref": "indicator--53c40775-62d3-46b8-b91a-ecf864046b5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56116c3-f288-4079-935f-961d2a1d10d2", "sighting_of_ref": "indicator--f2475fa0-2c94-49cd-9c86-4a8ad0c92116", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3187d71c-eb47-4abf-91b8-b40fc9c2c7bf", "sighting_of_ref": "indicator--f2475fa0-2c94-49cd-9c86-4a8ad0c92116", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010a9368-b740-4a70-b405-a70732afb027", "sighting_of_ref": "indicator--aead0468-39b9-4447-96f8-c42186035835", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec5c3e2-7509-4fc4-b58f-bd26746524ce", "sighting_of_ref": "indicator--69ca2c33-ef16-41fb-a557-011230ceaadd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e2acf4-3908-463e-b5bd-60a504fef57e", "sighting_of_ref": "indicator--69ca2c33-ef16-41fb-a557-011230ceaadd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844ddda0-f5cb-45b7-b4e2-b76996f86fe0", "sighting_of_ref": "indicator--dfb8f6ee-24a9-418a-b94a-582ff7c78cf0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0476e76b-9098-443d-b047-69df18b2aae5", "sighting_of_ref": "indicator--f396b492-e4ef-4b97-a308-a6ccb9e238e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe52041-028b-4766-a72c-6ea260ced5ae", "sighting_of_ref": "indicator--f396b492-e4ef-4b97-a308-a6ccb9e238e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fdade7-bd98-4bd9-b1a1-b30d5e98e9cf", "sighting_of_ref": "indicator--1e07fbdf-6996-499f-85fd-1db219c740f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11545164-6a7e-40ad-96e4-b9a51afbc696", "sighting_of_ref": "indicator--1e07fbdf-6996-499f-85fd-1db219c740f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a289de7b-459a-4e68-9366-25b83929b805", "sighting_of_ref": "indicator--3e1637b1-449b-413f-994f-e67002f83590", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64daa776-f857-456d-b3f9-9dd001662851", "sighting_of_ref": "indicator--3e1637b1-449b-413f-994f-e67002f83590", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f11eb2-4ba6-448d-b54c-29a3acdab7d3", "sighting_of_ref": "indicator--424b2605-2030-42e9-a552-48c4f7d967ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0670c9-6e3c-495f-80e7-141a3e5d7941", "sighting_of_ref": "indicator--dad07d25-6e0a-4cd8-ab2c-4fc82116833f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6700d4-eb57-41ac-a0c1-4ecc97bf14de", "sighting_of_ref": "indicator--8730a84e-aa97-422b-9f17-a200f307c530", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f89792-96c2-46f1-80d0-628aeb613c7b", "sighting_of_ref": "indicator--8730a84e-aa97-422b-9f17-a200f307c530", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3a5e27-4d12-4aa7-8b99-3a1acc6fb843", "sighting_of_ref": "indicator--adc9bdd5-94f5-4bb8-a869-18735d253d6e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e825418a-2cba-4a98-820d-16629945db57", "sighting_of_ref": "indicator--9a93e29f-7c96-4513-a4f6-cf992ea4ba3a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b74f44f-ac8a-4d9d-bfac-da582607830f", "sighting_of_ref": "indicator--c4cbe6d3-353b-4a16-882a-3e89835154dd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d516e0b-d4c2-491d-86ef-89739dec7bc3", "sighting_of_ref": "indicator--c4cbe6d3-353b-4a16-882a-3e89835154dd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2181ff9d-8847-4547-8b18-edc5d8c618d0", "sighting_of_ref": "indicator--990d6971-7b38-41db-a804-bd5387a5a4a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdcf43e-335c-46a4-a674-0c657fedb7e7", "sighting_of_ref": "indicator--990d6971-7b38-41db-a804-bd5387a5a4a5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c7eb8e-2cb8-40e5-b97d-2ada8ee830ad", "sighting_of_ref": "indicator--72cfa388-80d2-437f-9c8b-8917ec498170", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7aa2fd-e087-46f2-a972-07502059794b", "sighting_of_ref": "indicator--72cfa388-80d2-437f-9c8b-8917ec498170", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c16ce76-0273-4f0f-8b98-11cdd42bbe83", "sighting_of_ref": "indicator--eb5d07d7-18db-4244-b4b0-e7db99e943c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87deb5d6-64cd-4b18-82d6-4c919f92053e", "sighting_of_ref": "indicator--eb5d07d7-18db-4244-b4b0-e7db99e943c5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e49dd7-f7a0-4e48-af6a-d1648a6f33e8", "sighting_of_ref": "indicator--ca5bb05d-123b-411c-92c1-9cafc93154fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef587bc-652e-47eb-a405-5cf967fe9bfe", "sighting_of_ref": "indicator--98a95ee6-2517-4024-b8aa-efde2cf88856", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ed85b1-993a-46aa-92c4-d07ebdcf300d", "sighting_of_ref": "indicator--98a95ee6-2517-4024-b8aa-efde2cf88856", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504a5bae-4893-459d-97c0-f0fcae34df3c", "sighting_of_ref": "indicator--a2989b67-3fe3-4b7b-9bbf-19f1f7c1320a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9e8f26-965f-4576-ad4d-aea4bbfcfca6", "sighting_of_ref": "indicator--9e0baa0e-8138-49c7-a8e6-b438bbe61102", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed02541-364b-4055-b494-ce95bed6f073", "sighting_of_ref": "indicator--9e0baa0e-8138-49c7-a8e6-b438bbe61102", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bf8db6-4c2d-4afb-9be4-fc350e634666", "sighting_of_ref": "indicator--a729ab90-52e0-4318-ab56-a3d74fde84e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bac73f-dc81-44fd-ac7a-798a9871ca86", "sighting_of_ref": "indicator--a729ab90-52e0-4318-ab56-a3d74fde84e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041c2a94-0f5a-409c-a182-7c2f4824fc55", "sighting_of_ref": "indicator--10aa2d87-21c0-4155-9de8-9c3894396446", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad5bc21-7aa2-412c-8222-c2120a834549", "sighting_of_ref": "indicator--e902531e-93d4-478d-969d-edcc065feb4e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753edbf1-5d1e-4dd0-b985-aea113266809", "sighting_of_ref": "indicator--55f4045e-a81d-47e7-aba9-118d13429574", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ce8ee5-05bf-4ebd-b09d-36edabed4e23", "sighting_of_ref": "indicator--222ea30a-eb04-4efd-9c72-b1260b47282a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089b448d-9bdc-4552-8f84-8c226770fd8b", "sighting_of_ref": "indicator--222ea30a-eb04-4efd-9c72-b1260b47282a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058d7bd2-0538-44ca-b88f-878216214b30", "sighting_of_ref": "indicator--222ea30a-eb04-4efd-9c72-b1260b47282a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112fc0d1-88de-4129-9c40-14b5e39c3cef", "sighting_of_ref": "indicator--2151f6ec-79a1-4a17-bbd9-6cb495d57e15", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6d4872-d077-4866-98da-a37665dcae16", "sighting_of_ref": "indicator--f6f1576b-0ca2-4f43-8d85-49dc94661615", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636020a2-6d43-45eb-b57d-051097fcb484", "sighting_of_ref": "indicator--ae2918a7-14a4-468d-a0dd-9f4900887ba6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145c2dc2-78a6-4027-a74a-475a78a10868", "sighting_of_ref": "indicator--ed67bf3e-20e9-4450-813e-19d32ed1b791", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e7da29-3915-46e6-95a5-9ead820bdfd0", "sighting_of_ref": "indicator--7dded9e6-63b8-454e-9707-9ea704782592", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e22a2eb-4daa-41f3-a1a7-e76e0d920451", "sighting_of_ref": "indicator--7dded9e6-63b8-454e-9707-9ea704782592", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff60f69d-a4fb-443b-97b1-44804960d95e", "sighting_of_ref": "indicator--5d8e94fc-5df0-4e7c-ad8d-64e492f55f2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bae5a2-2a72-44e7-8911-f8c52f03abd9", "sighting_of_ref": "indicator--dd86d95b-6f3c-4cdf-be21-404f229e8e9d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82307be7-a59e-4935-af03-e9a8f3f56b1d", "sighting_of_ref": "indicator--cb9e2f5a-e4fb-4487-8092-a5f9d9f56fc7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e8e623-6c51-43c8-a251-54d24b3da68b", "sighting_of_ref": "indicator--cb9e2f5a-e4fb-4487-8092-a5f9d9f56fc7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7221e4-7945-4a7c-8e6a-b2f1223bc755", "sighting_of_ref": "indicator--d7f4ed0d-7087-49a3-869e-2826dfe5d46a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2943e061-c994-45c5-ad68-6445f7921337", "sighting_of_ref": "indicator--d7f4ed0d-7087-49a3-869e-2826dfe5d46a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf0fad0-a799-4ed0-b24c-424e6056fb8f", "sighting_of_ref": "indicator--75dde060-0ea3-449e-bd8b-6fd7630688d2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a7afbb-21a3-42c0-8f82-e3dd9997e3e7", "sighting_of_ref": "indicator--a265d02c-6131-4a4b-8e1b-17d3814c5126", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1299996d-0021-4990-a73e-b98ae8245946", "sighting_of_ref": "indicator--a265d02c-6131-4a4b-8e1b-17d3814c5126", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c88324-7511-4358-b4a1-4d1727564e07", "sighting_of_ref": "indicator--98960db2-34ed-4fc0-b271-dab0d6d6adf6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15c45d0-adc6-4a0a-9fa5-08637fb97a0d", "sighting_of_ref": "indicator--270a43b9-b43c-4de7-8dee-08c53f6d77b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d209d5c-a94d-45f4-a81b-95c66146dc61", "sighting_of_ref": "indicator--270a43b9-b43c-4de7-8dee-08c53f6d77b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dd8a4d-d3b8-44d8-a8ea-ba326d9c2cca", "sighting_of_ref": "indicator--cee89816-ffcf-431f-87e5-cbd356de795d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae0463b-9e27-405e-88b2-e9e148a74f9f", "sighting_of_ref": "indicator--cee89816-ffcf-431f-87e5-cbd356de795d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000eebd8-6b38-48c5-a112-21311bd140ca", "sighting_of_ref": "indicator--8590672a-646e-4eae-9b3d-a3ab9e79544a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0389c1ac-a49f-4657-850b-669ef8fb28f5", "sighting_of_ref": "indicator--90f89473-aed8-459f-8297-f0b461162b99", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bda096f-71b4-4c2a-a39f-c56223e034ae", "sighting_of_ref": "indicator--90f89473-aed8-459f-8297-f0b461162b99", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e53eccd-884f-4271-b9fd-b5109fa66331", "sighting_of_ref": "indicator--f28f9342-f590-42cd-b8cd-d2f61e46bd20", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83324f41-9876-487f-8e71-5a10d10017ad", "sighting_of_ref": "indicator--f28f9342-f590-42cd-b8cd-d2f61e46bd20", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bca54f-97c2-4e7d-a46e-fcf1e1657634", "sighting_of_ref": "indicator--74e28735-95fb-4f1c-a5f1-6ae308ef44e9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22dfdf1c-889e-4583-99b0-d701480ad95c", "sighting_of_ref": "indicator--fb137297-02ae-4e7e-9c9e-743f18e7c879", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65b5438-55c0-4573-88a2-ed7dee5e7db6", "sighting_of_ref": "indicator--b2a57a2a-40fa-4099-86b6-232cb609bf8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf471aa-c523-4ab0-96b3-aa86ae773dea", "sighting_of_ref": "indicator--9dfadcfb-4ab3-487c-88d1-42640dd36bc8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887e933e-d0fb-4158-8d1b-856e77a5b81f", "sighting_of_ref": "indicator--e689bbd4-7f87-469a-8611-427358df197c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1974a508-fa84-4f5b-b8ad-0742b73ec7db", "sighting_of_ref": "indicator--982e0281-4682-45c9-a651-680c9f121a3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656fe2e5-28c1-489a-9eaf-a721b408df33", "sighting_of_ref": "indicator--56d131b4-f86e-440e-9c43-a90aafb2e745", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855ae99d-b325-4b42-9bec-b6a7825d027d", "sighting_of_ref": "indicator--dd72c08f-9746-4201-bce5-99b56986c7f8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b941d14-130f-416e-aa21-d48c79ba58f5", "sighting_of_ref": "indicator--290389ca-bbeb-4d06-980b-b5a0e406500e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a939c128-d1b5-45ac-ad0b-d8b17eb26e7e", "sighting_of_ref": "indicator--e1452da5-f874-48ae-8eba-e643b4c28c3d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5074e2bc-2744-401d-b163-5deaee757cc1", "sighting_of_ref": "indicator--b673f43e-99eb-44bd-8f15-1e010a529176", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d31a9d-5155-41f8-b8ee-6104cc68295b", "sighting_of_ref": "indicator--7144c46d-f2ce-440e-9fad-e0451db6541e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0539c8a3-6a80-4109-abf1-3e74da14175e", "sighting_of_ref": "indicator--53985d25-56c6-43ef-a99c-ad25e9c989df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d80102-26f1-45b4-ac68-1ec7591c76a0", "sighting_of_ref": "indicator--fa081e2d-d0e2-4028-be02-91db04ecd643", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cba6e7-de0f-4e93-b4d8-d0c5cb2a3f83", "sighting_of_ref": "indicator--7271c2a9-33d9-40f1-b471-b66c68f1d7ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df35c0e-dfc0-428f-b9a3-b8b0f3825bfb", "sighting_of_ref": "indicator--7271c2a9-33d9-40f1-b471-b66c68f1d7ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3606ad2f-f61c-42ab-ab31-e56029346de4", "sighting_of_ref": "indicator--0d473ba6-964a-44c7-a906-551786fb22d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d150c76e-5525-4105-85b4-dcf5697e138b", "sighting_of_ref": "indicator--0d473ba6-964a-44c7-a906-551786fb22d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c01164-ff7a-4526-b27f-4d640132c29a", "sighting_of_ref": "indicator--931c8d16-ff78-4fc9-99fb-49243a01d4cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd71a25-8ea0-44d7-baaf-86f1b38d8286", "sighting_of_ref": "indicator--51eb4bfa-1112-4cb0-a883-c2dc7b4c01a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f9e351-7e10-4425-9ecf-d034387106d5", "sighting_of_ref": "indicator--be155e65-7ad4-4b06-ab57-3cee78838679", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25192c6a-e1ec-49d1-958f-b1dd450e7873", "sighting_of_ref": "indicator--af9f554f-3a3f-4316-bc8f-eab84189a30a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c845dbf-1272-4135-b0bf-9d459eb402c3", "sighting_of_ref": "indicator--2a04e2a3-5847-4756-ac7b-a598474f36ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9700c2-5e4f-4f15-9a23-1149898447a2", "sighting_of_ref": "indicator--bebee377-4123-4813-a332-507ed2da67fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e265ae3-5925-40a1-ae39-086dbb18ba26", "sighting_of_ref": "indicator--c9cb26de-e74b-48bf-8b4d-cbcf9832a30a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c2cd58-57cb-488c-b6b1-47071d0fc262", "sighting_of_ref": "indicator--5e3ab45a-433a-469a-82a0-121bcbd2cbd6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f145506e-c27d-40a1-8e60-2985c0f2847c", "sighting_of_ref": "indicator--f5e66285-842c-4f0c-bd8d-4fc7be743a47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df85264f-247c-42e9-a48a-87ff0f24d891", "sighting_of_ref": "indicator--b7fe3ea7-f427-42ac-9b2b-4a55c31b4f0e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273c5310-0f86-4bb2-99d2-7a79a64cc3d4", "sighting_of_ref": "indicator--09413566-58c7-40e1-b909-fb2cf5722ca1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fcb41b-e766-4ca5-aab9-71cc79fe0e51", "sighting_of_ref": "indicator--7c4cd7a1-53e6-4152-a764-c786d315173b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02569fc3-71da-47a1-afec-c6e5c578bf53", "sighting_of_ref": "indicator--4db54c0f-2a06-4075-8b80-a4834544e960", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ec508b-a2e1-47f8-91e4-ac22b8ee1edf", "sighting_of_ref": "indicator--659a7868-5bdd-498f-8f03-3d3519f33b24", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a52d12-919b-42b2-b774-63ca6d665679", "sighting_of_ref": "indicator--659a7868-5bdd-498f-8f03-3d3519f33b24", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f8bc96-69e8-4887-9fac-234371fc8160", "sighting_of_ref": "indicator--4d26118e-1144-4742-a9fd-9bf151f0a142", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa36c159-36be-42a9-8aa1-38243ad68eb2", "sighting_of_ref": "indicator--6007546e-5d75-4d85-b0d2-c527dbdfb11b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d946c5a7-6214-47c1-bc36-0b6271aaac31", "sighting_of_ref": "indicator--85bb128e-a57a-4537-ac95-fcbe451c669e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eaefa2e-c4e9-46d9-9e1c-822a9963d632", "sighting_of_ref": "indicator--01bdc053-9990-483a-a218-2324e79fe4ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252a5eb9-8c34-4677-8607-01f42dee9fa5", "sighting_of_ref": "indicator--9b6fc98f-ce63-45fa-8247-a70729d43fbb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9bb159-b4ce-433e-894c-6a585286d889", "sighting_of_ref": "indicator--64932c43-f763-4350-b384-781d43d57f19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc673d0-4638-4cba-948e-03e5e488406b", "sighting_of_ref": "indicator--64932c43-f763-4350-b384-781d43d57f19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfa85b2-a749-4382-b2c4-b2408dc77dc8", "sighting_of_ref": "indicator--b775c7f1-0ece-4a00-8d04-7488a42a04f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f996ef1-6824-4c55-813d-12caa1ced9b6", "sighting_of_ref": "indicator--3e1c639d-186b-4cef-863d-0262f1de80ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae72c09c-a55b-43b5-b2c1-a34ecb7c14f7", "sighting_of_ref": "indicator--3e1c639d-186b-4cef-863d-0262f1de80ae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2735cf-3bff-4486-afbe-52ad4f7f31db", "sighting_of_ref": "indicator--3f3fef4c-fe17-46b9-8aa6-99c26858c4ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e10b5a7-9dac-4925-953e-96e7d7c29a0b", "sighting_of_ref": "indicator--55445bfd-1f29-46fe-b340-232e9da78abd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a4e7f3-8dd1-46e3-af4f-4d8e700889d5", "sighting_of_ref": "indicator--0bb37cfc-e60a-4ca8-8712-495c0009916d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0735aa-fc37-4f94-b838-48144c7b0121", "sighting_of_ref": "indicator--c5462740-c602-4d02-a2f5-3981641eec04", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da221e76-f402-4af5-835a-d8a87c17ee46", "sighting_of_ref": "indicator--29ee2b94-58a5-4c92-9217-41191429cc91", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2b5143-5657-461f-b7f2-94a7cf392f8a", "sighting_of_ref": "indicator--137b7cd1-01c7-411d-8cf9-60f4d56cc6af", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9807dcd6-3419-40a5-8649-aa24e69e2fe5", "sighting_of_ref": "indicator--f27f5fd7-5b7e-4c90-9159-41235368af4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cba7f7-63dd-4245-b3bf-090fa87dc87a", "sighting_of_ref": "indicator--f27f5fd7-5b7e-4c90-9159-41235368af4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7b1b99-96ce-404f-b9b1-6ec689464c96", "sighting_of_ref": "indicator--aaa0a503-d73b-4d7a-a5e6-e140a9628960", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd562802-b159-4c33-a89f-10f85fdc6773", "sighting_of_ref": "indicator--1d9fd77f-0356-4be4-8286-1083a96e35f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c975db-18c3-4c1f-aa85-43e328c077ad", "sighting_of_ref": "indicator--1d9fd77f-0356-4be4-8286-1083a96e35f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c624c2-d38f-4c2d-b951-9ee4a1c006c4", "sighting_of_ref": "indicator--9f19f3ff-49df-4229-a2c5-cdf32ec80a83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550135f4-cf7a-4fb2-b3e2-b76d995b840d", "sighting_of_ref": "indicator--33383a70-5010-4e54-8fdf-147ddae1dec2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93152d19-b989-4455-bbf0-5c1705722373", "sighting_of_ref": "indicator--33383a70-5010-4e54-8fdf-147ddae1dec2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdda8b0d-b084-4713-8721-285e029771ec", "sighting_of_ref": "indicator--c7ad5a62-57ab-4bc9-a710-f1a208a866ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31aedd29-2782-4021-8d8d-e022bdf2cd7d", "sighting_of_ref": "indicator--e0ce30c0-4a78-42e9-bced-5af70a01d299", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03892387-fcbe-4932-9ee3-a7ccb1b71e26", "sighting_of_ref": "indicator--e0ce30c0-4a78-42e9-bced-5af70a01d299", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7baeb3f-06ef-497e-b2a5-596409c4e917", "sighting_of_ref": "indicator--e0ce30c0-4a78-42e9-bced-5af70a01d299", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c710ea-184c-467b-bf3f-1437a8316eb5", "sighting_of_ref": "indicator--b6cbb821-2e85-4ea0-9a34-6719998b678f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4776a31c-2392-4aca-a5eb-00cf222a45d8", "sighting_of_ref": "indicator--b6cbb821-2e85-4ea0-9a34-6719998b678f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d257dab9-5aa7-453e-8375-ee375b0bc548", "sighting_of_ref": "indicator--b6cbb821-2e85-4ea0-9a34-6719998b678f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000f30d0-b1b0-47e8-bb08-7937d3a07c4a", "sighting_of_ref": "indicator--4ed477c1-2cba-43b3-b679-fca46a48cb2f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c555218e-5391-4d1d-ab05-85612accb0f2", "sighting_of_ref": "indicator--0dcc2e74-4986-4e0c-9928-b8b494e3961f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a055da1e-5dbc-4038-884c-9723c43f56a0", "sighting_of_ref": "indicator--0dcc2e74-4986-4e0c-9928-b8b494e3961f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59e8cb8-a8cf-4391-b696-b4bbb2e6f975", "sighting_of_ref": "indicator--f04605ca-7826-40f5-8518-852938658085", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da578195-67b4-4097-ac3c-686a20560d40", "sighting_of_ref": "indicator--b0029637-1602-4f6e-b77c-c77176b9bb8e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4a8d19-5f4c-4bcb-8146-7ca0d2f6540a", "sighting_of_ref": "indicator--b0029637-1602-4f6e-b77c-c77176b9bb8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6972dc-df6a-45d6-9fad-77d2c59ef9c4", "sighting_of_ref": "indicator--2fbcfac0-8e2a-4e0b-a9f5-403f84445412", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8211a742-db0d-4ec3-93ac-5dfdb4b26d96", "sighting_of_ref": "indicator--2fbcfac0-8e2a-4e0b-a9f5-403f84445412", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab84470-c867-4315-bfcc-c7a99c3b3311", "sighting_of_ref": "indicator--4105ca2e-9266-4ffa-bf5e-fee6a5f33f21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c914dc-bc5d-4e4c-a1a5-102296a6b02d", "sighting_of_ref": "indicator--4105ca2e-9266-4ffa-bf5e-fee6a5f33f21", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5affc16-a85b-4669-a976-26f9c89349b2", "sighting_of_ref": "indicator--1a19f0bf-cc29-4ad8-a480-2baf94e4b3b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddfb397-de52-4a18-9011-4f80e39929c5", "sighting_of_ref": "indicator--1a19f0bf-cc29-4ad8-a480-2baf94e4b3b3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84ef49b-da40-4f8c-b6a2-23b0d71072e4", "sighting_of_ref": "indicator--3953ba36-35b1-46a7-bdea-e5f0e1e240b7", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd349286-f853-49e7-9ce8-647dacd48bd1", "sighting_of_ref": "indicator--2f509593-51d5-4b6f-b4d5-4ce062d0ea0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb8f309-4db0-40a8-bd7d-d1b47fcd5077", "sighting_of_ref": "indicator--1c37cd35-1e3c-4485-9c47-88d343a455f5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e0e007-d926-49a7-8569-e360a129e2e8", "sighting_of_ref": "indicator--029f614a-6820-46c6-8594-c9f593758831", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fd6106-b694-4b0e-bddf-d72a690afb07", "sighting_of_ref": "indicator--029f614a-6820-46c6-8594-c9f593758831", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e940e09-11a6-4575-bc3e-f1b9cb82991a", "sighting_of_ref": "indicator--1b5f788b-9e3e-4c65-90de-0b2e7094a8dc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dabcbb-2429-4fab-97a9-1039b907250b", "sighting_of_ref": "indicator--5febf9fa-1503-4e4b-86c7-6e6006defa75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e143282-d1c7-4193-9f15-4895ecdc425a", "sighting_of_ref": "indicator--23218eaf-80ea-4b02-9f9d-c42cfbeb45a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7341fa9-a913-4d5e-807e-2be5c0b6bf54", "sighting_of_ref": "indicator--23218eaf-80ea-4b02-9f9d-c42cfbeb45a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73df6820-c4ec-4d70-bc59-892476137f0a", "sighting_of_ref": "indicator--49d3b092-5e85-4f3c-8fb5-4745ae1990da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24dbc115-0107-4f11-a348-8bf32b1b8f0f", "sighting_of_ref": "indicator--687d4acc-0335-47d3-867c-77a415ff6c83", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f7c82a-7b07-4988-a416-6c6c193540e8", "sighting_of_ref": "indicator--7b55f711-1158-40a0-b092-60c80e97e05c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f158e0b3-3ac9-46e3-94a1-267afcf4a3e4", "sighting_of_ref": "indicator--30a3e00b-3290-458e-a889-deff26daca92", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a42b77-d4fd-45d2-86f3-d03c56270fba", "sighting_of_ref": "indicator--d4ef15ba-274a-4887-a32e-470c93c92fad", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0258d4ae-b5a9-4762-b99c-d1bd6246bbbe", "sighting_of_ref": "indicator--d0723517-805d-44f3-a5c4-aa6de8b1f0fe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06609363-8aae-47d4-923a-2881701e68b8", "sighting_of_ref": "indicator--4732c6fe-a6a3-4d8b-8094-9797785abe22", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed1544b-e169-4cef-9a7e-1ec9f3dc509b", "sighting_of_ref": "indicator--05b4803a-00de-44c9-b16e-a56650f3de73", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffc69b8-48a4-4e6e-b3dc-c1e243818c3a", "sighting_of_ref": "indicator--00265d6d-4ca5-401d-8027-830b84233df3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfce5a35-b874-4b16-b511-201e89b7e58b", "sighting_of_ref": "indicator--5d434704-0405-4130-9beb-c0de6a5cc548", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94f7292-db85-401b-b80c-a45d6857af98", "sighting_of_ref": "indicator--5a34f549-4ecf-4739-b4b3-72b0103234ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c002f0-e5bd-42bb-a80f-b39c1932b330", "sighting_of_ref": "indicator--b936a452-621d-43d0-905b-b2f06682b4f5", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9501f690-fedc-48be-b4c9-c41dac8361b4", "sighting_of_ref": "indicator--50b9e8f6-da90-45c3-b3f6-ca7d5c821ff4", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42a3c78-c80c-4967-a812-2f45c32e8f92", "sighting_of_ref": "indicator--4d90b56a-529a-45f7-a2d1-5079294c58ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca51f04-048a-4d2a-a6a4-a316255886a9", "sighting_of_ref": "indicator--dca097d2-95fb-4a88-aa20-ec246f9f609c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8340a1c5-213b-440a-bedf-4b1057cd013d", "sighting_of_ref": "indicator--9a0e566e-5e64-458d-9cca-8fcafda332c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9417cffb-f760-4e4d-ad2c-f18a55e9e437", "sighting_of_ref": "indicator--a94ce510-c25c-49be-9adf-4abebc02b2ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e5b6f8-f774-4362-8318-bf6bdb9db969", "sighting_of_ref": "indicator--b3c133c7-3797-4385-a3f7-fef629192a8d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da1f8b8-2fe0-4069-8d98-cd5e2a615543", "sighting_of_ref": "indicator--91f00395-a081-4ae2-acf2-32d422161693", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12329687-6906-4e6d-96b3-ae016dcbe194", "sighting_of_ref": "indicator--8e9f9b9c-01c3-4885-8961-1d5317624d00", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fd6455-52d3-4caa-83e9-cdb36f16add6", "sighting_of_ref": "indicator--abe69c27-0854-43a7-9337-ff58553424b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2355a4df-d9e2-4a67-a7d7-57789e39ae18", "sighting_of_ref": "indicator--abe69c27-0854-43a7-9337-ff58553424b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc8b8d6-80f1-4f0c-b741-f4bf5a61023d", "sighting_of_ref": "indicator--e54fafdf-79b8-48af-8285-3394a16cbce7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6074fcd-8341-47d0-914e-c6ae50539c9f", "sighting_of_ref": "indicator--34a93264-7a79-464a-9f82-111122fced47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72ddedd-7b7c-4d5e-907d-b43f3faa4db5", "sighting_of_ref": "indicator--34a93264-7a79-464a-9f82-111122fced47", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c0ec26-3536-413f-aa3c-f683d7d5e1b5", "sighting_of_ref": "indicator--5f5cf7d8-4e15-4ae7-a842-59c92ababfcd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d22c8d6-7db2-478d-938c-a71d117a1271", "sighting_of_ref": "indicator--63103a9c-b957-46d5-9aa5-bed523b181e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b85c8e-54d7-4b84-846e-6a881d34afb0", "sighting_of_ref": "indicator--63103a9c-b957-46d5-9aa5-bed523b181e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fb4887-71ef-42f2-8add-d6b638ef9d68", "sighting_of_ref": "indicator--0b49874b-59be-49d7-9af1-0d608edfcb55", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5cfa50-932c-4e1f-8833-7d0acdd4c0b2", "sighting_of_ref": "indicator--e0e54dd5-d180-400c-8bfd-6794fcbfc112", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d465cfa8-bf74-45b8-b4e7-bcc3eee60f9a", "sighting_of_ref": "indicator--e0e54dd5-d180-400c-8bfd-6794fcbfc112", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0dfdeb-0d9f-4970-a123-bc54dbb52f6e", "sighting_of_ref": "indicator--596bd991-7cb8-4f4d-8850-739eaeb0ce0c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c3b519-e1ac-4310-a5c1-bcd0a13c9df3", "sighting_of_ref": "indicator--596bd991-7cb8-4f4d-8850-739eaeb0ce0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5a24c3-734a-4c47-b78c-505e8e655cbf", "sighting_of_ref": "indicator--af5eefbe-5e94-4f8c-8cac-90f7ec430d48", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9977c7ae-8855-486e-8b96-7c5565837032", "sighting_of_ref": "indicator--74c4373a-58f0-4491-96ef-0fad3941aec4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c77cb06-386f-4ee6-b074-2be396b4d790", "sighting_of_ref": "indicator--d9377312-7b1a-42b2-ac49-e9f2fd9f00cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50fdf22-5ddd-42b9-b319-5a6cf0c4c2f9", "sighting_of_ref": "indicator--a9245740-6bf7-46b2-a88f-b49f3c88ad1e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e134fe50-b9d7-45db-9968-9ea553498eee", "sighting_of_ref": "indicator--e33c6e8e-cf76-4c0d-9fcb-b2958a83813d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f42f8e-c1de-4dfa-ae25-0674a14d152f", "sighting_of_ref": "indicator--e33c6e8e-cf76-4c0d-9fcb-b2958a83813d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c49358b-bbbf-45db-84a7-cd5b7dac8653", "sighting_of_ref": "indicator--20393269-d87e-420c-ad69-df13ed3a0210", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd195a89-0020-4100-972f-e7cc5bc53c6d", "sighting_of_ref": "indicator--20393269-d87e-420c-ad69-df13ed3a0210", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b8e027-b461-4567-8b0c-46f53878cd27", "sighting_of_ref": "indicator--3c95af14-70df-4518-bdbe-7f7dd801d49c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44504ba0-c51a-4eb3-8bfd-d2413b22c7b7", "sighting_of_ref": "indicator--8f7c4b27-7042-4b16-a772-3dd4c6edd346", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d65c8c-396d-499e-97f5-59abbc1ef2b6", "sighting_of_ref": "indicator--7bba7f65-cda9-4ac0-b946-a6a20c2336f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e7e6a4-37d1-455e-8071-f0064c445435", "sighting_of_ref": "indicator--aa2b7d75-154d-4c6f-af76-79d3c0b20646", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbc17c9-e8a6-4507-bc3a-abd079762f74", "sighting_of_ref": "indicator--8763638a-7ed1-4305-afcb-102d0c1f52ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83603676-7bdb-4a7c-9036-f1df5e22a156", "sighting_of_ref": "indicator--8763638a-7ed1-4305-afcb-102d0c1f52ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9477c95a-fa58-4f5a-a5ec-1f4e984689a8", "sighting_of_ref": "indicator--bf796a76-de8c-4d3d-add6-bf689dbcdc45", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ff84ce-267e-4891-ba51-43ce8597bcb0", "sighting_of_ref": "indicator--a3e6b7d3-2a23-4dd9-be4f-7dab99dd5310", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5638a773-2107-4be8-9660-c3dcca456292", "sighting_of_ref": "indicator--a3e5ab0c-00a8-440c-b436-c6e2da67b524", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca48e868-d71b-4359-a927-a4be83692d07", "sighting_of_ref": "indicator--b0d423f2-fcfb-49fc-af4b-04a0dcc13f0e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927289d1-36a0-48d2-8b74-8c3e366b3a94", "sighting_of_ref": "indicator--4fe71778-56bd-40f8-88c7-69b3a057c55f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0716c05c-7325-46ae-b814-744d9c3e310f", "sighting_of_ref": "indicator--f4a1b19d-a652-430c-ada9-4f4988ae9e59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb79cbe4-7062-4cb5-8271-b841f8c26ab8", "sighting_of_ref": "indicator--dc59c597-474e-4554-b871-d9d7e8308b68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f8bef1-cfd9-47a3-95f0-e3adef664422", "sighting_of_ref": "indicator--789ffe27-9a47-45af-8318-f670224df69e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a016dffc-50da-4b69-9c10-4d668a2205e6", "sighting_of_ref": "indicator--a0a80ed6-bbe5-4426-9df2-dc29be6a7771", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7b92cd-8241-4ac8-997d-22ccbaa9201c", "sighting_of_ref": "indicator--5980d073-7c20-4e96-a34f-bb4523e6282b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1d1416-9416-4c4d-9914-5d9483a25b6e", "sighting_of_ref": "indicator--d96342f0-a468-4bdb-a1c5-d154357b3078", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b812f1c1-4f77-4500-b0ea-2fd74cecb8e8", "sighting_of_ref": "indicator--561e5d68-f096-4aa1-9fdf-fe85981767b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1079288-9e2f-4812-abad-b199819d48d1", "sighting_of_ref": "indicator--9ac25699-26ed-47be-aba2-31031d84c84b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0d9e79-6172-46db-a67c-24d15c5a720f", "sighting_of_ref": "indicator--6ea8fe79-9fb8-40cc-9e63-4028c26d2e35", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8fc596-3518-4294-bac8-302522f2469d", "sighting_of_ref": "indicator--078b9961-953a-4fd4-b62d-73ea0ce17db4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c72c2bf-2500-40c2-bd91-949885af6dd8", "sighting_of_ref": "indicator--679ae36d-5982-40c5-a7cc-fad3f3d4ee80", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a43b706-b1f8-48f5-b9d5-4cdcfba222b4", "sighting_of_ref": "indicator--63e5ce46-2e2c-46b1-beef-12978f4b177a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3dd9c2-19d5-439f-9fd9-957e972560db", "sighting_of_ref": "indicator--e4b42f9f-bb2f-44e9-933a-2623a50d2f2e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7db4cf2-e074-4d4d-b440-d2f68026929e", "sighting_of_ref": "indicator--a36f8393-f1d8-4847-b14a-ef9e7e96d891", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5f0af0-7631-4f75-805a-07cb5c5fcd79", "sighting_of_ref": "indicator--d5cdb97a-d1da-4985-b5b3-abf7f171a2c0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963f69be-5ab0-4739-ae73-78b61c360c9c", "sighting_of_ref": "indicator--a36318fc-c555-4bdd-9bae-bf76630a9e31", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067f7992-d6bc-4e11-8bd5-2a321fcf112b", "sighting_of_ref": "indicator--00ddb425-09b5-4520-b041-a99a4c693cce", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95979a8a-cf95-45c3-9421-b8a94193974a", "sighting_of_ref": "indicator--7f2260cb-6b3d-440e-9492-c9be6045443e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f051238-e5bc-4f92-b665-c5f6dca48e1a", "sighting_of_ref": "indicator--777d5b3e-6db3-4b60-87ed-c83da8f144e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c349ebff-2cdd-45c2-b2a6-ca2cc86a3084", "sighting_of_ref": "indicator--17ef155b-ba19-4ce5-9445-121554eaa3fd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c7ea55-631e-4d88-99fd-c5de8f30b5f6", "sighting_of_ref": "indicator--f2da8314-6540-44b2-8abb-06d03af7feeb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d672cbf-e1a1-4c78-a868-01d9f017d4b3", "sighting_of_ref": "indicator--6128f1d9-4a7a-438f-ab09-3d22d6199c11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7940c477-5ea0-4fba-bdaa-7483fb5411d3", "sighting_of_ref": "indicator--c4e093ec-e6e7-44c7-930a-bdea87e3daef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3973fbbd-301d-4806-b6ff-62ac747f36c2", "sighting_of_ref": "indicator--92fce1ca-8b29-4489-a37f-bbacfe27dda9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5390c6f2-b2a8-49a1-b751-b69cb76d8e0e", "sighting_of_ref": "indicator--ba856e48-8c98-4186-99f6-6e1cd403dc09", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76af368-40e6-4fa3-94f9-949d55cc03ae", "sighting_of_ref": "indicator--fabffb76-bb25-4e5f-b03d-194d1375ecb4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7c62c4-d89c-42a3-a1c5-c95fb03f5e42", "sighting_of_ref": "indicator--3e0bbd05-c0bb-4ffd-af1c-b31aabd58702", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81635bc6-9db8-40e9-9c77-82e0cb52dd10", "sighting_of_ref": "indicator--3e0bbd05-c0bb-4ffd-af1c-b31aabd58702", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5107bd-51eb-47da-8c6c-1baeb2d76d2b", "sighting_of_ref": "indicator--42a80bc4-c0cb-496b-b551-9ff317a931de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135b19c8-00b5-44e9-a901-44922de50958", "sighting_of_ref": "indicator--ace84d29-28b9-448a-a3e3-88b709839d86", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b0d946-a49e-40a3-adaa-0082e341d85c", "sighting_of_ref": "indicator--138dcb0e-114a-43ab-b09a-8ad4294c03d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8beef163-46ae-4875-af70-9558c9ba73cd", "sighting_of_ref": "indicator--b98db8ed-bea5-48b4-9f41-e1be53d672a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0990734-9e53-491b-9b00-38face93d4f9", "sighting_of_ref": "indicator--9bcf65f2-50c4-4f97-aad5-ad612d2453f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3cc11a-faf2-4ffb-a102-a1d085ef5264", "sighting_of_ref": "indicator--cc497ebb-c7d7-4198-944b-f3bc99669b32", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aee3dab-886c-479d-9eda-7645aa317cdb", "sighting_of_ref": "indicator--65929aa9-f879-4152-86f3-3772a0a35720", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9556d9c1-7b8f-445a-b82c-13806c0c2e5d", "sighting_of_ref": "indicator--001ab31a-eb80-4a89-9720-f7b628c29e9b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b30bc45-4447-4b76-87ce-b1ba133c074f", "sighting_of_ref": "indicator--707e9f77-d3a3-4743-a62c-f5aeecdbdff9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941251ba-f4a3-427a-b463-28b5c87f4304", "sighting_of_ref": "indicator--09c90535-7765-4d84-8baa-7f3cd2042727", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbaf523-731a-4c4f-b5a0-84a645f3e7f3", "sighting_of_ref": "indicator--550ed43d-25d9-423c-baef-01f6af7bdbfd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d3e021-e719-4f99-bfc5-8d893ad74d4d", "sighting_of_ref": "indicator--d0c93247-5ba4-4bf0-8330-ac82e3109b9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81ad35-04cc-45aa-b09c-9f1fd1f5b31e", "sighting_of_ref": "indicator--b546bbab-5cb4-4fc7-aea0-6e846aca4f7e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77846640-7ad1-413b-9eb1-45dc1faf7c0d", "sighting_of_ref": "indicator--3f8d09db-9dbd-4135-93d7-c9527e65b7a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596086ed-6a27-4ff2-808f-c6c73e5dacac", "sighting_of_ref": "indicator--62669554-7e1b-48d3-9ffb-91a0d91d0fe2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af47de5d-f2b3-420e-8dbf-7da5053dcfbf", "sighting_of_ref": "indicator--cf4c8f96-ccc1-4f03-8f7c-a80453047521", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f97d44f-e489-455a-916f-4c9e61dc7c45", "sighting_of_ref": "indicator--c88fdad0-cadd-421e-bba6-18668c027049", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17655dc8-8c8e-436e-a80f-26be708090cd", "sighting_of_ref": "indicator--efb3dbcc-7672-4142-a541-3b61c483a09f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834c5ce7-5396-4e3a-8361-726658f7e53f", "sighting_of_ref": "indicator--723055bc-2aaf-41a6-9de5-b651897d8da6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c9cf8b-af98-4a82-9fcc-db91c73e0599", "sighting_of_ref": "indicator--cbb964fc-a32d-434b-8451-1bef01ce79a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36b5d0d-fa46-4a18-9cf9-932ef3690253", "sighting_of_ref": "indicator--99c642ba-bc18-4a55-8b91-d30485fec870", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79be41ba-ae19-4dcc-a6ee-95b92aa2adb4", "sighting_of_ref": "indicator--d147a25b-5bef-4dd1-ac35-50bf52c71b01", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640d8e87-ca01-42dc-8723-f69b5c9d0f02", "sighting_of_ref": "indicator--59704509-8665-4b71-be4a-7c9d691fbdb2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e51a30-486d-4b38-b99b-54b926bb1d59", "sighting_of_ref": "indicator--1d38dac4-ce3b-4070-a01a-f8590ff7fbdf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a382861d-c680-49c8-b91b-a3187e0f0c4c", "sighting_of_ref": "indicator--1d38dac4-ce3b-4070-a01a-f8590ff7fbdf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48d7b57-b1d6-4a5d-b864-444020b65e4d", "sighting_of_ref": "indicator--bb0b1e0d-f6a5-42f6-aa3a-7ceafe3b9644", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5a9fd9-8796-4a3d-a60f-ba968092db4c", "sighting_of_ref": "indicator--f9daf2b6-f180-4ed5-840a-5e5302810e86", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0701105-1976-4f2f-81f5-d0dd26c04da1", "sighting_of_ref": "indicator--4f28a6c0-0f93-4078-b1ff-7bb4416a77d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf00783d-0da6-46eb-8802-a863cac6517e", "sighting_of_ref": "indicator--31b6e232-2981-47ec-b7a1-cac6a3b64be5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b81c4a-7540-4e85-9e4b-5344bf5a4872", "sighting_of_ref": "indicator--31b6e232-2981-47ec-b7a1-cac6a3b64be5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38717aa-f6ce-4147-b566-458e4bcefd43", "sighting_of_ref": "indicator--935fcbd9-8b50-4ebd-8912-0eaa310103e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9be995-92b8-47d0-9331-f5df15905c47", "sighting_of_ref": "indicator--7e38ddd3-8bac-45be-91c2-39a2ffdc0356", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75378f6-e9b3-4f5b-b056-26ff11aed3b3", "sighting_of_ref": "indicator--19ddd54e-0718-4f06-a756-803b4cc50f23", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5f1777-7fde-42d2-991a-483dc261c86e", "sighting_of_ref": "indicator--36f97cc6-080d-439c-93ad-5987544d55d9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9813b736-9bd5-4a5d-bbf5-c94ba09753c4", "sighting_of_ref": "indicator--c705c1ff-d5f5-44e2-85de-445f4983f20e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb03254d-9329-4a38-8872-2da0853a1774", "sighting_of_ref": "indicator--da93aac0-b817-4bb0-ad8e-a98c59a82243", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de08c4c-008a-4656-9e37-805d100f72af", "sighting_of_ref": "indicator--513a0957-2bb4-44ac-9d00-dedde4ffe6a0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e9e728-4fd4-4c47-9c55-53bd809c692e", "sighting_of_ref": "indicator--8103b57b-8bcf-40d8-853a-c86d384c4ac9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869e7cde-fc35-41b6-9d55-c7110683b957", "sighting_of_ref": "indicator--d08fcc3e-f887-4c55-9127-63cef15b635d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62fb866-9b84-4bf9-b1f8-03a3485f7e5f", "sighting_of_ref": "indicator--ef20979d-796f-456e-bc4b-eb4c219f7808", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29ca1d1-ac99-47d9-8a2b-337c7fa0c547", "sighting_of_ref": "indicator--28829de2-2b84-4959-92e4-e278f45aacf1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d4a86f-79a3-4bc4-b01f-7ac73cf61dda", "sighting_of_ref": "indicator--0c957bb8-aee6-4d43-b8ef-448d47912600", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43742413-bdd6-4b19-9538-e10b7661926b", "sighting_of_ref": "indicator--f473fac9-7554-420d-9756-849679ec2ea7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62be1924-68b7-43fd-92f6-c8d93e363cc9", "sighting_of_ref": "indicator--79f36f3a-258f-4c25-ab3b-69a70adbbe87", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14161d8-f077-4a47-9f41-21417cb20b74", "sighting_of_ref": "indicator--9b39ecd1-4795-4be2-84d3-3d2591f93965", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268de660-b97f-4dda-a1bd-c08be10b05b0", "sighting_of_ref": "indicator--b10840de-553d-495f-84dd-a61868ad9550", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06a5b7b-cce4-4814-b193-5a67552de8c5", "sighting_of_ref": "indicator--b2e6dfbe-d06e-4a3b-98fa-9309c9b89c66", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eedcd9a-6786-4229-ac72-13ef06b5a60e", "sighting_of_ref": "indicator--a4d1633d-a1bc-4fe2-9118-c01551841601", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38f6907-52d4-4a0e-8c97-6cb7877feaf8", "sighting_of_ref": "indicator--8209a915-8c04-4d5c-a531-1455ae59b8ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76c8ec6-b76f-4ed6-993c-b7466c58848f", "sighting_of_ref": "indicator--c27694dd-bad7-4530-a694-acf44eaedf35", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4120a3a1-f754-4bc7-a844-d8cb2d266622", "sighting_of_ref": "indicator--907c4086-9b3a-4542-a916-ad20aa92f59f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6c2078-d931-4ad0-978c-07d796a1bab1", "sighting_of_ref": "indicator--91c1a03f-6376-4680-b56d-c9e0cef0f4b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0fc26d-3f86-4d2e-beac-eae192c005f4", "sighting_of_ref": "indicator--e2d21525-6a96-4dbd-87c6-31e76a8971a6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1b4456-54b7-45ab-ad93-a3960ed59a76", "sighting_of_ref": "indicator--e608564b-ddca-4ccb-8701-1b351ddd0547", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dc2a2d-d28c-4e56-9b5d-af3c47e474f7", "sighting_of_ref": "indicator--8d21425d-4403-4791-ad80-6a62f3df8369", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48544375-7641-484c-bb8a-c530d236436c", "sighting_of_ref": "indicator--8d21425d-4403-4791-ad80-6a62f3df8369", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058eaea5-5950-4d2c-9730-8bb3b52fb97e", "sighting_of_ref": "indicator--57ca2c10-66eb-4be4-b9df-b0352ac0c748", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d299eaf-6aae-4cd9-9b96-5d08c4ea8cff", "sighting_of_ref": "indicator--c655f748-12cd-4375-9b7d-38d2fdffe52c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c0e195-df26-4db2-8de4-479a428c3ab0", "sighting_of_ref": "indicator--32ecae25-6d9f-43d5-bbfa-53e6a429b3db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcaee11-369e-4717-921d-82915107c33e", "sighting_of_ref": "indicator--412d597b-292f-4d52-a568-ae992bb6e217", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4892fe2-4dbf-47a0-9b8c-2cc9443a8593", "sighting_of_ref": "indicator--cd79b10d-3027-4178-9c42-b15cfc818954", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b14d3e-e4c6-4fde-a61b-94fcc2fefdee", "sighting_of_ref": "indicator--44b38055-a239-460e-9863-f87558b89b10", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f75fcc2-9e24-46b4-8f78-c02de263e247", "sighting_of_ref": "indicator--c10c3f75-fd7e-45b9-a7cb-3fde889a182f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bedff4b-3e54-4ec6-9a75-adac03b1235d", "sighting_of_ref": "indicator--9b3e8be2-c735-4fe9-a264-db8377c6d495", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9faebb05-d0b7-41bf-ab58-c5f956cefff1", "sighting_of_ref": "indicator--efc16ec2-26d1-417f-bc86-f92d0e09206d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75911734-6620-46ed-9dc9-bc42ac91b7e1", "sighting_of_ref": "indicator--0f976ec6-90d9-40c1-9fae-11d3edc65cd3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c2a3bc-e746-451f-8b81-121f895f98d9", "sighting_of_ref": "indicator--789dd726-0d52-492e-9122-842f2f9866ea", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717ea3d7-14d7-49de-a42a-7b54eb742aa1", "sighting_of_ref": "indicator--842291ae-0f80-42ae-9266-574ad5f8783c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e12f14-d93f-4456-ab14-ea09e941566c", "sighting_of_ref": "indicator--03e928e9-6c1d-4ac8-9f07-b3aa8f9063d5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4262926-850a-488b-a8ce-93073de02864", "sighting_of_ref": "indicator--b855df9e-bbc4-4833-9372-b3661bdd323e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1408fb8-b75d-4706-9aff-a9e22da31dc0", "sighting_of_ref": "indicator--5f885fdf-29ca-4567-9c23-86c12a47ad72", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89611cab-c035-4491-93b0-8540cc83cba9", "sighting_of_ref": "indicator--2d5eb7d4-a47e-47b8-b9ba-8387ea380f85", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaad0d5d-32a9-4e5e-b184-d5ddebb1e680", "sighting_of_ref": "indicator--2d5eb7d4-a47e-47b8-b9ba-8387ea380f85", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3921aca-5e70-4d63-b3e1-69c580249fc4", "sighting_of_ref": "indicator--14b7c683-2c61-4451-81d6-3c0bccc1031a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b073021-9e80-4f4b-abe1-81c64ec3eda6", "sighting_of_ref": "indicator--bd260e2b-0230-42cd-ab98-72a7877a3f5c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81dc9db-2438-40d0-ab5a-a4ecb90109cf", "sighting_of_ref": "indicator--8a058005-a4f9-4543-8fcc-fc1ea2bd47b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6f9f0a-3a4e-424b-9d32-38b03be946bf", "sighting_of_ref": "indicator--a1f15e72-4d5e-48e4-9382-22ef2826c283", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2b8814-5c77-4fc3-b312-565a86d6e2e8", "sighting_of_ref": "indicator--421de8f6-5c63-424d-bc4d-80a133da01dd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71f2f9c-732f-4aa9-b185-26a976968d4b", "sighting_of_ref": "indicator--828173b6-04a3-4797-803e-739269f8866c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ec1cc2-1e6d-46cd-b8b5-cfd5f14a40a2", "sighting_of_ref": "indicator--e53d1dbd-8935-4e8d-a721-490edab57dd0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8ca1c3-e9de-490b-8f4e-e86ed8334ce3", "sighting_of_ref": "indicator--39fc58dd-7088-4cf8-b400-f562d1b57bb0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb399239-dc51-4157-9798-90fe27fadb3a", "sighting_of_ref": "indicator--443f9f4b-501a-46a4-bf64-71fab347176e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a90a95c-a372-468a-b2e9-f0c463d31e73", "sighting_of_ref": "indicator--f46eb14f-1e86-4191-b736-fe74bbd05569", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2e83ef-be94-4bfb-aa3b-7c2546385509", "sighting_of_ref": "indicator--f06d3523-84b9-428d-a382-9c689b955d85", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3113a2d3-34da-4fac-8aab-b528704351c9", "sighting_of_ref": "indicator--f06d3523-84b9-428d-a382-9c689b955d85", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d56e87-7c33-4d7f-b2bb-b4c774f73853", "sighting_of_ref": "indicator--1da94096-86d3-43fe-9b0c-3a6fbee6770d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f796128b-b456-4eb9-97d1-5a11c60569e2", "sighting_of_ref": "indicator--b18d31cd-dd30-4a2f-9fbb-7d51359895fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7297c7e7-0440-4567-bfc9-830b2ce26ea3", "sighting_of_ref": "indicator--97e2d744-1fec-4812-918b-c4169f8a2293", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd35693-77e2-490e-8b75-992612b69f2b", "sighting_of_ref": "indicator--d2d93975-6bee-4b94-9fdc-4a4cb6379394", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14213070-f1dc-4896-a5d5-cff5096eef50", "sighting_of_ref": "indicator--d2d93975-6bee-4b94-9fdc-4a4cb6379394", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6514fed6-f150-40c9-9f93-de9ba13afbfc", "sighting_of_ref": "indicator--44470451-6da6-403c-95ab-fa5cb3b4079b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aebd383-df48-4f4a-a9c5-6c1c413b5627", "sighting_of_ref": "indicator--7dda9bb2-d255-4df1-87ae-ecc4e43aa46f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b206ac5f-2666-48d3-b369-6cb39f954b72", "sighting_of_ref": "indicator--1825b3b7-e635-4dfd-8ee8-95aa2bce3edf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583e5897-87c2-4ba0-b676-5d692f25b686", "sighting_of_ref": "indicator--0eaf224d-639e-4d1e-a81d-3d50e9013b0b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941c0ab8-6d2d-41ed-86b1-197983627e76", "sighting_of_ref": "indicator--0eaf224d-639e-4d1e-a81d-3d50e9013b0b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91d37e2-b696-42b5-a741-95b6b8a1747c", "sighting_of_ref": "indicator--f296a961-bc0e-443a-ba39-c715c3fceac8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25612b09-b910-4718-ba61-6f90c275945e", "sighting_of_ref": "indicator--f296a961-bc0e-443a-ba39-c715c3fceac8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4732bd16-c506-4cc3-8946-2094d7ffc274", "sighting_of_ref": "indicator--4f045239-f066-4669-8690-742c4a5e7f9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff9e81f-4ef0-4697-b194-5133fa215582", "sighting_of_ref": "indicator--4f045239-f066-4669-8690-742c4a5e7f9f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38baa73a-66cb-4d13-8169-067e9e43b871", "sighting_of_ref": "indicator--39f3da33-407e-4581-bdaa-f89faae562ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f02ae5-6150-48f4-a85c-dcd3ea4e1c3a", "sighting_of_ref": "indicator--79ab29dc-e404-481d-9b49-50ade81d004e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df41a7c-d4fc-40d4-8f27-35c507830286", "sighting_of_ref": "indicator--45d07676-2509-47a3-a461-63cd23abffa3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02b8095-4c01-4214-91a1-b89744d252c4", "sighting_of_ref": "indicator--45d07676-2509-47a3-a461-63cd23abffa3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec7dd57-6413-40c6-b9b9-e0fad10d5f78", "sighting_of_ref": "indicator--55fd93b6-1b3c-4272-9b0c-48a8f3797471", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f923f085-2597-46f3-915f-4f5818c021dd", "sighting_of_ref": "indicator--55fd93b6-1b3c-4272-9b0c-48a8f3797471", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b006532e-5a17-4f70-81cf-e610c84787f4", "sighting_of_ref": "indicator--2549074d-2165-4c57-98fc-b36d3b163377", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74459ffc-13de-4d8b-89e0-3e26baa4dbc9", "sighting_of_ref": "indicator--07e15ec2-15f2-4981-8d0f-1ee3781e89bb", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5930b0e3-99ff-4247-922e-e4e966e40429", "sighting_of_ref": "indicator--07e15ec2-15f2-4981-8d0f-1ee3781e89bb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353f67f1-5bc6-42f1-84d0-74c6c43e6f4f", "sighting_of_ref": "indicator--ec13b825-e9c5-4add-97ff-c46669bc6888", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a825c72d-f8c8-497e-b68e-f4e2ed665cf8", "sighting_of_ref": "indicator--f5087ba6-3864-49d8-8d2d-82b0a10184ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c73438-6def-401c-bb37-d6525e7b35cb", "sighting_of_ref": "indicator--40b5b235-f68f-40d4-b347-2cbc0d762293", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3af874-3853-4d22-8601-4ccd66b8156c", "sighting_of_ref": "indicator--40b5b235-f68f-40d4-b347-2cbc0d762293", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe5165c-b5ce-48cc-b5d7-960e7b2656c7", "sighting_of_ref": "indicator--02189742-da02-40a5-86fa-4d7b48afa3a1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bea641-05a8-417c-9ff9-8700b7455d02", "sighting_of_ref": "indicator--a899a0d1-95a3-46d3-b710-d8bebf6062ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a77302-c8a5-4aa9-9361-2a090145bc33", "sighting_of_ref": "indicator--53986067-771b-4490-8d65-e0e5b1d24431", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bc2945-45fd-416c-98ef-b116444b92e3", "sighting_of_ref": "indicator--f971b314-b0c5-4b18-9b81-3af0ba3ca579", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf19031b-9414-49cb-889e-f4431e9da7f9", "sighting_of_ref": "indicator--ab5b661e-240b-421b-885b-9e8d58e10be8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277b2859-cafd-4285-b4be-bb80ca98b230", "sighting_of_ref": "indicator--ab5b661e-240b-421b-885b-9e8d58e10be8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d77387-d29b-44f0-9b32-4182d5a046ae", "sighting_of_ref": "indicator--d306e43a-7bc8-4613-a5d3-88419614af74", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d1fb11-19dd-4db2-a39d-ef614024f243", "sighting_of_ref": "indicator--a854bc49-8072-4270-af01-fbb439666be0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cb56a1-5c68-4d27-8b43-997eab2eb833", "sighting_of_ref": "indicator--12d75026-43e4-44c6-8daf-ca85e07d158f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041a1750-407f-47ee-8ba8-ad612d372df0", "sighting_of_ref": "indicator--697d34e0-bc02-4e7c-859b-8458a9405716", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5387e2b4-aee0-43f0-b812-76e5ee665c61", "sighting_of_ref": "indicator--697d34e0-bc02-4e7c-859b-8458a9405716", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0ee067-794d-4f2b-b99a-ebd8a257e42f", "sighting_of_ref": "indicator--99aacc9b-8525-4aab-ad19-26b6747b42a8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad893936-a622-48ca-a533-4ba46629b133", "sighting_of_ref": "indicator--99aacc9b-8525-4aab-ad19-26b6747b42a8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daecac5b-6965-4b4e-a76c-855d98b261c9", "sighting_of_ref": "indicator--a141f648-f703-4192-a7a5-7bb68fb5958f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb750417-f891-4966-9a0f-191658e9bc38", "sighting_of_ref": "indicator--8d1700e9-3a9b-4a2c-87be-9c1cd14fcc44", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1215b5-3110-4a77-9a4a-97dd6702e685", "sighting_of_ref": "indicator--8d1700e9-3a9b-4a2c-87be-9c1cd14fcc44", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8718f4a-25ec-4bce-9950-987a5f5188e3", "sighting_of_ref": "indicator--e3f1798d-91bd-4171-a893-a3b1d8a6b5f9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8227847-3e40-4606-aba3-a1ce49daf428", "sighting_of_ref": "indicator--e3f1798d-91bd-4171-a893-a3b1d8a6b5f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc8e33c-a8b7-4e3d-92ff-739c3c1f2d11", "sighting_of_ref": "indicator--a601f179-4329-472a-85a3-3ef17a4636c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549473c4-1174-4cae-8c79-713616b9fc40", "sighting_of_ref": "indicator--a975f88b-3fb9-4270-adda-4c2eebb64f8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde40183-9e09-4ba2-aa8a-d703d454fee8", "sighting_of_ref": "indicator--a975f88b-3fb9-4270-adda-4c2eebb64f8f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44328dac-c0b0-460b-8ed6-7da7e83c5038", "sighting_of_ref": "indicator--9f4614d0-597a-425c-a2b3-b7f21d7aa002", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d382c96-6bd0-4345-ba83-993ec84929d6", "sighting_of_ref": "indicator--9f4614d0-597a-425c-a2b3-b7f21d7aa002", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522ef38b-76ed-4dc0-a203-cdb875db2c1a", "sighting_of_ref": "indicator--38f4facd-b0e4-43d5-9239-da40c9e68bbc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4115df4e-298a-4434-a46d-97b09501b722", "sighting_of_ref": "indicator--94900e79-08e7-4d27-937e-fb4f2ced911d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e996891-6ff8-42c0-aa92-d308c4b40102", "sighting_of_ref": "indicator--94900e79-08e7-4d27-937e-fb4f2ced911d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb5d49f-7dff-444f-9bc3-757afeb3effb", "sighting_of_ref": "indicator--f6772bee-2bff-462c-9b4f-4054f5a0b6bd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8980878-a548-4032-813a-3a704c935559", "sighting_of_ref": "indicator--f6772bee-2bff-462c-9b4f-4054f5a0b6bd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de6ed62-751c-4871-89ae-2c1de1e70038", "sighting_of_ref": "indicator--a91b60c9-950c-471b-bdc9-1d9d22afda54", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17dbcd7-d855-4294-b2db-c242eb0431bf", "sighting_of_ref": "indicator--ab8727c5-b3d3-4ce8-9462-e54cc951daec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b513794-a172-4bb6-8278-bf1ff1e5e200", "sighting_of_ref": "indicator--ab8727c5-b3d3-4ce8-9462-e54cc951daec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9429ace9-c639-48fd-b839-6743caa71a50", "sighting_of_ref": "indicator--7359af28-65a3-4faa-80ea-fb7d032b153f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fc2033-abe4-4b1f-949b-a5079bf9bacd", "sighting_of_ref": "indicator--7359af28-65a3-4faa-80ea-fb7d032b153f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfc89c1-5a7f-483e-bf02-d04ae973d8e8", "sighting_of_ref": "indicator--d4ced0a7-1768-4617-b9c1-fb75e82f6312", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f506f65a-9f7e-4283-9bfa-7a1fe2339808", "sighting_of_ref": "indicator--2c721cee-f565-4847-bbcd-7ff2885e10da", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c17ef95-1544-43dd-acc3-4012817afddb", "sighting_of_ref": "indicator--12dbd7d6-dd78-4ec1-a3c4-0b11a1b85003", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b42541-474f-4d67-a469-547eb558ccbd", "sighting_of_ref": "indicator--3d556639-7665-4cef-b78e-8ee730c55363", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec0f276-7a8b-46df-abf6-473a119a0af9", "sighting_of_ref": "indicator--7c0c1daf-f2b7-4bb8-a501-ad8d2885fb33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e47cea-637d-4b63-bed5-69ede82e8ef2", "sighting_of_ref": "indicator--12850548-747c-43ef-b9ba-b4942def2e65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afda2ee-c9b7-4b83-9633-bb9afe8f9467", "sighting_of_ref": "indicator--4ef25666-dcad-4775-94bf-5aebb4f635ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589c9b94-0c2d-4054-a1e3-e5ca6809bb1f", "sighting_of_ref": "indicator--d32bf48b-431c-46b5-849a-ec7695924ffd", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab3c86b-56b3-49b7-be8d-ba8c6702fbb0", "sighting_of_ref": "indicator--8c2b4523-e140-4686-badb-dc7d2c26240e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16913aa6-68d8-43df-8de6-8269c8eacbb3", "sighting_of_ref": "indicator--1e3012a6-d829-4ada-a93e-79b70f465adc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aea647e-171e-4124-866b-57fbf968a1d9", "sighting_of_ref": "indicator--66ae9815-9708-405c-a37c-8929e3f169d6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0214e2-0eab-4e9c-962a-15fa5ff30fb9", "sighting_of_ref": "indicator--fa8a69bd-62a8-4bd0-9e67-4d4b768e571a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad64543-66e9-4224-b14a-f4f628299671", "sighting_of_ref": "indicator--f55bb2e9-ffc6-4653-9af1-f820ec7370b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4a3090-e796-4e38-88c5-d70d6d79b8a5", "sighting_of_ref": "indicator--f0898e6b-c10b-4829-bfed-2d3f91e1eb79", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f16d87d-cdd0-48c1-955d-6d5748464c32", "sighting_of_ref": "indicator--f86d83a1-0728-4999-b009-d55532956c5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f5d9d8-f8fe-4126-98fe-e128757ded70", "sighting_of_ref": "indicator--bc85fdc0-4854-4d10-aa96-6e4cf4807e62", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952b8541-a659-492b-b847-f2e1ae37fded", "sighting_of_ref": "indicator--bc85fdc0-4854-4d10-aa96-6e4cf4807e62", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd147c87-5a43-4584-9c08-a8d3fa901094", "sighting_of_ref": "indicator--9ebc6a00-9940-4972-8630-4031e4a4d452", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3a660d-0293-4281-9391-4bb1649f5cbc", "sighting_of_ref": "indicator--9ebc6a00-9940-4972-8630-4031e4a4d452", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e3e828-678f-4387-b98b-cd70e0c1604d", "sighting_of_ref": "indicator--f965ed89-13de-4ce1-af82-e49d52217d7d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2761b4b1-09ea-4532-9d88-8b83e96f9026", "sighting_of_ref": "indicator--aed6e5d3-818b-4ab7-ade1-bb982615a284", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4b0f81-e4a7-489e-acee-de77819aa4a7", "sighting_of_ref": "indicator--6bd7c158-3472-46d5-9c71-6644ebd5f933", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b0660d-254d-4060-9a90-a613e84e4e95", "sighting_of_ref": "indicator--86fba8e1-6eef-4676-bf1b-0c27a4cce8df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e9c55a-9f04-4842-94a6-6248d2a1bc3d", "sighting_of_ref": "indicator--95c21558-4403-4f1b-8ebe-c814e07c4f70", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d799b0-5f66-4742-9186-55779373ba27", "sighting_of_ref": "indicator--65fd6a43-1e1c-4fdd-a9f5-1d94be8a46c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1336dd8e-06d0-40bc-a744-7d5b962d21ba", "sighting_of_ref": "indicator--f587663b-1b0e-4d0d-a642-92a988308ae9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172a06cf-f8a2-412c-8ef9-da4ee20b86a0", "sighting_of_ref": "indicator--40467caf-f45a-45c2-93df-1c6598274188", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500168e3-4fdd-4f93-9204-51689cf37ff8", "sighting_of_ref": "indicator--79a6f6c5-dfe1-4555-93ac-2cbd260fe36c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e83a20-1915-4db4-a66c-40692b2698c8", "sighting_of_ref": "indicator--2f333019-0f9c-4af5-8bcc-ba51e8150888", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f52d5d-fa5e-4c45-9abc-40362e3c8874", "sighting_of_ref": "indicator--8f86e47d-f0d3-4df4-8875-7250d8c63651", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13faa90b-4b98-4d32-8a3f-d0f42af48904", "sighting_of_ref": "indicator--ca18346e-e879-49d4-b5db-fda38c1243b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c323219-3867-41af-ac32-7505d1535f74", "sighting_of_ref": "indicator--ca18346e-e879-49d4-b5db-fda38c1243b7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b252d257-513d-485b-bda9-bb9009980b32", "sighting_of_ref": "indicator--49b07ae2-d48b-4ff7-94cf-647e4dceaeb4", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03904d18-a7cd-4c1d-8883-e9daf404ea0e", "sighting_of_ref": "indicator--33a8a50b-0926-4f62-abd5-e9fb9244d814", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2edaf9-a5cd-4497-b8a7-0595a177e166", "sighting_of_ref": "indicator--546d922f-82e1-4b3c-bbc6-432a24237f60", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a3688a-e6b1-4cd7-be50-d7936e9ec3cb", "sighting_of_ref": "indicator--98ca614f-2540-4e24-a0e1-e6e06efaecd3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2e0a58-3cab-4f60-bfb1-946b48f0bcac", "sighting_of_ref": "indicator--33caeba4-97f9-4b01-8932-4a3455e1c7ba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd42fcd-fa2f-4922-96b7-94d5b83c5e9e", "sighting_of_ref": "indicator--33caeba4-97f9-4b01-8932-4a3455e1c7ba", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7946ad1c-b924-4257-b746-0d1154c472b5", "sighting_of_ref": "indicator--d5097946-9c76-4017-90df-f05fa1bff2e8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1f4456-cef9-407b-a64c-6ac13f4e7188", "sighting_of_ref": "indicator--d5097946-9c76-4017-90df-f05fa1bff2e8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d242b30-0a53-4dbb-8773-c78c5e6b30de", "sighting_of_ref": "indicator--6db2bca7-ce1c-480f-9033-fb3f793c9b64", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb42d9e3-0b90-42a1-9d6b-a688adcd0c8a", "sighting_of_ref": "indicator--6db2bca7-ce1c-480f-9033-fb3f793c9b64", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d6eadf-dd95-4ddc-a1a6-9f2a7c41974d", "sighting_of_ref": "indicator--09af4567-68ca-42bb-b6ec-0748f4c9b206", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9993c6-d5f2-484d-a958-f7616ed300ef", "sighting_of_ref": "indicator--5d9e9859-c608-4315-8871-8da2c017ce06", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82965963-f7a2-46ff-b281-a3a850edb151", "sighting_of_ref": "indicator--11e9f71a-bb03-4556-8cab-e66961e588c5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9845272d-abbc-433e-a833-a4ff6c5549a5", "sighting_of_ref": "indicator--78ccabb6-fd94-4f23-b233-f63c9c38d13b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ba0a5b-13b3-45d3-8629-a1fbab91a678", "sighting_of_ref": "indicator--763a7432-2cf0-4d78-991d-eed0be9018b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34d255f-15c5-4833-8535-b14c3ba9303f", "sighting_of_ref": "indicator--160a3acf-892f-401e-b004-3b6ace9e87ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e707e305-0dab-4195-9d01-e1bc5e2626f2", "sighting_of_ref": "indicator--d885e02f-d6a4-4f28-8388-59ae46eeb8c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2242f4a-d4e3-4395-b439-87d4246a6c22", "sighting_of_ref": "indicator--492481fe-a922-4794-b15a-919addc444ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a79f54-72bf-4fcf-a5bc-ef2bb3db6525", "sighting_of_ref": "indicator--c9842811-f9a1-4153-b56d-7fbbb79cd26a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c419358c-206f-49ce-99c4-7e9ad17819ad", "sighting_of_ref": "indicator--e3e1bb36-6dd0-42b6-937f-f6f4bf8d55e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a785a027-249a-4504-b9b4-6b6d09be3e01", "sighting_of_ref": "indicator--bcc78611-e531-4c76-9742-292c453c891e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40345a7-f42d-4d90-84bf-f96c91b02589", "sighting_of_ref": "indicator--75ab83c7-5481-4f2d-9f7b-9e13dd8b2c69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf28d46b-ed4d-4d6b-a29f-207308c4c829", "sighting_of_ref": "indicator--b0182aaa-ca76-47f0-bd29-68dc0c15ea73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61070ecd-aee1-4ace-b52b-1742aa346c42", "sighting_of_ref": "indicator--62c6d2a4-f5b8-4538-bdb8-81010ea2af25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7203cac1-b04c-4374-883a-0924f3b2dfa7", "sighting_of_ref": "indicator--68c95518-db5b-46f8-8bb5-39011274b0b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc40bec9-ee3e-45ef-947a-0d601fdbeade", "sighting_of_ref": "indicator--19ae143b-66d8-4a8c-991a-79b76ae4da13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003def71-cc14-4ae2-814a-c36143b3af50", "sighting_of_ref": "indicator--e15fc359-6023-4677-8108-47d83811018c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4ae173-270f-42b4-9c9f-34785bf6e81b", "sighting_of_ref": "indicator--113ff73b-a90e-4e1b-8ab8-25b17351c11f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51897ac5-f9af-4c90-9682-ea9463fa8d24", "sighting_of_ref": "indicator--04fe61af-3f85-48a8-ad5d-cbcb86de7742", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9fea64-7bdf-4d13-8be7-192e443843d2", "sighting_of_ref": "indicator--d2a06aa4-a156-44bc-9dde-d8b3bb614d5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f906e5-0fa3-4c47-aca7-1a3e6ade53e0", "sighting_of_ref": "indicator--6d1d07f0-a6bb-4a02-b085-46d1cf6cb8c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df3a1c4-1298-4980-ab91-4c3828115c6e", "sighting_of_ref": "indicator--d382e294-6876-4046-aacb-28cc85f68b1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d92518e-7836-4292-986b-e8e2cc729398", "sighting_of_ref": "indicator--cf16632f-5533-46ab-a6f8-c18a8ba44830", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349c69cf-9014-4fd4-858b-d087ee8b1b70", "sighting_of_ref": "indicator--5fd94616-4a65-48df-9693-63a1fc0959f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554a7fe8-f03f-4459-bb31-e578a27b0e0d", "sighting_of_ref": "indicator--2ffa93bd-89fa-4d81-b6ae-28aa0315b419", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96b4851-31c5-4b54-8afd-693b2a80f6f9", "sighting_of_ref": "indicator--0e7e0ad5-00bf-4682-beb9-ebbe5fb3b946", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8ed6b9-599f-4fa6-b930-cd14765f4342", "sighting_of_ref": "indicator--8c6a9ce5-6e0a-4332-9ecd-9b56072b6a41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a059dd7-75a3-4493-8fdd-a5a0aead46cc", "sighting_of_ref": "indicator--8eddba02-3a8e-47ab-a0f2-580a70ca3857", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d896b3-691f-4339-a3e8-adbce745af92", "sighting_of_ref": "indicator--5c2273e3-d34d-4f62-86f3-8d7e7e89240f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6e3ad6-67ab-4701-849a-28ef35757412", "sighting_of_ref": "indicator--91ad3968-21f7-4cf1-b6a0-6e060d778f8f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f3383e-85be-4ffb-b958-59136529e863", "sighting_of_ref": "indicator--ee14f34f-c344-4a1a-ab99-471e986c2b3c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab6a674-c5e0-4b4e-b0b7-bcbfa92fc91c", "sighting_of_ref": "indicator--b7ab868a-caa7-4207-bab0-bb077de1841e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81b3da5-4671-4235-beae-a6fe37c2a63e", "sighting_of_ref": "indicator--03ee257c-ae31-4060-a4dc-a776286c46d8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9a88b2-81d9-47d5-b078-149536e981b8", "sighting_of_ref": "indicator--a3c2353c-e642-4509-b7cb-758dfd61f0cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d691f111-e3d1-4328-bbb8-8672f0f921f3", "sighting_of_ref": "indicator--66c014a5-4850-4347-b2a3-696aeb0e1fef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9158f9b-c0e0-47d8-8ca8-215343bbac48", "sighting_of_ref": "indicator--325d838a-326f-4267-a032-b7f75a70655e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73758f5-59b4-42ed-a222-461501c05774", "sighting_of_ref": "indicator--a28d593f-f615-4e85-a54f-a80fba3fea47", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcead2d-ab81-44ab-958a-4adc75f99351", "sighting_of_ref": "indicator--5a48b2a0-b40c-4cfc-bfc6-471fbaf949f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9870c4-b57e-41be-a7d9-75e4a4c377db", "sighting_of_ref": "indicator--79689cbb-8ef7-4ddd-9b32-b7915a06c8ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373ca965-5e8a-47fa-accc-d00d33ea7a82", "sighting_of_ref": "indicator--b43a7b7c-7da6-4eff-99ff-057c335838ce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35573e77-d28a-4dee-803f-873ee5b22d2b", "sighting_of_ref": "indicator--004cd3c3-e76e-463b-89fc-fad3740bd675", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7495829-019d-4aa8-a8b0-fe1f9a53a4ab", "sighting_of_ref": "indicator--db23fbd6-1ca3-417d-9528-5ac766eafcdf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f175a57d-7b5e-43ee-9a85-4a30c2634b68", "sighting_of_ref": "indicator--bd838e5c-e948-44be-bb5e-f66352ca42b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc21eb2-45dc-4203-a7fa-13af44dce2d7", "sighting_of_ref": "indicator--c9db771b-b8d0-470d-99d7-bf27cd7426b1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8d0bd3-d62a-480a-94bb-3e1b8111589c", "sighting_of_ref": "indicator--5ded0787-f716-4573-b343-cde074a0b995", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ac0e37-6e44-41e0-ae3d-9638230c5216", "sighting_of_ref": "indicator--751ee908-3c13-43a7-a1dc-f504efc03bcd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120301f5-603d-4184-810b-33cb4ff36953", "sighting_of_ref": "indicator--3d2d654d-21fb-40e4-8e69-b863b822ac2b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49e8bc7-71d6-442c-bc80-4fb5c3a2b027", "sighting_of_ref": "indicator--3e12ac09-96d3-4f6a-84aa-c92ec21678f7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ff1229-40cd-452c-83d3-a4820ba50a4f", "sighting_of_ref": "indicator--6823c931-8a27-487c-9e27-c31224c890b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dce7587-8458-4ddc-a46b-baf8ceac6b29", "sighting_of_ref": "indicator--037ff037-a66e-45a2-b9eb-ded933ae0d16", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669ee252-2be7-43e6-ad39-b2e8be694a2c", "sighting_of_ref": "indicator--9f841cbd-1320-4822-a17d-c40d03f4f4cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5445c9d-3976-495d-ab2e-e5206f86bb12", "sighting_of_ref": "indicator--335f79e8-7f58-42ed-8fa9-5c3f436db70e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99def550-cf2a-4dfb-b911-4b79020912ba", "sighting_of_ref": "indicator--b5bdc6dd-c2ed-4587-bf2d-d9e07bf86183", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d670a802-339e-49b7-bf0b-e5a86fbe01d3", "sighting_of_ref": "indicator--c3504677-bb8f-4ecd-812f-d5c7988b0e75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa17f57d-73b4-4a9c-96ca-3c7d6e22741b", "sighting_of_ref": "indicator--4cf58090-5893-46de-ab48-32d74a4a96ee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6158f30-9c7d-4bf8-8065-1d9a51e9cfce", "sighting_of_ref": "indicator--ea2c569f-b411-4182-905b-8fab1e86f954", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a82c5a-e01d-490b-89c0-54418781010c", "sighting_of_ref": "indicator--87b15a10-10e9-4565-a563-3d3f857e6679", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730ccf7f-b7ff-4e15-b619-67c604088229", "sighting_of_ref": "indicator--a4d8a57e-a2a6-46c4-93f7-179bdbd6a9cd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcd0b41-f376-4e39-944a-0c99b12fb737", "sighting_of_ref": "indicator--7b58fca1-6d68-4c82-8225-94fe8f804fae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429e874f-4388-4e84-896d-df27c295cfd2", "sighting_of_ref": "indicator--54d5781e-0902-4e90-bce3-3e177f5c1396", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb4078d-c260-4763-a336-b67be86306bb", "sighting_of_ref": "indicator--4f423b0d-4959-4b99-b82a-a1cd3f46d2db", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ea2258-df7a-4f9e-a56e-e15037285387", "sighting_of_ref": "indicator--ddc9026b-4971-4505-ab66-272fc2b89613", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f46ed5b-9e31-4aee-8af6-f7651fb177d9", "sighting_of_ref": "indicator--0f5c4533-bd19-45ae-867a-da4d9ec4e41b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d4f7c9-ce00-4bf5-95df-84698938d2d6", "sighting_of_ref": "indicator--24199d92-901e-482d-b9a4-24948f3252b0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3fda97-3854-417b-afa2-9d5ff6530501", "sighting_of_ref": "indicator--cc85cf5d-989e-4b58-aa66-7c0843bc7469", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55dab69-94fb-4193-93b8-a1402e6c0997", "sighting_of_ref": "indicator--5e691338-6c05-44d3-bf29-de2cc7f85185", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299dbf30-3181-4710-a75f-636fca828204", "sighting_of_ref": "indicator--447150e6-c0a8-461e-9336-8b5acc7c2240", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17d7296-3f2b-40d9-a563-c50a98b93cfd", "sighting_of_ref": "indicator--31a0e090-d8e0-4f7a-8fec-6ebf3d130901", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38995a5-452c-474c-a2c9-de84a9f0b69d", "sighting_of_ref": "indicator--cf2a3b2e-3b13-4550-abae-dd0187c223ca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9ddd61-5ca4-491a-9e30-03bbcdbb0efd", "sighting_of_ref": "indicator--78e8a903-e335-4e8f-baeb-0071caea04e3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7603f4ba-2531-4421-8c4d-6d0c368e074a", "sighting_of_ref": "indicator--f897e2fb-be2c-40ee-8bf4-eff477b62794", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4685111-55ef-4586-8676-a67a5d1954a3", "sighting_of_ref": "indicator--7205d0e0-4915-4443-ba94-9ba15653352f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674922a1-b9f2-455c-8dba-26c10959d58b", "sighting_of_ref": "indicator--365b09a8-1d63-42f7-ab36-94d6436aeac1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e649a45e-5de6-45df-88a4-f84e8b9d052c", "sighting_of_ref": "indicator--827c7e39-299a-46ec-af9c-a8cc0b0e942e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d9db2f-70a0-4d06-9ed3-7907c57ead97", "sighting_of_ref": "indicator--07101d0a-55ab-4a71-9d15-9e8ea4e88f4c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bc9da1-af92-4405-9a4f-bd40b0852aff", "sighting_of_ref": "indicator--08fd957d-275b-4e14-9e43-3a283612fb23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8202ea2-7fa6-40f0-870a-45c241f62b9d", "sighting_of_ref": "indicator--cd9d9cee-8dfb-4f66-9b6d-c558e91c4964", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60e0b7d-1516-4d50-94ed-6865230b0764", "sighting_of_ref": "indicator--6704c99c-4fe0-4007-bee6-d640a06f9f10", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2736b03-4aca-44cf-ba9b-c70579902ab9", "sighting_of_ref": "indicator--e5a3e657-c771-4a60-8607-f587f1d7b5b2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f89a13a-19c7-43a3-8850-4f43d259088e", "sighting_of_ref": "indicator--60940786-b07a-4e25-8dc8-89407a473d15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a98250-d9ee-46d8-95c7-b8530e63bad2", "sighting_of_ref": "indicator--61335a98-1e3d-4c13-a74b-aa9d317df577", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f88ba8-190c-4ec4-afdc-362129b97ffb", "sighting_of_ref": "indicator--61335a98-1e3d-4c13-a74b-aa9d317df577", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48df4b4-3306-4845-b220-0d9196b10503", "sighting_of_ref": "indicator--46f56111-748c-44d2-a24a-b289fb0e112e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9186ffd4-1e86-45e7-ac6f-e9741abaa574", "sighting_of_ref": "indicator--46f56111-748c-44d2-a24a-b289fb0e112e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c057d5-5949-4b86-b87e-a7193ddd867a", "sighting_of_ref": "indicator--95cfa876-fda2-4398-a6d9-0ee101415b4d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167cc475-b6f6-4ea4-9197-2b7598907036", "sighting_of_ref": "indicator--fec009b7-8582-4193-adaf-94460b5551f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275608cb-1103-4146-80fb-930bb034747c", "sighting_of_ref": "indicator--99318348-671c-4952-8866-bf77b4d08493", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67226e1c-435c-4250-be64-399e0b195572", "sighting_of_ref": "indicator--85345903-d451-4eff-a475-6b65ffff6f8f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cc4d8a-b734-47b2-a56c-2155eb9ce80c", "sighting_of_ref": "indicator--a3f3f40b-c026-4157-b41d-ff975b3354cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5450b96a-1eab-44fb-b511-57c444ed071f", "sighting_of_ref": "indicator--51d2c763-c6e9-4567-afa5-97d61f9df86a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99332105-af65-4bee-9733-8610b97ebe60", "sighting_of_ref": "indicator--269dcf43-68ed-400a-b97c-78df4ad5d63b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27547b2-52b3-4c4c-a09c-fa9e4bb01bcc", "sighting_of_ref": "indicator--366559b9-13f2-45c9-aeb5-fbc7aac457b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd24700-df30-4fd1-92fc-e17b9440d22b", "sighting_of_ref": "indicator--82394aae-350d-4a39-94f6-d0ce2dda279d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc456600-bc71-4082-9f26-95abeee88893", "sighting_of_ref": "indicator--b05e6ed6-4ec7-4021-bae8-a1f2ab6da544", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383aac38-4b94-4b54-8be8-7d2345038e99", "sighting_of_ref": "indicator--f11ece6f-6b2d-4d92-94df-f108e2799bbd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd169c7-008e-420c-a394-4b1ccbf37bb9", "sighting_of_ref": "indicator--6c7158d4-f29e-4953-8317-57a1948f249c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a369afc-e124-4300-b6dc-fc0a78cb12e0", "sighting_of_ref": "indicator--d8988727-7e5e-4bac-b3c8-19c1a6395aa2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6898934a-9456-4074-b093-20b7374faa9b", "sighting_of_ref": "indicator--4b07f6e9-1fbf-44fd-9773-949be073df3f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa54156-299f-49a4-8857-eb34eef4a9d2", "sighting_of_ref": "indicator--658b1e1c-63f0-4e8a-b03e-c3478ff98273", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1025344a-778a-47cd-8b5d-3bd54be1b8bf", "sighting_of_ref": "indicator--e97bebe5-d807-4155-9d1f-ccc69e557ddc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55031222-d243-4f2b-a9fd-d6cd691e9c83", "sighting_of_ref": "indicator--62428904-0cb5-4d5f-b272-f9c6d6d87911", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad91e70-49ae-433a-8f8e-51f0fba4bd8b", "sighting_of_ref": "indicator--e112fe86-c956-4db4-bce2-dbaba41d1ffa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f98c9c-a4ac-4e86-a089-7487acb6bb55", "sighting_of_ref": "indicator--e5bbad16-9e5e-4ad4-908d-0aa2a17f267e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c486a2b-2458-4867-9b07-9f91af0f6ca0", "sighting_of_ref": "indicator--5c8438f8-f86d-4a1e-8fa2-872df196ba49", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56efb15-6dc1-44a8-ad21-83ec3c893eec", "sighting_of_ref": "indicator--c04dbcbd-7c78-4543-90c6-c0d0e79119bf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a71c8e4-35b2-4bbf-b1bf-31f0a7405022", "sighting_of_ref": "indicator--f823eaf9-1b4a-4a29-abee-85912387f104", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46367b44-6592-4fca-9839-8d651fe11e6b", "sighting_of_ref": "indicator--d815d114-858c-4cbf-93e9-10547357bd23", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67618ce-def4-4117-97e1-9f3872e80020", "sighting_of_ref": "indicator--fd1a686d-157c-4f72-9410-cddb505de408", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2def4488-5714-46a5-a401-3b475818f268", "sighting_of_ref": "indicator--59ddd0c8-4111-4fce-89ea-a8622cecdf92", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49c36fa-3554-44fc-9e9f-81c1a24f91f7", "sighting_of_ref": "indicator--4cd8cf96-b792-40f4-b242-3d442d42204e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a673fcb-46d3-4a7e-9343-e72ae019095f", "sighting_of_ref": "indicator--71d018e4-7d62-4581-b5d6-e2ebf46a5c80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c50951e-196f-442b-9008-cbe98fbc980d", "sighting_of_ref": "indicator--14424dd2-efbd-4ba3-9a8d-ba964ca2137e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8147548-2c8a-47ab-a5dd-fb1ce814742d", "sighting_of_ref": "indicator--4b40eb70-5326-4874-b57c-573389f42353", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45d7a8d-fd4f-4059-aa8c-6865d6cf2ed0", "sighting_of_ref": "indicator--582de6d9-49bc-4f2a-afcb-0cfb74419fc6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf5273b-e1ad-437b-813a-1205d19562ee", "sighting_of_ref": "indicator--3cc1834d-d2de-4e56-9489-8f1bdf865845", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9344fc6-12bd-4e08-b890-f59ea401046f", "sighting_of_ref": "indicator--c801d148-8eb4-4084-812d-0aed39cf028e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cd72eb-1854-460a-ba27-04102c1da462", "sighting_of_ref": "indicator--66c7c9e1-8e77-4d7a-a586-ccf6acd54d81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d5a926-28de-4f67-9138-f21b21e1fbfc", "sighting_of_ref": "indicator--3aa6bd83-7140-4252-86e8-e79b73ad0ad6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd5f988-a011-498f-b9a3-981b2c73bd28", "sighting_of_ref": "indicator--3aa6bd83-7140-4252-86e8-e79b73ad0ad6", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d646230-c921-4a50-8680-ff8869df0e0e", "sighting_of_ref": "indicator--dc6f5ec5-db95-4210-be11-dcc20b670758", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd82c77e-02f1-4a0a-b345-d36a686f9d82", "sighting_of_ref": "indicator--dc6f5ec5-db95-4210-be11-dcc20b670758", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2290e4-3517-496c-b8fb-19aaab309983", "sighting_of_ref": "indicator--3bad6e6d-ead1-4a48-96e6-54824af4edce", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff972da7-c4f6-467c-99cb-8cc897fa6646", "sighting_of_ref": "indicator--062553ef-674a-4c07-9dbc-e164dc38baa8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194ec760-1684-4c43-a65e-f6781f89ef90", "sighting_of_ref": "indicator--062553ef-674a-4c07-9dbc-e164dc38baa8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616ab81b-b648-4b76-a647-6f03e2bd21c4", "sighting_of_ref": "indicator--b51fb922-e065-4092-b2aa-3c3b636c411b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8466331c-e0f9-4c79-ad9c-2b7215ce653c", "sighting_of_ref": "indicator--c75a0f5f-6f06-49ee-be83-8180c6fab3c3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f309e3-e832-4498-9d96-cc38c032dbf2", "sighting_of_ref": "indicator--c75a0f5f-6f06-49ee-be83-8180c6fab3c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bec25f-8944-4e63-9736-21d0f1870716", "sighting_of_ref": "indicator--6564091b-0007-47b1-95ea-03561303d43d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d1a009-b137-4d86-95b5-2790ce606e26", "sighting_of_ref": "indicator--6564091b-0007-47b1-95ea-03561303d43d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946a7a9a-bae2-4965-9c5b-cd1a3ce50bd4", "sighting_of_ref": "indicator--51e55244-a277-4c96-abdb-5b9c335a2399", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94df0efb-f449-4b52-9d3b-cc38afaaa64d", "sighting_of_ref": "indicator--c406c995-976b-4807-ba70-35b01b83571c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3eee3b-0b99-4463-8a9e-446e5c8c794b", "sighting_of_ref": "indicator--14fdd42e-0e0b-4628-a5fb-ed95725a9fd1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74afae5b-7f00-4d0c-ade9-24dbde857761", "sighting_of_ref": "indicator--fa5ec3fa-4107-4f10-889c-d37900040363", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38416a40-ac6d-42bb-b52c-d8123ea1171d", "sighting_of_ref": "indicator--4e6d320a-7152-4522-876a-3857da8335a0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1165db1e-2564-432a-8728-8a903ba68ca2", "sighting_of_ref": "indicator--188ee138-a561-454f-97a7-de2354c4ab77", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05514c32-9804-4f57-bb98-169bafb08328", "sighting_of_ref": "indicator--bf51ac7c-617e-4636-9e81-34fa4f1c6c81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae63639-de6c-4e61-8442-aa69858cca40", "sighting_of_ref": "indicator--bfef4182-8093-4bd3-825f-8a606ecef666", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12cdad4e-b3c5-4b70-844d-90670d2c3065", "sighting_of_ref": "indicator--867b7ea1-0abc-4b1c-970e-d091ea7a7ee4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821e7477-e53b-4ddb-992b-67b1378c1852", "sighting_of_ref": "indicator--4ff1bd69-6d3e-4fc0-b3a4-dc0bf4024cd1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da568761-22cc-450d-9ad6-cf84a8855490", "sighting_of_ref": "indicator--70a5d643-e2b7-4aca-b1df-afc8baa3bd19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6de947-d250-4225-ae5e-398d7ba3cc92", "sighting_of_ref": "indicator--3d5bb5f6-9025-42ba-bf7d-62344a69c65a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e91b1f6-964f-44c1-acd5-63107abab9bd", "sighting_of_ref": "indicator--f58c75ef-036a-4dea-9129-57fa91c1e8e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a76eee8-4170-428c-9d33-c4076b287994", "sighting_of_ref": "indicator--5b165417-89b1-4fe0-9d70-76b4272b4402", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305c3497-a0f4-446c-aa18-367ecf4c6049", "sighting_of_ref": "indicator--5b165417-89b1-4fe0-9d70-76b4272b4402", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cd3cac-e250-4ca2-afc6-74d63672cc31", "sighting_of_ref": "indicator--54495a38-38b3-41f7-ae7e-363d892058c0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63366b0-74be-4243-b4e8-5332497eacb9", "sighting_of_ref": "indicator--861c717a-f3b7-4990-909d-41f2e15d3ff9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a9575b-0722-4a66-a90c-fcefaa3e49c6", "sighting_of_ref": "indicator--ede6f942-685c-4d1a-ac43-201359817845", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575e6953-654e-4ef5-99a6-3f627a203648", "sighting_of_ref": "indicator--c6cde53f-9e16-45b9-821f-c9b8c9dae814", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b8cca8-b366-4068-ad2e-ba1f27ecf812", "sighting_of_ref": "indicator--5ce7e8cd-3788-4a32-9365-413ae574544c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fb109a-4fbd-4bc6-843c-5e5485fc4898", "sighting_of_ref": "indicator--e6947a90-1236-4441-9bc4-28094695bc73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47d5e09-1999-4ba1-9a4f-1dc441804e01", "sighting_of_ref": "indicator--70ea1544-4d14-4193-a581-83779aa62eef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2167a395-4282-487c-807e-a23ffc02e9c5", "sighting_of_ref": "indicator--01c3c72b-b1f2-493f-a290-a18b986d1a70", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2678f16-b913-4663-b076-31d2f3b7b4d8", "sighting_of_ref": "indicator--4c928011-bd29-46c4-a86a-fcface7bf84c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a3bbc5-7279-4257-9a4f-d449ea42f469", "sighting_of_ref": "indicator--4c928011-bd29-46c4-a86a-fcface7bf84c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d10e8c-9cae-4744-95fb-8ead9c659b92", "sighting_of_ref": "indicator--fb3a4f35-bdcb-4fae-a7ab-8b58d7e18625", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15af886-844d-49ec-b06f-ea80fb75221e", "sighting_of_ref": "indicator--8f57f09b-f4d8-4a07-b694-fc02915416cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b23d4cc-41a2-4ff4-a4c2-ad6bad2927c0", "sighting_of_ref": "indicator--6a1070f8-967d-469b-bb2a-4d27707661f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d8cc3f-0d31-41a5-8f52-acfc9ada2bee", "sighting_of_ref": "indicator--40f4a1a1-33df-4359-87bd-42e27f70201f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f31b149-bbca-4eea-ac00-e78808186b87", "sighting_of_ref": "indicator--0670321a-03fa-4bd8-923c-f37dbb9c78e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e3272e-2603-41ba-9914-c28cecf5ff46", "sighting_of_ref": "indicator--d5e3785f-fc65-46cb-9921-2d001b606090", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3ae24b-a332-4fbc-9645-a47446dad9d8", "sighting_of_ref": "indicator--53386523-086e-403f-83d4-e0213b6075b7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6e1941-9f77-484a-baac-6d93e68c5a52", "sighting_of_ref": "indicator--21166f04-06c7-48fc-a94f-7fad6bb678d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce463c0-5023-49a6-a5ba-e94184ac6633", "sighting_of_ref": "indicator--21166f04-06c7-48fc-a94f-7fad6bb678d1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea753436-764f-434b-be9d-4ab43c241edf", "sighting_of_ref": "indicator--1d1b6d3d-c81e-422e-86b4-ddf4fae2c637", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a352f1b-b8b5-45ad-8bf8-091754d0dfc3", "sighting_of_ref": "indicator--1b934437-c799-4395-b6b3-03b247d46962", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b901b9b1-b75c-4ea5-828a-bbbde29cb5d1", "sighting_of_ref": "indicator--a3bc7998-c066-4f7b-84d1-a04b5e32e5a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b8ea37-0c2a-4d7a-935c-b514fd0e6d72", "sighting_of_ref": "indicator--0f77328a-9f68-4e6e-929b-3c7fceaa00e0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a522d8-a840-40ef-8ac7-2447ddc43898", "sighting_of_ref": "indicator--270d2385-afe7-45df-9a5b-fab61b42da81", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51547fe8-8d05-418e-899f-ccd789ec4346", "sighting_of_ref": "indicator--270d2385-afe7-45df-9a5b-fab61b42da81", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f2d804-ac7b-4738-8fd8-2663fa651617", "sighting_of_ref": "indicator--a968384d-0b31-4fd2-981e-e7fc144e5ee2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06876a77-a466-4b61-83a5-3769dbcbf88e", "sighting_of_ref": "indicator--dc628702-2aba-4a76-a631-2fa5b6489a75", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fbd283-71c5-4a8d-bc60-28954359b070", "sighting_of_ref": "indicator--dc628702-2aba-4a76-a631-2fa5b6489a75", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2dfef47-a77d-4bc6-9451-49df0d54dada", "sighting_of_ref": "indicator--dc628702-2aba-4a76-a631-2fa5b6489a75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfa0668-7ec0-4058-8b9c-20069b351a62", "sighting_of_ref": "indicator--3a2b9a13-040e-4d4e-a2be-060341004eb4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a596d9-395a-420a-8a0f-f014c75a47df", "sighting_of_ref": "indicator--3a2b9a13-040e-4d4e-a2be-060341004eb4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e82ada-fecd-4b4b-b35b-bed9d2fe1509", "sighting_of_ref": "indicator--1cb17ccc-6a9f-4ea5-9f3d-f9b11b87145a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef4513a-e3ad-43e2-b59f-104b891934d0", "sighting_of_ref": "indicator--1cb17ccc-6a9f-4ea5-9f3d-f9b11b87145a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfedae3c-2f12-4715-9d20-e911201420c0", "sighting_of_ref": "indicator--9006487a-d417-4294-b3d6-f24cf998723f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3db87b-0fbb-484a-8fc8-85d97c44a0e1", "sighting_of_ref": "indicator--9006487a-d417-4294-b3d6-f24cf998723f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180c0cb0-c05f-4e77-830f-59db1ee1c1fa", "sighting_of_ref": "indicator--4a087380-ae24-4c9b-9d19-78d26b2b569d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac64e45e-8d3e-41e4-8cbd-1c81a9c763bc", "sighting_of_ref": "indicator--4a087380-ae24-4c9b-9d19-78d26b2b569d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106d832f-10e4-4ddf-998c-705beae7c7b6", "sighting_of_ref": "indicator--e2a9ec5f-5f3e-4b65-8628-8dd9d57c994f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02113ae-db62-48bb-b63a-b576938c1d22", "sighting_of_ref": "indicator--65f5ca94-3e0f-4458-af90-faab5be3b1a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd3eb65-ec5c-4b59-8762-b158677b4df4", "sighting_of_ref": "indicator--65f5ca94-3e0f-4458-af90-faab5be3b1a5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6fa75e-7f42-4a61-a0aa-dfe95bada25f", "sighting_of_ref": "indicator--005778e7-50a3-4829-9d46-e6fe8b5624ef", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2fb0f2-2bad-4979-bee0-ff132b339342", "sighting_of_ref": "indicator--005778e7-50a3-4829-9d46-e6fe8b5624ef", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80d5523-4fd3-4283-b643-09d091b6b872", "sighting_of_ref": "indicator--32ac5b5b-dda8-4bce-afae-a54f31543b17", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b06acc3-9baa-4174-a169-5f2b79012df2", "sighting_of_ref": "indicator--32ac5b5b-dda8-4bce-afae-a54f31543b17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95e52de-6c4e-4c72-ba48-9ccca1f2e642", "sighting_of_ref": "indicator--4e5fe05e-ba2e-4e6f-b69e-c15072a78993", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89942b9c-63ae-4293-acff-82520641c227", "sighting_of_ref": "indicator--4e5fe05e-ba2e-4e6f-b69e-c15072a78993", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc1f5dc-f5ee-4af3-b728-9818cb1b7633", "sighting_of_ref": "indicator--6f31bf4e-b90f-417f-864f-e39b437ae573", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b10967-97e2-4c16-9086-63d926f55a5e", "sighting_of_ref": "indicator--a4dcc749-2182-4046-88b4-942c11c2f5c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c316d9f4-abbd-42a9-8b8b-ae65e38ff496", "sighting_of_ref": "indicator--a4dcc749-2182-4046-88b4-942c11c2f5c1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9f79ee-79a0-4f94-a9e0-6506f6e4986a", "sighting_of_ref": "indicator--39cfd2da-f1ae-4421-a100-1f60fc7f5ab2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4e2969-5bc8-48c8-af89-99c7c55caf0b", "sighting_of_ref": "indicator--39cfd2da-f1ae-4421-a100-1f60fc7f5ab2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894704f0-0ca8-4f09-aa86-5285f55c73ad", "sighting_of_ref": "indicator--5ce48558-4099-472c-895c-44ef3afdf440", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0757aaa-6986-4fc3-bca7-63675751e806", "sighting_of_ref": "indicator--5ce48558-4099-472c-895c-44ef3afdf440", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e61235-813b-430a-8855-8952b40baed8", "sighting_of_ref": "indicator--5534bbd5-af76-4434-bc57-4ad6aa7f837e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0d9ab7-7f35-4fc9-b8f2-0d8382a5d45b", "sighting_of_ref": "indicator--5534bbd5-af76-4434-bc57-4ad6aa7f837e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e6a9db-75c6-4172-8f31-05d8e0aeba71", "sighting_of_ref": "indicator--fd032476-fc89-4212-a0cf-9ca9c2052a93", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7931ce2-3d00-42b0-829d-ec29cc2cd735", "sighting_of_ref": "indicator--fd032476-fc89-4212-a0cf-9ca9c2052a93", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95d35bb-9b04-4db1-94a7-8f5ef1e0cfe2", "sighting_of_ref": "indicator--465393b8-ab72-47de-9659-57eb7816009a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db576234-2d65-416e-b307-9952b3eacb54", "sighting_of_ref": "indicator--d6eb00ac-2972-437d-9211-8f4ebf4b2034", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412529f4-cc4b-4829-8d22-c83c2fc9b6ce", "sighting_of_ref": "indicator--d6eb00ac-2972-437d-9211-8f4ebf4b2034", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bb71a0-cb3a-496f-a99e-f69d87222de1", "sighting_of_ref": "indicator--ba1c2c20-0566-4853-9071-9f0b3f652043", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeac95f9-0176-4d39-b0af-33f9bb24dbc6", "sighting_of_ref": "indicator--ba1c2c20-0566-4853-9071-9f0b3f652043", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789fe33a-5ad3-41bc-8773-397c3d43a364", "sighting_of_ref": "indicator--d208d41f-e6d8-4da9-9cd6-018dfe77abed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a3ba16-188f-4ab7-b53e-54f37d53f4ef", "sighting_of_ref": "indicator--d208d41f-e6d8-4da9-9cd6-018dfe77abed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06150a74-24ae-493c-8d04-4f3bb5f4c93a", "sighting_of_ref": "indicator--40e71553-ab47-4878-a5c8-585a2fec2bee", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb019b9-32ef-493e-b8bb-bf93b8ba591e", "sighting_of_ref": "indicator--40e71553-ab47-4878-a5c8-585a2fec2bee", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7cae15-d8e4-4a66-be53-f303221311a2", "sighting_of_ref": "indicator--9fb869df-9013-40fa-a71b-af9eed5303df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef5bb60-69e0-4258-bbdf-e56a36af06b6", "sighting_of_ref": "indicator--3c617a02-f347-4478-95f2-ccad4f69c573", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5884a8ff-40cc-4288-93bf-0a9ba7d3251d", "sighting_of_ref": "indicator--3c617a02-f347-4478-95f2-ccad4f69c573", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f550cb1-aa82-4952-b520-f454c1dab9e9", "sighting_of_ref": "indicator--52bf1d93-4b90-4eb0-a7ba-99079e3ea023", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfa8b1d-f669-4be9-b42c-a6060e869a20", "sighting_of_ref": "indicator--9e166e8e-99d0-4be8-a5b2-dc5dfbb3f3cb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47e4a3b-5b22-4d5a-a4f2-ab6b97f25f25", "sighting_of_ref": "indicator--3a658f78-953b-4809-93e2-006225816a98", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45826b30-9a50-4c60-80e0-2e6183e3a8b3", "sighting_of_ref": "indicator--e8030bf3-201d-4254-88ed-5a16def37fb0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c950674-8025-427d-bc55-9e5034da9a4a", "sighting_of_ref": "indicator--7f98597d-7e00-4c95-a0d1-47978a825b48", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ee6617-78af-4427-93e0-59a36de91c95", "sighting_of_ref": "indicator--7849ab19-9cf8-4f3c-9e4a-f49cc61eff01", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0a97f3-a80f-47d9-a63b-d63129c2ab7b", "sighting_of_ref": "indicator--d26514f3-2637-4f42-8568-67da013cfae6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafa20a5-4090-4790-92ff-da22740ee5ee", "sighting_of_ref": "indicator--53eb319e-9027-44d5-84cf-22f9796f34cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289a7287-b0b0-43df-8cb5-a47fcd1e59c5", "sighting_of_ref": "indicator--6a72a1bc-f294-45ee-9365-eccf8f29b6a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65247711-d2fb-4b15-82cf-799ee9f6d933", "sighting_of_ref": "indicator--8308df40-2453-4d50-b98d-78dd4f29afdc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f97929b-afd8-42ca-a8fc-8507ebe7f15e", "sighting_of_ref": "indicator--8375ae40-a96e-45b1-a5c5-11cb9e5764f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd4b7b1-c772-4392-96b1-e7ad8594026d", "sighting_of_ref": "indicator--8375ae40-a96e-45b1-a5c5-11cb9e5764f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334f3cbd-919e-47e0-869e-35c365acbd0e", "sighting_of_ref": "indicator--c80b3fc5-60db-4b67-a431-6c4549fe64b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56824f49-f67f-4bf2-8bf5-2c00e5a2b6cf", "sighting_of_ref": "indicator--cc533678-3a0d-41a5-9d0d-5fe77902c933", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3863c38b-9ef0-42ca-9b36-5619bc9e0c7f", "sighting_of_ref": "indicator--d0d2bd3d-56f9-4a25-bb3d-8cd26982ce6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8369c050-76b2-4084-b8e6-25aee344720d", "sighting_of_ref": "indicator--d63a4abc-3a13-47e5-bb12-0bf33f49a544", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb2e7ab-00df-4d6c-a427-508cd2ccd482", "sighting_of_ref": "indicator--3cd3e99d-32a1-4eba-a9d5-5eb57c0d7077", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a17ce9-fc74-4a7a-a56b-88c401b1d67d", "sighting_of_ref": "indicator--18b9511e-9fa0-45b6-90d9-3503eeb4da3b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2784b120-b684-46a4-b414-216e5deb7164", "sighting_of_ref": "indicator--d5e90a42-189e-476d-8625-cec1b5e09801", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4728e0-d41f-4ee9-bcac-73bd90edb7ec", "sighting_of_ref": "indicator--d5e90a42-189e-476d-8625-cec1b5e09801", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c03916-9043-457c-9795-6b50115a1d71", "sighting_of_ref": "indicator--45e378f9-e502-4026-8936-074c29780cae", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacd162e-e2e3-4af8-a536-6dd7e2ad0f6d", "sighting_of_ref": "indicator--7a617740-33b5-4570-b065-bc5acc56f891", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df9472a-65d1-4610-bb32-6a4c07848866", "sighting_of_ref": "indicator--6cc6eb37-928e-4b3a-b4ae-25fe3ea34812", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29268d6-8046-400d-888b-f4a66fbb4574", "sighting_of_ref": "indicator--a09866f5-0b63-47fd-a843-5666fbb3383d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79222c45-254c-4bd2-9667-893051e328e1", "sighting_of_ref": "indicator--cffdef05-ff76-4209-8962-07e7b1a27003", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefb5849-abfd-472e-b953-126c101b64bd", "sighting_of_ref": "indicator--46711b65-2829-482e-bd36-fe138d8b79c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f31268f-3964-42dc-b67c-46174fecf12d", "sighting_of_ref": "indicator--81896173-5b57-40b8-9648-0d7727d952e6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded33607-6d23-458c-a77f-49b9cd72528c", "sighting_of_ref": "indicator--a96978b4-f313-4f9b-b58b-b5c3b2bbab94", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b63fa98-efc4-42e5-9848-a49d2d29e810", "sighting_of_ref": "indicator--c1785017-f13e-4e6c-95df-ead960e07f9a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f212367-8c35-4017-a8b7-4c9565cc04ee", "sighting_of_ref": "indicator--92a82b09-1c18-42a0-acc1-03a09a307c99", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f139a308-386b-4ea3-9b86-89b0b7bb2481", "sighting_of_ref": "indicator--e5e716d3-db20-4038-9474-017c2a83a6ec", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d93d86-a24d-42a5-a705-4b9e33612cc0", "sighting_of_ref": "indicator--906b57a9-e8b1-476f-8966-27b68874e0eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68431807-a814-4a9c-949d-e27e51290d7c", "sighting_of_ref": "indicator--1b482ff0-a931-4b56-bb8c-871263056f0e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35ae7d8-500c-41a0-bea4-2ae9cd204a58", "sighting_of_ref": "indicator--30801545-9afd-4efd-b336-6b4106126ee5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f002d4af-5b10-4736-a500-027f9a254245", "sighting_of_ref": "indicator--477a8a80-eb39-4219-b6fc-c6e1cfe56bc0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e93e13-86aa-40f5-aa28-12e84dd33262", "sighting_of_ref": "indicator--96fc9dc2-35a2-434a-8948-a97c747a8d11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd9645d-b813-48df-89e7-6adc5fdd730e", "sighting_of_ref": "indicator--18c66082-a045-4e92-a6ee-35ae12d2c667", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dc0202-9c09-4b66-9989-107bdafc62bd", "sighting_of_ref": "indicator--aa9e56e6-cd53-4f1a-ab23-2003a0a80cbe", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41772296-e555-4a8c-95bc-ef413c748d78", "sighting_of_ref": "indicator--9ed76266-4a03-40aa-aad8-e3ce15df8190", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2242e303-ba0d-4be4-bcc8-6f67166c3315", "sighting_of_ref": "indicator--c8ee59d5-ed40-4afd-818f-1602efe8d575", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5228e3-69c9-4132-9db7-32921737e1ec", "sighting_of_ref": "indicator--a4f98627-b40d-4cc3-a483-5a747927a935", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eacbb05-390b-4e03-883d-c44b898cae90", "sighting_of_ref": "indicator--d3a1756c-7579-4f41-b3d1-28f6b79917d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894ab3cd-ba34-437a-b3f7-88993ef18d47", "sighting_of_ref": "indicator--2116d5b9-7948-4004-9177-26b69534da1e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ba3f7e-5035-4c4f-a009-40e4bc609cc0", "sighting_of_ref": "indicator--111cb1d1-4e61-4cb8-8ced-699428f5043c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37a8189-29bc-4fe6-a54a-6e150e8688ef", "sighting_of_ref": "indicator--ab847c3f-5f18-4014-bbb1-0f4172bf0cca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fa4084-1a7a-413f-9c32-b68ca0604269", "sighting_of_ref": "indicator--07edc788-7cc2-4861-b476-1b0428b24ac4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3b9cd6-28e2-4d2d-b124-1ff79bcc385a", "sighting_of_ref": "indicator--4b75a646-534c-49f6-8c83-e72373192f80", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59cb9a6-b1a0-4235-b913-dffad4c835e6", "sighting_of_ref": "indicator--4e9ad13a-07fd-4512-8011-de154c22f9ac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5e9b2f-9316-4b08-92a0-36965ced91c6", "sighting_of_ref": "indicator--b61555e1-36e4-40e8-9806-d06efeb30b4b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006bd375-772d-4206-ab6f-12cb88b5d483", "sighting_of_ref": "indicator--e78dcf30-9e27-4ac9-8456-3a1924ba44ec", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae710cdc-5bbb-4738-97f6-f68d281f4f9d", "sighting_of_ref": "indicator--00c05f89-7ddb-4f73-9b1b-46fd2664e598", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b8cb3e-b325-465f-85b5-a82145ff3e79", "sighting_of_ref": "indicator--194e27ec-3061-444b-8fb6-d18a6efb7f0c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8431f1-f8fe-4f98-a7a5-740d9e637ac7", "sighting_of_ref": "indicator--6ca0c40f-c5b5-475b-b0f5-082b9511e3a7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18abd702-cb62-49b8-9a6b-379ed66d231f", "sighting_of_ref": "indicator--7a254620-5602-4809-8bd0-d9f039ebd445", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f9e334-ea5d-4b0b-aa4b-3876f31d210a", "sighting_of_ref": "indicator--fe74fe94-1a13-41cb-857c-7d472a43e64b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e56e09-dca6-44cb-b21c-837e20d0e1fe", "sighting_of_ref": "indicator--fe74fe94-1a13-41cb-857c-7d472a43e64b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2568ab46-fdac-41c0-bac4-b4cd65a97360", "sighting_of_ref": "indicator--36e1a8a4-f7a4-4bf8-baa8-576a4b43562f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6467da-e444-498f-be33-2546aa09c0fe", "sighting_of_ref": "indicator--59773b44-9baa-4d61-a38b-89cb97f2ca19", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9536b9d3-14cb-411a-89fe-da4de7264ebb", "sighting_of_ref": "indicator--59773b44-9baa-4d61-a38b-89cb97f2ca19", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7753159e-0a0d-4903-b22f-13b09cb1d8a0", "sighting_of_ref": "indicator--dae12de7-aab5-4b4f-89d6-2d4ddf9f1248", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae3bcfa-4df6-4e2c-9ccf-03733212b55f", "sighting_of_ref": "indicator--f91d2172-909b-436d-832a-fd256cacf65a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29549b09-0cf8-4bef-a146-f35e64679016", "sighting_of_ref": "indicator--72527901-98e8-47aa-9251-370742ba776a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a133a9-2166-435c-bb69-2b73376fed70", "sighting_of_ref": "indicator--fb2731fa-280e-49a9-9705-edb2f954a4f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c877ac-90c9-4a40-bdfd-68b15df20ccc", "sighting_of_ref": "indicator--76c3b851-f531-43c9-9f80-b0c5851078fe", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fce864f-9c75-454e-9659-9e0af4a886a1", "sighting_of_ref": "indicator--3932c6ad-0cae-4347-b7ea-5b7fb68b71aa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eda49fa-a2c0-45df-9030-14704fd43c55", "sighting_of_ref": "indicator--5bb93d93-7122-4c64-b8b9-a5080eb760d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e992bc50-3cde-4117-936a-cb5951b7a38d", "sighting_of_ref": "indicator--498d7a01-f95f-416d-a969-507b6687ff95", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508246be-4641-4fd0-b381-b6e705460668", "sighting_of_ref": "indicator--b1e08308-5d48-417a-be92-81c238ddbe55", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066796af-a191-49cf-b66b-af5e1b6a04e7", "sighting_of_ref": "indicator--9210f03b-6eea-44d4-9292-9ade2369e55b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02da9192-be4c-4fdc-a821-7cefaf61d30e", "sighting_of_ref": "indicator--226f89f9-ffc9-4e64-a079-43bb541076ae", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1666f4f3-ea48-4515-a2c3-aa3fc3e39374", "sighting_of_ref": "indicator--09c184a8-24b2-40f8-894f-4b4857bd194b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30df9fee-a723-4c74-aae4-f22e35f1d404", "sighting_of_ref": "indicator--b68e118d-97b2-416f-b2b5-dbae4397b512", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddbc6d8-40b3-4e28-b83f-eaa0a0a1d84f", "sighting_of_ref": "indicator--77f474c2-9d98-4dc9-926b-8186296c4f68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd419191-894f-4f5d-9e9d-3559743df5df", "sighting_of_ref": "indicator--0d02aba7-904e-4679-95e4-d8fb27908357", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e578d597-4070-43bf-ba88-1a8c494e1d3c", "sighting_of_ref": "indicator--3942ccf6-8498-4d9b-88a5-96986ffdc398", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7aff28-c409-4ef7-a0ea-2a7c10925111", "sighting_of_ref": "indicator--a1e3c772-a936-4db6-875e-3fd5819fcde7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ac1e06-642b-46c7-8783-9fd8c5734598", "sighting_of_ref": "indicator--f6fb5d95-8fe8-4717-9878-b896647c66f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065c5ee2-23e6-423c-8d56-022cb21672e4", "sighting_of_ref": "indicator--e25b0bcf-0bc0-446a-943d-ab5f4b3ee1e7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14294f07-0582-4e22-8593-766c9b032c9b", "sighting_of_ref": "indicator--a3984f7d-cf66-4d0f-9d15-a984d86fc726", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51581f41-d95d-4dcc-ba4a-f1ffc3048e82", "sighting_of_ref": "indicator--0b781abd-1bb9-4c66-96b1-c18eff1feaa8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7da9e8-09de-45a3-b41d-fced59b84de6", "sighting_of_ref": "indicator--d9b08227-e1f9-4663-9b42-68a86ea85c56", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e5d130-70e0-46c4-9518-8044ebbcea25", "sighting_of_ref": "indicator--426e7fc5-38de-4f8f-a405-461a3b5d1fde", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7a6548-7747-4af5-b2af-f5c981531f30", "sighting_of_ref": "indicator--4ecf6ff2-38e3-4a1a-90a1-d262f9f93d93", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0ef8bd-3a64-4514-82a4-b10fe6197b5a", "sighting_of_ref": "indicator--352bb552-cedf-4f9c-bfd6-740a7388bb35", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021c2b03-e407-4e8f-aadc-c41432009a13", "sighting_of_ref": "indicator--5e199f20-8836-4383-bdf2-2a6009a12aac", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dd0502-2b8d-4015-9d46-fe72b22d5bab", "sighting_of_ref": "indicator--fcb55434-d8cc-4652-b538-82c2d3ec747b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea2436e-3096-40ce-b319-fa4777386fa9", "sighting_of_ref": "indicator--0e8b2299-131e-43f6-af84-d57b82514643", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2e810f-7203-4d22-811b-9387e3747c98", "sighting_of_ref": "indicator--c85628f9-0fb2-4456-a0ae-575130a2fb42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8856905-fd2b-4648-bc15-318b32af4923", "sighting_of_ref": "indicator--fc6804e2-db59-410b-9afe-daf3635af887", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433ead1a-572e-47fa-8485-71c9f1900661", "sighting_of_ref": "indicator--fa9256f2-cbcc-4c8f-a78b-d4137f8a2143", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b48771-5a5d-4bd4-8469-432cd385486c", "sighting_of_ref": "indicator--735cf2e2-f05c-456f-a140-6010c05faac4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be1683a-cd5a-4fa5-8b31-57c9888adf94", "sighting_of_ref": "indicator--323b3972-65b3-4403-8fc2-5ed8ad4c98eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816a5495-95d3-4d7c-b33c-4dc2d9bd7f16", "sighting_of_ref": "indicator--04747f70-10ea-428d-abad-12825234ed9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0ffd7d-0515-4b9b-81f3-3856ad7ad23c", "sighting_of_ref": "indicator--6ca10fbf-b3d6-4e4e-a022-bc29ad646bf1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81deb39d-d97a-4761-8fe8-f694c404db7f", "sighting_of_ref": "indicator--0b4f1254-715d-48ee-9d0f-10cf0dd80ca0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a309f75-e0f7-4aa5-8fad-2abba61930b2", "sighting_of_ref": "indicator--91c9332f-4ba5-4b39-a6a0-e2db8d087c10", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56da2c1c-6185-4f79-9eb0-9fb04fe1563f", "sighting_of_ref": "indicator--8b463f98-8663-4f19-bb3b-df7baf5c014d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241efbeb-deb9-4989-9e27-3b41e51741ad", "sighting_of_ref": "indicator--86758663-a20b-4ebd-93de-76ef171817b2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843b90e2-7e57-444b-b84e-162c729db287", "sighting_of_ref": "indicator--6375bdbd-cd75-4bfd-97cf-c33288c46c89", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1b39e3-b651-4e71-910a-27216c12977a", "sighting_of_ref": "indicator--0216c366-f573-4430-9de8-5c9acf5ee305", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb0a230-df5f-42b4-8961-ecf7c80d5425", "sighting_of_ref": "indicator--780d0209-0935-4f2d-99a1-fc177edd5566", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0151da0c-f23a-4aff-81a1-303a0d9a475a", "sighting_of_ref": "indicator--d6998986-e46b-4fc2-bfa7-c2c3457ce30e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60d6143-093a-428e-8fc1-edae52f29dda", "sighting_of_ref": "indicator--d6998986-e46b-4fc2-bfa7-c2c3457ce30e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e21bc4-ea4a-4e43-9e6a-8e8e654e2ee1", "sighting_of_ref": "indicator--8c0caa5b-4f9c-47fd-8ca6-e1ae1224d5f1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85507635-3d44-4853-832c-598f8c9a910b", "sighting_of_ref": "indicator--0cd5281f-d3de-4809-978a-7f24b86cbe93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c59bc50-f90d-4f55-9305-f33b45b7e289", "sighting_of_ref": "indicator--816efa2d-0eec-42cf-8f63-47bd98693f3a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08049f2f-dc53-4780-8a25-dd406eb466c1", "sighting_of_ref": "indicator--9fc2ff1d-b8ea-4f1f-8670-d9c2eb5dc03b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5881558e-3648-40ab-9a45-39f0203fa929", "sighting_of_ref": "indicator--ecce204b-16a7-4ae2-8a32-b875ad5bc83b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba097b8-2448-4c1b-bcae-8cdb1919de4d", "sighting_of_ref": "indicator--74c6be84-64c8-4fe9-b952-243e86b032cc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846ca03a-1f58-48c2-a75e-0a61711560fa", "sighting_of_ref": "indicator--5c00de8a-03ee-406a-9559-63e9b1a923d1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53350d4-7eec-4d16-8dd6-fbef0484d070", "sighting_of_ref": "indicator--0bb13e3d-3022-4d94-aaa8-4465ea250539", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e549dc6e-0a21-40fb-801f-4f9bc0f6926c", "sighting_of_ref": "indicator--dd4f4175-aec7-4470-a2cc-f55648425bc0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea8ed07-dfc1-40e7-8d19-57aa2fe02aec", "sighting_of_ref": "indicator--4cdb4275-6553-4ba3-ac0e-b5e832e843b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe74d6c-7d5e-4bcd-bce2-988b0276f0bc", "sighting_of_ref": "indicator--56691a37-cd84-4470-b3ad-9ed3b471cf33", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ba0a7c-355f-44bb-8519-4a56c2e1d5e6", "sighting_of_ref": "indicator--e533cca3-efc6-43f5-af76-1776e83299c3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21b1e92-2340-4025-9537-980f38615689", "sighting_of_ref": "indicator--091f52f8-0605-410b-a0d7-4758b69e9325", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f86a86-0030-4e87-851e-224c52588d0d", "sighting_of_ref": "indicator--1e5af89a-6477-4a07-a18b-06abedf96c18", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08aee39-fa8a-479b-8b71-ac292cfd2b1f", "sighting_of_ref": "indicator--91a248ac-a9e6-4b86-a40c-7b3b7115fdde", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a2681a-6d72-4efb-8c36-9427781122cb", "sighting_of_ref": "indicator--fe9016b7-681b-4d3d-9f3d-3638585347e3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96afa2d-0139-4882-a157-ac4af1c438ac", "sighting_of_ref": "indicator--57586743-5d68-40d0-80ad-f57c75380f83", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2129fe-06b4-4628-a658-9988594d59c8", "sighting_of_ref": "indicator--eb55e225-e331-4cca-9794-3e4be6a4261a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db964b8-8062-4957-bde5-27b34d80cc6a", "sighting_of_ref": "indicator--99ac1475-6873-4a76-90b2-7e9cba7d01f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9ce9d9-014b-43af-9b07-94c68a44b471", "sighting_of_ref": "indicator--fd0ee192-027d-406d-9ef4-3292f10a47af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af93b0cb-e227-4c45-ac72-3a804b72cf67", "sighting_of_ref": "indicator--71e6b968-ae0d-4212-aec2-c89ec6f5aba6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6874ec6-e7cd-4901-9fac-fb5aad76a3ba", "sighting_of_ref": "indicator--3a78f96c-abb4-4996-9202-d60f9377eb2e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe40b31b-62f6-47b0-b432-f6695b3ff3a3", "sighting_of_ref": "indicator--087f69f7-469c-4573-9cce-4c39d3680bcf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ac3dd9-fa30-4245-b5e4-01beff192612", "sighting_of_ref": "indicator--46cd43ad-fef0-4bbf-9cdc-39f66541cd93", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a2d738-6369-4e6b-ae2e-fc2a5da32c51", "sighting_of_ref": "indicator--8eb63f56-bfef-41c3-87d1-5daafbf5be64", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35217ba1-f0b4-4cc0-919d-d6572cde6d8e", "sighting_of_ref": "indicator--aaa3fa9f-c915-4b2c-8f3b-399428689270", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44975825-e56e-4fa8-b868-a8e38fd5e285", "sighting_of_ref": "indicator--be9bc803-e949-4238-bb56-10201ea4a763", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984319d9-29fa-434f-976c-710fe9ae25fc", "sighting_of_ref": "indicator--5661ddca-4de2-49c5-ace0-70742946e31e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948bddc9-aca4-41f3-9d9f-164a67293338", "sighting_of_ref": "indicator--1d9bf73c-98d0-4252-8d5d-bcea1dce005f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c424210-5318-4ab9-8bb6-817aa62d3005", "sighting_of_ref": "indicator--b050292b-4403-4642-aa9d-b59313b8cac4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2a8ee8-e408-4b9c-92e0-0c22e307d068", "sighting_of_ref": "indicator--b83fef02-15bf-47aa-934c-85bff374c0ac", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c03c2fd-2882-4a4c-a087-560d336f6235", "sighting_of_ref": "indicator--9b4fdf7f-2a69-46e8-a51c-c49034384317", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0aa4fdb-baf1-46b8-ab86-b8402a3e7547", "sighting_of_ref": "indicator--270402ab-e25f-4510-bc41-607119782b29", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bc1846-a448-4edf-b4d1-adbdc0103b13", "sighting_of_ref": "indicator--2bf2c446-6ff9-422b-9ff5-30bd41d12a4d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d038f834-e46b-47f1-8666-9c46559f4e9e", "sighting_of_ref": "indicator--17336ea4-4df8-429b-934d-913d69b4ef1a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa53c890-9d8b-4455-8b69-33934853eee7", "sighting_of_ref": "indicator--06d67690-3e51-4e11-966d-41b41971c1f9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2482ad-9889-42c3-8508-30900160c89f", "sighting_of_ref": "indicator--7dd94316-ba2b-4c0e-973d-55c316d4f48e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bc1831-fd1c-4eed-9694-f48bd5bb07a2", "sighting_of_ref": "indicator--2b0b4284-7b86-418a-bb2c-28288b522966", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf97609e-9f7e-4a20-9f01-e5cd46616730", "sighting_of_ref": "indicator--42d7b3ca-83e5-4570-8a68-84485c4486c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d5fb17-6665-4d60-aec0-fa8dfd3d0db3", "sighting_of_ref": "indicator--606d26e6-5ab2-4ed0-be00-6feeec311148", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c279e66-a50b-451c-9c89-97a15f37dd43", "sighting_of_ref": "indicator--bc44b5b3-e6a5-4a0d-af45-87a68f6e0161", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea7ac45-c0a8-4562-bd8a-e1d116e7f8b2", "sighting_of_ref": "indicator--a73ec7aa-c8c3-42f2-bcef-c8cf8fb5a699", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0594cf-a437-42ca-aa56-dc3b107263ae", "sighting_of_ref": "indicator--b77ee25c-8bfb-4e3a-b8e8-7f150b52c9de", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3f0827-50ff-4840-9f4b-1c7160062710", "sighting_of_ref": "indicator--7a19e48d-4277-4299-8024-eccaf6963f5c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c59f00-1d99-470a-9cab-12fb2dcde10a", "sighting_of_ref": "indicator--0acefa81-35a7-4b6c-8c39-46ed82bfee50", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb89d00-a635-4f1e-83dc-8750982aa34d", "sighting_of_ref": "indicator--6e176ae8-cd06-4e07-ad60-2e78e79f1a6e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad5ab88-9914-4fe0-900b-1aba660b52f1", "sighting_of_ref": "indicator--4fef2652-5ff2-48c4-b98a-bf00212b8fbf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9849e79-616e-4b56-a753-545afec60b8a", "sighting_of_ref": "indicator--5ee7cb80-b926-4ebf-88e6-b381ec42ed78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1751c903-f88d-47ea-8e8c-3108ef1c561f", "sighting_of_ref": "indicator--7224c202-fcb8-4ba0-826a-049876deebfa", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66692c96-230c-451a-a2ea-e6810632f524", "sighting_of_ref": "indicator--826533ef-7608-41a8-8710-328b2a79062c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff818408-ff75-413b-b907-2f62bb10337c", "sighting_of_ref": "indicator--50b272a2-8a60-4689-b992-df3873b32cf2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018c4fbe-7f8b-4858-a4d9-23068df4d250", "sighting_of_ref": "indicator--a3b176bf-5553-46f3-a0a2-dc95819b2433", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb33be3-30b9-49d4-b3ff-5b5fcb4fdccd", "sighting_of_ref": "indicator--5126f33f-bc20-44db-ac99-135a939a561a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461b762f-a13a-46d4-931e-b051f78ada43", "sighting_of_ref": "indicator--3d1cb591-48a5-4b29-8135-e96148ba8b59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2a10b2-84af-487e-879d-8e615b169334", "sighting_of_ref": "indicator--8b3b1b7c-c91a-4475-8608-794da61288b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc55493a-717b-4910-a8ef-b94b3f571230", "sighting_of_ref": "indicator--d237715e-8e9e-4497-9a47-223c34ff7d63", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124c0569-4383-43d8-9218-3ba30fd50133", "sighting_of_ref": "indicator--51460a74-bb67-435c-aa70-623bfdcb8be4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af4122e-d19a-4891-b869-c6ce5e6a31fe", "sighting_of_ref": "indicator--74ea7c8a-2bc0-4457-8d8a-78ecd5b4c921", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9350864-241f-466f-ad69-6de7590c693c", "sighting_of_ref": "indicator--5a29becd-bc2a-41d8-8cd4-c847cb81c942", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81d981d-7be3-4c87-a890-ab1e31b830fb", "sighting_of_ref": "indicator--6ea80449-5663-41f8-93be-68b8f494678d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252cd4b4-0a53-43a5-bd52-7a5d9b29a378", "sighting_of_ref": "indicator--ff1aefe8-1b8a-444e-930d-c043007a65da", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eff865-ead7-4dad-8f43-9fd0919ae134", "sighting_of_ref": "indicator--1e163f86-f91e-4bdf-8a93-c3a49b1d37b4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07ac8a3-8ca9-400c-9b5a-3d656d1ab4dd", "sighting_of_ref": "indicator--f9578f3e-e48d-4d3d-bca8-e791186bd517", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817e78d6-670e-426c-84be-4263854269fc", "sighting_of_ref": "indicator--1ec8cbcc-abf1-4918-9791-7c7b0a54e609", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5a3905-42f0-4826-8dd3-2b0efb295111", "sighting_of_ref": "indicator--06b2a28f-cdd2-4da1-8687-0b0aa4c8c6d5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39765ea7-c135-4e67-9abc-f7fb6b2d96b0", "sighting_of_ref": "indicator--03d40118-dfe5-4474-8c13-924386c5f223", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc12d5f-dce9-41af-833d-c1ed01413de4", "sighting_of_ref": "indicator--92c21984-04b5-47fe-857a-82a0682656d8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17090fa1-d89d-49a0-b2cd-2fe085d008af", "sighting_of_ref": "indicator--8e63c9d2-d574-4485-b434-6a3021b957eb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aeb47ca-9b24-40fc-b438-099108bedfef", "sighting_of_ref": "indicator--14140e7f-cb5d-4bfd-8d07-e67b3bd0b55c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0244c28d-807a-429e-a2c8-58b0d31ee101", "sighting_of_ref": "indicator--74ad8deb-3ded-400c-a3cd-7a2e174d15cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf005d8-2166-4d49-92fe-dd455f7df486", "sighting_of_ref": "indicator--22696864-c71c-4548-90c1-36f935f6332b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49161bda-8dfa-456c-8bfb-6758e60bee69", "sighting_of_ref": "indicator--bb592f83-bfa7-46b3-81a1-e20ac3edb98b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8d08da-5804-42cf-a723-c483ed7ffb49", "sighting_of_ref": "indicator--e419835e-afc0-4b42-b306-120fd43940b5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a6f697-3bc6-4e6d-8390-ff71238084c2", "sighting_of_ref": "indicator--3739ffa4-60ca-49d9-b939-197c4863b5b0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb435e5d-5486-42af-b3a8-16655e632661", "sighting_of_ref": "indicator--e85d2ace-0691-48ca-a384-2567e767b533", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4882bf-975e-443f-a938-ccf3deb9b072", "sighting_of_ref": "indicator--cc1e2ac8-35b0-40a4-847f-e464320fa555", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d258970-61d3-4f3b-a5df-d7ea8e8b5bc3", "sighting_of_ref": "indicator--891d1277-5342-43ec-a6ab-23ee7c91a2ed", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb583ad-5557-481c-b662-f688f051df1a", "sighting_of_ref": "indicator--9f93d5e4-4943-46cf-8070-ba171c0c77cb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5298d309-0e9d-4106-981f-2e4b8d898994", "sighting_of_ref": "indicator--308d962b-726e-4198-908c-1f471191a450", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcdbb1d-63c9-4e8c-b545-b6138c6956c8", "sighting_of_ref": "indicator--7a703d5a-5a61-4a2d-9635-b6597517fc6d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49e3957-6a9c-4ef0-b0e7-73888bbaa220", "sighting_of_ref": "indicator--d0830d10-77ca-429e-abc3-91570d9aeb07", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d671bd66-61c1-4b3d-95c9-f848deea2a8a", "sighting_of_ref": "indicator--458fe413-68e2-4bd7-8d9f-08c0e67e2a17", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723aca36-d0d7-4185-9e79-838a1484f2aa", "sighting_of_ref": "indicator--93d61728-09af-4c6e-9998-5f41d1cdf70a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1f74df-5cfc-48a9-b432-f3a7279023c1", "sighting_of_ref": "indicator--f78d4303-5ce3-4d93-88d6-39dbfd557b68", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecbcf31-50b8-41a7-917e-e9cb2129a065", "sighting_of_ref": "indicator--f41a8444-3a50-479d-90d8-2035af4c4b7d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92457a63-4488-4f01-ad4a-9e4bf7e01926", "sighting_of_ref": "indicator--4c0c0d85-3c09-4141-a3b8-7ead853a267f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadc20fc-280b-428a-8d5a-3601380fe84f", "sighting_of_ref": "indicator--c2f5a165-dbd0-4d88-b891-bcadbf57b2c4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaca8e9-3271-4574-83c7-84bc127b8aec", "sighting_of_ref": "indicator--008f0d4f-51c1-41b5-ab09-0ec92c063ddc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9b8b93-33dc-400b-8ef0-f9c2358e84eb", "sighting_of_ref": "indicator--a3037298-3acd-41c1-ae25-f23bba63ec0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ef8fef-e283-453d-b88f-8a71bcc35a6d", "sighting_of_ref": "indicator--0e06a865-bd51-46f1-a834-952acb18e53f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab02587-0a7e-4936-8e03-c1ba3e5521f4", "sighting_of_ref": "indicator--2fc968a1-8942-42b9-b158-ecea0f41e00d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2056e92a-ea7c-40c9-9bcb-19af2a5753d5", "sighting_of_ref": "indicator--7da4ec6a-bf36-4daa-a63f-265784a46b2c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9203a9-a78c-41de-b4a0-0f007d89745e", "sighting_of_ref": "indicator--5695ff47-95bb-44ec-b9b7-14878f0059f6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c96b96-b2a1-4edb-bfb9-8d6307c8a61e", "sighting_of_ref": "indicator--1010b39d-cc92-4700-9032-c3326112046b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55464d30-9b14-4e12-97c6-92e75ad96915", "sighting_of_ref": "indicator--8391a8a4-78cc-4b2c-9d6c-71beee176478", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8b94de-90cd-40c7-9fed-ad2987ff7d93", "sighting_of_ref": "indicator--03047de1-fdd8-4542-bec8-53a4a0aea292", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f00f78-4617-4e23-843f-d4f916655f3e", "sighting_of_ref": "indicator--411850c8-4a32-44a5-8569-4679c6d4eef9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea109808-0de7-46ab-b01a-ecc3d3c66b23", "sighting_of_ref": "indicator--0de0cb49-2595-477b-8440-e60817971a34", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce9e74e-824f-49a9-b7e1-a003aa7e0b2e", "sighting_of_ref": "indicator--74904cdd-15d4-4d88-96e4-7a0d9d2a45c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92912a11-70dc-4ba2-bdc1-26b33627701f", "sighting_of_ref": "indicator--2daf269c-d8e3-42be-9d20-b1c1ea72cb77", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6047481c-ff71-445f-ae61-05ad69656b8e", "sighting_of_ref": "indicator--9486c4c8-d13f-4f88-a623-5aff5d5558fd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6216de1c-5b2e-4ccb-8fb2-660283088546", "sighting_of_ref": "indicator--5c4e96c2-f01d-4197-ac51-ccbb210afb27", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97453c46-26fb-44c1-a5d8-454f13f79897", "sighting_of_ref": "indicator--585d8342-c7ce-4954-91d7-b2d041656199", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949ae4a9-d194-4a91-9962-971186c8f147", "sighting_of_ref": "indicator--abd35777-dc51-4615-a219-46e22b8c7910", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042942c3-8eda-4899-84f6-99648ddd587c", "sighting_of_ref": "indicator--a936be35-1470-4bf5-97fd-6af508e4bc3a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586319f5-4ddd-4079-86c2-d51d01cdb036", "sighting_of_ref": "indicator--17accd78-4ede-49c2-a6da-5fb058176099", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11066a84-dafe-4501-aa46-262e3fb08c18", "sighting_of_ref": "indicator--c9fed027-0d4a-4313-b162-6174f454c85f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee808ef9-8c07-4a44-9a1a-773797e294c1", "sighting_of_ref": "indicator--a5d9ee9b-f335-4bdd-bad5-b06ce39e3813", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bd3e5a-b820-4276-9301-5b812cb5c746", "sighting_of_ref": "indicator--254a952c-99b0-4461-ba27-f11c480f1ed3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5485aa-d445-4dd3-b427-5d42beed591e", "sighting_of_ref": "indicator--d91339af-5fc9-443c-918f-f0860e87802d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1724efd7-67aa-4e49-92d3-5e245997ede5", "sighting_of_ref": "indicator--eabeb813-b399-43c5-84aa-ffe962f340f7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdff32b-603f-42fb-a0f3-e9ce58025a12", "sighting_of_ref": "indicator--199acfeb-442c-466e-b288-669192240dca", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5f8173-5707-47f3-b594-0282c7a0eee1", "sighting_of_ref": "indicator--cb3385b0-fc08-422d-99a3-5b8ecfb49e5b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6783e1b0-95d3-4118-8c8c-b44608c7d798", "sighting_of_ref": "indicator--9bbb1bb1-5a17-45be-988e-9a47c5293966", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5519b40-8909-4262-926d-0bd6cfbf6b53", "sighting_of_ref": "indicator--eda3dddd-9827-46ad-a77a-671666b47d5f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df47995f-fca1-4471-866c-d01b49280f66", "sighting_of_ref": "indicator--17878aba-c689-4a72-b676-4a690c6531e3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef29811-bcd1-459e-a730-40e4b921e0aa", "sighting_of_ref": "indicator--4a9430b0-3e6b-43ae-900f-16194955b7b9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a010de92-cbde-46a0-825c-e227a6cca1f9", "sighting_of_ref": "indicator--eca72bfb-85b7-424d-9d6c-c3ac858441f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1147f16b-9996-494c-831e-f4e0e9da31b1", "sighting_of_ref": "indicator--8a5d1e90-e9b0-4b9b-8eb1-12399c19c2c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345c125b-19fd-4930-8cc9-39ab27976cbb", "sighting_of_ref": "indicator--e9383373-24fc-4795-93ed-72720c704717", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b96f20d-db84-41c6-b909-2b06c5eda51a", "sighting_of_ref": "indicator--9739472d-e6b3-46f2-b3fd-841b7c1cf557", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7cef8e-0020-4211-a7b8-d8bfb7758fe5", "sighting_of_ref": "indicator--ef5c4710-646a-4131-a97f-150e6b662935", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830e6d17-65f8-4f00-8303-63ba6812ca11", "sighting_of_ref": "indicator--958fda3c-88cb-4670-94b5-881c37bf526d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb37b8eb-4f47-4d33-af24-2bd6c1b66c97", "sighting_of_ref": "indicator--3409fb35-fb44-44a1-a0a8-9bae293355be", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb3d193-36fb-4991-b7e0-5e472e228831", "sighting_of_ref": "indicator--71ca9153-c77d-483a-b999-a3fc40cd11f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1518d62e-086c-4880-9588-bf40e9178594", "sighting_of_ref": "indicator--40ffbdbc-adab-45f3-afc7-49cb099158c8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7279447-2c29-4e1f-ba12-e38ca909b030", "sighting_of_ref": "indicator--264075b0-0691-4172-b9d3-f40aa889ad2f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe221937-9f79-408e-8922-2caa26e1fe05", "sighting_of_ref": "indicator--1c2ddc92-27cb-485c-807e-673091475737", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283a7cf7-177f-4c65-bc15-a6d472268c9f", "sighting_of_ref": "indicator--971b6023-4d24-495a-b0a5-d24ef9888833", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70b0dd3-930c-43fe-9b91-4fad0cce6ae2", "sighting_of_ref": "indicator--309bb787-1c1c-42bb-a67f-9915ede0e120", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb7972f-e23a-4413-9550-cc5a0441fb31", "sighting_of_ref": "indicator--b12806cd-7f0f-4bc9-9d5f-6ae0dbd2d343", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f9b44f-0124-4243-8362-86ff4ef4f5f7", "sighting_of_ref": "indicator--5d340035-cf56-4666-9d2b-a91dc1a0975a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ffc32d-ccc7-4937-a985-a7668fbe6060", "sighting_of_ref": "indicator--412dc7cd-a362-47fa-b356-a2b13295a93b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d830b4c-1f55-40ef-bcae-752527993098", "sighting_of_ref": "indicator--e5e0a426-aca9-495a-822c-0ec575072ca9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de163ab5-2fe1-4ba7-bec3-a157ff5b2e15", "sighting_of_ref": "indicator--7e4ccad6-d09f-41b4-b60e-78f3f00269cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12bfc38-5450-4632-8f0b-af804cfc707f", "sighting_of_ref": "indicator--1f3d2bca-79cc-41d6-bdc2-3f4f269e0259", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6a4df7-ed8f-451d-8b94-343e47950825", "sighting_of_ref": "indicator--ee28ca50-37b2-418a-9401-a76e317bd18a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5f2d82-9893-442c-9440-53000086ac6c", "sighting_of_ref": "indicator--052ffcd3-4517-4abb-80a7-521d70b57a14", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e07d6e-8f5e-4bc8-a8db-4fb475eb075e", "sighting_of_ref": "indicator--74651779-f978-4b04-acd3-a9705ea69e42", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54566336-c54a-4442-b2c3-f7e9f6db661a", "sighting_of_ref": "indicator--3b4b114c-9015-42f6-9fcc-4fb9e3d4730f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539307b5-9153-405a-9655-820929deb16c", "sighting_of_ref": "indicator--986c4263-5f64-474b-99ea-c062dfa42471", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2219c78-de11-47c4-a186-87a08e1843e4", "sighting_of_ref": "indicator--2e6b206a-fbe7-4c16-ba2e-07609926d384", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82028d5-919d-47c6-b778-6d853b6f684f", "sighting_of_ref": "indicator--852dcf9a-370b-4ecd-bddb-82807ea454af", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a182a86-3429-4fd9-9b40-60ebfd1877cb", "sighting_of_ref": "indicator--d3b33518-2cad-4b6b-b056-3841a1f534d0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0765ac24-52c6-454c-adbb-a87a15baefa5", "sighting_of_ref": "indicator--0d5428ca-14a0-453c-ab36-ce341ac4cad3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663a2456-37fb-4b05-baf4-bf752e8e9a3a", "sighting_of_ref": "indicator--7da03877-b0ee-4d81-8527-af65f2db475e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3457320-68d6-4682-986d-bc30ca294c4b", "sighting_of_ref": "indicator--433bddf1-55b5-44d9-9a3b-155d70b89e9f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12efd9ae-ce73-4ae4-a2c9-164551f659f3", "sighting_of_ref": "indicator--9e19c822-8451-4227-8f64-1d607d8f658c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1ab31e-9984-4726-a085-116bf39f8838", "sighting_of_ref": "indicator--7df66b2d-1dad-4594-9e07-f25345db628f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7828107-1830-4209-87c5-004bdb2f8bbb", "sighting_of_ref": "indicator--4f016a86-6893-4872-b7a7-d7c375687e6e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361b3b4b-58e2-4bb3-aa5a-ab9983440b92", "sighting_of_ref": "indicator--163d4199-362e-4df5-970a-751d13711ec6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a5c680-f37a-43c1-947f-77cbc62f6801", "sighting_of_ref": "indicator--aedfb1d0-9332-4dd0-9caf-8c470272a9db", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a85f10-c6dc-45f6-88f0-85b6c9d9daa1", "sighting_of_ref": "indicator--e130b46e-c84a-4ab1-8ab1-f4791872a5f5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cec6967-5e5e-42df-854e-817ef94828a0", "sighting_of_ref": "indicator--b10fe229-bb99-47a9-9e21-e089764b3811", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e706ab98-6045-4358-a7ed-ef2057f63178", "sighting_of_ref": "indicator--dc6e5b22-ad59-4964-9d7e-3047ff4aa4a6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7b86dd-4d17-42ea-b648-91630b7854b5", "sighting_of_ref": "indicator--96ed2f84-b700-4c30-8b32-b7fa5c007ade", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9571bb01-8f14-41e1-8a02-0bfb89fd3247", "sighting_of_ref": "indicator--b56f3d1b-2a6e-4aa3-9675-faf74bad0f34", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc6b59c-c4b5-48b6-90c7-408223f6d966", "sighting_of_ref": "indicator--a0d83485-317c-48b6-8d71-d64c0b378be1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17e20c6-880d-47b5-8da0-ee2d005328a2", "sighting_of_ref": "indicator--b8dcadd3-47c2-44a6-80bc-29906d43be52", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc9236e-9fd1-4676-b6d6-944d1e938709", "sighting_of_ref": "indicator--dc4970fa-dbe5-4297-9597-a7eaf7af2296", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29e512b-52e8-47b6-9fa2-62414163a5cc", "sighting_of_ref": "indicator--647f43a1-0886-4787-aa54-308622be67ba", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f6a740-abb1-4e2e-96ab-cbfada4781ad", "sighting_of_ref": "indicator--a59d09f3-8c81-4b22-92b3-69027357a535", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad134be-480e-4b24-b632-9e8a599581bd", "sighting_of_ref": "indicator--e66ca661-24b8-40bf-b39e-2a9b7bc646ed", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509ba8b0-fe4e-4848-a08b-cc57a99eb440", "sighting_of_ref": "indicator--ba79de11-072a-4e1f-bcaa-ac48449fbcbd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3939bf3-a7af-4991-acf4-ce1ceacc8dff", "sighting_of_ref": "indicator--90419cf0-fe4c-47b4-a978-9f7299db3f53", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f139938d-db08-4016-8339-296a58b799be", "sighting_of_ref": "indicator--a5ad4245-0dfd-4e44-bfdc-07a2fc6721b5", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb5cd31-ed81-436c-8454-09bb0c34e3a2", "sighting_of_ref": "indicator--240fdb53-96fe-4b67-a622-7984c78ef443", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a74f4c-f433-460c-af82-fca1c824ad67", "sighting_of_ref": "indicator--6ff46a77-119c-40bf-b9ca-26b53fa2143c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7764a840-1bf8-47c1-9aff-381c18bd9c86", "sighting_of_ref": "indicator--44106234-e09a-4314-97a9-f72599e8a0d9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7829e9-5229-4804-ab14-b39fe56bfb62", "sighting_of_ref": "indicator--ebd306df-83cb-489b-bc5a-2e475b0b7003", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ef567a-a066-4a0e-868d-4b3f5a8b28f2", "sighting_of_ref": "indicator--04cea0e7-0105-485f-8a9d-c4f9035e8f1b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6712bea-c0aa-4f02-88ae-592d05915bb0", "sighting_of_ref": "indicator--7ddebef5-c8e3-4e85-8d4c-0c73244ec199", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15ee878-186c-487d-ae7b-1d8db7b5a275", "sighting_of_ref": "indicator--cb155adb-3a55-44da-8258-125cf31094a3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7405d2-22f3-44a2-8ca8-5e147cfb86b0", "sighting_of_ref": "indicator--0d86b724-2415-4050-b646-541d1c781c31", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84af83b5-865a-4e9d-86ac-2b2a5d288caa", "sighting_of_ref": "indicator--a79cfe13-bcb1-4af3-97d8-c7dd7c67c2f1", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be79d379-27fc-481b-9655-9851c2fe654e", "sighting_of_ref": "indicator--e31728ed-2a91-4745-a341-968e746196c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ce5d90-68cc-479f-9665-76ccca6c40ff", "sighting_of_ref": "indicator--663ee843-4aef-46e0-9437-e80462de2994", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f737bc7e-d199-49be-923c-c917ec455537", "sighting_of_ref": "indicator--ac64ded1-af2e-4aaf-9600-b96e2efa45fc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0345bbc2-59dc-44ac-b2ac-9494c1f3588b", "sighting_of_ref": "indicator--5113e98d-3670-437a-a779-cb1be675aee9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b0426c-29de-4ea9-9aa1-928934d1924b", "sighting_of_ref": "indicator--adfb04ba-baec-4789-ad8b-df6b7e9806b9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03791dc9-3f3b-43b2-a7ad-d3b889082a69", "sighting_of_ref": "indicator--bf01323a-d95b-49be-a9f8-e121aefcf22b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d11cfa-79ec-4389-8e52-c54c73fd4984", "sighting_of_ref": "indicator--68f29ebc-de66-47ea-bf35-6ed22f9fd81a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab58a26c-43a2-4d14-b42e-d175d8f196e9", "sighting_of_ref": "indicator--8f0a4cb0-f8de-4d2b-b501-ab3c73cfb44f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de84d3a1-df47-418f-8c05-a5ac4284103c", "sighting_of_ref": "indicator--a1a058b7-2fe9-452e-b5c6-39de8333a229", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e882b5-f4ef-4599-a5b3-69504bc6a14f", "sighting_of_ref": "indicator--a63b0c6d-06fb-411b-8635-dd64a6b5551e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ca5d4b-a254-45db-9714-3360d1920fb4", "sighting_of_ref": "indicator--079508d7-19db-4388-8822-d8bc47e5abd3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0401a04-c199-4683-bfdf-283c96a55863", "sighting_of_ref": "indicator--0a5d13e4-1008-4a63-897b-80b01323f52b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ca23f0-c329-47d9-8571-27c9a1ef0022", "sighting_of_ref": "indicator--0a5d13e4-1008-4a63-897b-80b01323f52b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff04ddf-b73a-4ff3-8607-67abc66e6337", "sighting_of_ref": "indicator--edad6a9a-a9bb-4061-b43f-db2db2f276f4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213fac24-83f4-4c5a-a93a-e7723481d043", "sighting_of_ref": "indicator--edad6a9a-a9bb-4061-b43f-db2db2f276f4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ef1e0b-1d49-40a7-ba3f-8fe7a343f245", "sighting_of_ref": "indicator--f028b119-c052-4775-9a5f-f058cefad3fd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9d1fbb-1b46-4ff0-aacb-7e63715ace3e", "sighting_of_ref": "indicator--f028b119-c052-4775-9a5f-f058cefad3fd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05eddab6-8109-46aa-afdd-96f9047276c2", "sighting_of_ref": "indicator--7d24942e-aa8f-44a6-bf8b-f71efa5b9fc4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ec5bdd-4224-4687-beec-e29bc6f76305", "sighting_of_ref": "indicator--7d24942e-aa8f-44a6-bf8b-f71efa5b9fc4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db3cf0b-4a36-481a-b662-89d37c35fcdf", "sighting_of_ref": "indicator--c039ae10-2cae-4ba2-ada9-9acf96392f21", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c759d8-6a57-40d8-9982-2fb4894d66ad", "sighting_of_ref": "indicator--82161551-3d4d-4893-8111-12976428ae7e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6624d6-9c7d-44f5-a544-8aa8737cecc3", "sighting_of_ref": "indicator--7ee7a7e4-5078-4a26-9e8c-ee90bc507ae5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717c25ba-9326-4162-9426-df3656c14eed", "sighting_of_ref": "indicator--6a553bac-7c4f-4416-bdcb-5cf06c62ce0a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb78e57-a058-40e7-b422-b56017802ef1", "sighting_of_ref": "indicator--5b9422e3-907c-4796-ad68-96600b351ca3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c49c26-fe4f-4cb0-8f14-931275d28d05", "sighting_of_ref": "indicator--e2f7c04e-b543-4309-8f17-538c1d9ab4d3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88449ae1-3ccd-4c6b-a87b-9596a979511b", "sighting_of_ref": "indicator--e2f7c04e-b543-4309-8f17-538c1d9ab4d3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6054cc-a08f-436c-93c6-97f0e76ff051", "sighting_of_ref": "indicator--07b78745-0f2e-4572-b188-77dd4f71266e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c1a7f8-11f3-45fd-9794-a78d8c523a4e", "sighting_of_ref": "indicator--bbd0feff-29da-4652-80b2-453ac41f37b3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e591d9-26b5-415b-b18c-4a3930dac143", "sighting_of_ref": "indicator--cad7f5f5-47b7-4c0d-bfb5-4193e19dbfbc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4158ab-3c51-40f2-9517-d3d3892d6b22", "sighting_of_ref": "indicator--cad7f5f5-47b7-4c0d-bfb5-4193e19dbfbc", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16c6bce-776f-449c-a25c-e186a850f1a0", "sighting_of_ref": "indicator--6496e6aa-dac3-4290-b25d-2eb2f212c890", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9273500f-1f47-47c5-bc28-d24b033ecebd", "sighting_of_ref": "indicator--85f3acac-92da-4110-86a7-a9637f2054c9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79381d92-f245-41df-9020-6596c5112d0c", "sighting_of_ref": "indicator--85f3acac-92da-4110-86a7-a9637f2054c9", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683a163d-1e4a-4e96-81b8-2500550f9552", "sighting_of_ref": "indicator--4b51f285-4614-41a4-9edd-a67b553dd74f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee168295-ebba-4792-8fb5-4a4c42b568f4", "sighting_of_ref": "indicator--f8c6bee6-d2f4-44e3-94f7-9e2f668e1137", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bdbdd4-2513-4284-8796-b2fe1eaf938a", "sighting_of_ref": "indicator--4ecb8d04-a5fc-4bdc-834e-8dfb76b82aa0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f804ec-464a-4624-8c6c-d9f9cbe17d35", "sighting_of_ref": "indicator--7159c1e4-a0c4-4637-92ae-018828567a78", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18ed40e-c42c-45ed-98e7-d97f37834548", "sighting_of_ref": "indicator--aa4285f5-24dc-4302-9949-fae316591d8e", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e37fe0-2ddf-4328-a90b-b0edfb0826ec", "sighting_of_ref": "indicator--38d70ef1-e1b3-43bf-b124-542566112e9e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be47636f-e0b2-4f11-871b-6f174d21c229", "sighting_of_ref": "indicator--38d70ef1-e1b3-43bf-b124-542566112e9e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bfd6c4-dcb1-4d6c-aeb1-7df46abdad9f", "sighting_of_ref": "indicator--76037e59-866c-4336-be26-668dd73ebb6f", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ff364c-37be-4ffa-baf7-620db8d98a76", "sighting_of_ref": "indicator--075e9098-6831-468f-87da-0a6907bfcf52", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28858397-893f-4441-a4fa-4041390e18e0", "sighting_of_ref": "indicator--075e9098-6831-468f-87da-0a6907bfcf52", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b3b737-8bb2-42d2-b9c2-2ebe13c6bb6d", "sighting_of_ref": "indicator--7596dd4e-9564-4ca7-88b6-93dfa08a34dc", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8376461-67ba-4f48-8445-93c042b606f5", "sighting_of_ref": "indicator--cfe68ac3-31ba-40c6-b495-64e10d3c06e4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fde3fea-4f96-46f2-a631-afae589a3c33", "sighting_of_ref": "indicator--cfe68ac3-31ba-40c6-b495-64e10d3c06e4", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b399ab-f325-4912-9d64-8c156960408f", "sighting_of_ref": "indicator--ee7c2028-bddb-494e-bd68-192612ea6a13", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8e62a3-b886-4422-99da-ef04dc9a6e16", "sighting_of_ref": "indicator--ee7c2028-bddb-494e-bd68-192612ea6a13", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ee0add-89da-4790-a918-6fa3907ab47a", "sighting_of_ref": "indicator--d4068521-7513-4f4c-872b-3d0622437d91", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c7971a-26cc-4fb5-9700-39bca7dae694", "sighting_of_ref": "indicator--ad563462-2d7e-4550-a337-972b724a5b4a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b3ef48-242f-43d7-a799-f415b49feb03", "sighting_of_ref": "indicator--0f27ea85-fe9d-40e2-8932-032c3875daa0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d04c68-8fd2-4dad-bb00-a20abf3d611c", "sighting_of_ref": "indicator--6e6925b4-513e-440f-bde0-24bc2e4b344f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ff8bad-dc02-467a-a476-69e99e62240b", "sighting_of_ref": "indicator--6e6925b4-513e-440f-bde0-24bc2e4b344f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db481fc3-9e7d-4949-965d-03b3e5cc17f2", "sighting_of_ref": "indicator--1a8d4f6e-2a4b-4238-bf52-28894362473a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54379420-5538-4cf9-b54d-e3b20f031c82", "sighting_of_ref": "indicator--d92de883-0dcb-4257-851a-9d754c8473f2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61ea0e8-1374-46ea-9ba0-58b387bec01e", "sighting_of_ref": "indicator--d92de883-0dcb-4257-851a-9d754c8473f2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d3bd46-83c8-40ba-991b-2089c7d5c69c", "sighting_of_ref": "indicator--799b6d38-dcfa-456b-bc4a-5d6e546a3fe0", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e5f345-30ce-47d1-a4b9-7cb678d58944", "sighting_of_ref": "indicator--fbb5a5ba-8c8f-407d-b979-cff7ce573239", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fab743b-f35a-4de2-8d4d-2e7025476bd5", "sighting_of_ref": "indicator--fbb5a5ba-8c8f-407d-b979-cff7ce573239", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377556d3-dfa7-42b1-bb0c-07977d8bcfce", "sighting_of_ref": "indicator--ad4ecffd-6ac0-4769-9075-d65491d53f07", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3a793d-fefd-4c7b-8cf1-138a387bce65", "sighting_of_ref": "indicator--ad4ecffd-6ac0-4769-9075-d65491d53f07", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c37340-63ea-4fd2-a30d-acc60e85eeb5", "sighting_of_ref": "indicator--7f1cc7f8-0d23-4f6c-bc91-ef2a59b1351b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072d0395-3e63-4c46-914e-ab0c33869301", "sighting_of_ref": "indicator--09a1352d-b0f5-4e48-854b-e3d3b5acde9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ed2d6f-5a8a-4f06-9d93-170f7ae6ce82", "sighting_of_ref": "indicator--864946b0-8e44-4d18-b6eb-2c5063ce76e7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1447e7d-297c-4623-a85e-2f56cfad8dda", "sighting_of_ref": "indicator--c17276e8-a38a-48bb-9678-ce5a451ace6b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec56096-807f-4a82-84a0-2cf548e33a41", "sighting_of_ref": "indicator--95fb7be6-2776-4d6d-af73-642491cd36fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5beb9557-f676-4028-a0f8-f98857a90afd", "sighting_of_ref": "indicator--86d025c9-a8ad-4028-b204-80ab1aac7c75", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b615393-1830-4298-b307-726052eca5f6", "sighting_of_ref": "indicator--aebd1c94-cdc6-4a24-a38d-fda819c25802", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8448da9d-817f-4ebb-b6b0-14622baf0adb", "sighting_of_ref": "indicator--1f4b5ee5-aaf1-49ab-b160-6e3c174b761f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5eb19f8-cd8c-4cc1-afd9-4823beb1e6c3", "sighting_of_ref": "indicator--1f4b5ee5-aaf1-49ab-b160-6e3c174b761f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20006b73-e126-4d9a-9202-618cd38a64da", "sighting_of_ref": "indicator--b570d0df-bc01-4711-a2f8-c8040bbb5f3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af18d3ab-4831-480b-b697-23ea94cc8355", "sighting_of_ref": "indicator--1b9ebabe-27fe-4af8-8578-a9654e80649f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34989498-e840-456f-8138-2968b8937b17", "sighting_of_ref": "indicator--909844b1-70a6-4708-aee7-2cc693ac5083", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330020ce-2645-4f8d-ba6c-e22304b6f8e4", "sighting_of_ref": "indicator--909844b1-70a6-4708-aee7-2cc693ac5083", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e2d75b-c492-457b-8435-2e4eaddd4ed3", "sighting_of_ref": "indicator--bec4ac6f-9169-4ab3-a937-e9ac4ca0f72f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f10e20-162e-4082-9674-911af1cae2cf", "sighting_of_ref": "indicator--bec4ac6f-9169-4ab3-a937-e9ac4ca0f72f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d23be91-3694-49ad-be67-442a9bd9ef53", "sighting_of_ref": "indicator--7aa0abce-a5c4-41f0-b887-991b22f6506c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a928ba-7270-470f-99c9-7657625867b1", "sighting_of_ref": "indicator--81889d5b-8fc4-41d4-98af-6d30f5d25c15", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a863bb-a55d-4489-8c70-588c582eaa30", "sighting_of_ref": "indicator--81889d5b-8fc4-41d4-98af-6d30f5d25c15", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba7c707-2c8b-4356-afae-41aa5774b889", "sighting_of_ref": "indicator--3feda835-a701-4a83-aaca-c17e38fdfc3e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f00265d-71b4-4bc1-a7ab-9532a887687d", "sighting_of_ref": "indicator--b472560d-0082-42c4-99d9-6151a7e12208", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2b2091-341c-419d-98bc-66fe0786d90d", "sighting_of_ref": "indicator--c783f526-4188-4e09-a082-e132aa40e589", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7057db52-ac73-4bca-9643-3a5bd52f8322", "sighting_of_ref": "indicator--b5e46873-3934-48d3-9fd3-d693145aa007", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0600e759-8a20-476b-ad9c-f485b1b51c78", "sighting_of_ref": "indicator--16bec1f7-db8d-4b27-83e0-28b883f7f0a5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60175705-7f87-4468-8013-eafc9e1a6051", "sighting_of_ref": "indicator--28fe5160-e130-44ba-8d1b-134fcdad756b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4981cc68-e2e4-481b-9262-61750fd6090a", "sighting_of_ref": "indicator--28fe5160-e130-44ba-8d1b-134fcdad756b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eaf2660-8028-46db-9085-dcf4d9ccd04a", "sighting_of_ref": "indicator--1978ce86-806b-4989-97e7-a21179c25791", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a46ff0-5007-4f9f-b767-dcc7ea315654", "sighting_of_ref": "indicator--1978ce86-806b-4989-97e7-a21179c25791", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ce5be3-36a3-4aaa-a5a8-5b6c56bfc8b2", "sighting_of_ref": "indicator--2f56e191-ecfe-417b-801a-b8e9216ac29f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8130ccd7-6573-4f61-9fee-5dc4aed557dc", "sighting_of_ref": "indicator--2f56e191-ecfe-417b-801a-b8e9216ac29f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3025fd-44d5-46b1-b03d-045adb96bccf", "sighting_of_ref": "indicator--2ebf3011-251b-431b-9080-2ca43510d7b8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d9d98b-8fed-4b5a-8fb8-2466dab71cfb", "sighting_of_ref": "indicator--2ebf3011-251b-431b-9080-2ca43510d7b8", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6012b2-2ae6-43c8-90f0-a2d571774f32", "sighting_of_ref": "indicator--d89c0f87-2948-4262-803f-bfd69f3a9804", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a7d91a-5966-4774-beeb-e3d73092ca6b", "sighting_of_ref": "indicator--d89c0f87-2948-4262-803f-bfd69f3a9804", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1429b1-d40a-4221-8a36-cad9fc079335", "sighting_of_ref": "indicator--c05718e6-ce2b-43de-9060-8a4d8e769e65", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536d573b-6b1d-4e68-92c2-160a56eb6f1e", "sighting_of_ref": "indicator--c05718e6-ce2b-43de-9060-8a4d8e769e65", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8160506d-a1e9-4af4-bd8d-17e688900742", "sighting_of_ref": "indicator--c351cc21-06b1-4458-b44e-5ed4b7569d8b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf9736a-96bb-428d-8c45-052e110b52a9", "sighting_of_ref": "indicator--c351cc21-06b1-4458-b44e-5ed4b7569d8b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cc23b3-7e6d-42da-8147-f41648004c41", "sighting_of_ref": "indicator--7281a72b-15a8-4b38-9d04-e1770841f416", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a2f0c6-87ac-4e30-a364-f90b984880f1", "sighting_of_ref": "indicator--7281a72b-15a8-4b38-9d04-e1770841f416", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13410d9-2e08-4112-bea8-af9415d158ff", "sighting_of_ref": "indicator--c979ced1-7c51-446f-8624-c749f090a24a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0254128f-490f-40e4-bceb-60567a82274d", "sighting_of_ref": "indicator--f6d81673-b7fa-485c-9e14-a095794a06c1", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd819c5-766b-453e-965b-0ae9de2cb914", "sighting_of_ref": "indicator--896f4caf-3407-4377-9eb5-9800744daec3", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab0a10a-365a-4fbe-9eae-fbf3baaa2d57", "sighting_of_ref": "indicator--896f4caf-3407-4377-9eb5-9800744daec3", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511cf8ae-21d4-4c52-a681-6193204a5c62", "sighting_of_ref": "indicator--896f4caf-3407-4377-9eb5-9800744daec3", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d306b9bd-e66f-4bf3-b9c9-5d1bcbc56dea", "sighting_of_ref": "indicator--05f0122d-77ba-4352-a4b8-d1e632b5c057", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc2a33f-a03f-4ffc-a85d-275ba6c171d8", "sighting_of_ref": "indicator--05f0122d-77ba-4352-a4b8-d1e632b5c057", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d828a02-b4dd-4b5e-8fb5-0fccee276c38", "sighting_of_ref": "indicator--05f0122d-77ba-4352-a4b8-d1e632b5c057", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517e2ecb-fee1-4d10-87e5-38c9297b155e", "sighting_of_ref": "indicator--8a845cab-eda3-43c1-b417-c94c2ac3290a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444830b9-ce23-468b-a2f9-ac9656e18342", "sighting_of_ref": "indicator--8a845cab-eda3-43c1-b417-c94c2ac3290a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c80069-acb6-441b-b1f8-31919bae10bd", "sighting_of_ref": "indicator--046438d5-0696-4d48-9421-0222b3e83ff7", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99520893-3742-4da7-a51d-cbd41626c459", "sighting_of_ref": "indicator--046438d5-0696-4d48-9421-0222b3e83ff7", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cb5a44-740a-4f8f-9ab7-0862ba64d3a8", "sighting_of_ref": "indicator--8947cfb0-bc47-4978-bccb-4ec34cc8c971", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88d8124-8c19-4eb9-8494-7d6c33ad2fc4", "sighting_of_ref": "indicator--8947cfb0-bc47-4978-bccb-4ec34cc8c971", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7a2606-3b38-4931-979c-592eb730d6aa", "sighting_of_ref": "indicator--4915b228-4f21-4747-865e-8834ac7bfe59", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bc322c-daa7-4aa9-874a-88b59cf73666", "sighting_of_ref": "indicator--4915b228-4f21-4747-865e-8834ac7bfe59", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d77efeb-0919-44b7-a9f9-66aae43d3fcf", "sighting_of_ref": "indicator--05c9cea7-c0e3-4c6d-8dd8-7e031c9bccfd", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d96bdd-6d6f-431f-b149-ca7f08619438", "sighting_of_ref": "indicator--05c9cea7-c0e3-4c6d-8dd8-7e031c9bccfd", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c93a3b3-607c-47d6-b4d7-2e83fc428e3b", "sighting_of_ref": "indicator--d906b1fc-b0a8-4fd0-9104-480a9b882bdb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f64553-46a4-4469-b566-5cd42b0ea756", "sighting_of_ref": "indicator--d906b1fc-b0a8-4fd0-9104-480a9b882bdb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31f4469-e2c0-4374-9a9f-58812130a0fb", "sighting_of_ref": "indicator--a6b78467-56ec-4580-aa1f-da2212823ceb", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c33f0e-ec2e-44fa-bcb6-43de667c2d4c", "sighting_of_ref": "indicator--a6b78467-56ec-4580-aa1f-da2212823ceb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5df7f5-ff87-4bbc-bae3-3c0c4f05687e", "sighting_of_ref": "indicator--674b0316-aa81-47c1-bfa7-563cc27d2dad", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ea5bf4-5458-4d89-ab93-bf8761cb39a0", "sighting_of_ref": "indicator--c83e6398-fd28-4782-bbfb-52b0980d3836", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091bb821-b31e-431b-9935-7b23c0b1f45f", "sighting_of_ref": "indicator--c83e6398-fd28-4782-bbfb-52b0980d3836", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ed46ab-aa19-4fe8-adc2-0da835f04939", "sighting_of_ref": "indicator--51888d66-0daf-4aa5-8821-da42adee7e02", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c40a46-eb93-4d92-9f00-d251c58baa62", "sighting_of_ref": "indicator--51888d66-0daf-4aa5-8821-da42adee7e02", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a06da2-43db-4dca-91b3-7dc6320357ae", "sighting_of_ref": "indicator--e8a15a08-1d98-40ec-b8dc-800e6d6660cf", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834ca442-f34a-4542-9f71-a6552d121366", "sighting_of_ref": "indicator--e8a15a08-1d98-40ec-b8dc-800e6d6660cf", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582a09ef-ad41-43bc-803d-9e6fc49d9836", "sighting_of_ref": "indicator--a379c8c6-3f29-4e90-a85d-3ce7f9a82541", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8497e24a-0e86-44ca-819a-95beebcb2b20", "sighting_of_ref": "indicator--a379c8c6-3f29-4e90-a85d-3ce7f9a82541", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dc634f-7f46-41f6-9f3f-257ec7d40c27", "sighting_of_ref": "indicator--b619bdb0-b541-4b80-9323-9cee17732302", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5364db-fcf9-4412-87c6-a2657488afdd", "sighting_of_ref": "indicator--b619bdb0-b541-4b80-9323-9cee17732302", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17446abc-47aa-4f04-8b94-7c2ec359c631", "sighting_of_ref": "indicator--81f1ae21-5afe-4a58-a184-56c91884922a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ebe29e-b639-41d8-874e-6ea317f84385", "sighting_of_ref": "indicator--81f1ae21-5afe-4a58-a184-56c91884922a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9881c4e0-aeea-4f61-bdce-d9d836488188", "sighting_of_ref": "indicator--be25b26e-84f4-4d14-a8ee-6eb1e472350b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115cc925-8058-467d-87ed-6da029a7d299", "sighting_of_ref": "indicator--a887325a-09e2-4f8f-921f-0b40c1c94d0f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf78dbd-425f-4f02-be2c-f2ddeae7088b", "sighting_of_ref": "indicator--a887325a-09e2-4f8f-921f-0b40c1c94d0f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a607c53-2322-401f-8de0-3f16dc456495", "sighting_of_ref": "indicator--ca65dc32-7e05-43d9-b821-5cc6e3977230", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd0c44f-8d60-47c3-997c-3d2e8ce942da", "sighting_of_ref": "indicator--5331c2e2-c1f0-4152-a3ac-0adc99253e7b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf0e8b9-9e58-482c-b59d-829d8bf1a5b7", "sighting_of_ref": "indicator--fffd0410-6390-4ccc-94af-d3079bc15ad9", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2464a65-1e7e-4811-813b-f8c9b62116a7", "sighting_of_ref": "indicator--8089dc93-96c6-4c80-ac3d-b6c9bd7ee38b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30a7af5-327f-4497-9566-a4d5797f5c47", "sighting_of_ref": "indicator--3235e5e8-85bb-4efe-82fe-671a40179df1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0066f9ca-a163-441d-97b6-2d59d67552f3", "sighting_of_ref": "indicator--4ad6afd8-f250-4bda-8c9d-5dfd2d4b4c72", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17801544-0c1f-4dda-abab-1365797b4690", "sighting_of_ref": "indicator--d3b5028a-4c8d-43e0-8d10-2694eb0c0411", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c3f56d-f6f5-482e-ab59-a0d36a2c3307", "sighting_of_ref": "indicator--e0d9d78c-1d18-463b-bd10-ef3bf9fbbe4b", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792932b3-aae8-47c9-b41f-86dd20dc03a9", "sighting_of_ref": "indicator--a0d56a21-497a-4a39-9838-1434ddfd6297", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75759d7-9886-4b7c-9917-0f568709e03e", "sighting_of_ref": "indicator--18e30aec-0e01-449c-9d76-1317fe508372", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654dc837-4770-4667-8d24-703cf1777ec1", "sighting_of_ref": "indicator--005590f2-ace7-4ed0-8ff6-0e70bfb8921a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f3d070-d268-4c85-b4df-09215b8feed2", "sighting_of_ref": "indicator--195ecd46-cf02-4b17-94a0-fe991aec87f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957748da-5252-413f-adc8-7df06ce4928c", "sighting_of_ref": "indicator--c628e426-dca2-40c8-9fc8-10f9b84513fb", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc82540d-b9af-4d54-84c9-60795627cdc7", "sighting_of_ref": "indicator--2c548e45-365a-469e-9c49-f86f63d5c1d4", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e7d987-1d0c-4f7b-be55-456740178e72", "sighting_of_ref": "indicator--f7b261c9-716a-4f7c-adf8-658df56d00cc", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a792eb62-456c-4269-a962-37be51ee59b7", "sighting_of_ref": "indicator--5d1cae77-b18e-4e10-ab91-abc18a3632cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e14f7b4-f222-4874-9b60-46c8c9f75015", "sighting_of_ref": "indicator--34baddfd-60c4-4832-976b-d5da52c867f0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecdbe1d-ea43-418a-a15e-4738420379c5", "sighting_of_ref": "indicator--34baddfd-60c4-4832-976b-d5da52c867f0", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f27354-4ac5-4f41-a8f6-82487718168d", "sighting_of_ref": "indicator--9a78b6ba-e4b7-47f3-bd0d-5503f3f6a97c", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3de4a06-5e4c-4eb3-9359-7dfae8703bcd", "sighting_of_ref": "indicator--9a78b6ba-e4b7-47f3-bd0d-5503f3f6a97c", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779b90a9-6ca5-4684-a61e-6a9e5ad3f7f6", "sighting_of_ref": "indicator--780c1a4a-3e8f-4ca5-8d31-de419beea3c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b452849f-5b7e-419e-a77e-88cce802d4e5", "sighting_of_ref": "indicator--b87fdfc4-b6e8-40a5-9a52-d1a866807868", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d31dc02-df40-4960-b5e0-9510cb8e6e4c", "sighting_of_ref": "indicator--40353218-6535-422a-823a-892bc7694c5a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f78dcd1-4564-47d5-a946-68768af47b64", "sighting_of_ref": "indicator--40353218-6535-422a-823a-892bc7694c5a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a5217f-b6f1-45d2-91f5-f1ad108a6fa7", "sighting_of_ref": "indicator--110a28cc-7f75-4394-87a6-a5a25e68d7c2", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05d192f-e6b7-45b6-ade4-10f0f666ba89", "sighting_of_ref": "indicator--967516a3-a388-4060-afba-9309a4d9944f", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb43dc4-f618-488f-b3ef-83d4d785cf15", "sighting_of_ref": "indicator--967516a3-a388-4060-afba-9309a4d9944f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fe8c97-8ea9-47df-9438-d9028cc14c9e", "sighting_of_ref": "indicator--50b1ef5c-4873-427c-a213-775fccccb129", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddb8088-3141-4630-a389-86cbd2a248c4", "sighting_of_ref": "indicator--fe2d8096-7829-4cc8-8a4f-d18c132eb73f", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02baade-f2f9-4fdd-b3ff-612b82d79adb", "sighting_of_ref": "indicator--57159280-d0d6-42e8-821b-d9a35dd58ad2", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed58def8-7240-453e-a8b3-1dccbb1ee986", "sighting_of_ref": "indicator--e728b3b7-194a-46d1-82b6-0627229ae5ab", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873874bd-0e8c-4a84-b806-9ab473164b07", "sighting_of_ref": "indicator--e728b3b7-194a-46d1-82b6-0627229ae5ab", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c1b7fe-89be-4a72-bcad-90b8a7830602", "sighting_of_ref": "indicator--d52feb48-c52f-45de-a400-8fd5043ed643", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac3649e-685f-4092-83d9-a3019e49803b", "sighting_of_ref": "indicator--51f32c04-0d5c-4a4c-81a6-9e4385038e85", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083b6f38-016a-4163-a2e1-b9960e5843a9", "sighting_of_ref": "indicator--919fcbb2-744a-482c-942a-1bba5a34b8fa", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d89bd1-304d-462b-9d17-6b46c0f40016", "sighting_of_ref": "indicator--311b9348-8e85-4477-ad58-ddb7ea625e83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f47d1f3-4afc-4da5-9e56-580ae78ec24b", "sighting_of_ref": "indicator--06c963bd-4f59-4ef9-b407-431804dcbe9b", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428218c7-d25c-4082-a916-3f680a0dc56f", "sighting_of_ref": "indicator--ccc9817f-d91f-4f28-bdb9-2d15551ce02a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecef7e2-c33c-4a08-94d2-9a6bfcff8e9d", "sighting_of_ref": "indicator--0d9bd5f9-c15a-43bc-b782-603d5d2addb0", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc70d26-4e99-47cd-9914-901b0b73e90e", "sighting_of_ref": "indicator--909c18c2-f6a4-4f00-ae2f-c5be4e393235", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2744c9bd-058c-4975-9f29-d52e95537388", "sighting_of_ref": "indicator--bf4a63e3-9c14-4305-9075-6181df3dfb26", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939d502d-8f43-4fac-abc6-58f4b1c3c75b", "sighting_of_ref": "indicator--0b4e67ea-c22f-4221-aedd-1ad71a50dc9a", "where_sighted_refs": ["location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc67d6d-42e3-4f94-a430-1e06243a45c3", "sighting_of_ref": "indicator--8194ab2e-a602-4b0a-89df-ce9055de89c6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05acae3f-0feb-425a-9ae3-4cca8b9dbe6d", "sighting_of_ref": "indicator--aa550f3f-6037-43c9-adb1-c1ba46d80c8e", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a23dfa-36f0-4f90-a8b0-bbba7e36a8a3", "sighting_of_ref": "indicator--aa550f3f-6037-43c9-adb1-c1ba46d80c8e", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf294423-0b2a-4942-97d0-cea3bc22e40c", "sighting_of_ref": "indicator--bf6ffb60-67ad-4f21-af79-49e495ed3b1d", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a611dfb8-3433-4a42-9321-9b231ddbf7e9", "sighting_of_ref": "indicator--07a96b15-1db5-4baa-949b-48c020f9ca11", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f75151-8c42-4629-9247-9483a1474747", "sighting_of_ref": "indicator--f908361c-3c3c-4052-943f-fe341c4bbb6b", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c49d30-0cad-4cda-8829-e35e83356afb", "sighting_of_ref": "indicator--f705645c-305f-42db-be76-521f6ec4ced6", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4345a891-4345-4321-a1c7-7383de7b70d6", "sighting_of_ref": "indicator--34b941df-e7b5-4871-ba7c-b0d97303ecf8", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c04c10e-9ab3-46ac-9bb8-83ee9d97453b", "sighting_of_ref": "indicator--89b83fb6-258e-476e-b990-495d2452f987", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65764318-df48-4ac8-adaa-8f6b2bd71504", "sighting_of_ref": "indicator--87bb5e94-9b52-4521-8778-59487353c06a", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca7b1aa-88b6-460f-9ecf-0288cd4c3343", "sighting_of_ref": "indicator--87bb5e94-9b52-4521-8778-59487353c06a", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa05dfe8-e2cf-463d-8e2b-e6f292963585", "sighting_of_ref": "indicator--79c0d80f-f4ea-4552-b630-43eb407b07df", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ba18b7-b44c-4a61-84f4-3ab1c7d27cb6", "sighting_of_ref": "indicator--79c0d80f-f4ea-4552-b630-43eb407b07df", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b48dc10-35fc-4f0a-8a12-5cb8949285af", "sighting_of_ref": "indicator--6a93072b-0c67-4133-9b40-381619a677af", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce20016a-b12f-4fa7-94a7-7b707b648f38", "sighting_of_ref": "indicator--6a93072b-0c67-4133-9b40-381619a677af", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee501cc-eefb-4ceb-8f33-c79c0211d717", "sighting_of_ref": "indicator--a9209896-ea97-4d3d-9439-358913d53638", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea44737-1ccb-41bc-99ca-1ce5562b90e6", "sighting_of_ref": "indicator--0a95a9ad-788c-4559-b3ad-824b4ec1fbd5", "where_sighted_refs": ["location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f0863e-e6db-49f0-bfea-ecc27427a390", "sighting_of_ref": "indicator--be09e994-7858-4ca1-b8a8-6d90bbe7896d", "where_sighted_refs": ["location--f073b615-7356-41b8-8ebe-9c50dd732857"], "first_seen": "2026-07-25T00:00:00.000Z", "last_seen": "2026-07-25T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--d1f8a71e-44ff-474a-9fab-1d54d0bb786d", "name": "Threat Report for 2026-07-25", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-07-26T11:00:01.998Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--481a5d1c-1e73-4ed6-8539-65c1e59c8b94", "location--7c6c15a8-7bf7-4ea4-8f03-2de28581c04f", "location--f073b615-7356-41b8-8ebe-9c50dd732857", "infrastructure--dbc1b77a-91a3-4403-b077-b9330bf6c187", "infrastructure--e93bece5-b15b-4b79-b7f8-0d041ec94dcc", "relationship--894a3f20-700a-46f5-9aac-95a0eb31584a", "infrastructure--0f6dbe6d-eac5-4655-9697-2f895eb0ec89", "infrastructure--da1603dd-c286-42f0-98ab-9327738d576a", "relationship--ccc47762-d777-4633-975f-3fc2f65ab693", "infrastructure--cbcf7622-8d2f-4df4-9359-d8cee7438be8", "relationship--b92cf9ff-eec2-44b7-aa80-c45e41b3118f", "indicator--92ab34cc-d0ee-4e25-976b-be5e2ad284a0", "indicator--fe4bb7dc-6ae5-4959-90da-e4b156b30f4b", "indicator--f77f3081-099b-4d1c-95d7-8dab7332edff", "indicator--d4dcda68-8d6d-4716-b989-5186b96e431a", "indicator--85448b73-9cd6-4ba8-a67f-f7d4559a9ffa", "indicator--1b12fd34-30fb-4c2a-aed2-5e6147a69362", "indicator--edc7f371-69b9-4d65-9c24-a16bee368e32", "indicator--013204b3-8500-4505-8727-1ab3b6c14d83", "indicator--05fb6a7b-9edd-4e70-8d32-65798ba15697", "indicator--b45a803a-8de4-4354-b7e3-60cc386813b6", "indicator--aaa5b12c-84b4-4c6d-ac39-2a5cec57db77", "indicator--5f84f39a-aeeb-46bf-8245-8bf3098ca021", "indicator--46fe22ea-94b1-4a3e-8063-801f597d09ec", "indicator--7f5db0d1-f0df-44e8-8f92-4912c2f581d8", "indicator--8fe128bb-e1a1-4989-a0eb-d6806dbfb757", "indicator--99ab0974-0a3c-42c2-a8bb-4eadbfa44acd", "indicator--92a56e9c-20bf-40c4-9287-0baa10307562", "indicator--7b7660a4-5cd6-4aa5-ac61-0e7748f01279", "indicator--06b666c7-8b5c-4b5f-9066-5e7fcb68985a", "indicator--8991fc97-725d-46fe-9fe5-77da28de52b4", "indicator--10eb7ea5-1907-43e9-86a7-c8ec95cdcc6d", "indicator--945903a3-61c7-4fc2-92ef-b5f9faed3288", "indicator--dd9a1bbd-60da-4fd5-a833-1cdf26b05d1a", "indicator--6badbfb5-148f-42a3-969b-37776d1c7ee5", "indicator--e78a7669-9b1f-4ec5-8736-1f51ce4e6013", "indicator--1900771e-85b5-4895-8092-208538798024", "indicator--04e7cfe8-f797-4dfa-8907-45cef78ec3e2", "indicator--477b5c98-fe29-4c14-a80c-f41a9faab4b4", "indicator--24159a5b-80f4-4594-a355-f8b8d3c22898", "indicator--61bede8b-1290-42b0-9e08-58ad48ea322a", "indicator--26ff6a83-cf42-4010-8579-5c9c414cf382", "indicator--07a2ba2c-d5d4-4379-a44d-627b87eabf28", "indicator--a1d69b3f-dab5-4d91-868b-ab0ef77bc64c", "indicator--b0e5822e-41db-4098-a5d9-fbcb1c6bf4c9", "indicator--fdb767c4-3b86-47ac-83f6-057e4411be2d", "indicator--5e04f26a-7ee1-4966-93c1-522b36d15323", "indicator--7c656163-2f0a-449b-99b6-f3c603fdad35", "indicator--86dd93a6-e59c-4d1f-8e5d-bb348f72847a", "indicator--c81f070d-e2ed-4577-b593-0bd92ce6ce5f", "indicator--bba322ef-d7de-4e69-a9f3-d2e50c49952e", "indicator--b5669f7b-2549-4e9b-b6d2-d5857bd9475d", "indicator--1fc4944a-28b5-4068-9512-8f58ebc8977e", "indicator--2c2d9249-f074-4368-9eb6-c6d28a7431d6", "indicator--be33edfc-f005-4d72-a9a3-d12014fa2f69", "indicator--0e733a60-d2c9-4718-a4e1-82cd79da96a3", "indicator--91c9255d-16b1-4977-8cfa-bf2b1e454947", "indicator--2e813240-f5a9-42ef-ae92-46920ce4a0d4", "indicator--4deea210-44f7-4eec-bd1c-128114551d18", "indicator--06465c5b-772b-496e-bdd8-d0d7cbfb736c", "indicator--19e2e8b3-f31a-4677-bfd2-3b28274994d5", "indicator--40f2c1ad-add9-4d28-8107-708c357a694d", "indicator--ce02ca4f-e3b2-4ede-950d-cdc69d5b8ffd", "indicator--2bb4ff69-24eb-4f93-a5d1-3c09b8b0f1e1", "indicator--93ce60f4-df70-4c98-9272-c3347ae19bfb", "indicator--5be6cb5a-c3d1-4585-8463-6a954e19b249", "indicator--40bf58dd-991e-441e-9dfc-b4dcfc1e56fa", "indicator--22ad1653-ff33-4764-a84c-138bbd1c7d8c", "indicator--1abf418b-6982-4589-9fc4-523378553d49", "indicator--47ad290b-d68d-44a7-84aa-a52de47bf7c8", "indicator--95f2e4c5-2dca-4638-86ff-0323abc0d11a", "indicator--b691d8dc-b19a-4842-bc1b-9de8f1f34779", "indicator--0c2f8c33-eae5-4d2b-bc47-8309984a26df", "indicator--6840e7e7-e27c-4208-baa3-c4cbf8773713", "indicator--a164324d-021c-4ff7-b8b6-3a2f20bffad9", "indicator--a844a4eb-19d7-4298-a1c6-be3f179936b4", "indicator--803b5ef3-2805-4447-ae2b-33ebbbb609bf", "indicator--2b05c533-cf6d-4ac2-8db0-258c71204663", "indicator--02b65e89-b8fe-45e2-8b8b-e24721c9ac42", "indicator--d7d570b3-ca90-4114-a7b8-1edc1658b423", "indicator--d4041b24-6ae5-48a2-b0eb-75f9e2167663", "indicator--5ad190f3-5417-4bff-a118-e21c625ee6f3", "indicator--d687b576-187d-4143-b522-96f9b43b32de", "indicator--d3fc4ae0-f5a9-4976-b86f-79b003a1ff13", "indicator--bdb72024-1a8e-49c8-a4f9-10c8bbe49257", "indicator--293ae04e-68e4-425d-8466-a1e4fae241fe", "indicator--7b0ec91d-0bdb-4b5a-a525-b6ff855102d0", "indicator--7dd85936-a2af-45f1-a7f2-11d74b52482d", "indicator--8024827f-5387-451f-93f2-82d75b472215", "indicator--70642626-4e52-468f-93d3-268cd0d396c4", "indicator--c4aa41a0-d730-4629-b362-f63330f3d329", "indicator--5b8eb4c6-58b3-4341-ba22-ac2388af03cc", "indicator--4f26fe89-2d79-4de3-882a-3f4dfc85fa42", "indicator--db3d1f01-1f53-43da-918e-fd735e3af227", "indicator--bc0bc086-dee0-451e-902e-69430c0a72c9", "indicator--7c46c2a2-8b4e-4b2e-874a-65c64cf7d9f5", "indicator--7f6bb013-5f56-4d5b-b2ce-8a7d7a14a67e", "indicator--ed1d40de-13de-4313-b069-1abcc4818fb7", "indicator--ca69ce61-03aa-441e-bdc6-d39cef27d9ba", "indicator--d64c08f6-a208-4dd6-afa5-9902d1ac5bec", "indicator--5b49e527-d257-4342-8b2f-788407cb1d41", "indicator--813c424b-33f1-4b0c-9475-5ab000d94905", "indicator--6372a46f-a8d9-4814-bc88-204d5ba02252", "indicator--cf260aee-8605-4d86-bc93-22f2f198ea6a", "indicator--18e50421-8af0-4c11-ba47-c5ee6e4f75f8", "indicator--3c16173c-df8f-42cc-8d0d-170b11ba8f28", "indicator--d49d6a26-956f-46a2-9c38-ce3727858863", "indicator--9e9f5880-d8c9-428c-9d52-320424eb48cc", "indicator--3259c7c1-c5c0-40dd-a61c-c42558d2d06d", "indicator--4ab5dcfc-66cd-48ad-ace9-7b99a90757c8", "indicator--3ba8e618-88c1-4d4f-9801-4939dce0ed8b", "indicator--3bbf988c-d12d-448b-9a09-adf0cdff2cb3", "indicator--d5d37e7d-6f62-4842-ab98-5b45dc9b3bfc", "indicator--5fc7ea06-1f76-4c80-8544-99007e18a564", "indicator--34ec292b-09bb-4b8a-a346-b69acd2bf44a", "indicator--295f5872-8090-4b94-8902-76b701894738", "indicator--adc28da9-205c-4267-9ec5-aca6077a9fd9", "indicator--685efdff-0488-4efa-a41c-38b3c4765e2a", "indicator--52a696d3-50ea-41ec-b8cd-136f86376840", "indicator--a8535db7-81dc-4814-8183-bb8558f98da3", "indicator--c4aa6d50-1fab-43c1-8279-df484b7fead0", "indicator--d82b1cb1-94c4-44ae-bf8d-a32dd4ce7516", "indicator--af6a8de1-6819-47c3-a414-48ef9cf60ab3", "indicator--31cb05f3-eb02-4f96-9263-9c6ea6b9c056", "indicator--cc251db1-6e90-4283-b6e1-b60a177d1a8f", "indicator--da20cf3c-9fe0-41cd-910d-694aaec30389", "indicator--73697ee7-6168-4050-8e76-b4e5ae3f2927", "indicator--475b9400-725a-419b-ae88-0cbf1b8cb7c1", "indicator--8e333102-9beb-423a-99de-cc365861c445", "indicator--ecaaa9b2-2988-4b23-9e47-07ae3c8ac352", "indicator--0a3d9a37-526d-497c-be5d-cd73e86ceade", "indicator--8626bab1-d205-46e3-88ef-4f18f2158391", "indicator--76ee289d-90d7-49f4-a072-ad0564f81ae6", "indicator--f4a5488b-d7f7-4e26-b1ad-09344392f9ec", "indicator--f60ffee3-8d3c-42a2-9133-dfb2cda2325e", "indicator--5217323e-9389-41e3-9e7a-7222d4623cde", "indicator--202c937f-9127-4942-b1ca-05604bbeb3db", "indicator--6ba60619-c4ab-42a7-821d-3bf6fb71559a", "indicator--693a2efe-cf6b-4715-a073-9e8ca3f45b42", "indicator--bd5a7f8b-b721-4187-811a-a28e31812d63", "indicator--00ec01ca-26ee-4d37-9187-72af1a6d2b99", "indicator--dc1e7d18-cc77-4e9c-b7e0-ba04113cddab", "indicator--ab7ab243-7476-4676-b97e-d41c352262a8", "indicator--e1c3127c-7e96-44d5-b251-db2f43499d18", "indicator--7bfad025-6ec3-48a4-9ffc-362f6b864909", "indicator--7de3e7d1-e70b-4692-ad8f-e3b076964f9b", "indicator--0127d90e-85bd-4b79-97ef-166c0d3b8abd", "indicator--b9752ce0-817e-4a26-bb15-16c09c3d9b0e", "indicator--b1d169fd-7ff4-4632-aaf9-1708811e6ba2", "indicator--84e94976-1010-4497-b3f9-ed538094996d", "indicator--41b8ed50-f84a-400d-be06-3bae1dcdcfae", "indicator--15d2da9c-a72d-455d-a97e-d3ba2d488d5d", "indicator--defd78a7-d206-4a7c-a005-62023cb26736", "indicator--96a58215-236b-490e-8659-261081c78df1", "indicator--bdf3f421-438c-499e-896a-4054f99d32b4", "indicator--d0f9fb6b-9bbf-4031-b14f-19798023ecea", "indicator--235413f4-f166-4b8a-8da0-1770b7987146", "indicator--cbaa63dc-2226-4f56-86db-e094a99de04f", "indicator--169550c1-3417-4818-92af-b7d9c8185081", "indicator--5ee1bbde-9e6e-4ddd-bcc0-0eb74e8ce4bb", "indicator--2f477b71-26af-4ff8-9826-ceaee06938ac", "indicator--48a8e0b3-a94c-4f91-a411-fcaa9e08af01", "indicator--5c97c5e7-09c8-4b10-a333-fd6902dacc40", "indicator--964e423d-2245-4653-b7aa-a174f9bdbf74", "indicator--e035183b-5e46-4e11-a3ec-2074159f1c49", "indicator--0f202f1b-17fe-45d8-b806-0cef6dec9860", "indicator--99691b68-196a-48fa-9ea3-4cc2096de591", "indicator--2022baf1-7f0c-4322-b7cc-c7ba7754d7ae", "indicator--6e907d79-a046-46eb-b33e-9a9a185d2e1b", "indicator--ab5348a1-c545-480d-8ba9-753918aad474", "indicator--d766f07f-b493-41fd-80e0-09218ac8c3e9", "indicator--5e576c66-579b-4920-9f88-8db979c91c8a", "indicator--29989aa9-7619-4fe2-8eec-45f93dcdc865", "indicator--307a031b-c5a3-4fe4-8a06-30abe4658d0f", "indicator--82c817bc-6ef4-4692-abf1-51ed7392c46b", "indicator--1f7779fb-ebd4-4ed5-b692-4b29646b68ba", "indicator--da435027-3237-49b4-99f4-518faf6a075b", "indicator--7587645f-b915-4a75-b39c-a56c0bcc546e", "indicator--ec894ea3-1247-4658-8661-b05486aa1a2b", "indicator--4dcb9ea5-d5e9-443a-b7c1-c20df12513f1", "indicator--99be9232-6eb8-4b11-8543-b927ae5f266d", "indicator--79574328-a806-44cd-a361-8827fc0ea3f8", "indicator--ee96547c-1bf4-41c8-8cd6-6b4fa849bad0", "indicator--f22b7b65-f2cd-467d-a938-e14897b0225e", "indicator--122a3555-6580-4236-8fc2-95a06c146cb9", "indicator--49d29fdc-8e92-4df0-8e84-2b886c7185a5", "indicator--87c027c8-a79c-4d48-b628-cf08f6ba5193", "indicator--18e3c24f-f27c-4a5a-930d-055912c4a0eb", "indicator--336cfc7d-20be-44bb-a9e6-68b99fb4a333", "indicator--69f4291f-5156-4177-8583-f336aa209fa1", "indicator--68447c5d-25d7-4d4d-9266-9f1721fc4fcf", "indicator--401491d8-79bf-41f6-aea2-fa6994649ff0", "indicator--13d8e789-d16d-4de8-9161-5877db1dca53", "indicator--9109684b-b9a3-4135-8d89-1838de09ccd7", "indicator--3c9eec19-3d24-4578-ad80-1b4edd7a5b71", "indicator--e7c6a8c5-f514-4195-a650-601494b2a31e", "indicator--e6a7d8e7-715f-4e55-a63d-e3f403ecfac2", "indicator--6e8f32a6-2ed1-4bd1-a20c-9baf6b029d3b", "indicator--487ade0f-d5df-470b-8a7d-8279c2bf9002", "indicator--b145c311-60d9-4551-b66b-902b31915a1b", "indicator--ead583a0-3696-4cf1-89f9-8e6b68d0c408", "indicator--7e26d431-901e-40ad-9516-d8e417898199", "indicator--6e88c969-0833-4386-9a8b-1448a22fbc8b", "indicator--68de64eb-8b11-4005-8829-77e7d50765d0", "indicator--bab02a3c-5b03-40c4-971f-54c8733501bf", "indicator--57e7f5aa-c716-488e-bdef-d30c4857fbec", "indicator--825df335-42df-4c79-8abb-413719eade01", "indicator--81015cb6-5c6a-4566-aeb5-263f8ef4d8a1", "indicator--f5684e32-93aa-4469-a651-80b94971bb11", "indicator--77b30ec6-56d6-42da-8b5b-20dfa882f68c", "indicator--f855f050-c960-4843-9037-964f57f9192c", "indicator--724ad0df-db1b-4ac4-a08b-93f96c001746", "indicator--42d7817d-8a52-43f2-b6e5-3f33d8c1f6f9", "indicator--f38b56af-874b-4ba3-a273-2889d7cc30ea", "indicator--9b2b74bf-79d3-44ee-aedc-0d598d844e6a", "indicator--a7820ea5-eb12-47ee-b00b-19a24ded3a5e", "indicator--a7e6597a-f011-43a2-906d-cb2fa28628a2", "indicator--4f78fb8c-679e-432c-846a-55a17aa105cf", "indicator--47738cdc-e1ae-4dc7-9a53-8dccd03ac7e1", "indicator--ef47c746-7538-4e1a-b335-133e14a38343", "indicator--b0848cf3-917d-444c-83eb-2ff3babec646", "indicator--c79d7acd-795a-427b-b40a-0a923b075d23", "indicator--7e6c6f69-d1f5-4710-8bff-89f82d6aa7da", "indicator--d8e8f7f3-4abb-4043-8d74-6936b9b3176b", "indicator--dc774e17-b506-4b7e-a6a6-f444d4a1bb51", "indicator--3f2cbaeb-ffaf-43f2-be32-6f215de04605", "indicator--2add1ba3-0202-4051-9bde-78f18a491817", "indicator--f4d2a181-7776-4cf7-b36f-6c57d8ab5bab", "indicator--f4b9a701-79b8-495e-b63e-49c4c825a9cc", "indicator--94a53796-7c84-4903-b31f-0ab12b5c38f0", "indicator--75bdb75e-cd2a-4ea0-a053-4bd6e7622708", "indicator--5d739121-3be1-4eca-96f6-b1371fb65cb9", "indicator--4e2b8f9b-a841-4eb7-9b99-b9de641f85e4", "indicator--3df75c95-6e57-4552-9009-a66b67f5e5bb", "indicator--e8c98173-6c10-4267-b51c-3de2b23db820", "indicator--f9c77dd7-2e44-415e-a127-1bf2ac859d81", "indicator--f35038b0-e185-4684-a893-c3d53f4f8e6b", "indicator--7f65b790-0d76-4aca-9b9b-9379518e87aa", "indicator--153f233c-0b79-4c22-b07a-31a353085e9a", "indicator--bd56ea59-42ef-4c9e-bfe5-70e2b69fa3f5", "indicator--57e72291-9a75-469b-9cec-40b15752d302", "indicator--9ce41b99-2810-4caa-9b27-3a22a35bc3d6", "indicator--c0ab71c7-82c8-464b-8ec6-5f42c30809a0", "indicator--c8098c49-6f50-4487-9191-f457ccca6a81", "indicator--c883f97e-e6ee-452c-b6b8-d339d049f42a", "indicator--f91f07de-dbcb-4d75-833e-0deb13ea5652", "indicator--34d42b14-0521-489d-8a76-5b69132fc2c5", "indicator--f9545e11-4e04-4bae-960e-0a4d55c2c5a4", "indicator--ad7458b5-83f8-4291-9f12-07f8c8722d24", "indicator--423a6627-de9b-4da9-aeb8-80a316022cb3", "indicator--096d1301-b00b-4472-9df4-ab52ef49c9b8", "indicator--db34d9b6-9fed-4680-853d-0d1dcc991a0c", "indicator--3dc7856e-376e-49e4-9b8b-ead0e232380e", "indicator--98f258b6-d263-4135-a763-a1744ec7cb3d", "indicator--dfab066d-0cf2-49f3-a152-20373ed4d736", "indicator--804f3522-f1ce-417a-8f72-184d7b6fe63f", "indicator--999c5f68-6873-4221-9f92-2c1690fdbd3f", "indicator--b7e7bc31-6933-4563-94ca-835a1224aef6", "indicator--568afabc-f719-4531-8220-9eda6d0af123", "indicator--ca1c7df6-4114-42aa-9f85-fade15250c2a", "indicator--5c572b0e-d5a2-4062-8735-b22e9f2aed2f", "indicator--3a1e75f4-f7b8-4bba-8af7-6406cfd8102a", "indicator--cd678ca6-46f1-4683-937c-ce64a6b4e5b5", "indicator--fa95ea57-95d2-41eb-ace7-2c2f64975ee9", "indicator--e3b8e546-c46c-4f60-93b8-9f5a899947a5", "indicator--07332537-fc62-40b4-8e78-0e682ba8211d", "indicator--ec0d8210-2299-42f0-b8b7-68a08280139e", "indicator--5d6aab91-f672-43d6-b671-440239bc815c", "indicator--96132513-bfab-477d-8d13-d2f96bbfaa66", "indicator--52cad6f1-b693-4455-9d9a-f288d659f577", "indicator--2ce161f9-d4a8-4074-8fe7-8d61c1df0683", "indicator--dfc787a0-85c2-40e3-8622-a2e357e20d36", "indicator--734542cb-fcdf-4a12-8a43-6701c1d79831", "indicator--79d73e5a-1cb3-4cb8-a7f8-4a3137925448", "indicator--904168a8-dc2b-44b2-9ec7-4a12e4319982", "indicator--ccd792b0-d5b8-4fb2-a460-a99664efa640", "indicator--b209d62b-bfaf-4634-952c-b8376c63fbc6", "indicator--188d1e4f-2fdb-4f7d-be51-ddab97f5d99b", "indicator--852a5eed-f4e8-4d55-8d05-3e9fa1560991", "indicator--4e68724d-3918-45a6-a1f3-6907517584d4", "indicator--5393a05f-62be-474d-b935-1d8c4a69de68", "indicator--879ee032-541b-47f6-92b0-68003ee54879", "indicator--18140aa0-92e0-488e-9b3d-25450c0b5e1f", "indicator--f482dd43-9cfe-487a-a408-8c68151fa4aa", "indicator--c1e387ea-6021-4f2e-af8e-233588c8df06", "indicator--9c6a90f2-bb31-4281-bbd5-ec97001d1c92", "indicator--f8351727-9fe2-4d2b-aeb4-9e4c26198442", "indicator--1a7cb809-c006-4a65-8dcc-1f0044b89ed5", "indicator--435f4b5f-095e-4135-81a5-c9bfc958f8fd", "indicator--96d5058f-9772-4b83-8ec5-c1cbb2927a96", "indicator--daf6296c-49d5-4b82-ba1c-8e961f2a69d9", "indicator--5aea644f-a604-475b-9ae0-c5036ce5a666", "indicator--090ee22b-0e54-49a3-a32c-647325b349cf", "indicator--9f17353a-b8ab-4409-beec-8125e02a1cc7", "indicator--bf871dd7-4e05-4ee0-9030-caeca6672873", "indicator--602cef69-86a3-4905-9143-af35283bf89f", "indicator--ef6681cc-8b48-40f6-9a26-574e9c1edabf", "indicator--642240c0-a547-48a5-bd50-66297663b112", "indicator--9db691c9-b37e-45d3-a19c-0ec51a094410", "indicator--8e368d0e-4fb4-419b-a457-a94ce93c8d22", "indicator--184dd30a-8b41-4908-96cf-e691e60496db", "indicator--54e56c93-3c12-4dfc-b25a-2c48f6627f41", "indicator--63d30ad2-91d2-44e5-94c2-0bbaad104477", "indicator--91f09d48-64f8-42ff-91a3-bdd0f0f85ced", "indicator--3a52b005-d3dc-4424-beec-dfbb7da33106", "indicator--e17e06f5-458b-44bf-b044-1ca28a9eaa39", "indicator--2bfe5e03-6527-4204-9277-4a69af523db9", "indicator--643a2cf9-cac6-4a6d-a97c-7e7567e31155", "indicator--dbe8e934-77ba-4484-9551-1e34f922fe35", "indicator--7a45df9e-06a4-46f6-9781-a47424a5a6c1", "indicator--766c2c7c-05c3-4b0d-85eb-403438c38b08", "indicator--e20f8059-f3bc-4c2d-9753-0307c869cfb8", "indicator--5ccc2aee-8793-4cb8-af16-82d0354fa448", "indicator--a31eca1b-49a5-4129-bf16-1be7badf1749", "indicator--44a227e4-cda0-40b8-a9b0-1dde44fbc8f5", "indicator--8231cfa7-7de8-4c09-899d-816e8fb233ee", "indicator--98669d4c-2d25-4bcd-baaa-6801f4da7458", "indicator--db2cba6a-45ff-43a2-81d1-113414a83a47", "indicator--a949365a-e1f9-474e-b229-617ea83abd0d", "indicator--6bfe63a1-8906-4e3b-b44f-f969407c6856", "indicator--33b2db6c-50bc-42cf-9d2c-0bbfa5a6d503", "indicator--45e6a7cc-0505-4ab7-8c67-e8ea1618723e", "indicator--c92ad632-6269-449d-8644-76ccbaeb3804", "indicator--9bf29530-ac4e-4306-9a69-e2af2c5bb169", "indicator--b2ca0e69-71b8-4fb3-a61c-35fd2f42fc7d", "indicator--4da8d7f2-213b-4cd0-99a3-69368ce20e10", "indicator--1d670786-fce8-4fe4-b15e-dcd5f3a23727", "indicator--f94f0ce9-f4f4-42ce-b171-3277dee8464d", "indicator--cb7a533d-213d-4331-b9f8-a1ccc69cea75", "indicator--f2bde505-893e-4b59-9eb7-b2d3ac10ea8a", "indicator--ee88950a-4483-4c20-ac6e-cfe78c7aa0aa", "indicator--ccc739d2-2a58-4546-a3a3-4a297d41e061", "indicator--d4b67f2e-475c-4fec-ad84-05042d5c3d9f", "indicator--eefe20e3-4fc5-4331-a1ac-b4aeda125508", "indicator--58e57f15-79ca-4396-8c76-bbd49f08b6fc", "indicator--b3584f75-aae1-42dc-8ebd-94838197303f", "indicator--1c2418af-f153-4c3c-80aa-e1ad7b6f1cb0", "indicator--155d1d51-91a7-4640-ba00-e807dc621cd7", "indicator--44448980-768d-4783-ac47-4b15627ffc0d", "indicator--3e41eb59-6731-46d6-8286-dc790a30fabd", "indicator--96c2dffe-2f87-4d5b-ab96-bf4b529439f9", "indicator--c8e1fdea-3141-4876-8030-fe83ddc14c27", "indicator--4b147a78-fd88-42fe-9cd7-e1393211eeb0", "indicator--d4c22a65-d79b-4bd1-b296-0317be253793", "indicator--4c027d3e-a04f-41fc-bc3b-fd6301fffcb6", "indicator--cf10a9af-b677-4a79-a802-f4e5af5d9a82", "indicator--209b980b-20a0-40b7-9c3d-02d33774ca80", "indicator--5f140b95-6cdb-47ec-8199-fa33acd709b4", "indicator--d59b288d-d848-48e4-9992-b462fe1ff9d6", "indicator--18b269e4-bffd-45ef-9268-897f0220b311", "indicator--bfc36777-bafa-4ab0-8dd7-e79c9ddbb5c2", "indicator--cf4c0364-680c-4209-b61a-61d6589ec2b0", "indicator--3efba8d9-23ad-4aaf-b28b-e7df179b8010", "indicator--93826aff-66ca-4d0c-a974-afc8c5257501", "indicator--6752f46a-b67e-4192-afd5-e570a2ed23dc", "indicator--2606912e-20ca-4863-b7b0-fee23660f725", "indicator--9b79c191-d7a9-40a2-98c7-cd78e0f6a0cf", "indicator--d92943d8-b154-4209-9118-ffc2ba0c88c8", "indicator--2fa56e49-986e-40c9-bcb4-cba52eb73e72", "indicator--5b0744e9-91d9-43af-b9b3-67329a81b00a", "indicator--ea3e243a-5870-42ce-a56f-30eacc3f7c0b", "indicator--ecf4a378-19f3-4983-8669-e29fcced553a", "indicator--64a07ae0-0e47-4330-b8fd-5e3851109ce9", "indicator--b4e64aaa-bac4-4e3e-a49f-837979e86ba9", "indicator--a3a2755d-e7d2-4e34-98c3-aabc089949ea", "indicator--2611c0d4-074b-498b-838d-3c976d7fcb56", "indicator--326f3e01-fd06-4908-9b62-d921df9599ba", "indicator--6177ee39-58bc-4386-9fab-2b1dc7b5b700", "indicator--411c9a3a-d8df-467e-8d42-5feb8fdee6e7", "indicator--8faad233-a3a3-4fad-9d73-d232ebc13e3f", "indicator--b0226295-be5e-4df3-95bd-bc35daf400f3", "indicator--dbeceea7-c286-45ba-bc72-0f831709c7a0", "indicator--75d9dd5c-14cb-4347-9564-daf098f77e12", "indicator--6597381d-ab46-4c16-a6dd-605eb2829362", "indicator--9167cd93-cb85-46bb-80c8-cc7edfe3e1e9", "indicator--8d854002-c3a7-43ee-a2a7-532c2921446c", "indicator--83bd7aad-7de0-482d-83a3-b5d45870bc80", "indicator--bcb68fdd-7f02-4aa4-8f22-989caf8f8f05", "indicator--33cb6f50-3f63-44c4-8c25-c57dbc3f327b", "indicator--e7eba10b-cdd1-444f-8896-61f1207e862f", "indicator--65770326-1ade-4392-9a29-f8ef5c2aeb02", "indicator--b247b9a0-a537-402a-92af-dfafbab56e4f", "indicator--bf45b8f6-5885-4d3b-b19f-c9a188717d35", "indicator--5f420b1e-d911-4f2c-bc4d-569aaf06de58", "indicator--54e17da4-9330-47a0-9e05-5b1debd100e5", "indicator--74509833-19e1-4830-ae93-c6754f023c9a", "indicator--c8c9874c-46c6-4f39-b2b3-d26c878ed03d", "indicator--53faf937-c212-4d2c-ac76-efb4d7cb5c3e", "indicator--bc6b3a76-a1e4-4c21-aa66-0efca0249caf", "indicator--6a68368a-7649-45fb-8fac-b56c893f3b79", "indicator--62139661-d512-461a-a309-4bf8314da69b", "indicator--6d378092-de79-455c-80ec-36a3ad36aaa9", "indicator--5ce4c824-ddd0-4295-8369-1288a307fc9c", "indicator--43154942-8dc2-4bb4-b652-878c50b2ebb6", "indicator--707f7150-e9b3-4099-b795-6957c57dcfae", "indicator--19e51658-e8a9-4ce6-83c4-07c1dfbf0c5e", "indicator--8372cab8-ed70-4267-a084-1e4804633cce", "indicator--36b14cef-bb92-4c09-9db4-5919dfa1d797", "indicator--8cd198c3-229b-414f-8235-e8eb6c3c61bf", "indicator--b3e02791-7b5c-4781-98d6-4baa567c33b9", "indicator--29603c1b-31f7-4605-bdd8-76b7618428cb", "indicator--9910560e-6a94-49e6-88ab-7887c9800e0a", "indicator--41cd7445-e8f9-4ccf-af08-825efee47940", "indicator--d7397b8e-30a0-4854-aff8-e7b5ba73a6c6", "indicator--6df308df-d985-4bf2-975c-6d2f3f5c64c6", "indicator--ccf07b9c-4cbc-4ef7-b7ba-ae5711c7eea2", "indicator--6757cd75-0507-4f64-ac60-1f8deae0e7f6", "indicator--93bc6164-f4c4-4cd8-86c6-f8315ac6b8e8", "indicator--2872e994-2d70-4a7f-b4d5-d849b0f7a98d", "indicator--43253a6d-012b-4ad9-ba3a-3dfe29c437f8", "indicator--8bdb62fc-94f3-4c5b-b37b-59743d9ecd66", "indicator--984ebc88-704a-4e9e-8604-c2ad3505f6ac", "indicator--6525090b-5674-4847-8156-b4cd4cee3501", "indicator--951ad228-0dfa-4340-9913-22558a36d4f9", "indicator--1c90e957-81b3-4ca2-b62d-7715928e1ba5", "indicator--269f52c9-3a5a-4316-8590-f06b9458df00", "indicator--f9f60add-2772-40dd-a719-81c2c59c9f75", "indicator--9404d834-e962-4178-b68e-008b56680f09", "indicator--3305cd69-2723-4059-bcb2-3a05e3adc3ed", "indicator--98afff46-b877-4961-8589-c16c617183e9", "indicator--b920f78d-bad4-40c1-a9f9-71a3e33d6e0a", "indicator--dd9644c3-f7c9-4615-8ead-5f74ce10c605", "indicator--177d594e-ee06-4745-b73d-ff70caaa8a4d", "indicator--145348de-da9e-4eed-927d-59c272e0eb95", "indicator--bad5f399-564e-44f5-bda0-69e3d922a47e", "indicator--bba25ab8-d4b9-4069-b33e-79f6476a0832", "indicator--26ac03f3-ef37-41ed-8be4-a128e67f0683", "indicator--d91d5acb-f456-4620-8f55-4a0bbaea17b6", "indicator--dbb51f30-b087-4882-b09b-6aee410cf711", "indicator--2e5f3888-22aa-459a-8feb-15d9dbcd7979", "indicator--5819c928-f06c-40ff-8182-24dcf69a65dc", "indicator--0820f33b-c89d-4d2a-ba6a-2d7a2b5f4e19", "indicator--32b66319-eb9c-4733-ac9c-589b7f2d03b8", "indicator--87f39e18-08f2-474d-b5ce-02d88fde8961", "indicator--1389be8c-fc8c-47d0-9ae7-90d89d96ed59", "indicator--6e77e489-54ba-4d98-8e90-9193b7d708df", "indicator--4125fce5-8361-4bb0-b49b-e33afc90ec39", "indicator--e22a0815-e9a2-48aa-9eb0-2f158d4f0a54", "indicator--f29948f9-e7dc-47ca-8f62-0580e60d82b2", "indicator--7116c019-f16a-46b7-9533-bf392f566d4e", "indicator--3d76d137-801e-4f2b-820f-cc46501c5f61", "indicator--9b546727-80bb-4ba2-bc7d-a9f0aecf5fe3", "indicator--2f1c965e-18e5-4d0c-91d1-4a70d20d44d3", "indicator--17c10a7f-d893-4f43-9510-2631fef983ca", "indicator--e67878bf-80c6-4d20-9df3-827261df9ae4", "indicator--aa1e7ccd-23fe-452c-a05a-62ff08ec1886", "indicator--650c0212-eb93-4f0e-b981-7cd25817efb8", "indicator--bea9de17-516d-4e16-888b-4ff7fab7b3db", "indicator--229b39ca-28c7-4d18-87d8-9f34d87a5ef0", "indicator--f759461d-6123-4e96-9637-50f194a8635d", "indicator--f02a6dd6-1603-4bd9-ab34-11f1709dd318", "indicator--a4bc0f79-5a2a-4d53-91d2-57e849def0ec", "indicator--46765742-754e-44bb-ac90-d26894a9edd1", "indicator--a33ce941-e951-42eb-a37d-a7d30c2dcef9", "indicator--45e8bd45-f954-44fa-a704-d7706ca76652", "indicator--2c4d7f40-2f7a-487f-99c7-4887591de60d", "indicator--925b1d96-a21d-4f1b-800c-1d5fdf63327a", "indicator--701de086-01dd-441c-86e7-2684bd85e4b4", "indicator--cc82db52-e728-487f-b8db-63898c2ce979", "indicator--24afd5c4-3f2c-4b03-9977-15035b4e6d6d", "indicator--ba36c4de-6320-4f63-a174-984c1e0aa1fe", "indicator--fa01c3ab-7bae-4b9d-a77f-2a7275615680", "indicator--e4b2ab5b-3805-44d6-9ba8-a71c51973175", "indicator--b9882b67-1e51-4508-ad5d-f907efeeb732", "indicator--3dfcd485-8022-4c58-a2ed-075c512afa0f", "indicator--5b5973b8-5389-4dff-89c5-9df4259aecdd", "indicator--56a25245-ca5e-43fd-9118-61b751ad4d24", "indicator--b488e954-9d72-4449-9454-7afacfc73cc8", "indicator--25bdb87a-f42c-4ab0-9ec5-067d28eae5a4", "indicator--5c594c86-3e7b-4f52-ae48-46da6c11fc1d", "indicator--36843a3b-0208-4017-b7c3-4629a934c4ea", "indicator--53fef725-e75d-4dfa-baf8-27736f26eb8c", "indicator--3f89d416-bbe6-4e90-9bcb-645e2f0ec650", "indicator--3f5219db-9e82-4423-9549-8de5163337e7", "indicator--6f3b1bd2-cce1-4d07-8d49-28f1e2f38fa1", "indicator--5e95df74-6e6e-482b-9ca2-42d45770b514", "indicator--aba1d493-52c3-40aa-a6c6-317578f30c9a", "indicator--8f0f6e9e-8a90-4f74-854c-330d89b6574b", "indicator--eac0d95e-6479-4e62-bc4e-f48e7c924025", "indicator--ea4fb81d-d2fc-4bd3-8bde-ddba9673dcb9", "indicator--ca631f38-c6e7-4a93-bcfe-f0b9d46269c9", "indicator--2cedb25b-210c-4902-b688-f0c1cbaa1019", "indicator--3d99531b-daa1-4846-968e-8dfbc206771a", "indicator--b9207a63-16f3-4974-b52f-e2f28d3aa26c", "indicator--abb32303-443d-4481-9e86-e8f63afc7930", "indicator--288c29a3-c56e-4c9a-bd3a-b5fd94fdea42", "indicator--6f744835-12db-418b-aef0-1f9f065fd5a9", "indicator--a384a12c-9e0a-4d2c-8552-de372ea269a1", "indicator--72e19b79-8d2e-4a6e-9714-0250e038d717", "indicator--cf647ed7-bf66-4b90-8cd8-93675e9402c8", "indicator--c616dd0d-bb35-4fc4-93e6-1dafbf266f2b", "indicator--673c8105-366a-4241-bdf6-1225da76a8fd", "indicator--f8139177-55a9-48a7-934c-bdd93f35272e", "indicator--4b1685c7-d3de-446d-b2df-293e0c6637a0", "indicator--5e9e977e-516e-4758-a02f-c4df0b45cb79", "indicator--9e351d29-d5ca-4bea-a1f1-3bdfdcdc3b3b", "indicator--21d29f08-1491-4eb6-ad8e-7697f66c9a02", "indicator--8942f91c-2a17-4917-b5c7-49e2b14c40f6", "indicator--bfed646c-a98c-48de-87db-96091d987117", "indicator--6cde665c-e765-43c0-bf97-7f9e61f965fd", "indicator--5d0c4791-4bb8-4cfa-9bfa-1f06a82ac2ec", "indicator--7764bc42-df07-48b3-8f38-32a9438ae0dd", "indicator--ef03804f-e371-4f51-bf14-8fa3cce3d2f3", "indicator--4a5297ae-9fcf-4d19-87a2-b56f56724f78", "indicator--12a6b244-ebe4-4adf-9d1a-fb2b15bbdbc4", "indicator--3d62c37f-f8e8-4bfa-ae99-07cf0607701f", "indicator--b9ee808a-efa5-4433-9f1a-cbd1a798e86a", "indicator--77745e56-23cd-4b8e-a8b1-c80f8d4c7bee", "indicator--3cc2fb33-6c34-4d77-8966-285135314eed", "indicator--97995017-cadd-4985-8b2d-c4f0b65e6421", "indicator--b8d98d8e-27e4-4db8-9a34-dd35f638e05e", "indicator--90f70094-ce36-45c1-8f23-3ee96e262d32", "indicator--cfcb7039-cad6-4ceb-9041-e28348350545", "indicator--b5abb31d-a795-428e-855f-8cc7b8889370", "indicator--86af4c07-c70e-4c2d-9b74-446d00ec1810", "indicator--4a3588b9-fd2d-494b-82f8-d3ce96317739", "indicator--ced8cd96-3e12-4d7a-8045-8303529d3617", "indicator--9a3b2b72-d3b1-4e8e-947e-cb450be89f14", "indicator--6a851e53-ed23-4566-8fc7-bc2df94fd426", "indicator--47f13a56-e610-436e-8d6d-8cfe0409efe0", "indicator--7a7ca909-407c-44d0-9481-5b8c0b20e1b3", "indicator--7e6d6d5e-c388-451d-8ea7-0aa9c2cade4e", "indicator--630bc830-4aac-4bd2-ac67-b4fdef5ca2b4", "indicator--60cd406a-62e5-44b0-a693-d45a5b3239d1", "indicator--27b789ca-ca9a-4ffc-aa5e-37886d7312a6", "indicator--e4e5026b-31a8-4b4b-98ed-cd0daf785085", "indicator--2e12fe2a-cd43-4407-bf11-1359c8496e37", "indicator--33739fe9-c472-4d5d-ab32-86082df16f20", "indicator--4c09d3c1-acdb-4154-9ba2-58e688a261b0", "indicator--ca2b5e37-4ad9-4c65-8406-0e24a4074d8f", "indicator--c6978c34-ce27-4365-a4d3-5e01dc8d284b", "indicator--4242adf2-6f61-42a3-85ba-2415102fef7e", "indicator--d5e6def5-8545-4dde-a853-6d15a8825fac", "indicator--90eaff61-0fbf-47c9-8808-352f713ea4fa", "indicator--5d5e6567-2283-4622-86c4-9e6226ead4cb", "indicator--cd1f6964-99ca-442e-b90e-c116a9fa0f6b", "indicator--4a93c6da-1f92-4f5c-9c72-27daa73f6dca", "indicator--0231e9a7-de31-48e7-aa6b-25c67b5008b8", "indicator--5d9969d8-26cb-4ad2-9de5-ad744417997c", "indicator--a189e1ba-9fdb-4eda-b6e1-8bc82a9b104d", "indicator--e8d4da85-52d5-4e7f-ad07-7f2b329df25e", "indicator--250cc1e5-0e1d-445e-b699-93827bdc007d", "indicator--efb0ee27-1882-4bba-85eb-f8712cbf4977", "indicator--ebac589e-89d3-4fba-a3d7-e544ec150444", "indicator--0608c283-1ad3-4c4e-8fb7-014732492445", "indicator--d6ee6d5c-7c79-40ea-a11f-040d1c8c9ebd", "indicator--b1d2f1b1-4880-40b7-b490-ddfb551272cf", "indicator--bce9beda-eb7c-4dc8-86d1-4ef0a9b514b7", "indicator--462ecc57-eb9a-4be5-a45a-3e96943c72ea", "indicator--84e4a38d-4078-44f1-aabb-20ad659d3e5e", "indicator--df63bfe8-7bee-4e3c-b6c5-43c88f115bd3", "indicator--0a66417d-6f30-4d2b-ab1a-b0c133e4f72b", "indicator--39129987-8cbf-4139-9eeb-6ad4c7f0b96b", "indicator--7ac882c4-82fe-4ed5-82a4-bcbce94fd0c8", "indicator--17d01782-e42f-4a1a-b4f4-6083f0215366", "indicator--435ba034-bb89-48ee-89d2-1dbb0e38ad83", "indicator--e0162f48-d98d-4f1b-8487-3cca4fdadd0d", "indicator--657a81c5-50cc-4cf9-af6d-7689bf64a065", "indicator--301a479d-017b-4ba1-a472-ca30494e0ce7", "indicator--b807355d-ce70-4236-b8d2-b3d6d02c2d31", "indicator--bb7a4ceb-c140-4c53-a4e2-c674e6cef62b", "indicator--ae4ca050-7891-4df0-9631-4c1279e4f2c2", "indicator--977c7a08-6c12-4571-9bae-4ff6136edffc", "indicator--4d88b273-9ddb-4164-983c-1fb67d91676e", "indicator--9c9191e9-e805-45a5-acb4-61b48988e807", "indicator--c3b0a3db-c9ec-4ea9-999f-424d12b07dac", "indicator--bca3bd03-78bd-4df8-9178-3a8498582161", "indicator--3ca1aba2-dc94-4aa9-b6ea-90e182143e98", "indicator--34285537-0472-4db0-9c84-a51278e4acea", "indicator--a58bf9fa-8745-47ed-b146-ef187cddbe95", "indicator--8f3a8dfd-16d9-4b44-9fcd-9197924cbd7d", "indicator--aa0a8c0d-87e8-4ed6-9ef7-707f73c85a34", "indicator--293ff384-2354-49f3-b307-4da367b39d17", "indicator--bcbfa88d-428c-44ca-9b15-cffc0f468282", "indicator--ae89b619-7775-4b2e-bd59-dfd1041cf34c", "indicator--3d17e36e-cc29-4f98-b41e-7d2238cabb72", "indicator--be5c3ed8-1cad-4b46-b574-700317e65b7c", "indicator--a7bacd6f-4ae0-4d36-bd9c-563dfa2d4027", "indicator--ee8ab112-62bf-412d-8afd-a4371fd48921", "indicator--586a9ebb-6deb-42a9-a585-b9b49f1c4b68", "indicator--d9ff7f1a-0e78-4039-910e-09c0e982b4cb", "indicator--72535d60-7e8c-4679-89d3-4ec2cebf4436", "indicator--e6c50e6e-863d-4bd3-a5e7-2f10957c4b63", "indicator--39500cf8-54fe-4530-b82f-ee30b7161b04", "indicator--1e31336b-325e-4955-9f12-4771059505b0", "indicator--d3ce8a71-3b71-43e5-9397-afb3f1262d4c", "indicator--e3e19938-d72c-468c-b2d6-3758d39fe258", "indicator--3fb4b708-a3b5-4e8f-ba8e-3184d1f59bf8", "indicator--867bdf4b-56c3-4762-b219-6523b9de56b1", "indicator--762ee79d-2f56-41f1-883a-2754bb2d8e51", "indicator--6eb9f186-aafa-4152-baa5-84048c4197df", "indicator--05093e99-ea25-4774-9c0b-ec0fa1934a13", "indicator--18b6d796-77af-4af7-b3c1-78c251ec3b49", "indicator--978e6193-1ed2-42bb-8864-ee2fb82d49b9", "indicator--1d66bf39-e9a9-4867-9b6a-b222e1926520", "indicator--26523eb3-51cb-4ddb-95b9-b426fb1296f3", "indicator--54a8a130-4f55-497a-87e6-57ff097528b6", "indicator--44b6e851-c834-4e34-ad5a-a66fe6b772ba", "indicator--18addf1e-4f97-4e33-949d-c014c8202c8c", "indicator--6d965721-dce5-4842-abad-b07bb14e3638", "indicator--17fb961a-a61b-4ba7-9945-7fa95f7f5aaf", "indicator--6da06818-46f2-4c7d-b526-6a2a66007fe1", "indicator--67d5dd00-e65d-4f11-b19e-47b8904229f6", "indicator--048a4b54-b0e9-45a6-bc98-5ca5ce5843a5", "indicator--ab557a51-c97f-4426-836f-bd9b192bba25", "indicator--a4e64957-0f07-44a4-96e7-ac1d256e9953", "indicator--bf5d0f18-abb8-4040-bd31-950dbeeda1d3", "indicator--f83da1e6-d59d-44d6-8f7a-2669ee094b47", "indicator--10d5a365-5f86-425a-a07b-99860b6f015b", "indicator--8467e7cc-2d47-49fc-8cec-ddbdd83a4f15", "indicator--cd081c2b-38fd-4a5a-8cce-887f1fa82f80", "indicator--c2a48f41-861b-4074-ab6a-9c9ce51572a8", "indicator--7605b2e1-072c-481c-8d0d-881641991da1", "indicator--8b9c5ac6-d548-4beb-a22c-9a2d0c1c9313", "indicator--5b952b4a-0291-42ee-85dd-04e5adf4315a", "indicator--5a95f2ab-e852-4bc1-9dfa-c034f460d89d", "indicator--d6d744ee-8b3f-487f-9801-4708153dedb6", "indicator--8915a236-779e-497d-b677-f44379809529", "indicator--994e03fd-cfb2-40c4-bde5-1b58fe756fa1", "indicator--1e7dc693-128c-4d17-9483-70b9b471d190", "indicator--70c7bcf6-8a8c-4205-b707-a25e24c9e7c2", "indicator--5d56503b-0387-4ceb-a7b1-d825c00b64bc", "indicator--220aa559-a34d-4b3c-9d4c-ad2656ea6f48", "indicator--d58aa861-0f19-4aeb-bcf2-37f9365701cb", "indicator--3febf430-4b2d-4080-868a-a679c6dd080c", "indicator--69e04937-9a6a-4703-99d0-b823d02c566c", "indicator--7e965339-eead-4429-b941-c9bc7f2d8afa", "indicator--c31a5341-97be-48fb-99ca-87caf2ba1e40", "indicator--fca1f579-c4f1-4700-9d0a-0be9c2616457", "indicator--cff78254-a421-48e5-a2bc-293d65f7a8c4", "indicator--ca89ef3b-1d74-4e77-bf6f-250263ed8ceb", "indicator--8fbc63b1-ebab-4ff6-88b2-8085dab52ac9", "indicator--937383f8-49b5-4f27-b258-a0775b306e6d", "indicator--09ba441d-52d5-4665-a3bf-13816e04c0a6", "indicator--4ff7e8b7-6372-4b04-a460-c3af5523a856", "indicator--1389adc3-b7e1-4ced-9bbe-277a0e7ae3f3", "indicator--56e1977e-20ef-496b-8d48-4f839d051e3e", "indicator--f04a0249-436b-4890-a3fa-9fffd8d0cf96", "indicator--19e42ef2-63d3-4565-bf21-771897af975e", "indicator--8d43712a-d34f-4049-88d3-aa6482860844", "indicator--3b3f7be4-e865-4748-9987-73e5b4604a97", "indicator--64e4716a-881d-4024-9770-cf7e414b3cdf", "indicator--fb1ff9fb-d007-4a93-9a3c-66200681ccb7", "indicator--87dca98c-8456-4844-bab1-28b2f76e05ab", "indicator--8c28ed14-7d12-46ac-912d-11b7074e6273", "indicator--d425b9b7-ba37-41d5-86f8-4f823a108597", "indicator--e519d738-023b-4143-ae37-f2c33274dc4a", "indicator--2626d5f4-8e88-4bed-85be-b75647d72dbf", "indicator--84e5d0c1-3215-4777-8cf6-c9c2b19a17d7", "indicator--20bd6ca7-7420-4d94-af3e-6c425ed67582", "indicator--a0216bc5-e162-4c29-a8d1-998d18a81cd5", "indicator--be41c207-aa07-4e4d-ad9c-6cc3667bd039", "indicator--cfc39a2d-2aaa-480d-8ea0-01b364b880c4", "indicator--6c680fcb-4564-4ae7-9c88-87f77a420a93", "indicator--f77c48f9-8675-4c1f-ad33-a1891c57ba27", "indicator--94381864-4e24-4f98-bcb5-cfdb32606342", "indicator--f37b91b1-5b3b-4c19-ad44-b4e2423fa3e0", "indicator--490fab4b-c965-4f6d-87d5-306e103a59f0", "indicator--acce2a92-efc2-4617-b9a1-05d57bc59669", "indicator--4467dddc-2608-4910-85ae-395d7630dbe9", "indicator--2a613014-a6fb-4457-b6e8-bb8f37d28f64", "indicator--b5c1c178-6ac6-4df9-8211-43a9da1fdd10", "indicator--e6cfd31e-4dcb-4130-8b22-9cf2e65d2a86", "indicator--243faffa-e615-4c47-a551-df952a9646a3", "indicator--d64c1df9-c7b9-40ef-a2b5-fdf6d55a27b7", "indicator--ecdc6fb7-4465-4c31-b33e-63e2d1f0c5a2", "indicator--26b63112-5055-474d-8cc1-2a7c46c854f3", "indicator--7a8517e4-2985-4ca9-a61f-b767b5647dca", "indicator--ad984ab7-e119-4930-8082-2d1b7913b8cd", "indicator--425af3e7-1884-4e43-b644-364317040b65", "indicator--0c8f29f8-3e9f-44fc-9bca-ad279dc370c0", "indicator--5805ee61-ef77-4842-a774-d4695abfc112", "indicator--0da24849-30f6-4fbb-af9d-e6d767ff82b0", "indicator--7d0042a1-f377-44b5-84ac-4e40f38bd99d", "indicator--0ead6f7c-88c6-4ca4-9ebd-72e540f72c25", "indicator--00af7f3d-9b3b-4839-a8d1-6d7d9ad56d5b", "indicator--170c2ebe-9a0b-48f9-b5d3-3e91b3809254", "indicator--6e1b5df7-8d16-40d3-82c2-32efb3c6e774", "indicator--ce25a8a2-a3bf-4611-8ef1-adc1370bfb11", "indicator--1c7b23bc-fa5e-4a40-a756-bcd773e09286", "indicator--647fda48-2f45-4b6c-9a57-201bb62e5d23", "indicator--56ae76fb-83a6-4d39-963e-96695f4aa266", "indicator--d543713a-dd87-4229-b06e-a8330ae1566b", "indicator--aa71863e-cf8c-4427-b335-76f2e0d5a392", "indicator--d93e4c87-a6ea-461d-9046-39d1bde09f4c", "indicator--85487c6d-7b6d-40a7-acf6-c58141613250", "indicator--67cf1a3e-b9e2-49f6-be61-b3db64beba84", "indicator--59521478-948a-4147-8aa0-b6304e5b3e4a", "indicator--568eedc1-1d80-4e3a-a538-c6f6c508c492", "indicator--81e995ac-6f59-41e5-ae68-9cc6322d7726", "indicator--6a7bc10c-c0d5-4d74-8f92-b1997afe797e", "indicator--c0a010e4-debc-4918-b631-cc6e66575ad9", "indicator--2b2467ed-21ff-477f-a9a6-1cf89901027d", "indicator--917a5bec-717a-49dd-b95d-b16363af3f09", "indicator--14c22559-4a43-408f-8647-8af01ee45e3b", "indicator--3f33b622-3328-4ec2-9cfa-7d6631a737cb", "indicator--fd81c8e3-13d0-412a-b536-f4b2e4368e9b", "indicator--86c27e04-10d3-4e42-a826-ba720d6290fa", "indicator--b006fb37-7311-42cd-9efd-b3987563252d", "indicator--3461aecd-49d2-41cb-a701-52f8e490a457", "indicator--37108016-d9a8-451a-90d6-5c2630d9b0c0", "indicator--32c7387c-6fe9-41db-9562-37e17006da9f", "indicator--870e4a5e-e647-4102-8984-16e344e5e886", "indicator--c4f09878-b954-489a-b919-50043f36563c", "indicator--578b9ccf-f078-4537-be80-49162f648a27", "indicator--9670b70b-221b-4c35-9ee8-1c465480b786", "indicator--038260c5-a465-4953-a5bd-7b272654314c", "indicator--7d92b209-60ef-49d3-b6d7-83e127afe93f", "indicator--d5b8e8ff-b2c3-4c37-95ca-bb62ca259ac3", "indicator--bc9a6028-650e-4b1c-87c3-e3029b616121", "indicator--53a2e330-578a-4e37-8d6b-27dde2743c69", "indicator--4fea5404-a1f8-4c63-9703-ebe946c78abc", "indicator--39c53af5-1d02-4878-a29a-4f89a4aa4113", "indicator--3e6cd865-be9a-4346-beeb-4ef4c3e54c75", "indicator--c7c98dab-0bd8-4981-8e1e-c9bc68b130c3", "indicator--2b19333f-c3aa-4176-a183-eda6f30b4eb9", "indicator--b2d214e2-fd0d-43dc-bc15-651901884133", "indicator--5fbadc37-ccb6-42c5-89d4-12f0ed0a49a4", "indicator--53b13a7e-9dfd-4fa8-bd68-b4069b50b329", "indicator--9d021760-2cfa-42cf-bacb-d3703e21c7b8", "indicator--fcfc5a45-5141-4881-a55d-8cd38a1ecef3", "indicator--85680908-cc24-434e-9eaa-0d75cde32097", "indicator--d3bcd5ea-e35c-4ce7-a280-6fc72244ffef", "indicator--e447964a-b9a5-4c24-9e8e-e6769bb6b7f7", "indicator--eade624e-ff70-4940-9845-06d2b09cdc8f", "indicator--71055427-b56c-46b6-9b45-6145c7bf85ca", "indicator--02ac4d89-f1c1-4822-9951-08720620f48d", "indicator--eef0dab0-da67-499c-a901-cadab764bb06", "indicator--5514ce8f-2f9c-4787-8258-de9937fab537", "indicator--e347438a-7ee3-4290-ba2d-5d8a77cdec1c", "indicator--0c15e0cd-d8e2-41b1-9e6f-8905c95982d6", "indicator--1b3613de-c2b0-4620-90d4-9ee4d4f79710", "indicator--eb44d3cc-02b2-4aaf-a5d0-2498690832b6", "indicator--1fa463b1-f1be-43a5-832c-e121a4146db1", "indicator--22d9f2f8-5d79-43a7-8bf8-57c120b053e2", "indicator--865b235d-6df6-4681-944f-027bd3d10d02", "indicator--fc9b566b-4933-4468-8f4f-05c7abc68ec2", "indicator--c5cf374a-8c4b-47dd-9156-fd94e7680659", "indicator--20f74834-38a3-40e6-928c-723630f70fc7", "indicator--83223fee-7e34-4cd6-b62b-ef5d718d164f", "indicator--cbfc1860-ba23-4a96-8355-0d80ace26768", "indicator--76905a78-cc58-4df7-bb18-0d3f49f3c6f5", "indicator--f98e64e4-4404-4a7d-9773-876828278ca8", "indicator--8a292b79-7879-4183-9e0e-75f04e58e255", "indicator--f2e673c1-cda4-475d-ad18-3a0ca927e815", "indicator--84446743-ecd4-4b49-8043-0ba2aadcc320", "indicator--46c229aa-1e3f-457e-a662-2cba4b7b83fb", "indicator--861ab8b8-1a58-468e-8498-e8609024ff6c", "indicator--e2978f79-0c91-4d0c-912a-1e5ce2546ac0", "indicator--d940c770-2312-403d-9f5c-adce01f0a6d1", "indicator--fbe085bc-50be-4bbc-bc0b-1f46576331b6", "indicator--f404a86f-7b86-4c2a-a866-09658d97e609", "indicator--4944c156-9f3f-44f0-90ef-67623bd4c2fa", "indicator--f770d774-a325-4f7c-898c-9c5519952df3", "indicator--f8050e0a-2d71-4b76-a11f-f5d81de9d54c", "indicator--ba527213-6d09-4965-a15a-5199b749b50e", "indicator--c382801d-7fe9-44b3-9a6b-e6d2c9101ab3", "indicator--602c0943-9540-473b-8804-c851505640d3", "indicator--96b63f6a-7b7b-457c-86ad-8778061aa42b", "indicator--02288e77-fc48-4177-a2c0-cccc4c5b5be4", "indicator--e7e8a5c2-0e84-4c2a-b8cf-ca754fe8621a", "indicator--fb1224af-a7bb-4b42-9b4a-12bd0da3b7f3", "indicator--8b6345a9-5e69-454b-9d42-4f3c4955e5bf", "indicator--f5ae9155-a471-4b12-bf61-d45f2fb16094", "indicator--6cf660c4-fbaf-42c4-950d-49d13fd04f38", "indicator--1d0f2b6d-aa2b-4c92-9d79-1ae424e2e950", "indicator--7f8bb519-093e-4c5e-944b-2d70a9964827", "indicator--b64a1baf-671a-4136-a9ed-6002b7658fea", "indicator--baedaab2-e77c-4584-a9bf-6e7b5694013a", "indicator--a0130b77-c5c0-4c51-8036-f048f42a719a", "indicator--92c74c81-f4e3-49f6-aeaa-3827655e2aa7", "indicator--4af7cf3f-309a-45a0-8fa9-e3df72a244ef", "indicator--df305df1-94c7-4e2e-ab97-856e85aa5e31", "indicator--1689e92e-6cfb-4e21-bc21-7c248bc2d737", "indicator--54eea2b3-7d27-4c5f-bd37-a939e259aeb1", "indicator--8e553326-24d9-4992-8223-b17dc451f76e", "indicator--9e3a8217-ccb5-4c5f-b31c-670cd500f4d2", "indicator--e321af9e-bc6b-4b3d-a272-a374cc2c9215", "indicator--77496079-2d41-412c-b9fd-50855dd55463", "indicator--9854a85e-624c-4275-a62f-87fdaea16bac", "indicator--c9a363fb-ec0b-4c89-aa88-a78729b6b4fe", "indicator--b5e3a5ad-15ac-4e0b-91fa-9eb3796fd2c1", "indicator--c87b8952-c76f-41fa-af09-126529a797ec", "indicator--164d10b8-7ae0-4fa0-bfc9-8281264f9d22", "indicator--b6422b58-bdec-4037-ab41-89f72f6ffd4d", "indicator--f7e5b52a-2615-40cc-af93-a638df948c35", "indicator--84e3ae8d-4812-4c87-84dd-04eb7b2516a8", "indicator--47f61100-76a1-4c65-a679-9ebe0a648dc7", "indicator--91a434ff-ecf5-4095-94ed-bf0ad7e717f1", "indicator--30ee8f28-ccc8-46e5-8515-0157763c97fe", "indicator--e1265c43-b251-4119-ba81-2e9c13231c0d", "indicator--19d1f463-7ec0-452a-9a06-a904f04fc809", "indicator--42b7fbe3-8bf6-4d78-a1d8-195e3e6da7fc", "indicator--caeb13fd-4972-4be1-ac1e-dd6fada1be6e", "indicator--51e7b108-fea9-4905-a7cb-fd21364998f5", "indicator--05e98049-2602-49f2-8c67-a0389cfe159d", "indicator--1c709d9d-bb67-4349-9f4c-34a873f14a60", "indicator--13a4745d-20f0-40ff-9c1b-991710ba5a38", "indicator--652af95e-4104-45aa-93e5-a9880aa60cc8", "indicator--7cf84ee8-cea9-4098-834e-fca3b2edc8e0", "indicator--5d12939d-a239-4e35-a20e-817293435823", "indicator--f139b9d6-b6df-4079-b6bd-664d5efa6910", "indicator--af8877ec-86b1-4634-b47c-fc6ec3663dca", "indicator--1800f39d-7025-4034-a6fe-d2a34ee6ab0d", "indicator--cf29ecff-de9d-47f6-9714-3463586b1f23", "indicator--5ea9b389-603a-4f93-9188-369de17d7164", "indicator--2e599f04-ee96-4351-b2a3-80343fa66ad2", "indicator--dafb6021-4016-4a9c-b6cf-28da5dd3d128", "indicator--baeab37e-a4ff-4dea-b79a-39f2ce300bd3", "indicator--ab395e07-e13c-4c16-ad1d-caee1483587a", "indicator--c2602eb6-fdc1-446d-a3cf-105cfc574cb7", "indicator--4bcb8ab5-6ece-4ae0-bc49-9a0e10732463", "indicator--26e3ae20-3cd8-417a-9827-345bd98a2e50", "indicator--5e2306f8-5219-4165-9caa-9a78b7776ac0", "indicator--5eca4d1e-aa70-49d5-887c-b3c5a8492f8d", "indicator--7a32a600-e09b-4aee-9141-31fad0f83074", "indicator--a61642eb-d1b6-4a92-985a-6e847d3ef1df", "indicator--9919e758-d256-4a9a-b0c1-c039ba7cc179", "indicator--3bf0d0b6-5bf9-4775-b340-1e7aa145fd93", "indicator--d9fe5ef2-3fd7-48e8-a138-4a794f92aad3", "indicator--4c509f08-4876-4c9a-b179-aa87a5c4b612", "indicator--e7b0c320-703a-4b08-be5b-9f293982a930", "indicator--84722ad0-a870-4bca-97f0-630ca26545e1", "indicator--ca0c0ef3-b1af-418f-b4da-e30b3af1069a", "indicator--52d48582-3a07-4406-9f34-4a74b4c41cdb", "indicator--7ed463d8-3c80-46f8-8bda-189091c4e925", "indicator--ef4471ab-1334-43cb-bdcb-9ca3071238a3", "indicator--3bbc389a-9f89-4c70-aaf4-0c0766a56519", "indicator--3a046444-dfcc-42a5-addd-6c85363fdc13", "indicator--7968ee72-329f-47e5-9032-9be96028f4eb", "indicator--b6a49308-c917-4774-85ac-349e2b51306b", "indicator--12370704-7788-4b6d-98a3-fbf7c8c13967", "indicator--49fd94f4-6c68-4f5e-98b7-6d507c173025", "indicator--bd448c27-6a76-4efc-b142-59c415d13e1c", "indicator--72f336d3-780c-42be-b1c0-40c3fbe706c6", "indicator--b929390e-b59b-4f1e-b868-a474be00f7b1", "indicator--50ccaf04-28d4-49c6-b55d-024e0a634ab1", "indicator--a996ad91-6a59-40ef-867e-c8487ac61bf3", "indicator--00b37807-2547-4d4d-ae12-fa493e0c1cfc", "indicator--acb96be1-11fc-4364-8224-9ef228e9faa5", "indicator--2c5269c2-c692-4131-b2b7-313f0bb1ddc9", "indicator--10d9430a-08fe-42f9-bed6-63d4debd8784", "indicator--cf3e8b99-b5a7-4e64-afe9-6383dd5c56ff", "indicator--21bfbc4f-fada-40ec-98f2-18f65509c9bc", "indicator--fe472a48-c960-4867-8f21-7c2686d618e3", "indicator--280be3be-9f3b-46d7-ae3d-20b65879d707", "indicator--38ef5c3f-7e75-45da-b39b-ae23aef8ee65", "indicator--71fab6fc-8e6e-4b73-8ca4-32dfbcb3ec41", "indicator--113ffeaf-7c38-43e4-9c85-db19028d8acf", "indicator--81c48cd6-5114-4473-88cc-f3844a07d26d", "indicator--52680336-ab5f-4730-81c8-bc46faaa2012", "indicator--d3c43d64-a717-4338-aaef-8e831692af82", "indicator--e786f136-0e37-426a-a4eb-0b0f1ccd479c", "indicator--cb3fbc17-4cf5-456a-832a-de216266468f", "indicator--afe75a44-7cf4-4e60-be03-7e8fc218407f", "indicator--b75cabf2-687d-42a5-8592-f26bf66f77c9", "indicator--f3945f18-1dcc-4e8a-857b-00f4d761de44", "indicator--0f18251e-1cc3-40ba-8d59-391502958e57", "indicator--7d767da8-892c-4526-adc4-2dbb87bfbd86", "indicator--1c026036-3edd-4dad-9da4-f4fb779d57c2", "indicator--387d7c4e-610e-4c17-aa69-6142033c6c3c", "indicator--6c3c73df-c5f8-4aa4-9da6-3af851f1ca2d", "indicator--8e220456-7e8f-4347-97ba-943bf447098b", "indicator--15850999-7458-4fb7-9ef4-e9153604887d", "indicator--b8de45e0-354b-4a1d-9b37-19ff92fc53a6", "indicator--18ad509b-2d99-4ceb-80b0-8ff9791c51e5", "indicator--69862309-5d75-4981-a5b2-8866e0d4eed4", "indicator--78626842-0cda-423a-a45a-45dc924bc9d1", "indicator--4c6ac9ca-9b1d-4b49-9f8a-ecfad1a0b101", "indicator--ae05a97f-9743-474e-b58d-d5bd43a4e751", "indicator--10f32684-56b1-43a3-bcbc-63d63ea25130", "indicator--66861cf1-c6ef-41c4-91f4-59e0d669a438", "indicator--8f85fa25-2c27-4497-a2c6-6598f6b3a290", "indicator--148b1990-c9df-4302-807e-b2078578639d", "indicator--14037ebd-7b85-4115-befc-33de70bbeb7c", "indicator--3db0fbb9-70f1-42cf-be49-ea5d33456367", "indicator--99b882b5-48fe-4478-a2b7-6cbb954f5bf2", "indicator--7e241a01-58be-44ae-8dff-3fbaa56ee251", "indicator--77cd0ba9-56e0-4702-beef-dcc4b71564d2", "indicator--3feb5ec4-b68d-451e-8afa-d0bab6474c18", "indicator--f67eb424-7032-43b3-8a41-470a5c1875bb", "indicator--4fb41253-1992-4f0e-b52c-f491b2418d18", "indicator--d51fb491-d5e6-439a-9640-1908cb09d79c", "indicator--ff99d8ff-c85e-4668-b157-8d6927bb15a5", "indicator--8c8facd1-1c95-4180-afa7-8679f8807988", "indicator--b44f68be-d97b-4474-9bb6-a3adb5ec9def", "indicator--624f7935-4315-4e6f-8ebc-2896243ddc23", "indicator--472319e0-bc6d-4eeb-9b20-41f732264e6f", "indicator--20cd15e5-a315-4d28-9a7f-61a26a6599fb", "indicator--917c4f99-2c28-4910-acdf-64383828a2df", "indicator--93350abe-65ee-4239-a85b-79c02e57aac4", "indicator--57b07e61-6c75-46a7-8b71-263966b32191", "indicator--0da2f512-c7ff-4e5e-95f8-773e1170e69b", "indicator--e5cf7e2f-f9ae-47da-9267-f32bcaad5f2c", "indicator--846bb97f-5d9c-4fef-8cd0-1b3e5a1c42fe", "indicator--43609f57-2a07-482c-9591-96e63284a659", "indicator--a9226ef0-465c-43b4-9bc5-e6ae79354cd8", "indicator--db57634c-1496-4fcb-bbae-a31eb9fccb20", "indicator--51f7a6cd-7e95-4fc4-a684-293ced00ca52", "indicator--db306e71-fc3e-423d-bb40-57cd5193fea4", "indicator--d815566e-db1d-4b37-b538-5f859609b860", "indicator--2964f9c8-d141-4cc5-958d-4ae95c955e5b", "indicator--1658a93e-a244-401b-9e93-afbbfb9aa1aa", "indicator--01fec881-a3b1-4e92-8cb4-1b182e4d338f", "indicator--f8225783-e572-4aba-ac3b-f3f7ccb85eb3", "indicator--7451aeca-51d8-43bd-a0ee-bc6c993a0645", "indicator--c9b11bf3-9fc2-48d4-98e4-fb3170107eda", "indicator--a4739ef5-2256-415c-a800-70ddb3a355b4", "indicator--4bee4454-1155-4fce-a793-a56aadc3a668", "indicator--91cb3172-4395-4e42-8e9b-12bf4c57a584", "indicator--7500fdca-0669-4028-a5cb-5cb0c7290ce6", "indicator--c0775aa4-ee3e-4808-8118-c744926a78db", "indicator--b0896699-5336-46e2-b640-f63734bcfba9", "indicator--8a5a08ec-ab5e-4208-acc0-d266b40e271d", "indicator--99c20b90-4c08-4e2a-b2a6-b58929b72d79", "indicator--0a18b396-a414-4bd9-9c6e-64193122bda5", "indicator--53475710-84be-4f9f-896c-960a220c2ecd", "indicator--e088566a-50bf-4514-ad87-cbb531773220", "indicator--6aad194f-eea8-493e-989b-6e4bbd0244ba", "indicator--19693d50-85b6-4cbf-aad5-937d737b22f1", "indicator--4cc97586-0d93-41dc-86e6-1567a8563079", "indicator--cee4a72f-7ecb-4c95-8abb-5bd16a7155fb", "indicator--1065b721-e5fc-45bd-8f96-68433ab5d0a3", "indicator--2419616b-aada-412d-8aba-b5a820f01440", "indicator--ca20d25c-8c0d-41ad-af67-a9fbceced7a4", "indicator--7a828924-64a7-422d-98d5-5b244f2e71d0", "indicator--25c1a1cf-e169-4c92-8611-952fe48907da", "indicator--01851917-414a-4c75-af92-3efa1b627d29", "indicator--e77b6429-e23f-4229-8e5f-abd4dc988bd9", "indicator--1549e515-01a6-42da-a19d-179651a886f5", "indicator--2017362b-b28e-4b88-956a-ebdc6ee98924", "indicator--7bdfd1da-633f-4e0d-93e7-7339814e4759", "indicator--c97fd373-7e10-46b7-99e2-13c5ed8a09c6", "indicator--2560a121-7261-4322-836f-9eddf5a65176", "indicator--920ff422-9b99-433e-8a65-546e33f371bc", "indicator--585089ed-0cc7-42bd-83f9-fb748fdce688", "indicator--9e3732d3-1f76-4757-976f-9212f733951f", "indicator--fd709cf9-6083-4457-a5ac-ff202ca62a37", "indicator--7b5182aa-d1ab-4293-b953-219e85e3c900", "indicator--c583e987-a19c-4f83-adb7-1c3f17726ed1", "indicator--f560ba02-d147-4148-850f-cdeab891e2e6", "indicator--d4927396-2cf5-4176-9938-53e4386169a9", "indicator--722b3386-ed8a-4603-99ee-5c55b8b66640", "indicator--a8dea0c4-967d-4020-8b2e-39c5cd0e49f1", "indicator--001917b9-61cc-4093-a9e0-8073c514d002", "indicator--1be0dbfa-e5a9-4a3e-b7f1-9618ead82aca", "indicator--65ab54ce-e0c8-4e02-b061-b99fda481fb8", "indicator--d14a0921-cfa5-4c64-9405-159fd9e1156b", "indicator--6482d10d-a52f-4f88-959c-bfd085efaa0c", "indicator--d7f2647d-0365-4612-bfde-3b40f6bdacb6", "indicator--c7e2bcec-0a1a-41cb-aac4-6772b4729be8", "indicator--743ee89d-fa4d-42d8-a51d-acd44bab07ef", "indicator--4387f1f4-7314-49e5-b97d-0b817f2f385b", "indicator--7253e2d5-3683-4c85-b817-0f9ed4bedae3", "indicator--6c3ab145-39ed-458a-9bb9-f2973443c6b8", "indicator--f05ff4e3-5318-49f0-a532-8f5c9705e00b", "indicator--1120f756-ac67-4d34-9d1c-5cf945d00259", "indicator--3a06adc5-731e-4b87-bbf6-279341a7a3b0", "indicator--86a96c9b-84c4-4ec7-812e-08d22973f6c9", "indicator--b1a487a6-03c4-4711-873e-20186b9da814", "indicator--b0b5769c-ae36-44ee-ab32-4eb88613bcd4", "indicator--dc2af1be-d1e0-4fd0-9935-edda154e06d1", "indicator--7f59b731-74ae-4cce-b9f1-47207c722217", "indicator--78c79047-d59d-4450-8828-e58ba29a98d7", "indicator--464919e4-ce86-484d-b80f-f142787f357b", "indicator--59b79d80-80c9-493b-9ccd-065cf4790be0", "indicator--a323b3a9-04d5-444f-bbea-8c9ef6d9c3b9", "indicator--1ca01f50-a857-4b2b-879c-4aa381707087", "indicator--2fbf0418-8821-49ea-b5ec-f6e35560fe3f", "indicator--08c781ab-122a-4cee-be60-c3207cf57f61", "indicator--9a321b99-c925-46a1-be0d-c2d2e1c6aeef", "indicator--3369cc90-554e-4a5d-af61-726775bcdb62", "indicator--a48d481b-bb64-4f1f-8de5-9cc0f9869a64", "indicator--6340815d-a788-451a-a645-a071e6acc3a9", "indicator--62cc0806-9785-4c1f-ad22-75968a4dc89c", "indicator--91207c93-7181-4fe7-a1cd-3dc82f59d0f5", "indicator--04c9d2ae-33d9-48b2-833e-0746b3a9fb2a", "indicator--efb22b82-5df3-4abe-8d63-d2d618fbbc15", "indicator--81e87ecd-f59e-4498-86ce-27d9ab66551e", "indicator--4171d50d-95ca-4b64-a0de-bbc149ec9ea0", "indicator--455cc23b-62e6-4eb7-884e-09d8d42af1f5", "indicator--8e252f7e-eea7-415d-8556-013725e7cad9", "indicator--e67aed2c-1be2-4c73-9da3-0f5e1045ff37", "indicator--2879183f-7bd8-4b3b-9928-821aa05b6f3c", "indicator--ea9abe8b-b0b5-49f5-b910-0bf7f9e5a017", "indicator--0cc7a730-f9e9-4a4f-9d19-801b84b0e08b", "indicator--e7e56165-e757-47de-813b-f8a89cfac4a5", "indicator--76a3afba-5872-4da3-ad73-9523c9f3041b", "indicator--9443c11f-907b-4944-a5a1-68d10ed0360a", "indicator--5ce18ab2-c4f1-4025-aaf2-9277331c7afc", "indicator--fe7f3d58-cfaf-44a4-9ba4-a887521c60f4", "indicator--f9980410-2306-4d9a-b799-5acad236024e", "indicator--1f517d28-5ca5-415c-8cb6-4f826e7817ac", "indicator--514ae947-18c1-47e3-9a2e-83d7122cf676", "indicator--c86b2385-e585-4ce3-ae32-615d6bf34f23", "indicator--6aa1d04d-21b9-4c95-988c-ba393e6cc636", "indicator--fe820440-87aa-41a4-b86d-ec87aa9d46c6", "indicator--130ae10e-9e0c-4357-b6de-8f2f447a1599", "indicator--ee79c6a7-d440-41db-bd05-34536f5d1965", "indicator--3ce4ef98-4523-445c-8e8f-55f98df036f3", "indicator--5ebcc22e-36b9-4ca1-b6dd-2497ea111c1b", "indicator--2b7c5acf-565c-4298-8caf-a1b2c2a48d3b", "indicator--f30943c2-97d2-4b85-b801-6e6d710f408f", "indicator--37306310-a10c-4f5c-ae26-70e188992189", "indicator--c21388b2-4aeb-4dd2-8e88-28757415ec4d", "indicator--51f5ab0f-8c8b-4f89-9def-7842d0562ce5", "indicator--fb8037ec-0553-44f0-8db5-18a64c0ffdb0", "indicator--551038a9-191f-461d-8bbd-7d3f3e8337a3", "indicator--a8ff9b62-cecf-469c-9faa-7a118816ebb3", "indicator--feb99ded-6170-4b54-912d-d0d19aefaef5", "indicator--8d78c7ce-208b-4754-a798-4348b2701edd", "indicator--625396d1-9c94-4e47-bf9b-45e8b42deccf", "indicator--77075092-1f47-44f5-9879-8f481d28adb4", "indicator--18c7ee52-1afe-4d87-bf75-da4fecf2f5b7", "indicator--d3498055-df29-4b9b-8747-462288bcd801", "indicator--501e3681-86ca-4105-b0bd-db3a99a2035d", "indicator--aad67e5c-8f16-4b5c-96ec-d6fb58485948", "indicator--a2dfe2ce-b1cd-4e8d-98d0-e182a7b4a955", "indicator--cab2091e-f1e4-47f2-bbee-57c651b243fa", "indicator--12c24d88-9e94-4c9d-bd6e-58486f665d44", "indicator--eddee56e-f5da-4554-9d6b-8857e55243f2", "indicator--780150c5-349a-4e8d-97a4-1923bb437d43", "indicator--7c1f60f6-6f6c-4ab8-973a-64ed5acfc0b5", "indicator--5f44fb29-d120-457b-abea-27214a0b36f4", "indicator--61e08667-90c4-4e4b-a3f5-3d87ce8a1a55", "indicator--76e0fe2b-695d-4fd3-b4f9-90dbcb874e4f", "indicator--fb64600d-7585-4f36-83e4-814aeb28107a", "indicator--e8079f4c-88fb-4d59-b083-e5f3032a493c", "indicator--87300f12-a62a-4eb3-922a-efb3e15a26c7", "indicator--8f488f31-fe23-4f8d-ac46-1877bd9dbb5b", "indicator--5b446400-5d93-49e9-9248-bebfd0f254ad", "indicator--1586a66d-aa1f-435a-a0ee-6b548f074704", "indicator--157ef8c6-633e-4fbb-a401-996d6e568f2d", "indicator--70c138ea-f957-409e-ae2f-417c4569fcd2", "indicator--34812116-1622-4b3f-82cb-5236bb0077b7", "indicator--b8488ee1-43e7-4d88-962a-85d1759a1cd0", "indicator--0540e31f-29ce-4022-8af2-237a4dd763f2", "indicator--57a98941-5259-4eb3-a8a2-a7615504ce00", "indicator--a42b3e8d-6e6e-4453-a92f-e541e9e5eb77", "indicator--090d9c71-9ac2-4a4d-b8d4-226bade25067", "indicator--6e05e1d3-0163-4523-8c11-eb3224aeafa0", "indicator--31681f1d-a939-434d-bbbd-1ea9af36337c", "indicator--31f03371-c732-44c9-9540-d657acac2d4b", "indicator--e16d909e-ee90-4daf-b5ff-1ae9feecc978", "indicator--01ff5651-4416-4965-b854-08848a3d29cd", "indicator--939f7af3-10a7-4f62-8f13-ab16317d8d75", "indicator--63243d7b-1e9a-46cc-81e3-bfc5b06f8ebc", "indicator--0ba665e6-d289-4ac2-9aec-56d79f99531f", "indicator--6a0de1af-dd04-42c8-bbbf-d79e1a43d5a3", "indicator--753e4166-5602-494d-bfb1-4027132f82cd", "indicator--71a60ee0-160f-45a2-91ed-89aade276dfb", "indicator--afcbdc33-0fbe-44bb-9ff3-e2f8cdaa731f", "indicator--8338c301-eb86-4bbf-8128-fb15a7c1a48b", "indicator--13cb3302-4633-42b1-9511-97aa27333752", "indicator--587d45a1-bfe2-40da-9625-b8edd7a4051d", "indicator--30c39b83-1943-47ed-be4f-c91bef17645d", "indicator--241bb535-af8a-41ea-97fa-7b4127073de8", "indicator--98f82509-6ee7-45dc-89b1-fa117f281544", "indicator--07f3d33c-b1cc-49bf-a972-9ab0a9b6e099", "indicator--51b87ea4-457a-4075-8cf6-d7b04783b06b", "indicator--1f4665b5-4330-4d9a-a865-e0e680490160", "indicator--8ff4b3b1-00b9-45c4-9996-ec8a2ba8f4ef", "indicator--eb41ee00-794b-4506-a324-45f179fb64fb", "indicator--cfd6c032-ead7-4de2-992f-ffd6d7644140", "indicator--c7aa49e7-7775-446e-8c40-0dc98ea9e0bb", "indicator--78b82314-84ae-46d6-9823-a71f92d11728", "indicator--e40d1a0b-a671-498f-a6eb-0210e29414d6", "indicator--e04bcb54-4928-4b46-ade2-ca2314038784", "indicator--ef2cc3d5-9cb6-4092-9a65-d49369f18b83", "indicator--067a9930-02e5-4d5f-b342-1491c886edce", "indicator--06d4a6a3-d05e-4e51-9903-addb6de915e0", "indicator--dec364d6-1456-4d24-b668-dc1087dfd32a", "indicator--685de849-104b-4b09-b72e-db1f7c63563c", "indicator--4e9727fe-33f8-4e2d-971c-de78cb92691a", "indicator--50117fb7-2a4f-44ff-8931-5a909d4a045a", "indicator--6399c371-199d-45c4-9e04-c96d6ff2cc6b", "indicator--6e09391e-2171-45a4-a5be-bc8abc7dd3a7", "indicator--a4124ff1-569a-4433-a040-5035eca1c533", "indicator--d012a722-5b0a-44c5-8157-3ff4eb66146e", "indicator--6c4580d8-1b26-4a37-846b-642f32cee1e7", "indicator--ddf044d4-ff32-49ef-93f3-a1034ede6278", "indicator--ec12af65-9a33-42f0-96aa-712b4ce0782e", "indicator--114346a2-63cf-405b-a42a-fd5f4849f609", "indicator--f8a2543d-ed4c-4841-908a-f7489f751ddb", "indicator--a7b95f04-a10d-4b88-a728-9dff0b731f9a", "indicator--d462ed51-aceb-4f58-a2cc-8613cd75fafc", "indicator--83bc5681-0294-4906-9d31-770ca77d9b3f", "indicator--45115e58-9e01-4e4a-8041-f2ec19c4d7fb", "indicator--09a7d604-dcc3-4392-9934-5dad67a862bf", "indicator--3b733bb0-c326-46ad-b088-f7a1bd954b1a", "indicator--b2dec644-bfa8-4d29-8aa3-581404b993cb", "indicator--8113f581-15f5-43a3-b5c0-34f0c61a757e", "indicator--60cac950-2de6-4811-a446-feaa204fe759", "indicator--7da538c2-d551-4f9d-811b-99dc3519dd7b", "indicator--df4017a2-f6b5-4433-99fe-c0cbe7db419c", "indicator--b33db274-f923-4175-93d0-2c078b90e718", "indicator--30af90df-0ab7-4f9f-a4e0-bb4876434d2e", "indicator--ea046d33-5519-44c9-9de3-8e9624bbe64e", "indicator--7c02bfd9-c811-421b-b5e5-ae762fe32bd4", "indicator--6f3aece6-41df-4322-9d22-5ca074afdc1c", "indicator--af825312-5064-4aea-a626-82678178bd43", "indicator--34714ac3-723b-4d9c-a524-c1c479545bcf", "indicator--0324d9e3-8a27-494b-8c5b-e1b07fc4907a", "indicator--08f6b14b-3221-4ac4-8eeb-0f0acf1fdb19", "indicator--de2c7153-654b-4799-a94e-e22f21de8111", "indicator--1e6ffd15-81da-430a-b4cf-e6c30bc45240", "indicator--fc81dec6-699c-454c-bb8b-52c6618c5fff", "indicator--22edb879-b3e1-42c2-ac6a-18b967d1219c", "indicator--8dbbdcc6-87ce-4e49-9d33-56bfc67a444a", "indicator--6c9f290e-f83e-42b0-b3b8-36069087dac9", "indicator--927a2da6-65be-45ab-8825-c5540130fd8d", "indicator--8df9dfd6-e77e-45b2-b2bb-d239c449202b", "indicator--7ee41359-9b0b-43ef-9f27-a151fc209841", "indicator--91356cbb-a0d6-4d9e-a736-27d4e39d5002", "indicator--d896634c-268c-4f79-8a74-cf347cd8a6ff", "indicator--40177893-dafa-4a0f-9d7b-cd9c8cd68ade", "indicator--4eade8a2-a570-47d7-a1a6-11efcb27393a", "indicator--83c45118-8280-435d-a1a0-e9fdf273ceb2", "indicator--86f6508d-0c44-4dc2-b942-fad6e849656c", "indicator--bbbc9fb5-978e-4a9e-9b53-b3a3ff877c84", "indicator--cc0f56db-3e08-4f96-9455-bb4ea5e46f55", "indicator--72c7e041-8288-4051-a19e-9d205c78ad76", "indicator--3e7d0138-b20a-41be-900e-e2df14314cbd", "indicator--23fea568-8e11-4e56-8bbc-1f3d3f40e684", "indicator--223dfe92-c791-415c-bbbd-610d2211717e", "indicator--7ff288e2-916e-460b-8f8c-7d7ab60c6ac5", "indicator--8af66ad8-191c-4f2b-b92d-6d3543b9c90b", "indicator--db431fb4-2f1e-4e17-9f67-70641cb0ab5c", "indicator--848fad81-b3ed-4965-88eb-96eeee783363", "indicator--7a5e3be7-a97e-4178-859c-5bd46ca5298c", "indicator--31f4eec9-e005-4678-aabb-9431f701e0c1", "indicator--2b4003e3-2e57-400a-a08e-e7398f4eee33", "indicator--02c925b7-dddd-4eab-8e1b-c58570491bf4", "indicator--49e781b7-fb73-48ef-935a-428504bb6af4", "indicator--10e108c7-1786-4fa2-9097-6275ff73b829", "indicator--5b496ade-823b-4f86-9f24-12db2da66a14", "indicator--41a4b6bb-3345-4436-84a1-a8705c4b5196", "indicator--9f2b0b27-5ab4-49f7-ab68-334d24f54581", "indicator--52f76a95-d136-487f-8f0a-407a814cd566", "indicator--636d267b-38d4-49cb-893c-61aeb730eb04", "indicator--270cdbc7-da99-4f30-ab23-8ad3b51eb8a2", "indicator--5ed6ceb9-db2b-4b43-8b3b-0666e22fd49c", "indicator--bf261ffa-257d-4830-89f3-304229a0fd2a", "indicator--036c646d-2dca-4bca-9fbc-209fcd95eeac", "indicator--1b0a6f5a-301b-497f-b09c-e4a794867afb", "indicator--c2c61b06-ebc5-4c1a-b9d7-430cc99e87dc", "indicator--a1efc551-f2e8-47d2-8cff-93efaa84b681", "indicator--92818e2d-02e3-4442-99b9-d85c7c5aa929", "indicator--e1e88cbc-08b2-4ad5-913c-77cd01275bbd", "indicator--f6e74150-e5e8-4293-a671-9dd0d5efec19", "indicator--0c6cf659-a1bc-44cd-a494-05235940c7d3", "indicator--c5277925-df4a-4fb6-8214-fdd1e2fbac09", "indicator--e6ebdde3-db64-4368-8ef4-21e85f884d28", "indicator--5344c799-7663-4f02-b919-1e604fd0ef76", "indicator--28012148-3d4f-4053-a3ef-b47d4db93b05", "indicator--f2f7e5c9-e912-473b-aa4a-5839e52fdb11", "indicator--f7f9eaf3-d81b-4e4d-bddb-0f8c4f3ab3d8", "indicator--693e4a5c-f54b-40db-8f2b-16135e59a966", "indicator--d54cacc8-4088-4d9f-9856-ddd3d78ad839", "indicator--ec9c59a9-632e-4311-98f8-4e9afcdf97a4", "indicator--0da155bd-5407-4867-86e9-b1bca244bbfe", "indicator--38c32c85-9c1e-4004-af8a-9d5cb426eb8a", "indicator--69e09a40-0c8c-4324-b385-bb6946ce45eb", "indicator--42ae3ac8-6e3e-4c18-8015-f2a01cca6b6b", "indicator--010b16ff-61fd-4c18-9c39-7b9ca7685440", "indicator--0d2c52e7-6294-4c23-8385-2f6c2c56c22f", "indicator--2f9cd76f-58ab-4272-ac46-a491f4a57494", "indicator--a7176559-dec3-42ea-906c-54d5f257d83d", "indicator--e8350fe6-212c-43cc-9b54-c4d7d7456f28", "indicator--4f9d0280-086f-4cf8-a64f-1725ee9f309b", "indicator--2fcd5630-6751-4527-b37e-04c4936bc5b3", "indicator--942b563a-7653-4391-a72a-06f60fbe07fb", "indicator--e84ebb86-cbed-42e1-9f18-7171a0382e3b", "indicator--a689d9d0-010b-4d25-915d-41bc664ca555", "indicator--255aa4e7-30f0-4e01-98e6-a64d0418c829", "indicator--05022666-1feb-437e-aaed-2af7b7abbca1", "indicator--55b95d22-d94b-4c1c-96a1-cc222c574cc2", "indicator--c4fc4fae-4b0e-41a7-86ac-f68bf6e2a648", "indicator--32ca11a9-31bd-45a4-8aad-d94d24594fb2", "indicator--22e13c48-3986-493d-b503-920ebabc0f32", "indicator--53ee2c80-97f9-49af-be3c-a5162643a8e4", "indicator--6bb2c275-85e1-4064-835e-20135e189685", "indicator--721a4892-cd91-4318-a921-d386a2905b81", "indicator--9f895e2f-ff86-47b2-a7bb-df87467d17c7", "indicator--2be61e06-6d1c-4f71-bee2-b7b7fd6c5d3c", "indicator--7d1844cb-53d9-46a4-917e-7d606c23e3c2", "indicator--187fdbdd-928c-4b18-9317-70d8c84ca49d", "indicator--3609bc6d-e0f9-4826-bd37-0d7b869d1e6c", "indicator--3c46f79d-f540-4d28-a3a2-590bac8a566e", "indicator--81447352-13ba-4244-85dd-fb5cfbc83495", "indicator--22ea7b6f-a627-46da-90f7-f29e03978dc8", "indicator--4e7395ba-2467-4c6f-bf9e-82d26a0425e2", "indicator--4d060f2b-f75c-46c6-9f99-24c0e3cb5668", "indicator--6b527810-1be1-4069-b486-a12313cb82fb", "indicator--d6152b62-9c05-4d91-9992-afd8e6970d54", "indicator--aedabb3b-6174-4641-a609-dcfecd74a950", "indicator--e800bef3-9aad-4ee7-a178-43491c4e2316", "indicator--9494404c-77a7-41a9-9349-8d6ee92fb82c", "indicator--047939f9-1e50-403d-836e-77a8b6cbc810", "indicator--321cddd7-5f95-41d6-91a1-0c4bea470438", "indicator--d9d0d6b1-aa07-4ff5-b9b6-45c959b9133a", "indicator--23cad4d5-0b0e-408c-9b41-0d162245587a", "indicator--3647d9b8-3fde-49a1-a847-76d6b792c364", "indicator--19a237d4-80dd-4f24-8efe-a22793775e56", "indicator--69848d3a-49a6-4595-a565-9c97a9c5aa98", "indicator--9740c4a7-9446-474e-a732-990cae314e1e", "indicator--ce7df18c-91b9-4fcc-9949-b4dfa7cd6d69", "indicator--b1a0f54e-d95d-4825-a9e6-4ceb4207edc1", "indicator--46955d94-f592-4fa0-a7b6-760d6bb68eb9", "indicator--e4918e79-3723-45a0-a581-7fd28a85b0c7", "indicator--054b5c4b-f6d9-48d7-9939-4217a117530b", "indicator--4721888c-139a-4f30-b27c-cf28ddf68c1e", "indicator--9951e255-7459-48d4-87fa-fa0e68a632eb", "indicator--fe3e6e8f-d74c-4854-acef-dee1ac4ca9ee", "indicator--a3751801-f4c8-4781-b790-ed2bae32b3cc", "indicator--a7283119-dfc4-4104-951b-f65303c70752", "indicator--708ef1eb-7a33-4e81-aa99-49ab8ff02371", "indicator--0086f13f-951b-428e-b46b-9718251663fb", "indicator--caa91f22-e048-4ab5-a565-13a4ef7ba0b3", "indicator--cf9c64a2-675b-4298-b662-5dcaea453eed", "indicator--e4ffc8b3-e2d8-4f73-b6c1-8697c61affaa", "indicator--6ba9067a-03c2-4895-b96d-8f1445f54303", "indicator--729d7e7b-0d38-4092-8d4b-781081dc8c74", "indicator--f62949ce-ab7a-4ccb-a330-26061f2f687a", "indicator--fa1e8a1e-efa1-4b97-b9b8-bfc68e856b59", "indicator--f77c0163-d1d3-4b87-ae16-cdb4db9e5e64", "indicator--ffacafbc-4020-4541-ad79-35ce1489d558", "indicator--fb9a7cda-364c-497c-9c0c-46a8506e98a3", "indicator--72f069d6-ad82-4ff4-873c-ded54330c124", "indicator--88ff3eb1-c2bf-47d2-a1ce-1d781c8e239f", "indicator--e6266174-52fa-4464-a9e4-ecb36f3c4db4", "indicator--6785ffe6-a3a5-4104-9841-8ea1e91352fb", "indicator--828f42d5-50b0-4894-8a51-ada3116756db", "indicator--2ab44a94-3abb-40ff-aa9c-f8faf67d5d0b", "indicator--e3ff14b9-3589-4f7d-95d1-2547e71e8197", "indicator--c31d36e7-b767-484d-86eb-54bdf13de5b5", "indicator--5b7392ac-29ca-4e99-80a0-af63f9cd3429", "indicator--28430d64-01a9-4ab2-a4b3-5202e7562753", "indicator--05cf786e-352a-40df-9966-c72bb34a518c", "indicator--0cea1501-47f2-4c5f-80a6-44d4349c4569", "indicator--7f47b48f-cbc3-485a-9b4c-aa361fbc5c8e", "indicator--f17af8b6-f310-40b0-af69-ead2e11a312e", "indicator--694547d1-8765-4231-8835-8b25fa71aa06", "indicator--f9339f29-367d-43a5-95f7-d582332b10b2", "indicator--7f8d84ed-2f24-414d-bb7e-ef34912115f4", "indicator--2cc16411-e318-46c9-851d-ec505eaddc1f", "indicator--ebde2855-695d-428b-9e98-94141937c963", "indicator--abab2009-823d-48d0-8abe-b7c546b99f10", "indicator--2da40406-0213-4750-a118-e8bba9c856f5", "indicator--a7dd1c5c-1dce-49cc-867d-becde4ee3cff", "indicator--09d4e453-83a4-4249-9317-b630151e9e47", "indicator--6884c0f9-74fb-4af8-b02a-95b3864f96df", "indicator--fbf26973-6cf1-4a69-a9a9-9c0343773b1b", "indicator--54f7068b-2a2d-4776-aad1-c4e60cb1e4e9", "indicator--820265ab-4b56-40ec-89de-e744c4e212b1", "indicator--0f317bb6-626a-4395-8829-b9db409d0242", "indicator--b6da6004-ad13-40b8-92e6-3ea69fffb7b2", "indicator--b61930d1-7062-42ef-a691-bdba9b2e3204", "indicator--b4975f81-4ba2-452e-82e5-6022323b9d6a", "indicator--72885488-9047-49fc-9ca8-7940da9b4eb0", "indicator--2541c3bb-027d-4a9a-b14f-fcf37046e787", "indicator--5171a84b-8ec4-41d9-80a8-3b3a8f107649", "indicator--5cdfda84-7240-460b-a751-c0dbda7e06d3", "indicator--ad3d1178-b7f0-4fbc-bce1-43b24a08fa3c", "indicator--8473953d-307a-436f-8dec-890bf245f44d", "indicator--15e1d1a6-293b-4416-b5b9-68bca4dcf5d1", "indicator--9d84376a-4697-4754-aa36-0ef125e5da0d", "indicator--bf017feb-52e8-4a72-b2bb-66b96e700159", "indicator--828e921e-fb2e-4e35-9ac7-c5451b148e53", "indicator--61ac2247-9cdd-42a9-a624-11e99712e0d8", "indicator--2a745d32-7af6-4355-b66f-905ccfa9c625", "indicator--995f915e-9963-4f41-bf1d-f69bbc8a4335", "indicator--82ea1bc7-0d23-4cfb-99dc-b2cf83418112", "indicator--f64022e9-9050-4dc8-858e-82bfccaed6b9", "indicator--5ec99224-d0cb-4e3b-a9fd-fff3ff5eed19", "indicator--5eaa706d-7d21-4eab-a18c-5670ceeef764", "indicator--9a323244-c4df-4539-af72-8375e80d9471", "indicator--da792908-79b6-4013-a56a-05016c93671f", "indicator--75783e23-3bb8-4330-b913-e1f41b83bd4b", "indicator--a4f0ba18-b43d-4a1d-bcd4-3c082bb17547", "indicator--f06f7e9d-5cc1-44fa-b17c-87393a8a5ddb", "indicator--dce5b4ac-62b1-49d6-8ed7-c9ab1c87660b", "indicator--06717ce1-e3e5-4673-bc66-5f309e44e6d0", "indicator--9967f502-f03e-49b4-86f2-329b6bcf2376", "indicator--feaebbda-c079-42ff-bc11-2fc65078b9a7", "indicator--ecc175fc-df63-4503-87a0-dbbabc73a3c7", "indicator--3ce3e54a-ee32-493f-a4ea-b985860e77c3", "indicator--8a837d12-20ad-413e-90ce-f95c949aa28f", "indicator--3a205887-7bad-416a-a456-2c4ccc7790b9", "indicator--7e94a105-56c7-47f2-adca-21a2611e20e3", "indicator--f1b2fee6-5a94-4e7b-9298-66a566914687", "indicator--017d5054-e29b-4e9a-8450-1ca5a9b0b27d", "indicator--6bad9638-622e-4fc9-ad3a-ec7ab11e5784", "indicator--c682e250-f480-4af7-a91a-6090dd517061", "indicator--58d3577d-151b-4399-8982-a01f0d1763ab", "indicator--70629a21-f2a4-41fc-b2c1-8e55211388fe", "indicator--f870eff6-3e90-4e21-89c3-0b0626792d99", "indicator--36717eb5-0619-40f7-8864-98d662e0d22d", "indicator--c0bce917-c0f2-4df2-a171-a6daa9568cbb", "indicator--5f60e85e-d257-49b2-a26a-2692e7a43b2c", "indicator--fd49b6e9-1f9f-4d6b-af7b-928fc572f584", "indicator--273cf137-b0da-4cfb-be47-03e32dd29dcf", "indicator--e09ec64e-19df-4a0e-b792-3ed4bc5ae11e", "indicator--c3df89f8-4eed-4515-a1b0-24ccab3c1a11", "indicator--191e1610-dd08-4a22-8d12-bc794ab60a6b", "indicator--9ea932f7-7ee4-4618-9f98-c1ba1fada920", "indicator--a279c927-b614-435b-8c9f-b91d7ae64b3d", "indicator--42d92956-5aef-4e93-8443-50d7ba78bf18", "indicator--93ec5e4a-675c-4066-9f59-1d1fb63a6bc1", "indicator--cc44a093-eaa2-4304-b40b-0a6b06bc3114", "indicator--874e2635-3281-4474-a022-83e58b1ba691", "indicator--311121b5-45fb-4f3f-890f-68224098eaf0", "indicator--1d1b4ff5-092c-42d8-b363-828a8d828f75", "indicator--f88a1b81-15f2-4c50-9a34-e1e4d3edb5a7", "indicator--21aef5e3-edea-45a6-9014-5e926da3fabb", "indicator--07ce64d9-2820-4129-b677-b70eba90c15d", "indicator--55e7cb32-1ad9-483e-8949-3fb53613b551", "indicator--ad5edef7-9b88-439e-b30e-14279f716029", "indicator--27089c51-5ffd-4360-a2e7-43208d05e4a2", "indicator--259371e5-0ffb-4ce9-ac73-a47d82dc9d25", "indicator--c5b044f2-b193-4da3-b7ad-193a76a43325", "indicator--b4380dad-6b3e-4e3e-b2be-64b9184547ac", "indicator--8a0cd660-badf-4f8b-b5d7-8d6a578494fb", "indicator--b4a081e6-35bd-4463-b7a2-c1c01c69fe6e", "indicator--dbd9f5c0-16ca-4302-aa7c-652433c836c0", "indicator--a06b5b0a-37ac-4550-8833-09786f4da00f", "indicator--c0f09bae-9226-40df-97e2-cf22d3d51451", "indicator--1ae61aee-3f20-4e92-b273-20ca20c9923a", "indicator--7de5e9ec-2de6-4bf3-9f2a-3baa87adfc8e", "indicator--7886e0ee-0662-441e-815a-eb934de7b481", "indicator--20589619-973b-4d41-814e-8f624ba59ed2", "indicator--c041f6ab-32e0-40a7-81a2-89119323cc77", "indicator--c85fd728-d2ca-49cd-bc81-595fec21cb79", "indicator--9a6a8c19-41fd-491c-82be-b83be8ad72bf", "indicator--d05fe264-9add-4e58-b093-68082d363ce1", "indicator--4d2e1f53-1266-4833-bdcd-cf546c05aecd", "indicator--51476a8b-b2ec-441c-b2e2-2ba08a7721c9", "indicator--37c493c8-c77a-46a5-869e-d6b1423f425e", "indicator--07f89a44-22fd-4617-ac8a-19eaa171d30f", "indicator--5d489e3f-cec4-4fa9-ad16-2ebbfaa1ac8b", "indicator--92785c45-a4cf-4540-a69d-e58d5270a66f", "indicator--adaf1992-74b0-41d5-a211-23978591a656", "indicator--1f080c1b-8f90-4d55-b419-f713e60c3f29", "indicator--f5ac417c-24db-40b0-8ae3-e1f76878bcfd", "indicator--6c234bbb-1809-40b6-86cf-09047df7b9b7", "indicator--934d5738-ecc7-4550-9b7e-2b1c4852235f", "indicator--81c9b70e-5535-4fe5-8029-cf2971665fcf", "indicator--cfdc30a2-1170-43e2-8cd6-6ded40fda6fa", "indicator--5109fe5d-bffe-422e-8f18-e62d204f5f9a", "indicator--f2f8d813-12cd-4998-a20c-2a41843d4cc8", "indicator--bb900cae-753b-43ad-9eb7-625940776285", "indicator--0c03a960-cbe1-41dd-8b6c-3af2fe85f4fa", "indicator--1c4b6a17-6ea1-474e-9b11-684d7bde85f1", "indicator--586ec922-e795-4e32-b111-4d85e020ce9f", "indicator--68c19c81-0c36-4967-9cb8-8cad651ca558", "indicator--02de80a5-7df1-4e26-b02c-d0135451d1f1", "indicator--5b1b4ee4-7586-41d5-a969-4c3acd29877e", "indicator--70e0ba30-b8f5-4601-9853-98b52f502b9b", "indicator--64c4b1c8-18c9-4286-8149-e2f1e1346a57", "indicator--07205e75-0400-4899-b94c-514528172b73", "indicator--cfdc14bf-1d8b-4096-9131-54daaa875b42", "indicator--a5a73128-30c2-4c30-bcde-0d14cbc9d48d", "indicator--2cba2237-6250-4690-8899-a4bc00370275", "indicator--80d9a466-77fe-432f-9d47-36bfb277e1ee", "indicator--517abe62-3b39-4a32-9722-53c18489d678", "indicator--76c62369-a490-4a3c-95a6-a0edc6a4ccba", "indicator--024481ab-7097-43d7-9263-4b57730559f3", "indicator--e5a42e20-f273-42cb-bb3d-61e8a8ddda1e", "indicator--1685cfb9-c377-4de0-845f-9c0b695e0054", "indicator--85063fd4-60f2-49cf-85b4-47599bd0a651", "indicator--472b89bb-e7b0-4b28-b964-9d350ad1c231", "indicator--b286044e-244f-4ffa-b82d-738d37add39c", "indicator--9ffcf78c-0012-48e3-a53f-174f4c762b0a", "indicator--c8dedceb-a9f1-4bee-b84f-03e5fd087ec2", "indicator--a19e3d1c-c459-4614-8e8d-9f970bc43104", "indicator--cdf148e0-e524-4e2f-94c6-471fe414557a", "indicator--eff450b4-0c4c-4f39-b446-d6586fe1ec38", "indicator--a74618f7-3025-4ae1-b7c1-a0072eb3ebd1", "indicator--dcdf7b81-3d49-4c10-8431-399b2dfedb88", "indicator--58526c51-dd2d-4aa3-badf-43d7ff72ccd0", "indicator--05ed049a-bfac-4429-9ddf-dcb7b9fffccd", "indicator--0d51774e-b684-4c77-8852-20b066b2c5c5", "indicator--ec9e30fe-5787-470a-95d9-43e0d75a331c", "indicator--78114004-46c4-4e56-b4fd-fbd886eac100", "indicator--84c2c8ac-2bf4-42d2-8e17-a2b9f046af1f", "indicator--3090c933-b212-4817-a1bd-ec7ac6448a0d", "indicator--c4eae85e-6c6a-4db0-9070-ce7d5ad50e0f", "indicator--94c0053e-37fe-4d35-830c-7fb6356bc7af", "indicator--a6743821-9e94-4c17-9d71-135129663b0d", "indicator--fc124a06-0ae4-4751-a2a9-092be6a49fd4", "indicator--28a4948d-570f-4b10-b081-72f5b7c4be99", "indicator--d84f4dcd-b49e-4c47-af85-4a70cb7567f4", "indicator--355ab068-3480-428a-b9b6-385effa85b9d", "indicator--2fd10331-b360-44fd-830c-72eda6a10319", "indicator--c239ff05-033c-46d5-b20d-9f165cce23ba", "indicator--77880ea0-8f1e-4db3-9eb1-31bb5fe61298", "indicator--4c385dc2-94fd-448c-a1cd-d52c309059ac", "indicator--58c2c202-a505-4bc5-9a68-534f4d4d73dc", "indicator--686475f8-11a6-44dc-9fc4-fdd5e9931064", "indicator--768318ad-ffc3-45e6-be8a-7c32bacb1ef0", "indicator--c3fd6d33-8d2a-49f4-a0bf-dfae52c33a94", "indicator--0d0e382d-e002-4f2a-8d87-7c11dd0f1b2b", "indicator--2dd63f65-d4c8-460d-9da4-7c57d3f10577", "indicator--1ff535e4-faf7-439a-843b-ee599b500649", "indicator--a0d206d3-2af1-4e8f-801f-0adbe95e8754", "indicator--730effd8-e580-4175-9aa1-0571e8b582f9", "indicator--19f4a52f-f158-48aa-ba73-d2ad9af605e3", "indicator--8ecf477d-aba7-44ee-8d3d-7e73a4b05f5a", "indicator--787f9b98-2b9f-4d9f-8590-2425b6a483f1", "indicator--2fefb247-1459-4c12-b0d5-0df302488ed0", "indicator--e89dc7a0-f751-48e8-aa74-29e8612484d1", "indicator--0ff810b3-4c94-4065-9edf-cd4e017f2990", "indicator--f107570a-a524-4864-9d35-a09eb969663e", "indicator--2f89c7d6-3848-4602-8ee8-61e4733229b8", "indicator--29c183e6-4e6e-4d71-b9fd-e51d81701e7f", "indicator--bb9ec9c7-5c85-4d1f-a5ae-abe13db24140", "indicator--f54f5e54-b62f-4a5d-84c0-655b40633239", "indicator--04bd3e12-3e9b-4456-9202-11e12d5ec513", "indicator--3420052b-b30b-40ad-b0a7-617ffdd3499d", "indicator--34a9182c-be3b-496d-9364-0cff5d91c699", "indicator--21306d97-c17e-4e1c-9a4c-7a1feae20337", "indicator--5becd897-878e-4e45-890b-75cdd0702b72", "indicator--c68d52bf-6ba0-48f1-bbc1-853d93e630eb", "indicator--02bdb317-d5a2-4d59-81e0-1a80aec0e317", "indicator--eb2ea0d7-b7c0-4b1b-b718-eb8fda03b6b3", "indicator--89a27a82-0ea1-4029-a384-ccfa63b2e4a3", "indicator--932b1acc-403c-420d-96f1-6b94c5a94985", "indicator--2dab50f7-c40f-456f-9993-e4751f6a058b", "indicator--ebc3cc0f-44c9-41ab-9dec-ae7463a56938", "indicator--4aa5c036-bfa3-4954-acdf-d3805420af22", "indicator--45d2dc76-e254-4487-8443-351d2659fe81", "indicator--f9ed7af4-a943-4912-b395-ca4abf71075e", "indicator--d2d97f2b-7e5d-4a6a-b43a-213610578b11", "indicator--f58ed09e-fa3c-4d85-a955-d0820316cc0a", "indicator--73f1b1b0-60d3-479c-910c-58d5000e5726", "indicator--e06bac7b-cef2-4d50-8836-f4b7e09f1f6e", "indicator--4a0daeb4-9a34-4220-8d29-a0f7bc12960b", "indicator--0a05b726-6a5f-422e-9a10-72978e65e9c3", "indicator--84dec612-69a8-472a-8ff1-85b0bf3bda96", "indicator--cbf5a65d-669a-4c1a-b197-1419f9f6cc79", "indicator--49781210-72a0-4f51-b174-79cee5420b09", "indicator--ae02f1e1-30f2-40b0-bb72-c97f2ce34122", "indicator--0116e970-22a2-4ff1-ad0b-2df2caccfcd9", "indicator--3c804902-df84-44bb-8bcd-a5ebc9d3fa6d", "indicator--7c829708-52b5-49ab-a241-14054f1d496b", "indicator--2c180f1b-8305-4949-b601-433b1c0437ab", "indicator--557eca82-5a88-4f7f-ab77-e4b8e94a3ae0", "indicator--ea045d56-68b3-4a2e-9e40-78fcc882f40c", "indicator--f9cb7fc7-de17-421d-9d24-a0ee77e55ec7", "indicator--0f482e51-fe21-4bf5-818e-cd9a5642d7c2", "indicator--5642c762-ce60-45c5-84ef-ed8296800b29", "indicator--d0f65e86-27ca-4006-8a77-68b1fb4cf1f9", "indicator--9161b4f1-f69c-412b-ba9a-3e1c81a0b78d", "indicator--bf92e2cc-c17c-4f60-80dd-08f90fb162b4", "indicator--d0671cbf-c3c1-48e8-b98f-6adfd78b8446", "indicator--339f624e-65cf-49e7-b54c-b540f3c16395", "indicator--f63196d4-8244-41b9-82e8-909de22e9e0d", "indicator--0872f7ba-db95-4822-94d7-8a9f6d2cdee8", "indicator--8a45f5c9-8003-4a70-8978-cd15d543ed2e", "indicator--5fcc2c73-0edf-4a6e-b807-a63b32160b9b", "indicator--dd1c5f26-e4ae-493a-b7fb-51f279ca3c3e", "indicator--60ee2b85-7d26-45e3-9809-ec1acb8cabbe", "indicator--5737252c-d1c6-456a-85cd-b05e5ee67932", "indicator--0ea2fb8e-8f02-498a-a24f-a5265d8e5e83", "indicator--afd7160b-ab36-4d17-8e3d-b6ebc5e84c5b", "indicator--32b70d39-3c57-48bf-a83f-9ff624af7e9e", "indicator--a7391836-da7d-4718-964f-8bfbf66e58ef", "indicator--1660e17c-b5b6-40cf-9644-649975adaa81", "indicator--05b88cb7-d375-43c1-8ce8-a002d21ae846", "indicator--dbd44f32-f7a0-45ab-a781-d1e3700533ec", "indicator--53ea983e-93c6-49dd-9121-a7601351a309", "indicator--b9689ce5-23aa-44fa-a5b5-9be0677c0ff1", "indicator--47c13749-8b5b-4db9-b741-fbf75fa4642f", "indicator--5a53560c-b898-4810-9a0c-4e258d5b2a49", "indicator--6ed2da30-f68d-4634-9480-f9c3e8d04e5c", "indicator--fb3bd450-0a67-4ae1-ad89-4067818ef4c8", "indicator--7cbe9add-6244-438c-a948-8cab4a532e04", "indicator--167e137d-3cd1-47d1-90fb-8fb723a4fbd4", "indicator--8f1a2a5c-bd78-41de-928c-e45709832fd0", "indicator--235d3825-e3d9-4d60-80dd-2d6000d39cac", "indicator--b0478d67-6fe3-47f7-9225-086b8285641c", "indicator--e3c476d5-7caa-4f80-b289-316bbc7db115", "indicator--7e91a5ee-f374-48e3-8964-45488ed57c67", "indicator--f8895471-94d5-4295-8611-54c187b83e28", "indicator--3bfa0a45-4567-4eef-9e1d-1060800999d9", "indicator--9f175e7f-ce7f-4354-a9b8-e1a0e093e58b", "indicator--ffcc1be3-e17a-42e4-8de7-6f9de52f5db1", "indicator--5a3b9ca9-c2e4-4067-8e40-ed7b089e79a9", "indicator--59ef5ebc-a60b-490d-9978-32a619b59347", "indicator--a9104885-1650-4ffa-ab9a-221c0b4a76ce", "indicator--1564e2f9-343e-4bbd-bd57-21b9d26d4bea", "indicator--c1a96972-efa3-4b83-8c82-33bdff892e23", "indicator--c6bdf43e-4fed-47af-b767-86fab94a57e8", "indicator--a436d170-69e4-49e5-9bfa-b5de6660aa38", "indicator--ec137613-2243-4539-a11b-71c14ad80cc9", "indicator--edeb0607-caa8-4e05-ada9-231f6c7bfb4c", "indicator--2e516292-6905-4cba-9078-ff80f075bade", "indicator--342a2d61-1437-44ba-af06-4ae17404ddbd", "indicator--5ca6415f-5f72-4ed0-9c8e-faea5bbde9e6", "indicator--5e748afc-d0c2-4b05-bdd9-dfd12b2772c1", "indicator--1affc8fa-8396-48d6-aeec-5d4dc2b265d4", "indicator--abcd2110-0f1e-45ae-a83d-f49d570d653e", "indicator--c3e766d8-e337-4fe9-8bc0-86fc5abe275e", "indicator--37b1b7c6-fa8c-49d5-9ac4-6f8e314d8c10", "indicator--94781bc9-00ee-42c6-966c-a36ead9f08de", "indicator--78b85702-0e2d-4ed8-b6d2-881d064d50dc", "indicator--687ee075-2d6d-4d69-a1ac-6050a29f8818", "indicator--a94e3a30-b21c-4619-9d6c-725ebf5af10d", "indicator--73679748-f881-42a0-9439-be1315904228", "indicator--ecfe1984-7d68-4f3a-86c4-5a8f5c90ead5", "indicator--2b1103d1-dcc1-4dbd-82a3-b4a8ffa58632", "indicator--06dd1ed1-283c-460b-8ac3-845f46506dc8", "indicator--bf7a9349-82e8-42e5-9b8b-da9c9fd326ea", "indicator--7b3997de-5f3f-44cb-a19c-5f23a02f98ee", "indicator--bb47fd84-9fb9-4f32-97be-c44632824051", "indicator--86b16aa9-5233-4ba1-91e1-b6ca46d53988", "indicator--92fc3f4e-7f03-420d-a853-050e229ba0b3", "indicator--b636a236-ed43-45c0-9d30-44677acdd8fa", "indicator--5717e6d8-c0e3-4846-9077-55aa3acca01e", "indicator--3762219b-855d-4c6e-97d9-bce0b146938f", "indicator--0a86de7b-f80f-468e-97bd-3bca09905ec4", "indicator--dd9607b9-bb87-4f6e-91f0-4478d2c0beb0", "indicator--b7507e61-f2d7-4ce5-b49b-2a8fe6603014", "indicator--5ddeb2d5-f8ef-47c7-89b5-5b59c02fd365", "indicator--3cb56e53-a760-4835-80e2-c49320cdf70a", "indicator--67546a8c-ecd8-4c50-be9d-8ed90adece3a", "indicator--02c266b1-b162-4636-ad67-75dc297c9ca0", "indicator--0cbd715b-eb2a-419d-b769-a82da18dd3d5", "indicator--7a850c55-bfe8-4dab-b2f1-0c9d9dbccd32", "indicator--664db4c9-238f-4607-ab3d-f3f8689c6c8d", "indicator--b7d8ffad-c849-458a-be49-f75410fbb499", "indicator--c6f6beb5-45d9-4f75-b8e6-0cb02f5d703b", "indicator--5e1260f0-ae53-422a-8780-dd1eba81adbe", "indicator--98f1d274-d3fa-47cf-968e-5fd6645de492", "indicator--55acdd5a-547a-42aa-a625-2fc08a8bff01", "indicator--44464356-efb2-4e51-bec4-6019cf0b7a32", "indicator--f29d54d4-351d-4135-968e-9477455239a2", "indicator--dd3b2d51-2563-4e18-908b-a80a9fc9030e", "indicator--3d0c8e26-8203-4ace-8606-475fce366520", "indicator--48f9c5ef-1a19-466e-9e11-7487773dfab5", "indicator--0711d45f-c3cd-40ec-b733-977c5c316db3", "indicator--d53b1241-9b16-4be4-bf17-e5a656cf66c9", "indicator--e78a7848-4ea9-4520-b0df-50cebbd62927", "indicator--ed9d4980-559f-40ea-b4c9-af77330b791f", "indicator--e05e6329-1fe5-4de0-88e6-2f2df1acbb19", "indicator--aac27ffe-0573-4ce8-8f6b-e0ca14bb0b92", "indicator--0776eb53-3711-4d99-8404-64dc03fd6a6a", "indicator--4fedc3ae-360a-42a3-b7ee-bf6322007232", "indicator--3259b204-095d-48dd-8782-a7107f92f509", "indicator--ad7faf89-396f-4928-a8fb-6590462ec14b", "indicator--104e7021-b150-46e1-bbf2-cf0b7a75c086", "indicator--63da40f1-24b0-4267-bae1-44820745731c", "indicator--5800a618-1a8e-4811-815a-a25ea92c9198", "indicator--db8659b6-e305-4ec5-8994-d8fca9997064", "indicator--e609c370-4d02-431b-83ec-84eca2f1742f", "indicator--dcaeee1b-6563-48f2-a9a3-b889cde36310", "indicator--a5c34902-4935-4349-b6fb-8c5e850eedad", "indicator--9768d6d8-e683-4dad-b8d3-eda759324e9d", "indicator--95f74795-b824-4b26-a0f5-6b02ba116a09", "indicator--5c6a8875-2d05-401e-bc5a-6c94a10643ae", "indicator--7dac4231-0203-4b80-94b2-da75cb5b022f", "indicator--3ece29d0-da77-4746-820a-0cd96dec33b8", "indicator--5541ef00-5508-43ad-bc38-b6d62aab3a99", "indicator--11e1a6fb-eef8-4e2c-a1cd-8a8058e0affe", "indicator--3ad656e2-b888-4727-9c48-eebaba026aa9", "indicator--2c81df57-3a78-47b1-b502-47b10e911e8a", "indicator--777d14b1-518c-4a6b-a2e7-441a739d7ada", "indicator--a9029957-fea8-4841-b135-05baedb4c861", "indicator--49eb3b24-a8cd-4ac5-a980-19b844847d04", "indicator--871ab1d3-ade7-4cda-869e-1a93b98bfd8b", "indicator--54f908c1-bde7-43a7-81c7-c6ac72743465", "indicator--c1dffa20-3edd-4707-bec8-4da24c5e2ab7", "indicator--05d149a5-4c14-486a-8403-34ba4cb66c51", "indicator--eb0aa2a7-bcff-4827-8da6-e35dc6717345", "indicator--7217ad77-0a7b-4538-a000-043e96b85136", "indicator--693fe8dc-0120-43f8-9585-eb585fc36117", "indicator--fd58bd54-c855-4834-9348-bf0a967ef8e4", "indicator--05bef5ed-73ca-4a24-b9a6-ef6c7a2faaae", "indicator--b5f2397e-f5ab-405d-a237-1308aa8f046e", "indicator--8fe89aed-6342-47b3-a006-cf0eb5b34ace", "indicator--11023fb6-7669-4302-af51-a83d4ee5f7a0", "indicator--9bb740e0-1ab1-437d-99ab-3c885b5f3017", "indicator--ebc835d7-a9d8-447d-b078-8c375499350b", "indicator--a46b0b6b-c5c2-4fac-8c54-c2a1100d774b", "indicator--822e99c9-e250-4cc5-8890-b7a6148fe37a", "indicator--3a8700d0-b245-4dc1-8e14-62914055ab7a", "indicator--d70fe2f1-b3fb-47ab-9fcd-2f90ad9d7cc7", "indicator--197c1ed8-48c7-4709-8635-90915e4cf835", "indicator--60a35c8a-93c8-4a30-9681-0558cb1b2ee0", "indicator--55fd70a3-7024-4b22-8a0e-7cd715146b3a", "indicator--b7baaf9c-e967-452a-b9ef-424f34ee256f", "indicator--b3efc31b-f81e-4eb6-ad94-ed6252ffc19f", "indicator--261a806c-0944-4e8e-854c-ba06aba8a38b", "indicator--3527b0d5-969e-4cfa-b6f3-3de31fe74c34", "indicator--6fe0a15c-8735-4e14-a3dc-149b2fd35ec9", "indicator--13946dbb-a2d5-435e-a299-2ed0bfcac9c1", "indicator--22ad889e-f34e-46dc-9125-4a24f3e83534", "indicator--bc542196-63cb-4eda-b7e4-2c1ecd46b8eb", "indicator--e32cc1d4-c769-4ea9-95a8-a9406ded885a", "indicator--c384bdbe-bb30-4dd5-ab65-0ddb83c88b6d", "indicator--2e18f3ce-118c-4034-82bd-2d03a2d21089", "indicator--647e1500-b93b-42a8-8118-93c578090e1b", "indicator--bd829219-2678-4e26-a848-49a94462cdcf", "indicator--a045674f-7811-4318-a77a-38cd677f3b3b", "indicator--ce18c4bb-9c77-4034-95ac-c49b44ffeb48", "indicator--ca5ec2bc-aed2-4ed6-88a1-6187d0faae86", "indicator--6f3687d1-a18b-4940-8e08-414064d6dedf", "indicator--6c09f531-627f-476e-bb6c-361f6b1739ec", "indicator--ae123dc5-cb0d-4265-8524-c3413e50da04", "indicator--bf33471a-9740-41ac-9ada-02e61b41b16b", "indicator--e5ad5551-1b0f-4a74-ae64-e90836274720", "indicator--101bc869-86d8-49f1-b154-5ae881475157", "indicator--355d6112-231f-47c9-80ca-5ebd7d492a33", "indicator--14954541-b805-4176-823b-7776e47749fe", "indicator--89e32398-41ce-4253-a969-51ced5f89ed4", "indicator--f77073b5-3fe2-4ce6-92f7-6c9486e6c1fb", "indicator--749eedc2-1ba1-408b-b618-abc928589c18", "indicator--4b09dc63-9a3d-4885-801d-4bff3b162f31", "indicator--a8b4d9f9-ba26-49e2-9ad2-ed7342beb42e", "indicator--85bdd820-483c-4cbd-8c8b-a1fd92afedad", "indicator--9ba2d69b-563e-40ba-9fde-100317484fc6", "indicator--ca897c73-078d-4734-b41c-dec02660569f", "indicator--e1db57c7-e3cd-4cf9-a812-7d90d0639d3b", "indicator--6d6ea859-7d82-4d6c-930a-399f246d225f", "indicator--953f5a69-fe7e-4585-b7f1-809921e66963", "indicator--94ebda9b-bf7a-46de-95bd-8bc581f3e4d0", "indicator--eac6b784-90d3-4214-bc14-e46595f0722c", "indicator--11085c73-c600-4bd7-b15d-f490ec3a5441", "indicator--fc2c36c7-54e2-4a99-a7be-9dd57d52694c", "indicator--cf8e3f57-8864-48a2-95b7-00144ada4dac", "indicator--a31551b8-2b06-4cf5-8a23-34b7287e1978", "indicator--a43c5fb2-927f-4f21-bf9d-d2bb2bd402f2", "indicator--6ff83890-3bce-48cf-be37-1814ea7e0015", "indicator--0088ba3e-9eb9-4c9d-a467-db31454467ea", "indicator--56a67ca2-2abb-495c-a9fd-ac1f1fd3d119", "indicator--6a33981f-7dae-4d27-a2b3-f0b59a8e1f8f", "indicator--be0d913d-b4b6-429b-999e-8a8bf785a6e8", "indicator--1ad967cd-9116-47c4-8ca8-c4753d778f88", "indicator--7e54d4e0-70cd-4b3a-a4f5-ea4c94f12dc2", "indicator--43eac7d2-db55-410c-bb46-f25b175895e0", "indicator--9c391a47-82c4-4280-8a3d-4b159adf41c3", "indicator--8c65c6af-4469-4813-8dd8-7d4d9b8b5a39", "indicator--6ca91afa-5fe6-4d66-92e0-80200dec373c", "indicator--2a6e4e45-070e-4767-897c-d4dd7a96d7c1", "indicator--ee9eb32d-ce21-4840-8222-22e8b3e72216", "indicator--341374fe-bab7-4740-8d84-62d364b69167", "indicator--25606edd-ccca-4e3e-912c-5d785ac3f435", "indicator--5b13ce51-dc6e-4c4c-8e7a-8aa46dc21f89", "indicator--235ebf9d-9752-4fe0-917a-6be7fad03f10", "indicator--2379b880-eb35-4c00-bc7c-9d0f7001289b", "indicator--1e9a7912-e2d1-4769-b7e0-cc51059cf6f3", "indicator--3ecd3dd8-59aa-400d-9d36-2a8674f117e5", "indicator--99ea0f71-590f-4849-afbc-5e8530f514d7", "indicator--eed39265-fe7f-4906-b8ff-e15e271ebded", "indicator--cbda03a8-99df-47cd-84fa-c87a1f0572d6", "indicator--133c754a-49e7-4ff2-8350-51cd831db716", "indicator--3dcf04ef-3bfc-4506-a44c-a012f9426bb7", "indicator--1030fdea-1603-4334-8517-48eeb608eafe", "indicator--70e6751f-a794-4ddf-8b76-5e02a35f9fcb", "indicator--71ae4352-b257-44c9-b436-754f8a28ee06", "indicator--3efbb5d2-6304-4516-9452-8994da641861", "indicator--1dfae050-bc0d-4b39-a547-3432cd91293f", "indicator--454e9300-09de-47c8-81c3-b4b7b408a83a", "indicator--0ac22405-7651-4b4f-a9ad-9c6cf2aec7c4", "indicator--6d2fecd0-6b3f-4baf-9e24-01c815f21faa", "indicator--b373c5ea-df6a-4ac1-b142-e8add5ee8f1f", "indicator--b35cbd00-4aed-4ba4-a7d3-5f654f515312", "indicator--171f48bf-7b56-489d-898c-7947d2d37d7a", "indicator--e15723af-0cf8-41e3-bbc4-6a517a60264a", "indicator--025ba600-cd8f-4934-a09e-b60a00a34fb8", "indicator--24ba9891-6a9b-4bfc-8a66-6c913361c754", "indicator--cd4c930f-9c2d-4bca-ae8a-35b84dff90cb", "indicator--02a48ad4-2fdf-4ea4-b48a-89559cefaa9f", "indicator--2ad4e56a-e19a-46b7-bff4-e69bd6e8ee59", "indicator--286d3504-73df-44a4-b84d-1a5bda18588e", "indicator--670b8b03-678b-4e9f-a16b-25ea5fc578f2", "indicator--b274f93a-1910-47e2-8108-ab7ac9045bcc", "indicator--44477274-7b7e-43a2-ad09-bf553719b57f", "indicator--a7e46cc6-dcb4-4107-928c-1b739f369694", "indicator--3dd74af8-2560-471c-b0bf-64df8dc8fff0", "indicator--eef8ddfe-56b4-4211-b2ba-dc738030fc1d", "indicator--61d2ca22-19d4-403a-9efc-85261e62d450", "indicator--e09bf3e0-7743-444a-853d-a7402b239456", "indicator--20b58bfb-e587-4afe-852c-08d4ca47abff", "indicator--b2a9d404-cc8c-4e00-bbe1-ab06cc8fa37c", "indicator--a6d90dfa-99f9-4195-80ba-7b7838f87120", "indicator--6bddc33f-add1-41e8-831d-93ff52e1574f", "indicator--618023f4-3a2f-44cc-a8c3-96e0b8816985", "indicator--202e5546-024b-49bd-8a82-c0f2f417d83c", "indicator--1d90fb25-e1b5-4863-94ab-534915368124", "indicator--934de7e8-6e0c-4519-9e27-0c8c70beed15", "indicator--23d29dbe-6a28-4423-9b63-da3e06a4fb2c", "indicator--8440a0f7-0694-4d28-9650-ca2e847f5f6c", "indicator--b356579c-8e79-4b9b-bddc-cb3a265234c6", "indicator--d2db3a53-78a2-49eb-a505-cad6a7c6bee6", "indicator--6ea6e835-fd65-4ab4-a3a7-624f22740c02", "indicator--88e56b98-603f-4cf5-93ce-7421d5cac75c", "indicator--57be7ac0-8985-413a-aed9-ad6fb807167b", "indicator--6f01f06c-f722-4c32-aa5b-a72b64cb00a7", "indicator--e9da9d40-0881-4ceb-b692-fb1e38fab613", "indicator--3bd8140f-c129-48ab-86a1-95f2830ab318", "indicator--7de74431-1822-48ea-889d-51ce174e61fc", "indicator--980a1305-edbc-47dc-8903-e09215d9c142", "indicator--8e668019-6775-4abf-8fec-bca0c8fd5095", "indicator--986818f1-25fe-40be-9bbc-fc323d365517", "indicator--c4d2f5a0-72cd-4197-bccb-5e04fc496fc6", "indicator--3881b383-d131-4fcd-9d23-e5ebc02ff9b5", "indicator--c9bea1c6-e921-4a43-8cb7-33bf36698ea6", "indicator--0fcc492a-6f8f-44a7-9ee1-6559d1065791", "indicator--9ae84199-af95-4efb-a747-f6207efc1f25", "indicator--4d9a368c-9b1e-4319-8663-ffcb71d183ba", "indicator--b2e70d3e-b420-449f-9c6e-8b94c5e9878f", "indicator--544c1419-5f8b-4f0a-81a9-a4387408a745", "indicator--ae93edac-3150-4b74-96c2-1fb0c103731d", "indicator--1672f799-2f1e-4912-938a-c8bc746e695c", "indicator--9537a577-a6fd-4485-8e9a-f92f32c3c868", "indicator--c296785c-b8ab-4122-88b8-7d4d9c7d55e9", "indicator--183b3a0e-ae07-47dc-b8eb-b512589e1518", "indicator--c1018b34-9618-4a43-b0e5-d9e973fc2b9e", "indicator--b49ab6c4-756a-4f58-a82a-72fda3f8c891", "indicator--fdb10531-00da-48ac-9edd-2511f1c98d04", "indicator--d17dffce-1ca3-413d-9c0c-ece0f47e71db", "indicator--388b36c0-da2d-4d55-99a9-0ab17cd41c3e", "indicator--70ea575c-8a7a-4791-9772-16e1c50a0357", "indicator--862ee70a-80c2-462e-a12f-6c179a22698c", "indicator--815c2f04-5b32-4854-afb5-6ea00f5dc987", "indicator--2359343f-92d7-4ca7-836d-1bfd947336fb", "indicator--276f6dfb-312d-4cf8-8f43-eb091005a9bf", "indicator--24369b20-df67-4abb-a97e-5a4bb4f79140", "indicator--c20617ed-32df-4025-803c-1fa0726fde8a", "indicator--5e899968-7313-4c8b-9199-8e9f7b3d6776", "indicator--761d602c-1e52-4dfa-b0fd-606fc140e84f", "indicator--3af6a01a-94c4-4406-90cf-b77220e45dfa", "indicator--e5f1d9c6-93ec-4ca6-9456-4a3c14e71a0c", "indicator--60c10050-b071-4613-9589-a6d4c620ba7b", "indicator--2ff54138-786b-451a-a8ce-8949653ae4e7", "indicator--e6d2454e-c0b3-4b01-9ce9-23b1b381bad1", "indicator--a23b8902-5434-4dd3-83a7-4098e2709ebe", "indicator--2e43a6ab-b57e-465c-b429-190a2f9ba4b6", "indicator--63efd1d2-46ae-4a17-9928-1d5c01ef1d8b", "indicator--830497f6-123e-4c83-a7c5-1f674f97ef0b", "indicator--4e07b6e5-376c-4f2c-a1d2-b4380e1276e1", "indicator--624ccb8a-658a-4bdc-9e8f-41bd0a466734", "indicator--98c78555-5538-4bae-9ce1-de2486e60d0f", "indicator--b8a1ec3f-12c7-4f82-95dd-fcbc5a90d9a6", "indicator--b65ea018-e145-41a1-a8b5-8b853f4b09c4", "indicator--c0bce013-b178-43bd-889f-54d7f58679b7", "indicator--9fd3ae2b-b2e7-4437-81f0-fcc6f67e0238", "indicator--7793de15-aa61-481b-a2e3-bf3e924e80f4", "indicator--8c3bafd1-90db-4757-8724-95d79fe15e80", "indicator--01fe0e19-bbf7-453e-afde-b9bb75c77e40", "indicator--b880fe1d-c008-41b1-b93e-26526a30d04e", "indicator--52cb3b72-9b6d-4e72-a096-c703a809e392", "indicator--d26d5965-6bd4-4faf-8906-af7681b2c03b", "indicator--2de82a7e-0329-415d-916d-1cd9f92aed97", "indicator--b5cfe817-0f3b-4d24-a09c-78de8705b0fe", "indicator--e5effe0a-9d78-4937-ac5b-24a1403aac88", "indicator--f3e93c12-ebd4-48f5-a1c9-e6a7f1466906", "indicator--ebc63b6b-3a4b-439b-a66a-051c3a99227c", "indicator--8366bb06-32c7-472c-bf85-9f04c4b28a7f", "indicator--3efe7e4b-0091-41bc-8cbf-a211ffca3703", "indicator--2396f527-f8e9-400c-9718-5e335b4449c4", "indicator--11a84ad4-33bc-43d6-adb8-bc24aa1e7881", "indicator--8c817cc0-7b53-4c7d-acc8-b878bee4fc50", "indicator--e540146a-e6b4-497b-87bd-83c6b740b546", "indicator--2ae403ae-1d75-4cb1-a27a-fe31c9db4814", "indicator--b74dbab8-66ba-4a39-aed8-d3a47bcd78eb", "indicator--f63454b1-6259-4dff-8fe8-616f7f4b8bc5", "indicator--4b4cd910-9832-4bea-90b2-3bef05891869", "indicator--dac88dfc-3e56-4420-936a-8d909e38cbac", "indicator--29c7de00-d4b1-470a-956d-c709eacfaeca", "indicator--a113bb0a-f978-4d1a-b343-ac34a664fc76", "indicator--b59a13fb-fceb-4dbb-ada9-7148ec60cb3a", "indicator--650d3255-9a8e-41b3-beb6-fb1437b354a2", "indicator--cc42662f-f09a-40be-ad3d-4a057bd5a987", "indicator--eb526a72-28d7-4851-a2a4-50d9f1284337", "indicator--a2de30d5-b576-4f5b-8436-0ad8d8c5c22d", "indicator--c5819134-754e-4702-8379-2d7f84458e4d", "indicator--25619930-2bbc-4235-a7e3-1d4ca5805d8b", "indicator--ecfa4c78-fd8c-4ba8-8656-86a05e37d470", "indicator--c9e14a3f-e55c-4ffb-a03b-f1342361f7e4", "indicator--9d0dce3f-34e6-4fe1-94f0-faf311a4f659", "indicator--30675dd9-7c93-411b-a348-4fd27997a082", "indicator--b89e2cec-63cb-436d-b36b-6095e8014ad8", "indicator--a53433dc-37ad-4381-a121-dc612540009a", "indicator--20f268f9-8740-4ac3-a6c0-ca1a7d69f1b1", "indicator--57c5eb4f-0fdb-4fbd-9713-e1aebd651eb6", "indicator--9fcbb7f9-fb02-4516-9629-b49a0e6215b1", "indicator--f4944427-c62c-4ea5-a59c-dfb9c970a1fa", "indicator--511f9f97-2bff-49de-8215-1b6cd03a518c", "indicator--986a5212-d95a-484f-967c-0bb3c48bd4fb", "indicator--67bc64e2-bd79-4634-848e-4021be52836f", "indicator--72a8c2b5-a9ea-47d7-946c-b2d683353e1c", "indicator--2eb814dd-564c-43a1-9c16-e518c9c799e1", "indicator--de052210-2f68-484e-a60a-4666c899d1f3", "indicator--6d0397b9-9260-493b-a44e-80c94f107ad7", "indicator--3273cb05-c785-42f7-9291-214a110f9dbe", "indicator--4367560d-d54b-4dc7-a5bb-facad7d4717b", "indicator--61e23415-2870-4be2-af5e-01ffb1938073", "indicator--179f9c7c-f0be-47e1-a6fa-80a7a48b9588", "indicator--7ca23be2-c156-4637-8d59-0dc5ffe77183", "indicator--55de9ccc-dc17-44dc-ac10-2a0b1844b5ea", "indicator--2827cd61-617e-41ab-8102-f07c92ca7401", "indicator--3b5c12c5-15d8-424b-8206-eccd57e90ed1", "indicator--f7d5f522-8a46-4bbc-b2e7-dc3bea54361e", "indicator--911ff698-6c83-4842-be88-69135257e08d", "indicator--278afa64-99e4-4085-87a0-62da5e4ce9a0", "indicator--5e0e43dc-b2e2-4a48-8fd7-c295caad72cd", "indicator--adaf84e3-93c0-40af-84b3-9dc64031dbbf", "indicator--f09985d2-ca48-477b-9a3a-4f4924ac2fce", "indicator--6a3051c1-b2ec-4b43-aaca-1b0a6559be40", "indicator--5cd5cec0-edf0-4396-ba7b-3ad645ddb67c", "indicator--17ff95b0-4957-43bb-8907-256664930313", "indicator--45ad5333-2ddc-455f-8aed-ae703a7827a1", "indicator--5f43b227-81c6-4fd6-8673-c74806a9f269", "indicator--41e08bce-9ba6-498e-9086-e1288e44ca5a", "indicator--71031bfd-cc92-4e80-8cfe-a58c0b0f15e7", "indicator--248ec23c-c7eb-494a-8847-4037246adf12", "indicator--eb311e0d-b91c-453f-a8a8-e3914e4a90ea", "indicator--6a00603a-b93d-4413-8d68-496b8277daf1", "indicator--07b183b4-7674-46f5-852e-7c626525c786", "indicator--1f129173-7507-422f-9a3b-303e76dc68d1", "indicator--dbee9072-0c3e-4d65-9a3a-3180ea856c27", "indicator--e81e3d78-8151-486a-8dd3-dc08fc57d9b5", "indicator--f2a913b5-c4e0-456f-a5cc-7798f46879c6", "indicator--c9204bb6-d067-4a75-afe2-6ac4410e0f06", "indicator--2edc4ebf-2b41-42ec-bd5f-b62cc7897f50", "indicator--01f85a5a-5236-4b70-9d60-0f72078c2544", "indicator--2321904a-7cba-4c4f-97c6-30b475c405bb", "indicator--af29eab4-9154-4d3b-8279-9ed9c23b319d", "indicator--35a495c3-8d2b-4cca-a889-85d3af3a89b7", "indicator--81c40605-d8f5-429e-a052-c4eec279e456", "indicator--bfeb623f-8c6f-49ac-a08f-8dc1878d7fc6", "indicator--a98e78e9-e1b4-4b87-a772-a2348ffbf76d", "indicator--1c54a91d-0abb-40cb-aafb-880b3d61fd64", "indicator--4baea62c-4709-4e17-a0ff-dcf55f4d6651", "indicator--9e3ec7a8-23d3-49a8-990e-b093e07ce6f2", "indicator--1b37a568-acf4-41ea-b2ec-7dd0a34a1c63", "indicator--f11955f1-7b68-4a19-a90f-96f38e9ac439", "indicator--bb13f583-d1c8-46a9-b283-99a2548d831d", "indicator--4325bc03-4390-4123-a1fc-2b648d36a402", "indicator--df86ceee-dc43-474c-806a-a11ac81f5a3a", "indicator--1090cbd6-010b-4a56-9f8f-63ced95afee8", "indicator--95c6548e-156e-4a32-827c-1fe3ddf2e622", "indicator--11a8a5be-04b0-47b6-bffc-20fc1ad0f740", "indicator--d7208062-7f40-4ab9-a2a9-93a66d7271be", "indicator--0dced884-a737-4dea-9670-8a93c96065ec", "indicator--4c7f49fc-f069-456c-ab0c-50fbe3542784", "indicator--289a1f9e-5d0d-4052-aea3-6e0fb71405cc", "indicator--1a8876e3-6366-4740-a2b1-27f263d0027a", "indicator--8e0f3551-b16e-4ba4-9529-9258e2ef65da", "indicator--8c2a294d-92d5-4d71-a9ef-3759ec7d72ca", "indicator--434201a0-730a-40fe-bc7d-75e6a10ac579", "indicator--456a7d7c-4663-41db-b11b-eb16b0566f49", "indicator--d25eb1d3-8fa8-4884-9dde-44183fa99218", "indicator--c7292c38-4755-4d92-90b8-450d26a1187f", "indicator--ab930221-f401-4363-aa10-7cbf26820c51", "indicator--0144e594-9c86-401b-ac48-122bbc9a3137", "indicator--c71900b2-c40a-4fd3-a402-5696b8164e78", "indicator--d75fcc32-3ec4-41c7-ba9b-e1f4f954ffd2", "indicator--054ec9d9-5fd1-4ba3-9885-8457aa296b21", "indicator--d19a684b-31d1-453e-9ca9-8a35a8eed64e", "indicator--6929ca6d-1181-4aaa-a909-5362720f4ccd", "indicator--797d6855-97f6-41f9-aa43-d08ad92a088f", "indicator--19e4ff60-786c-4d82-8317-7766db1c4cb1", "indicator--a1f7d648-e035-440a-aa41-2ee495a02bbf", "indicator--80ed70b1-d885-4294-ab8c-88950f621c05", "indicator--687cb254-1451-4431-aa8d-06dd6f8d0275", "indicator--ff13ed5b-0dc6-4193-9d3c-bc3ac8b8b67b", "indicator--024c769f-fb36-4fb5-a70f-32ebd08d5ceb", "indicator--15d16e20-43f2-4e3b-bea1-24219ee96ed6", "indicator--491c7190-ce59-4024-9fed-427c60a8a254", "indicator--17106c57-6427-4c56-957b-0e9ea7bcb022", "indicator--d32fc2ee-f00a-43e7-a904-53124a2399c7", "indicator--5ca02f6d-1be3-4f19-a975-3c3d27493abf", "indicator--dcb5a750-6033-45d5-9b8e-5b2dee1a05b8", "indicator--9e628612-3033-4fb3-99ea-807d1e34d2b1", "indicator--cdd181ad-f3d1-4316-b59b-81fec04eb714", "indicator--2da66cf2-aac1-4df3-8ae0-0ac21e17075b", "indicator--fb899409-9234-488b-b0b2-ad922e1bf3c0", "indicator--0e38c3ef-3c81-4754-91ab-512dfb486f37", "indicator--69bbf0d6-fd72-45b7-9bfd-63bea795ea19", "indicator--20e847b5-07ba-4b0c-b406-4ad33404d800", "indicator--2749a81e-7db0-40a0-aa19-6f7dd72856a2", "indicator--317d0e4a-99d8-4300-8f23-32abeecef525", "indicator--c47ec4c2-e5c5-4ee0-87e9-2095148b57a7", "indicator--d9686acc-92a4-4fbf-ad91-c85c5ed80580", "indicator--7676883b-886e-4178-aa0d-7779bd788ca4", "indicator--28c5023b-52e9-417e-81a6-11a916b6cb4e", "indicator--98d6f3b8-7108-48b1-aeb2-714f79f3faff", "indicator--b52cc4ba-e3fc-4ffa-9852-2c7c07fc644c", "indicator--785724ed-bd2a-4269-b636-61773afa2094", "indicator--182844d6-2192-4264-a6e7-8d1aa674ce5f", "indicator--3b654063-47c7-4215-9d6c-f3907980c779", "indicator--7cf688d3-8586-4076-a9af-34ad08247954", "indicator--48f924ac-71ad-40e2-b5d7-59b2a31e0a7f", "indicator--15eae697-5933-4a64-bff5-4f1d8fcd5743", "indicator--21b532fe-07ae-4cd4-ad70-be53e50fa921", "indicator--b11b1caf-b910-4304-8c02-76d527811586", "indicator--2ee8046a-803e-4ed7-8288-ce25df61ff7e", "indicator--7bfabae1-77d1-4bba-9249-3b6748741c30", "indicator--8d9ae0e7-30e5-4f31-a397-60b15f34c4b8", "indicator--1c9768c1-2a46-4953-9292-6d6a043f1e8d", "indicator--3fade9df-e42b-4af9-8500-6921995624d7", "indicator--54f0068e-94e8-4940-84f4-557b7c02faba", "indicator--0dffefbd-84ab-49d7-903f-2c2a5395b39f", "indicator--817f2d27-3b80-410e-8bb4-c4ee0fdcf65c", "indicator--07a12fc6-a38a-4469-9e43-edd431e82754", "indicator--b37bd046-7ec3-4f94-9c77-3db9cb9bc6fd", "indicator--3cf9a60c-10f0-4ae5-8bd4-e15da6c58eff", "indicator--196262ce-04fb-4221-9eaf-fcd5c36a5ee4", "indicator--a3ba517b-f05b-4f8d-a86d-76918ce9fac6", "indicator--154b3f22-a688-4bb4-9802-29cb9d1bde32", "indicator--6356c38e-2019-4cce-84e5-b9e681828a3d", "indicator--4d399bfe-2a86-4143-ab5c-197d5ec61a08", "indicator--dbff70f3-6bd0-433c-9e02-a39ba35aa4bb", "indicator--d152943e-8a7b-48c3-8ccf-71c52fd7a47c", "indicator--ce9704cf-add2-4493-9041-2e4037378fa8", "indicator--8a6ac5c6-2cb4-43e4-829d-ae6743329ed3", "indicator--2b9bfba5-4725-47df-bd4b-3592b7dcedbf", "indicator--79891e7e-34df-4ff0-b231-31878ba13d9c", "indicator--f1ed8800-a830-4a80-a1b5-0f52a3ed8462", "indicator--4f0106e6-de3c-4f5f-97a2-8a5595a7d022", "indicator--5f44aaf1-6360-4985-a865-4580a14e6790", "indicator--dfe66a49-06b9-43a3-adeb-5a8b35219ae6", "indicator--3c6a74dd-7a62-4036-9e5d-ede48578d62e", "indicator--34917c79-380c-4566-b486-f6750b35c4ff", "indicator--73abda43-4067-4089-b4da-92cd61f5f37b", "indicator--5721497a-629e-49a8-86f7-1323b0eb38ae", "indicator--8fb38859-2261-4334-be89-46524b49a9ee", "indicator--b239934b-c2bc-4bf0-b513-9344d5f125ad", "indicator--165218e3-0a3b-4423-b73b-fdcc4b729525", "indicator--01b24442-7dc3-4698-86e4-d678aa3e49d8", "indicator--f692c455-4406-47c4-a7f3-f4a3d78cb4d4", "indicator--ed2b59b8-abcd-4c67-8f5d-e8e911dbb5d4", "indicator--b3fcd8b0-c616-4aa5-8b49-757bbd29a735", "indicator--fa5b4b75-6eb9-4cf0-88f7-ccd1961c266e", "indicator--429ed622-d84a-42d9-9c15-d1d36f3db6ea", "indicator--a3c55aa2-eaff-47d1-8c46-b3979e86f526", "indicator--62dd1544-9286-4de7-80ff-c1434307a66b", "indicator--2440e292-7e72-4ceb-95de-6514610bdc6e", "indicator--48ff5201-e2cc-43a4-bcdc-f7e1a7dd8d42", "indicator--9cf175e0-2216-41bf-a3b0-bc8c5c5c9026", "indicator--2fdca5e4-18cd-4a4d-bc87-f286df914d4d", "indicator--ee15f15b-6af6-4e68-a2da-1c3f741d29a7", "indicator--f39a9303-bc4d-4776-b28e-b2cb1cdd274c", "indicator--b67bbc4b-adb5-460b-bf44-77f75eff5290", "indicator--84e3ee95-4e4d-4923-a5a2-372d3617d2eb", "indicator--1234de8f-c08c-49cf-895f-3ad71d4addd1", "indicator--15cb59a6-b279-43c2-8f22-c70a8828cf75", "indicator--dc760cd9-ed94-41b6-9b8f-80e742c12936", "indicator--6c6452a8-e602-451c-8d30-fda501758373", "indicator--d2614b17-3556-4f42-92cd-9ae33ccb349e", "indicator--4f381dd8-4f36-41dc-9d44-1895e1083636", "indicator--4292152d-a6b0-44e5-84d7-28ca74434480", "indicator--57f73a0a-95f1-40ed-b2ef-18b4ab6e2115", "indicator--d75b15a5-7e89-448f-ba10-86db97eab802", "indicator--f626b2fb-864e-41f0-a0e3-2712edb09565", "indicator--a60c9d8b-4814-4674-8ddd-a622b2095d69", "indicator--b581c414-86d2-4d2d-bb13-6c67e10de85a", "indicator--0cfca90f-6f58-4699-b04e-7b048be4b72a", "indicator--749828ed-12dd-4ed5-b6bc-fc046c98131b", "indicator--7fec80ea-c244-4ba2-9e34-1c8a4fbfa5e7", "indicator--4f70f6f8-35da-43f6-9c4b-82cc97e6be8c", "indicator--c08c7e8e-1c04-4900-a074-a28afa2275d8", "indicator--99ed06a0-c49c-4d5d-ac14-b40e162cb2cb", "indicator--303f0216-f686-4a72-95f7-2c760683ab17", "indicator--69a6bfa1-6b25-4970-8eee-9527e4bd357b", "indicator--8367e64f-b3db-4e97-bd18-b946fe04151b", "indicator--a1701d9e-5174-4942-839f-bad5e1959e07", "indicator--d5fdea05-cb7a-4c39-b7d6-825f2a2f74a3", "indicator--89493247-771d-4fae-9005-4bf947e3d639", "indicator--f2a851d3-236e-4b01-a1b3-968c5c67041f", "indicator--e360368b-99f3-4ed1-98b0-2457eb170a4c", "indicator--9d7e480f-bbf5-4c6b-a65a-44364c0c39ab", "indicator--3a37f423-613c-474a-8190-19a2a0c49622", "indicator--b6cd4714-a8c3-4e0e-b9df-15fab11da3d0", "indicator--44a47d84-2c78-4ec2-b525-95ce45c4a05c", "indicator--35b25e18-1b9f-4967-9e49-ca0c032da448", "indicator--9dfbcb62-b096-443b-9c08-4de938c6f7c0", "indicator--f4aa4172-c74f-433f-ae43-5aa12b077b90", "indicator--a7dc0724-b32a-4dd3-8620-58a60eb286c2", "indicator--61bb7c88-8d0a-44dd-bf60-eca5f89a2b1f", "indicator--cb0f9f28-bccb-476d-a35f-920ba6c331d7", "indicator--3ead3773-d145-4a9a-97ea-5a912ba3aa83", "indicator--58d154e9-32cd-4e33-bfbf-cef9933f26ff", "indicator--2f852686-b3bc-42c2-9d9f-c929911d1174", "indicator--b51947dd-7101-4be7-a1eb-6e071a9225e5", "indicator--f09c60fe-ab17-414a-bb16-e7d6291a87d8", "indicator--d117029f-25b6-42ee-8e23-0756d4c760fb", "indicator--1176e0af-2778-4ea9-ae46-16bd258d43c8", "indicator--c1ff6f53-df6a-419c-a29d-1fee4001cbeb", "indicator--ad704851-fb73-486d-9994-94c6ae0a7969", "indicator--e26b3135-eef3-4c49-8fea-ecd0d41c478d", "indicator--fe7ef295-c505-4ed0-a04e-339d166fa7f1", "indicator--b1460e1a-964a-4834-bd5f-4120f651aa49", "indicator--d976e500-2037-4d5b-9a5d-188ad2232e08", "indicator--039fd5f8-e9aa-43b6-995e-0bfda6f79dbe", "indicator--51b36fde-6e48-45d6-a799-3b09eb7e42fc", "indicator--e7abf1a6-4f90-4152-97e2-ea2c8d51d376", "indicator--acb1ebe1-43eb-4864-b55a-2fd903ef4193", "indicator--ab877140-c0c2-42ca-8c76-acc5efa0686d", "indicator--56af0fd4-656c-4f7c-a9ad-6359e4acb448", "indicator--c78a6cd2-1b9f-49fd-9134-40fff1847b9f", "indicator--a2ed5698-a15b-4f3e-9ec9-33958b3dbd99", "indicator--839ff9f0-e6ac-419e-a51b-90314330ed47", "indicator--11956877-0cf3-4c5b-b15e-178bcb9df69a", "indicator--072a4354-bb44-4a18-b50a-2fd5ab27f42a", "indicator--1f180c57-0eac-4785-8dea-ff5fafc6324e", "indicator--09372d3f-c05a-455c-8279-c9fe53f8a398", "indicator--876ec443-1ed6-43f3-ae25-65d40fe55bca", "indicator--0232450d-43d1-4548-b3cf-f3c9dc1da07d", "indicator--7ad104cd-631e-4aab-a564-4e0f96223106", "indicator--a6e77f3f-85e0-4b79-a12b-4369e70f2505", "indicator--bab49750-0a66-4b33-a68f-1ba744497789", "indicator--5133a460-90a9-4e27-b10d-89da5ff3bf09", "indicator--66c43edf-aa45-4ed3-99ed-0f74c762c110", "indicator--39d35b90-18bd-49fe-921b-1ebbee509cb7", "indicator--b57a7ed2-0828-479b-a0aa-b176bca1fc17", "indicator--13481e4b-8b8b-4661-a985-18e8cc4c0f97", "indicator--89380249-103d-4ccb-b538-685b0cc4cdd9", "indicator--9891def1-3347-4dc7-bbe8-0e82151447f8", "indicator--7c2bc560-9633-4ce6-812c-6bafe685b60a", "indicator--51663432-5805-4e5f-b58f-eb5fba75a0c5", "indicator--d3374c30-e08b-4b93-99f1-3a3eb2ffae78", "indicator--4ce13f20-49d9-49ef-a551-6643164a11e8", "indicator--7090a5c0-439b-4fdd-a2fd-d339d51bbef9", "indicator--6d7afa6d-c534-4b06-9f92-13a15167f697", "indicator--9020c370-303b-49eb-9505-e55c20de05ab", "indicator--0b6157d8-e3cf-4dc1-b727-a4f345c8023e", "indicator--f2108df1-6ac8-490b-acb8-e0f53c590385", "indicator--4c1cac01-f0cb-4c36-9f70-554335dc454d", "indicator--7694eef1-2ff0-4531-a35e-68e9f3d399a2", "indicator--ccef7315-6490-4b38-b9fb-a3d4320b6769", "indicator--5ccd8bc1-3fa2-4117-9f88-6f9c00b3eafc", "indicator--eeaf102b-a069-4336-8f32-71fb8607878a", "indicator--5e527267-4eb6-4f7d-b9a9-bc1ed4297e1a", "indicator--f2b62849-fc7c-4fa9-b573-522d0c051e4d", "indicator--04829c60-402c-437f-995a-bf61ba3d870b", "indicator--137769c8-6149-44fe-b629-7c9c87a2e1f5", "indicator--66391851-537a-4ee4-92a2-42c36760bdc5", "indicator--fa10a7e2-631a-43c3-8316-4b37a57b32ac", "indicator--6cffa5f2-5535-4c3a-86e8-fb58c0e30e3e", "indicator--1f0b7a1d-bfd8-4ad4-8bfe-9c62d6fac04a", "indicator--6cc4f562-3c7d-43b3-9d0e-65930e7ad70a", "indicator--2b9a9d6c-b7a0-4dee-a2d2-994584c0cc4d", "indicator--ecdf7856-68d5-4172-9e04-57b779676c0b", "indicator--6075cf5a-c3c2-4e5a-a34c-c6a4e0da046f", "indicator--5a8cbf9e-3810-4346-ae34-58f8794dc61a", "indicator--062bd5cb-e51a-43ac-8dcc-449b65d6bae1", "indicator--599fb556-bc3c-48bd-b548-7cd3033598ac", "indicator--6f3cae70-9ac1-4e3d-b65c-447b9372c549", "indicator--4e416257-3be8-4fcd-bbde-dc002684f846", "indicator--94132856-6e8e-4394-8601-d629c43a9e95", "indicator--c6b77ffc-fd08-4a2a-9099-849db5e91109", "indicator--d6e37c6c-4883-4418-b7cf-70d11b60d3fa", "indicator--64560860-d0c9-4557-ae4d-13527024a6c6", "indicator--8eac3312-33f3-42c7-b8d9-f9eff09f30a4", "indicator--a527c439-6ae7-490d-bd1a-c9a17b450bb9", "indicator--77ebadc0-8abb-4fa7-8b0a-28dae82cc025", "indicator--27ff83bb-58f6-4df0-9a93-4d79fb936a59", "indicator--d744e629-5e2d-472d-9263-5a7d268b690d", "indicator--04ef31d4-e6c3-428c-83b0-a7e6223a70ce", "indicator--14cdb9c7-7df8-4b87-a4c2-d5f63e6fd6f7", "indicator--b0e6cb18-6af4-48ed-8006-7d274783c6bf", "indicator--58226aaf-eeb2-435c-9859-af2e54525d62", "indicator--c0db03c5-0e47-491a-8fa2-e76b44df5c64", "indicator--dd9bca3f-375c-462d-b496-2c445f8b486e", "indicator--9c135402-a28f-460c-9625-d0d8c5dc98d0", "indicator--0b3829f6-1d32-4c2e-b394-a26f31b31b34", "indicator--5afa2869-ca99-4638-a09b-1e8234557d8f", "indicator--5b9884e1-139f-4d38-ba2a-1ca9dbc9d68c", "indicator--6b7e9213-f2d0-4b80-b724-21075840667a", "indicator--9defac3a-8afb-44b7-becb-aacb0c6c3db2", "indicator--a55094d5-386c-496b-8218-1fe32fe86732", "indicator--e4ec01a8-bd38-41fb-bb29-931d91dab9b9", "indicator--9d3f5786-4d0f-4529-b95e-bf4c437250cc", "indicator--19398959-8707-4e72-b185-d1ad92048135", "indicator--bedd0507-a93a-4094-afd4-df3bcdc8a7d7", "indicator--0f9449f9-e3bd-4f7f-96f9-07de87c6c1fc", "indicator--5eb2cb84-141f-456f-aa52-56ed0a1d96c0", "indicator--cff0279d-6f40-4a3f-b727-48c9899e84a8", "indicator--ff2cedc5-85df-4f8e-afac-fecf61e2c86f", "indicator--b1eaf3df-4fc6-4d59-afe4-cffd8419949b", "indicator--848c3f4e-7d70-4346-a579-963ed0cec097", "indicator--1ca9e233-45f5-47ff-aa1a-5d095970ff30", "indicator--5dba4502-54ad-4977-b1b9-bc1f862311e9", "indicator--5f16888e-1e79-4d43-b35d-0dfd3f814689", "indicator--50ff07e0-38e2-4cb1-b5d1-d4289c4ec71e", "indicator--57822cbb-7985-4342-88d4-8d76153ad73c", "indicator--a46fde37-7224-4def-8b79-0ed98a6e41b4", "indicator--d152dae2-1a0d-441f-9d4f-664bd9778630", "indicator--d7b61190-2946-40d5-9915-595689f46457", "indicator--27f9e9f9-ba8b-44bf-8209-3df9fb706fa1", "indicator--d084910f-8c7b-45d5-a7fa-21460d28f041", "indicator--9bb56e05-4c79-42d6-9865-2121f5151a45", "indicator--aaedacb9-437d-48db-8ee8-4f9f4f75e1c1", "indicator--53ebef81-b106-4520-993d-ae33c742397a", "indicator--47e405f5-f319-4cbc-8249-f1ddfbd06af2", "indicator--9eb6393e-a2e7-4ee0-a1df-cd93c0da358d", "indicator--feb16961-19f3-4b00-9ec8-5374d5a019fa", "indicator--4fa4534d-2ec7-401d-ad61-0cc2f1f28cb0", "indicator--59b33c91-83cf-4a58-b1e9-4de9e0d14494", "indicator--d9dd3c39-9b0f-4c98-be68-b66396edbd12", "indicator--08466eb4-4b30-4ad7-ac37-97cf8bd25bc9", "indicator--8b45e1a5-4774-4a49-a4b9-3d32deaf95d4", "indicator--aa946219-1065-4232-b429-4668b1543405", "indicator--8219b0f8-f98d-4071-a6d9-3a40c6029f21", "indicator--e39de0d5-35fd-4dcd-8a21-79c32992c0ee", "indicator--2d42cc7c-61ae-4fb3-9dd0-d925ad9c8066", "indicator--3b4446ba-2e4c-4d94-81af-bbcb26a69a74", "indicator--c442219a-c03e-4954-b53d-33962932d870", "indicator--d674a697-d3ac-4955-8072-4fecd53a1f16", "indicator--5dfbbb04-8d66-4289-9578-0353fb456133", "indicator--b2845084-aed8-4c93-a2b0-1cb2ebc336b5", "indicator--aabd86cc-90eb-4cef-8dbe-23fc7e9c6ed0", "indicator--d2319c83-bcb2-419a-81b3-e8526bd998f6", "indicator--ee876d3d-a2ea-4482-9f0a-ab9c70042f33", "indicator--c5a8cd40-1fc0-4ec9-9b71-bcc32be3d590", "indicator--5667839b-3245-4386-a5c7-a5df8a190122", "indicator--b087af8a-f925-46fd-bbe6-e575b37b305f", "indicator--9c05d317-3f8e-4ae6-bc6f-8f9e3bf5955c", "indicator--39c76ed5-c90d-4b64-8932-2f07f325314a", "indicator--81c44d0b-c37b-48fa-b3df-dcc59a8e3f66", "indicator--9174663d-38e9-4485-ade6-b50122a33edd", "indicator--6b92aea6-1de8-4a1a-918f-d93be195476e", "indicator--e5cb69e6-6588-4f02-a587-bcebe6ad615e", "indicator--7be0dda6-12a7-4419-a76f-df14c9b7c6d1", "indicator--dc53b533-58e0-4122-bcab-85f3edb6d560", "indicator--93896823-0afb-4470-8d15-4badf5687d07", "indicator--a1f5f91c-d68a-424e-8aa7-5880e2085699", "indicator--b012fcad-33c6-44b4-9b55-3ad3d6403ad2", "indicator--cf5418df-e4c4-4b6a-8ce4-63223f73645c", "indicator--d1d6a8b5-0a18-412e-88a1-1bed8a7edc22", "indicator--4b8e4fd2-4cc5-4ec5-9772-1cb7e49741a9", "indicator--bd778894-105e-44d9-aba7-b16d0518c86f", "indicator--5e774a31-dd18-49dc-9400-9beb2146bf8b", "indicator--9ae3740a-bf72-4df2-bd05-d659bbc93811", "indicator--e1a7fae6-558a-4942-8ffe-c9c05e7a9e19", "indicator--4ca8134c-5bf2-4e33-9b00-8c9c94ad46bb", "indicator--5d2c1974-3b2a-40eb-bbae-893d5930b90f", "indicator--8147b9cc-f215-48c5-86b0-b0d68d61415c", "indicator--dc03d7d5-8c31-488d-b49d-52271d19820f", "indicator--2b011659-7de8-49c2-8037-667dd8d7e486", "indicator--6e405773-0a66-4233-821d-b2160bbf76e4", "indicator--adbd69af-2041-46b7-a7c6-b97d3fdb13ec", "indicator--2a45be23-8222-43c6-9801-6fa670a3bd1e", "indicator--83ce2db6-bfb6-4ae0-8222-973127388179", "indicator--2680ddc3-c36d-499d-bf08-6d83915bf8df", "indicator--322d967f-24e7-421c-894c-806581129011", "indicator--1630e947-a5a8-4b62-8340-f7ee716d380c", "indicator--b9dbb41a-e6ba-4579-afcd-5dc9fd6a6ee7", "indicator--14c3373c-51c9-407f-bf3b-e9f19d3de52b", "indicator--18e80ca2-7639-4fcd-b6bc-463ea554d7c4", "indicator--e09bc67c-887f-437f-80ab-37b87c065bb9", "indicator--b5f82f8f-b158-4d64-ad91-344dfb962fed", "indicator--61650fbd-a32e-4d29-9bea-b90c440d00cb", "indicator--3756401c-4055-4274-8bbc-1ca2fe3b7e68", "indicator--0ed210fb-aeb5-4b1c-99ac-a70870176c5e", "indicator--dc898ae5-d521-4499-86fe-a75f49859ab2", "indicator--c31af671-49b4-4e77-ad40-9e9960aaab04", "indicator--7bf1dab3-5353-48a4-89ad-9676668456de", "indicator--23f95f18-e8be-4849-8a06-a3189b80053d", "indicator--f969e639-7079-4e70-b334-a3c1b27015e0", "indicator--64cae83b-be2f-4a4a-9552-620f30c10704", "indicator--cf66b2d0-2d5d-4f5c-8bcb-09d10a22a798", "indicator--9696b3f0-9480-4fc3-bfbd-bdf1c1e1213c", "indicator--c91eb8cc-0f3b-4279-b1f1-c6902cdfe51c", "indicator--43da7a21-19fa-416d-9033-0f4cc89364d6", "indicator--ad5ae954-346a-4a30-943e-ae42a1a8f244", "indicator--c15fdf8a-42a4-444e-ac0f-1b2f2ef59d1f", "indicator--3c7b3646-6255-4579-838c-2678f250964e", "indicator--7bcc99c0-0d36-4d13-b39a-79c77a8af264", "indicator--5fd193b0-cda9-4a2c-8796-112c9ea79d20", "indicator--7596a606-8a37-4f48-bd74-84e0a18b6909", "indicator--58ec7a3d-757f-460f-8211-12d8ff0aab4d", "indicator--025e34ad-15ab-4f8a-938f-3dfe18876e58", "indicator--57e178a4-7bfb-4f0d-8c6d-b07b782fe469", "indicator--fef471c5-40b4-44a5-a44f-7053262034f7", "indicator--7269a2ce-5f88-4467-9bec-77086a834193", "indicator--ecbc0db1-86e1-4068-a4a1-eed5e1127a56", "indicator--ecce832c-7c69-4738-bb41-151029368e68", "indicator--5d983450-f361-4f01-9cac-2df247ba465d", "indicator--d05cd9d1-f0b6-45a7-82be-9c94e4e1ace8", "indicator--25f4ae14-15b0-44da-842f-be79040c558f", "indicator--e3b2e69a-754b-4c42-bf91-538879721129", "indicator--274e8906-78f4-4238-986f-6158e454b40c", "indicator--2352601f-d24c-4c05-88b1-92121eabedf2", "indicator--105f089f-dbe1-47fc-92b2-5a75007a65fa", "indicator--33b1735e-b614-462d-9330-0bb63fe254ba", "indicator--8ff6b5d5-f38f-4d6a-ba7d-abd73d2f121c", "indicator--99e31b49-f984-4c16-b99d-1f7c59179c76", "indicator--9fd9a674-70d0-4fc2-bbe0-a6ddb334ca0f", "indicator--f3c8663e-f221-4cc8-bc7d-66b7f9aee6e3", "indicator--94fffda8-5740-4847-a9c8-7a30a0298990", "indicator--2fa44ca7-379e-4abd-b2ae-e2bd476f97ac", "indicator--abd13fbf-d042-43ae-9ba3-f5f679fd2137", "indicator--b0b33ead-bf22-4dd6-897d-2350cfb88c71", "indicator--15956928-1ea7-4dcd-b441-3bbfa3932529", "indicator--52ce7d79-5fa0-4e30-97b4-1118707fe46b", "indicator--875c91bd-dbf3-4730-93c5-5f884409b28e", "indicator--f4812a3e-7417-4074-a16f-ceee1884912b", "indicator--f755d2bc-502f-4fe8-99f4-38c440f98252", "indicator--1360e013-0356-4828-880b-cd5d2b36f820", "indicator--77d44a9e-ef2c-425c-8ef1-db0c6186747e", "indicator--8a166f72-52ea-4184-9090-2982e407a5a1", "indicator--6715153c-d6eb-44cd-a0ed-42b5e8817ee3", "indicator--a46f5c1f-0bc7-4e08-9b5d-3ceed737e4c1", "indicator--18922b1b-3e3b-4c2b-a2a7-d30eb0553316", "indicator--b04dea62-d105-4aba-8198-57dea92c0b36", "indicator--60b0ca8a-5a35-415d-b59f-af456a0b61dc", "indicator--9d2c774f-38aa-46fa-9b49-df6328bea06c", "indicator--d58567e6-734e-4963-b56c-dd06d9549801", "indicator--903bec85-fe63-4712-9d5c-35b85a9ac8ef", "indicator--90090083-c590-4c95-80d0-2a7079bbcc21", "indicator--fdd99dbc-0708-44a1-ab12-d6807f85db92", "indicator--12aefe4f-f238-4db9-96e7-a69669ba658e", "indicator--11c1871c-e680-42a7-818a-e448b9327e42", "indicator--49518b5b-d3fb-451f-bfa0-5cce69a3f49c", "indicator--56cfd032-7a6d-47a7-86c8-ad8130731439", "indicator--2d3c38b2-60e6-4c22-b13c-b1bb681feaf4", "indicator--92e56adc-f3ec-4a5f-8f0e-667932705790", "indicator--8e54138d-e372-463f-9dc8-5b20acabd32c", "indicator--2a930f22-b7ad-4e27-98ab-777f9d9aa280", "indicator--a55c01cc-c3b1-47ac-a4fa-cd3ca2dbfdb9", "indicator--edec58fc-5d9e-4d8f-af36-6169bf83cb88", "indicator--3859e10d-970e-4290-9962-c2426066cfbc", "indicator--5d7e03a9-9d39-4083-ab7a-2f9c0d87a96a", "indicator--0e3f6636-a697-4b24-85b2-7561f42b8a7e", "indicator--98aa2ecb-d888-4fa6-9cf8-ac9e324e0eae", "indicator--1c2b1a9e-5120-42d7-b7a7-9aa34a8d8d83", "indicator--e377bf6e-6fff-46d2-afba-30160e82ebce", "indicator--9747203f-ead0-4ad8-9fac-dcea162a75e0", "indicator--0334227a-0a3a-4567-9167-c2c01637a824", "indicator--69408965-5b30-46d5-b400-ab3682fa8587", "indicator--5062ee1c-4fd7-4050-99ca-b89d7529da8b", "indicator--4eda0bb7-f717-486f-97a9-da0bf2dc91a7", "indicator--0d555ee9-6438-4645-bcdd-12e5cca6bc8e", "indicator--b85a3fa5-f694-43e8-afdf-67211f8869b3", "indicator--23d676a1-deeb-4678-97ce-58efa4113d83", "indicator--f6fe80b5-a69a-4cbc-a46d-25742ba88512", "indicator--ae38f207-8ef8-4509-b9fa-e07b437b3721", "indicator--f28d6869-5c2e-42ca-8788-bd5ca94c33d6", "indicator--f9f7bb73-840e-4e89-82a3-aab36c7bae3d", "indicator--bf2526da-a623-45e6-81b9-177f6cfe0eec", "indicator--01465d72-4243-407f-a9c5-e05397df5790", "indicator--580e851a-9750-45b6-ac0b-e56797194e18", "indicator--c0cbd481-bfbb-42c5-97b0-bd826c0bded1", "indicator--ece3c3bd-4425-4ea6-adb5-9a1ebf75239d", "indicator--c17575c2-248e-480f-8d0a-22ea56a9446d", "indicator--f17074f5-122e-4a48-b860-5cb085a14e4b", "indicator--a467f0cd-514a-4835-8ae7-a8d1dbe7950e", "indicator--9eb3d851-3f3c-45ea-a723-52a4a3d1fca0", "indicator--6767c6a4-f988-4cf7-a0eb-c0f0f76251da", "indicator--e16bc138-180b-4853-b8d7-293898ec46bd", "indicator--469f9fa9-b91a-4c3f-ae92-a26539d4a58c", "indicator--b0392f56-6337-4eb3-9703-8521f19135f3", "indicator--5682915a-d6eb-4c23-ac24-7a1194f2598d", "indicator--9987fb18-6df3-4ff9-8184-6dc231237a3f", "indicator--160ac2d3-0867-412f-926a-8b02654ad199", "indicator--57164f51-9abf-49e6-9f93-04d55f6f3181", "indicator--61083a81-21d5-46f4-bf8e-9837759caece", "indicator--d306f91e-74f3-49e5-9eb1-4db08fa8456f", "indicator--c46d3f09-e54d-4b4a-bee3-4c2c7ea94db8", "indicator--49b4d39a-3422-4541-9cd8-1fe1ef801612", "indicator--4bb6c12d-ab69-4cbc-b689-69ab3c2401d2", "indicator--19fc9507-f570-43c7-bb61-12b875b2be7d", "indicator--d794db0f-49d2-4d7e-8704-f7228de0da45", "indicator--244fc7e5-0c0b-4ce3-9719-db3340976fcd", "indicator--b25dbe7e-8de1-4916-8f72-991d4492af53", "indicator--436d3c78-b9b6-4568-a2e2-b43e4b729e76", "indicator--bae00e6e-82ec-4bb8-bbd0-9bdcd4cac5da", "indicator--63c4ea80-cf4f-46f9-b035-b11f532690e7", "indicator--fbb4ceae-99b4-4a38-a220-865c07d96397", "indicator--eac46065-4bce-4277-a738-5802f90cab73", "indicator--78284e95-7f7b-4be8-b764-daaca7314064", "indicator--1063e6e1-fe20-4c94-895f-b197dab24868", "indicator--780b96ee-1f15-4861-b9e9-aabb0399da19", "indicator--5cb70cb4-7556-46f3-bded-e85b8039c9c2", "indicator--34ac2f24-ac63-440d-a7ed-6dac30c47466", "indicator--87d371da-4011-481e-bb46-e2641fccce6e", "indicator--f55fed91-b814-4b59-b262-4dbf6e0c3227", "indicator--f0ca3fb7-728c-45ba-8d80-2e3f6ef2a176", "indicator--26d7e958-4b84-466e-9ced-ca7ba91862a2", "indicator--0fd6cf0e-4319-4392-82e5-16043deaad30", "indicator--2180647e-06d9-485a-903f-42973db2fc80", "indicator--8be3a75d-3449-47e1-9273-c291d9e7603e", "indicator--ec54972d-f262-4de3-877a-09b6262b23ea", "indicator--c21a022b-9531-4ee0-9a36-a343ccab0c97", "indicator--b7279dcd-e1fa-4d15-ab84-8e6d43b4b919", "indicator--1c123416-b4b7-4a7e-8511-b2780fb2ecb4", "indicator--241a66e7-58c3-4785-be12-c402260352e5", "indicator--5f7a3eaa-8dc5-4015-ba5a-6457a3a01a51", "indicator--de8e77ab-357a-454b-8826-22c68e5b4b14", "indicator--098e63de-0884-46af-94e5-0b0dc1d15522", "indicator--55b459f3-3a18-4819-929f-0a1e3dcbb2d9", "indicator--005c763a-41da-4305-be16-ed99076a7b09", "indicator--5cb92f8b-10df-4f5c-879f-a470490bd1f4", "indicator--58f77432-ea4d-4f2b-97c9-11451df1df51", "indicator--7ec6159c-052e-403a-951d-d63bad03d603", "indicator--9cb20f76-301a-4b93-a9f8-c882f213cadd", "indicator--a0ad05f2-c069-40d9-86bc-050781995463", "indicator--2be140fb-7ecd-40ce-992b-c3610377f153", "indicator--6324c857-04b9-4e75-bda5-ce632e295d3c", "indicator--7a149615-3e67-4828-a984-c378fc7e16c9", "indicator--93080de2-17c9-400a-98b4-e846b81c2709", "indicator--36be2a14-48d8-40f6-b657-3b2e6fdd7f26", "indicator--38413a7e-0ab6-4b7b-8169-b2b0cc52a3c2", "indicator--611a413a-4e41-4cf6-acdf-3a0c80ffc17a", "indicator--f515fca7-a6d8-4cb7-8680-bd8baab7a167", "indicator--4ca0ac3d-c83b-4e3c-88ce-cf8ba3ff17a1", "indicator--48a7dd50-7869-430b-8591-773794c3d6cc", "indicator--7a2218b8-dbed-4c8c-a9d4-e0899ad79aac", "indicator--a41782e1-4bf7-4ee1-a6fc-013272573b36", "indicator--6c659275-4f65-4a71-b7ed-3962c0288643", "indicator--7eec3162-6482-46ae-bd88-f9a213e9912b", "indicator--2e999954-ff55-4c89-9b63-4abf4d0a0533", "indicator--b7b60b2d-dd58-4af8-9203-62093f2720d4", "indicator--b226b99c-670e-499d-bc43-ff153a06dc0b", "indicator--c278f474-99ee-4d5c-bbdf-f5a3aa9973ee", "indicator--605823a2-c06f-413c-a0e2-9c3596c870b4", "indicator--20103472-35e8-4170-9443-06729ed015bd", "indicator--36013d56-2f8c-4442-9249-911dab4949fc", "indicator--306fdb99-84e9-441e-b2b9-42b1db906a1c", "indicator--46c3473f-24df-42e8-8d33-3378a3e67fa7", "indicator--b8f4051f-9291-4125-b83f-ade59dacc553", "indicator--df7a12b9-4425-408b-a62f-4c5a00474277", "indicator--0cdcdfba-cc1b-4344-8f11-512723432ba7", "indicator--e16a1c55-94d3-4eec-8fec-0c3216c8d292", "indicator--641a683f-21aa-480a-a986-05491f6a5a64", "indicator--e48da895-a22b-4816-a5fd-4bd5ab51a4a4", "indicator--d8dfc753-6a12-4892-8b40-ee28d194824b", "indicator--320ea59b-2118-4c73-a498-2576d8f07b77", "indicator--d28e3f5e-041f-4ece-b86e-a1f60d015ee2", "indicator--12f2b79e-a395-4547-b719-b066db6d2371", "indicator--b2fc8fc5-a289-4c6b-9910-73ed62e52b7b", "indicator--72f24523-5fc9-4ce0-9a8f-4569b613195a", "indicator--672d9291-6c5f-4d64-b92b-38263f03da2f", "indicator--bb7c54f9-5c00-454b-a4f2-d814560c3288", "indicator--0c9a6538-641b-4c74-a4cc-c4ebe62ae791", "indicator--99e26c56-5f93-4bc0-85bb-f87bb584af43", "indicator--5f9f33eb-e67f-4ca6-891e-93fa11d3130c", "indicator--8af64b6b-d5d4-4f7b-8b16-d31169e26bb3", "indicator--4b0f6439-76d7-43c6-8b75-dcf80479d6ce", "indicator--c408a355-52e2-432b-93bb-35f8c0986d52", "indicator--0a3e5f25-256f-4c1b-8fcb-c2a871c71797", "indicator--d73d0c4b-83b8-4973-bb7e-c6ab8a41aeda", "indicator--01dfaf9b-f7b0-4dfa-ba9d-e7498b29c52a", "indicator--999fe52f-fc51-4fc5-9e66-ea346f55f443", "indicator--21d74af6-0cff-4265-9843-155b63bada89", "indicator--2f8848b6-0838-4083-8803-1a5dbd2f8b23", "indicator--507ecb3d-250c-449a-85c5-74f5bc3d4e46", "indicator--bea9c264-4f93-4216-95f2-53869473466c", "indicator--1b336a01-29c9-415e-8e2d-b5b9567c2638", "indicator--01735cac-a9f1-401f-8d5e-2cf9d63f6372", "indicator--770703c4-2cac-4d04-ac24-5449a175d4e4", "indicator--a1444cca-0a31-4824-884d-c679ff7f41cc", "indicator--1d0d1867-0b6e-46df-8a6c-4bf08136bc0c", "indicator--f7ef42be-c7e1-4d08-87a7-ef7f024d5412", "indicator--36b850ee-0c25-4b4b-b223-961e8bc92264", "indicator--54d9cd5a-b7b6-458f-ad0c-4bfc5405e22b", "indicator--3f819c06-4684-4117-9bb3-debec9eceedb", "indicator--c6057eae-1948-4b97-962b-5fd5561dc2ef", "indicator--f7403609-3647-42cf-a8a9-e00aabf98bf5", "indicator--e8eb49a3-ed11-42f5-b8d6-e8cc339a7cb1", "indicator--dfd40d29-1780-42e5-b94f-52392757ca38", "indicator--f2d5e28b-72f0-4118-ba62-74fb9d2dd794", "indicator--77c01e85-0f94-46d1-8d10-bc93e671537b", "indicator--13205e63-0f40-4b1d-bad4-7d7e1e1df608", "indicator--75025d0b-6af9-4632-a7e9-bf097b5951b3", "indicator--3d4ef16f-2d8d-448a-8414-c4e80da09f9f", "indicator--ce2d7daf-5553-45b6-850d-a8b35b593afc", "indicator--7db8299c-9811-4d0a-9876-fbb3b6e5cc2f", "indicator--5c85e9c5-ee12-473f-bf05-d37a1c129bfc", "indicator--fa2efbb6-22de-4d8f-958b-c8eee49b71bb", "indicator--0d2c91c8-5e00-4f67-a6d8-1732418ae915", "indicator--58b65be0-4a06-40b9-a310-303c4bd8c452", "indicator--5492efc4-d833-453a-a8bd-21c359015bba", "indicator--9f243567-89ca-4e95-aadd-3312ea57b20f", "indicator--308409c7-0256-4223-9227-78f8f4ec2c35", "indicator--d649f68f-2f5a-4757-97d3-dd40723be0ac", "indicator--8cf99fbf-f0f4-4ed7-b93c-0a63c8691ad1", "indicator--f9819067-4e44-4b24-836e-f60fd09b3eaa", "indicator--4be82e68-ca24-4a61-b6b0-c3fe7cdb44f0", "indicator--30395930-de45-44e7-9eab-9ef499efc8ed", "indicator--47a9caf8-f202-4c79-bcd6-eda9309f72b8", "indicator--97e65f24-0787-4f2b-b70a-f0148f8fe179", "indicator--34e65369-7f66-43fc-b8bf-cd7646a75d2f", "indicator--dfcd493f-772e-47c2-9567-b3ecc77fa560", "indicator--db075fdf-cdc7-4d91-ae93-0947cac150f0", "indicator--dfbd3939-0b43-45af-bf05-51699f4496d6", "indicator--9aa650fc-cfec-4c7e-a296-c9ce1369acce", "indicator--73ac4323-bbfa-4ca0-9d65-f91c25addbb8", "indicator--38447e5d-4c68-4869-b260-1bfcc33b1d0c", "indicator--8d6a51f2-9490-440e-9d87-1c01187f2b51", "indicator--d86236b1-64d7-4fed-8f12-7b6349c496aa", "indicator--c9c369fb-bb17-4a9f-88b6-9d9026fc520d", "indicator--14f2d125-f171-4f1a-a060-ba52bfce30e5", "indicator--632ba66d-f27b-48f7-8810-213a60fdd259", "indicator--9205480a-ea48-49de-9c8c-2d61c939e1ee", "indicator--aa1941ec-5dae-4aef-97cf-d0ab35218542", "indicator--a0302ab0-eec6-422d-b668-afd1501ce68b", "indicator--698389bd-273f-415e-8baa-32ab9a71450b", "indicator--0c5c8952-a98e-4f49-8a37-93c68b2ccfca", "indicator--7565d109-38fa-4423-a651-a2e17d782e49", "indicator--a59c956e-5c33-4414-b924-4ac6ee96fabb", "indicator--7bb5219d-d245-408e-93cd-582fa9e3c735", "indicator--26103089-da29-4bbc-a73e-bcf7e1bacc9d", "indicator--4a3ed1fc-73ec-4d03-8bd0-254cb1a5570a", "indicator--2767f5d2-e70a-498b-8f71-89107a4a847b", "indicator--d068b674-49c9-4c68-a99c-4d03a8f423c8", "indicator--b9a94168-4ad2-4943-a52c-26f0d6c707b1", "indicator--3b76eb59-9e3c-4034-b81f-2f38d4a483e6", "indicator--5923c653-789f-47cd-b718-77dd90df4176", "indicator--4c888e4d-f832-403b-9bd3-b08395701b2a", "indicator--42e908f7-2380-4a73-bbc0-faf422156197", "indicator--85b5cd63-dcb9-443b-9129-7ba79611806e", "indicator--5e551a6e-ebdf-4560-b781-602f8b9c4da5", "indicator--fc410244-5c80-421c-bd1b-912fd5ae0424", "indicator--8c6e8e17-7038-4202-950b-41c55a11a2e2", "indicator--9e4bd30f-2d24-4a10-b70d-6441c22e8e11", "indicator--7923a176-18f0-4788-b9bf-1a075794862a", "indicator--522b8b9d-dcd1-4c6c-8ae3-fc3c32f33181", "indicator--1ae5d10b-fa79-4822-b484-c91b6382a0c5", "indicator--73605d13-a9ce-426b-92bb-e8954359e030", "indicator--73eed0df-c639-480c-b07d-944016c660e1", "indicator--3ae6a950-01f8-4928-b17a-894cfd10590f", "indicator--b99ebeaf-67e9-4082-8b97-dfe2b1f12ace", "indicator--71b7e6c8-ec9a-4d8c-b04f-38647532578d", "indicator--e119eea5-c49f-4e58-b80c-81eb9fb65275", "indicator--f26faf71-374b-4494-b615-120817a9fb8e", "indicator--1fd45eeb-1d03-446d-986a-d9450d7379e4", "indicator--9b2fd3d2-1f66-4919-8a0f-926b6afea332", "indicator--c3bc6167-56b4-450b-bb32-c66dd582512d", "indicator--19f7d4c2-0199-4f95-953a-cd28cad1a4db", "indicator--67a7c16b-2740-4273-8728-eae0c8f8d448", "indicator--1fff978c-919b-4137-aa2b-29503f31fa14", "indicator--aa3acab5-3b5f-4b19-8eb7-9a4fba74873a", "indicator--ea21b41b-0f1d-4f91-b06c-d0b03bfd9789", "indicator--c46099f4-6039-465d-8c94-a9ae70405d6f", "indicator--2368f0f6-b46a-4f1e-8ec2-c72e8d85df3b", "indicator--646ff4b1-15a8-43dc-9a35-58c75ff54601", "indicator--2c1a8969-ec14-4669-926c-da3a7bdeba26", "indicator--9b6f5e29-d8f5-4893-b34e-73eec825cb08", "indicator--e53fe2f7-c40d-44e9-aa40-7c57aed36a0a", "indicator--8791949e-8431-4301-8db6-4a9fc86841de", "indicator--fffbe7bc-c808-4d3e-b014-2d1efcbc949f", "indicator--505b1fd4-fef7-490a-8fec-20de2617362f", "indicator--9f805e4f-06f0-4ef9-b954-e727642f9c22", "indicator--9fba5276-c9eb-4681-9ec8-ca28d000d41d", "indicator--2d559e22-46bf-4368-b2e3-4a96a8110ea0", "indicator--82eb1a28-f794-424d-be83-e0458c97d7bc", "indicator--fec783cb-46a5-4a7e-b196-9f2bdf66725c", "indicator--24a462e0-3a3c-49fd-8a25-a985d0c07c85", "indicator--d39f5f59-9b7b-4ace-b06c-d53516496362", "indicator--c0fd5744-25f8-446f-b16b-0a189fd92bb1", "indicator--b1ea55ab-618e-4c99-8518-8d2590d8e82a", "indicator--a776ae54-a8a3-46e2-b93a-266af672e31d", "indicator--7a36aea1-3251-4a82-938c-ccd2df79a3ec", "indicator--822aaf82-2e4f-4e2a-a83e-25d19d1f5fda", "indicator--129f60ee-a36b-4851-97a2-35314926927b", "indicator--2485f8ca-5505-4db6-8b8b-1e7f0d195acc", "indicator--b3630219-a66b-428d-b735-82b5a742377d", "indicator--f17e2010-fe7a-4903-8e3a-402c2fcc4abb", "indicator--deeb1948-b0d0-4cc4-9ee4-f4f78056e8c6", "indicator--811a5d28-d31a-4c4f-b3d4-b6af3adc762a", "indicator--856fae07-4f35-469d-8d85-c250bd34bc07", "indicator--405d4cde-2118-4e39-85ee-66d7673ab02b", "indicator--fc2e91d1-02b5-42fd-8cd4-9a1a58ae3c1e", "indicator--4b94b71c-98a3-45fe-bea8-b23001b37246", "indicator--13e9e156-682f-4bab-8db0-4b0fab9fdfab", "indicator--2f2e1886-21ea-495a-b9aa-3f1b5bcd06f3", "indicator--e341b387-267a-42eb-9eaf-b595e162852a", "indicator--297733be-afa9-4e81-8bcd-de011bd43584", "indicator--bc7d00e5-46c2-4c99-9b88-7c4b90c214fd", "indicator--6f97d72c-c183-4c74-8c23-6bb4303dd7b7", "indicator--219a1eea-c568-4ac1-8d77-70caa2b1c959", "indicator--dcae339f-0dc2-4959-9deb-3b501e089833", "indicator--2eacbb1b-0150-4272-a26f-c30a8cf5e412", "indicator--da130dc7-331c-4e56-b268-df8333347702", "indicator--7e2e2282-1b22-4482-ac65-1d30353c5569", "indicator--2f176aab-fcdf-404d-8329-12a40b16729a", "indicator--23b7b633-ae5c-4568-a7f8-588810735244", "indicator--59138dea-cd5c-48bc-a7a2-a5bb554446e4", "indicator--0e4f1269-53f9-41a7-aec9-534707b64edd", "indicator--5462b787-bc97-4f87-8862-c87ba4118161", "indicator--49674529-31d9-471a-9631-0056e91d78e5", "indicator--aa10a769-c328-4437-b122-5d42ef1c809f", "indicator--31068d82-b2bd-4db5-b53b-b65d44110771", "indicator--b8ad9193-b08d-4770-b2a4-3b9307902adb", "indicator--90380335-2469-4fb8-b841-eb8e44cabd3f", "indicator--f66cc8dc-efe6-4642-b36c-1c94b79bdba3", "indicator--8cfcab54-a22f-40e4-adf1-dfa37f1fecf4", "indicator--b618eac5-2f96-4f5a-86fa-49ae31e8a003", "indicator--b4c1ab24-aafe-4402-938b-9157807d2879", "indicator--79233a32-fe21-4aa2-a3fd-7facb8783312", "indicator--e9dc8f32-9401-4a4f-a237-961685bb9185", "indicator--02295ae7-ede8-4aa9-953b-0bd95ae06d27", "indicator--f9661f6e-7f39-4afc-8c1f-46b21522ac43", "indicator--f5e83e76-6e86-4b7f-aaae-45c0712a6577", "indicator--7546db0e-2cde-48d7-85fa-b0b4ec432e24", "indicator--23f0dc99-b51a-468d-bb58-cad7358a2179", "indicator--efc26e43-a4b1-4083-bea5-481ea5fe4fee", "indicator--b5af1ac0-feb0-4bbc-9e4c-51b15ba17746", "indicator--22a33127-4d0b-4609-903e-3be45fac21df", "indicator--0243fd2f-b4bb-4b47-bfde-be890134ba2e", "indicator--34fd45aa-4916-426a-9930-9c90a6f4a1d3", "indicator--c772fd19-eb1a-49c9-a9ea-b5c8b51efa40", "indicator--f2f5f1ea-b4e7-44e1-8648-ab461f01e2b8", "indicator--aea6e2b4-0b80-4c61-ba9a-3a01e1240780", "indicator--7a6ba8b7-9cdb-4154-b330-bccd32cb7824", "indicator--84ae335e-2703-4b1b-8772-b70f4a1b2252", "indicator--1acc53d3-d968-4b8c-a96b-e2f783aa5c57", "indicator--17237cb4-2150-46fa-b986-a53e8ea7ea7d", "indicator--c4e98600-04a1-4c12-ad8f-41cf7e5676b8", "indicator--396c3aec-b0e7-47b0-8b76-54ebfbb8bd7f", "indicator--18a2ee5a-8e56-4368-84d6-423fbe9802de", "indicator--350174e8-65b0-469b-8941-e7cfdcb1d894", "indicator--44db5ce5-ce57-4503-be96-0713e23d276f", "indicator--aba05513-4eb6-4768-8bd0-383d9c6c0d6a", "indicator--dcf22331-cf4a-4e90-bd40-2bf27c2b656c", "indicator--08c41596-7390-42df-9fd6-4ee67cfdb930", "indicator--f9122b74-55ee-4e47-9da8-018bd732c260", "indicator--6991efee-ec82-48ba-ae01-00cebbbca254", "indicator--306e9b57-f8eb-4212-9213-88222876d75a", "indicator--366867c8-d7bb-4482-bb6a-5e233b209597", "indicator--b14f5248-2c27-47a8-8937-9258adfa2acd", "indicator--a59ff6e5-6a64-47a8-8a3f-cfe47187b201", "indicator--4e5da25e-999e-4687-a517-42e93ca4d0c6", "indicator--3af02ad7-c174-451c-a240-ce674868a1e6", "indicator--7f064efd-c84e-4ccb-bac5-321a1f44743e", "indicator--26c689df-8443-4055-a321-2e23ced12465", "indicator--0584627d-8cdc-4984-b471-2de70a6a91d4", "indicator--ae053210-753d-4498-93de-efd4b7bdf4ef", "indicator--9fab1a20-2fd6-46cb-9a37-4959209c2a42", "indicator--da929bf1-8ebb-402a-a8bf-056827a07c9d", "indicator--b316d348-6e18-4302-b388-8844b5f078b3", "indicator--55b068d7-2cd5-44b0-8bf0-a1248787334f", "indicator--1ae52981-9910-49a1-a75d-03466d94cc0e", "indicator--7bcedb3b-0437-4651-9b0e-a7537aeb29fa", "indicator--646d3733-89ef-4af2-afcd-aee975c48f19", "indicator--22ac8533-1de6-47d2-b58f-791ca9b85631", "indicator--a8242cba-2868-46ad-9500-8a8005319e5f", "indicator--7c681947-8ea1-4885-8714-82d0e472fb87", "indicator--6a18e71c-0a3b-4437-950d-a4c9702c8feb", "indicator--eeff64e9-8a3c-4812-940d-750c56cd8517", "indicator--a9585dd8-6d87-4799-8c00-a91d5c81b75c", "indicator--24c7503e-5ad8-412c-baf0-4efbd3c1882d", "indicator--45556c8c-78c1-4c4a-91e3-782bc029b522", "indicator--e54a70c2-9478-40bb-9b54-5e83ae2d66b9", "indicator--9cc8da47-d016-49a9-81cc-a92ea9c47b21", "indicator--420fdf9a-77b5-45dc-86a5-126bddfdfc80", "indicator--48f5cb04-a8dd-4079-9923-808942a7e323", "indicator--0990b840-247e-4f86-842b-8ba7d4f9d753", "indicator--29ca0aeb-c82c-41e0-a429-489719acb8f9", "indicator--112eda8e-ec0d-4cf0-879c-863fe0b5a1be", "indicator--782a2773-cc5e-44c9-ab13-fed2c3d1bfda", "indicator--986ba0ac-482d-424f-8240-237451e5c85b", "indicator--b52470ff-236c-49b1-bcd7-5c383fa6e6c0", "indicator--8bceadf9-be7d-4561-86fb-29b4fbb35a3f", "indicator--602a72f4-bc14-4564-a7e8-02c0277d2f14", "indicator--e12ee0f0-ed43-4f5e-8436-72848f3c46cb", "indicator--d47d1b9f-6fda-4038-b280-268bd738d210", "indicator--184bf4bf-45ca-4eae-ae31-83b96e08e43e", "indicator--6c9854ab-b379-4bb1-9b51-2641bbb7b091", "indicator--20a84171-beb8-4aad-8d8e-35bebb365dff", "indicator--9e2547c2-294a-4d6e-83b9-72b767f9fdd8", "indicator--545315d0-dd62-4090-9efa-80b138da2e58", "indicator--7d5fe00b-b9fd-4c4a-bb70-8c13f7ee1035", "indicator--7adef828-76a5-4957-a717-6410c0d36d03", "indicator--ff4d661b-3e7b-42c2-905a-0947847c739c", "indicator--99494f49-cf09-4e24-9f40-b7ad98a19fcc", "indicator--6e2627e4-4448-4bab-9221-eaea147599a3", "indicator--579494f9-3a40-4612-b146-f3c1a37860ab", "indicator--420faeda-1ebf-459b-84b5-6e8625d68f8c", "indicator--5ff8f255-25dc-4e87-b966-d617b9e428e6", "indicator--2d315e4e-f63d-4777-ad62-284232137575", "indicator--53eea611-f2c4-4ee6-aca3-76abc3748b83", "indicator--0b7829f0-ed13-4cbb-b95a-bda4c30b01f2", "indicator--91996e90-2948-421f-8544-a04ed08875b0", "indicator--f848926f-9b5f-43f2-a605-9b09752fc59f", "indicator--29f1866a-1b5f-4f6d-b547-72c10bd34260", "indicator--9266c7c9-ee15-4da9-92cd-00a32605fef6", "indicator--c7673ee4-7725-413a-964c-1e1054b89b2d", "indicator--cdc5679f-e3ae-453c-83cb-9f08e955e10a", "indicator--a46e10b3-e524-4b42-93b0-d3096c2568b6", "indicator--99c9d10e-02f3-45cb-8150-d3bde19b49b0", "indicator--4b6253ec-5e5a-4e1e-acf8-fce3dd757a2b", "indicator--6c82d49b-6b14-47ed-a9ac-d641c2a70e93", "indicator--1ec8c6bf-32a7-49ef-a409-31d8b376b95d", "indicator--e0f2745a-257b-4c78-b82e-123d18a9dbf8", "indicator--b718fbb4-c295-4375-a6d4-8e9137b34989", "indicator--9ef4244f-1700-41fc-83ed-72587a54c6b9", "indicator--e3d10117-f07e-412c-ab7a-502c6accb91d", "indicator--a55d06dc-544e-4138-953c-00c229c085e9", "indicator--4377dbe7-d464-4e35-8ec8-442ddec9b2bc", "indicator--57fdda33-85a6-4fec-a606-139e9d22ef9c", "indicator--875db571-c71f-472c-9273-f6cd93234a9e", "indicator--58f96d04-7fb9-4dac-bdce-2b92ed5e8f9e", "indicator--30ce0b50-6303-45f1-8d04-f24259a09a6d", "indicator--292bd4f8-dcda-4b7c-b29c-0be77e0a2bef", "indicator--0db54d5c-4e23-491c-8e50-02ed0e7b97bb", "indicator--aec087a3-d3f4-470e-b999-98f31c97d29d", "indicator--60091ea7-684f-4d73-9e7e-64f79e939f39", "indicator--ced7cca9-b9bf-46d8-b718-d8f11b63fd12", "indicator--f431d44b-7a7e-4a76-b7a2-3e1f39ac39bb", "indicator--dfc548b5-f39e-47d9-992f-c50ea8be9e10", "indicator--7504f7c6-5b05-4669-9295-711fc6b7b7c0", "indicator--17d8647f-dce3-46e1-bcf5-a6419b327140", "indicator--a17893ae-c9d2-4695-8b9f-ffc001e0ddb5", "indicator--913a5b02-cf30-4367-9b41-5b13a4988bc1", "indicator--5af22eba-ff69-4413-bcca-e745da2fc22d", "indicator--90ef967b-1c02-4073-b9f4-c54b7d4b5738", "indicator--83307a98-1016-4726-8fa2-3ffdaf9c9a0c", "indicator--dcc31d93-e8c4-48c3-8609-41afa2d794b9", "indicator--7402a931-ca82-40ea-9c10-f00963574615", "indicator--680ac2fb-54ef-4121-af0e-8109473973fa", "indicator--bd6c8e93-428d-4c09-96d3-3b689e415ffe", "indicator--7c378f3b-9f18-4305-ae4a-71929f743d55", "indicator--56b8e3e6-d463-40ed-a521-b0fa7e2ea007", "indicator--caa7b8cf-1699-427a-8fe7-f26612d2cf43", "indicator--38b47ac1-5b27-4fa2-92c8-ee756f6933af", "indicator--b14ca7f1-519d-4840-81f2-5daba75ceb33", "indicator--ec76ac73-e6e2-4128-8bf0-16bd0dec684a", "indicator--4f824d8b-8641-4ffa-9656-364d9baaf054", "indicator--b5f6f636-512c-4fdc-bb4f-db61c31ce482", "indicator--f1b11f5c-53b1-45c3-8a49-2255cc1c75b2", "indicator--bd9784c9-b55c-4aab-9a69-4b50de8be614", "indicator--e3e40a44-49e7-43d6-b059-f79e813877db", "indicator--8def819d-9d90-4d9f-8a6b-a8315a6bf11d", "indicator--f6856817-a4d4-450f-a204-4ef01c0f6e41", "indicator--9c6550ff-dc7a-4d2b-9715-a7be45dc96eb", "indicator--3f8fc5b6-6770-4516-bc5c-9aee28418596", "indicator--f8eb3fbe-760d-445e-836f-7a20165b7794", "indicator--a7c4ff45-091c-4cb5-a60c-a7f883cb6850", "indicator--96bef089-d01f-449f-b17d-f151d3d2f253", "indicator--495b5499-24d5-473b-bb53-744296794dcf", "indicator--11d8c9c0-cca8-43e4-b1d9-3a6d22f8d020", "indicator--470e3df6-a4c3-443e-bbeb-c5d07afff4c6", "indicator--3271220d-b953-4306-87c9-43d0929f7edf", "indicator--dda779f0-e9e5-4e58-9d04-105541575c6f", "indicator--ce939b49-eb5a-4d0e-bfe2-900efbeda5fe", "indicator--80ede604-dc8e-4311-8acb-21773826d13e", "indicator--f37dd63e-0608-4341-b46d-b95112203b6a", "indicator--bd533aab-d1b0-478e-bf80-aec4cd3992a7", "indicator--fbdbf8ce-4aa8-4b20-9b01-de9bebff85ec", "indicator--ffd8aa18-c01c-453b-86b5-117dac9ef6c0", "indicator--d9a3c6e6-71c1-490f-a4fd-e02a3fdd28de", "indicator--45e0970d-9392-45e2-bc3e-08fe776c0f3d", "indicator--afc9421a-1f67-4544-9f65-9674b028df5f", "indicator--361fe04a-57f3-47e3-b58a-d73e7a8659ca", "indicator--64dc3004-9b3e-4a01-b6f9-f3f59d644777", "indicator--a77c424f-1184-4023-8ff0-aa6362d9cf97", "indicator--20c7ed6d-0224-4737-b4b6-1e56e0ea3196", "indicator--33424cb5-9b19-4ef6-8397-a3518102e7d4", "indicator--3bc92de7-3265-4940-a1cf-c9102914e9ba", "indicator--5fbfb4b0-9a7d-4982-95f0-3701a588bb19", "indicator--19cbde9b-5ea7-4260-8739-29b1dc533bd3", "indicator--a7f23d66-74c0-4923-ac6f-016ab0e64fd2", "indicator--53af908d-0b33-4069-b1d1-00423387303b", "indicator--c77a9890-c93e-4543-8959-9444ba205051", "indicator--46d495d8-a14b-448d-b381-559c9dbbec57", "indicator--0f89d81f-a46b-4f19-9218-e00f2e745c03", "indicator--54925618-cbe8-471a-a09b-d23dc3183636", "indicator--314e376a-3f6f-4440-b776-45cfda2683be", "indicator--2d118db3-0bdd-4acf-b62a-7e04ebf3fd0b", "indicator--b7ab6661-f59a-4d52-ad72-590d29a04b4c", "indicator--ffe14afb-c2f9-4160-bdcf-15829c293f25", "indicator--b3abebdd-96bc-4ac3-ba1d-891d239d40cf", "indicator--3d332fe1-5fef-48b9-913b-c79b045a8c99", "indicator--138ceced-c39a-4cb7-a103-516cf2eda48f", "indicator--4b44b9ba-1e3f-49b0-8d50-faabfc6ff943", "indicator--54c7c8cf-e1d2-4cfe-b713-51fb303a2515", "indicator--5c61175e-c0d0-44e8-91ea-fa732e7dd8d1", "indicator--386d5ffc-09b5-4ce7-99a4-f440b702118e", "indicator--b8261d9d-ecab-49df-818a-a1cc02f0be94", "indicator--e7b88533-0c41-4f43-8421-87ed13b443b9", "indicator--bcb17805-909c-4774-8c85-776e6ccc5f61", "indicator--a6781fe6-4949-403c-afa7-bf5a591b1191", "indicator--89db787b-0925-40e1-b58b-7362e5da8d5d", "indicator--e867e504-5e0e-4848-9a74-08b982393291", "indicator--c2c4751b-85e5-4a47-940d-914da693f185", "indicator--552aef6c-a6d1-4668-bc6f-4b4fbf382ae8", "indicator--395433c7-96fb-479b-aa4b-aa594051a85c", "indicator--e83d892a-11df-4caa-b67a-4084b35c892b", "indicator--68859c90-b332-44cc-8856-6e6b8b655634", "indicator--16e39e4f-c147-4711-9cd4-c6bc4c677c11", "indicator--2870da32-f95d-450a-84d7-1ac4515d2a62", "indicator--8138bf98-4f40-4121-a1ed-de2675690f33", "indicator--e54cc12a-14d7-443b-af29-ed0e90eb0179", "indicator--53d81bd3-738d-48db-8255-d914e87a81e7", "indicator--dcd066f8-6aa9-4932-b8a4-838a2779c84c", "indicator--8b578905-fbe0-4dc3-8766-4dcf3ceac6e3", "indicator--4f9f697c-8313-4734-a22e-e9de5adb50e1", "indicator--f5c15541-519c-4b8e-93fc-32ed5c2293c9", "indicator--41d54bea-e7b8-435b-ba6f-0d350ea0b9cd", "indicator--f7750017-cb2e-4ef3-a496-74566cecc6f1", "indicator--258cdcd6-fb47-4fcf-bc78-2e67525b7f05", "indicator--79b111ac-8707-4e35-b650-38eb5e3c8f1f", "indicator--6833aa80-c5cb-4fca-8385-210c4a79ff7e", "indicator--8bea952e-7389-4add-8f11-104fa01b3eb0", "indicator--a5f22eb1-a331-446b-9efd-73a0aecd9a83", "indicator--3cf3ed24-c903-486e-a8b6-bf643e7821d6", "indicator--d9f54b16-bcfc-4d50-ba82-a8ff304e6c4e", "indicator--c1d49897-c5b0-40a7-a04f-ad6e5063c82b", "indicator--b1608dbc-38b5-462e-a775-067286877d06", "indicator--e053401b-1abc-41a7-9c2b-408412bd31ff", "indicator--64f54f3c-a491-4307-a063-ecfd2b46a283", "indicator--3b597572-f608-4576-a490-828a1977bff1", "indicator--7569e00b-3d02-4423-a302-9e448287d6a9", "indicator--c70d1185-67d1-47e5-a718-41f28a0c5b38", "indicator--91da503f-af33-403f-96cb-408231b70d2a", "indicator--6dc1cf2e-e087-4ee9-83a6-c9e27595850e", "indicator--57d648f2-29f0-4ddd-8f01-eda1c052a8ad", "indicator--648b4e69-11ff-479e-9edc-5d105e7b6cf3", "indicator--f1201267-9820-482a-b9f5-0690f6c91f59", "indicator--51b82aee-2e16-4ca4-8dfd-408ce925dbfd", "indicator--ba267b09-67df-4bc4-bb47-bd916d97a304", "indicator--eee7204b-7493-490d-bcd9-e1cc463ace32", "indicator--b6c26ae3-c130-4278-b37d-7ed50de7cbc1", "indicator--73d06530-9cbc-4fbf-be66-fb9eeb8b0b59", "indicator--efcf31c9-4f53-4913-a811-5faf8b1645ff", "indicator--bd0044dd-036b-4903-ae67-104a0e775968", "indicator--6d2c9d75-feb9-434f-8127-67117f68dbe1", "indicator--922326ab-ccb0-4c4e-bb79-e251426efd63", "indicator--d0543bf2-33aa-49d1-8134-ed5a14558c4d", "indicator--8f2d99a1-ee2e-40b3-8893-7e6b3197c76a", "indicator--411965b9-2c62-4389-ad33-9438c80afade", "indicator--766574bb-35e6-43d9-ac96-9c7567a8483d", "indicator--653ec220-402b-4186-86f1-8ccee1a65618", "indicator--08f7088d-c313-4b2e-95fd-ebcb69d42779", "indicator--f984134e-a021-4dee-be7f-b0e5fbfcf338", "indicator--a59f2675-deff-4cfe-badf-2e1a1c1bbb3c", "indicator--9d49e3af-48fa-4708-97a1-ddeef748f81c", "indicator--40e2b8ea-d6fd-4ae9-b6ed-4589b42eb7ce", "indicator--856b7412-cf9c-4314-8cce-9e5916ca4aa1", "indicator--6fb616ff-63c5-494b-8556-5faf6cb01e49", "indicator--61ba1be6-3c70-4010-9f10-c41df052d288", "indicator--b5876133-64b5-40a6-abef-a7d20ef41f06", "indicator--57e0034f-ac06-42fe-9fb4-6ba3d3c75743", "indicator--e1730ebf-76aa-4105-983e-4038dcd9c4e6", "indicator--b18a9fde-d692-4136-810f-df65a398d4a4", "indicator--29deae7e-b1d6-4fea-b65e-02b77b3d0448", "indicator--80256984-7dce-4db7-800c-3440c4039b23", "indicator--93bb9984-4cc6-4a55-b433-5d6821b16a21", "indicator--ea1984f5-9029-4a8d-bb4e-510979ceef54", "indicator--14c80c04-edac-4635-8227-1f47c4c7dcb2", "indicator--85a1dad1-ff95-4679-a8a3-68ba36dd4d6a", "indicator--ebc678ea-39af-4183-b978-32d4ed1eaa6c", "indicator--9c9ac975-41c9-4aa6-8af0-abd257af8480", "indicator--e8d96790-f97b-42cf-b40a-c478e103c402", "indicator--25bc5001-4aa3-4474-a9b2-32a62507f80a", "indicator--24843729-50d8-4f46-a830-ac2f9f9ee0f5", "indicator--e6caaa60-bb2d-4fff-acd5-e4f3000c7a17", "indicator--c77d544b-62e1-4e85-9515-33390c3cef55", "indicator--7c5082f7-db2d-469f-afea-a1c7837fdb51", "indicator--46c9e713-485d-4dcc-be83-e60d0cb917f3", "indicator--ad20b739-ff3f-41f9-b69c-2d28db2656a7", "indicator--e2736e6f-1e19-4472-b6dd-7745ab54ab73", "indicator--0556e25d-0641-496d-ac67-a37ad444c11e", "indicator--74902fed-a046-484c-bf16-406728ed8465", "indicator--b03066f9-057d-4d2f-a77e-f8d806eae841", "indicator--e2c80a63-8367-46d4-9978-0e7cc58ffb9a", "indicator--c44d1b44-7d24-4b82-8601-b98bbfcf170c", "indicator--9e482084-3c96-4149-ad13-f55aaf870b19", "indicator--e91d6fd9-f57f-4663-b1a2-7cda7957402b", "indicator--a1e3fa25-c1c7-4e92-ada1-58279290a8c1", "indicator--04518310-db09-44ea-bdd3-884b2ea0d7a5", "indicator--0789996c-9a0c-42dd-90fa-37930ce947a8", "indicator--a902707e-f259-4a59-97a7-16efb929e7b5", "indicator--6b551c93-61fd-454f-b472-94eed7e5f121", "indicator--71c26743-f6a7-453d-81f4-4d2a6db36e64", "indicator--9a1a7216-b156-41be-9c88-5499589a69ee", "indicator--7c8fe8b1-a8af-45d0-87eb-a6cbd76a25e6", "indicator--8580490b-1ceb-4b19-8c12-03aa2cf5160b", "indicator--8b8854e4-f0e1-408e-b5a6-9c1fccb0ebee", "indicator--c9736bb6-f141-4fc2-a85a-f3db8e99fa5f", "indicator--ec614b1d-a134-4ada-bd7e-cd0b39e49e0a", "indicator--b5d5b41e-edfa-4475-bdeb-81c74c08fcb1", "indicator--1b710810-fb70-4808-860a-9943159a437b", "indicator--3da34ff0-0a75-4d45-b2e1-6a5a68192531", "indicator--fb5d9a95-e4db-4661-8f33-57cf8c8966b1", "indicator--cf49edbe-b913-44ec-8c8b-cb57f556fbf4", "indicator--4ab42a02-8cb5-4d68-9e71-2f4eb1c0aac1", "indicator--0029ff39-ab41-4d48-856b-379ddbbf8649", "indicator--e7f704c7-47de-426f-9fc4-6a857112ad33", "indicator--8c4fcce7-6a6f-448c-aee9-56ca5f89dfdd", "indicator--b663ce18-d713-471a-bb48-4d148fb1a87c", "indicator--3ed8392c-cea6-4217-9e7c-f34d07442f42", "indicator--786b67d1-0056-446a-85b9-ec00ef4cad05", "indicator--e0de760a-b896-44f3-8f23-f44853744674", "indicator--57bad38c-16d9-47d0-baf4-738fb0e1e878", "indicator--2af8b002-39f1-4d29-bdb5-235c6731002d", "indicator--d34aad7b-cead-4fc1-97e2-165757bf4e23", "indicator--4a2bd42f-dc20-47cb-9a4b-47f5800d9425", "indicator--1b8aaa95-7c72-4aae-a969-77e715d70db1", "indicator--6217fe9b-5e9b-4cec-b319-bb3296dbb34c", "indicator--1928c422-b47f-436d-950c-5457dde3eb04", "indicator--2a3f7c0a-3097-4ecd-bf55-d144c1e82bf8", "indicator--e73c85e2-5bfe-4eba-99ac-70895b51a827", "indicator--f9515dd4-46f0-4d38-8e13-472242bd6227", "indicator--691807d2-f9fd-427e-8592-10e24929d492", "indicator--3667584b-9571-40d8-9905-6a14ce6b2027", "indicator--0feb64b7-3d6a-44a1-a196-98a6fe8e848f", "indicator--268e8795-7780-465e-ab1a-0bfe7ff07a8e", "indicator--fcb30c9e-76d7-40db-b3ab-2d69cb816876", "indicator--a88a952d-acf7-4725-adfb-39a88b89e58a", "indicator--2666a26b-c566-4a1c-b8e7-041ccf0ecde1", "indicator--27eceae5-63b7-4d1c-977d-d4f92f64ab6e", "indicator--558ac129-a3d7-4023-a921-3ed2ef224d5d", "indicator--7ec210e0-36ca-4fa3-bd4d-cd40f5fc70e6", "indicator--7b2cd8de-14eb-40dc-a1cc-91ee8ccdde12", "indicator--08dd7b81-89c5-4f0a-b566-66b7962b2431", "indicator--b65b83c6-8952-43cf-80bd-d4131cd51d86", "indicator--973da2d7-8d3e-49d9-afd6-e3bdc70575a3", "indicator--a768adbc-7ff7-4783-ae4e-24c52197a491", "indicator--4b5fe529-fc6a-497c-a7a3-e377fb82cf4c", "indicator--67e158f6-9396-4a22-a724-8048baac000d", "indicator--2fd4c055-f2c1-4618-852c-770633150179", "indicator--c1ab0e87-52c5-4245-b886-9fedd1050bf9", "indicator--2f1fa2d5-a005-4c1d-a415-47b5f203fa78", "indicator--abc0fe6f-a05f-4e87-b46c-e913dd8564b1", "indicator--bd7a6cc6-5a80-4e3e-8728-7380514b5143", "indicator--bad1945d-8fb5-4363-bf4d-f68d8b8fb9eb", "indicator--852342a5-17b2-481c-b04a-763443e79492", "indicator--0a15eacb-2711-43db-9db8-f5f0302feb7c", "indicator--a9001f41-be5b-4218-b9f3-991119cd2372", "indicator--b90edf27-a314-4b6c-a8e7-1e9d82c83a33", "indicator--c850e76e-89be-48e5-a58d-cb2c49ae43bc", "indicator--82a32724-016c-44a7-a0fb-e1d493fdf88e", "indicator--454d5bbc-8588-43d1-9075-8d6357376033", "indicator--34e206de-a3d3-4210-863e-d5982c770099", "indicator--6c8f6c90-2b48-4ea8-bf3f-c8b266cff19a", "indicator--d00f5af4-b716-4f1a-bf71-b163eeb04a6d", "indicator--6ba8d9ec-83a8-4380-851d-f9529b156718", "indicator--8cbe99ad-bcf6-415f-bd51-673ea5fd5089", "indicator--36af273f-7aad-438c-a1f9-8f7e6cd739f4", "indicator--3a1bebdd-e51a-4a0f-8b66-d3cb56102fa2", "indicator--63202938-3748-428b-8974-ecef2af678db", "indicator--462007d6-236e-4a9c-88bb-879101952a4c", "indicator--8a8cbaf5-0c47-47d4-b6cc-8e066111e22d", "indicator--c3da216f-6a04-4a6a-9bab-c44cbdcdf69f", "indicator--c4bc5ce5-01c4-4d48-bf2a-3f68612b6868", "indicator--18fc7160-73e6-4f5f-a8e1-ddd7302b497e", "indicator--2efcfa17-4005-42e4-b92f-8b0fe4599e74", "indicator--29962db6-3c80-431f-9441-55ecdfd0c4c0", "indicator--689023ce-a9ca-4bd7-9c14-054a609c97c8", "indicator--c6195ca8-eb3c-465b-92b8-7b193627f4bd", "indicator--6c8c363a-4d18-4c41-a1c3-057f0a9b9d10", "indicator--6af0a730-3b2a-4074-8803-1c9676982473", "indicator--02d5ef24-75d4-4124-8a86-c5bfec371b74", "indicator--9888c476-2b4d-45fc-b214-694bed039d24", "indicator--6112ea60-8863-4174-a352-861ee9bf0652", "indicator--4a0410a3-47c9-493c-8030-989ab5032bea", "indicator--5fe1a04d-6ae4-40d2-b78d-58137c6538cb", "indicator--1d490727-0ad9-4bdc-9b56-b9abcfa249fc", "indicator--c6e879f5-783b-4ce7-831f-753a2568de9d", "indicator--2abb0b27-91e3-4bf6-bbf6-ac058ae7f5a0", "indicator--e6ff5556-e780-4d42-af5d-9ff7f8525e97", "indicator--4242837d-fc99-4b36-b7ed-8f81e48f2a87", "indicator--048c56d1-150d-4a2f-8379-0abb471974aa", "indicator--66d09c83-b511-4990-8157-a00373e4e650", "indicator--b5fe2003-5024-4978-82b6-5c2c0c23e0e5", "indicator--dfb4baf6-9ffb-4985-8415-26cbfac76f70", "indicator--9988b6b5-d2a0-494a-a6d3-500a7f3ec1ec", "indicator--3a3846a0-d9e5-473c-b712-a20fcec12e24", "indicator--8b0ad8f3-08b5-46d3-819e-65d3c44f30ff", "indicator--866817d1-41bd-45ab-b6ce-65af3b3a2af7", "indicator--2841b628-1ba8-4ab4-9a42-339b51bcb4cf", "indicator--967b21df-ee70-468b-be07-e37d9d24d61d", "indicator--c1a9b190-a90e-4e90-bd5e-1b2da00cf776", "indicator--cfad2f01-72c4-44b1-b281-ed16c716af6b", "indicator--4e29d090-7fd2-4d20-a528-02215af19f80", "indicator--1f798a2f-8463-4c6c-958d-909c9d1dcfc8", "indicator--dd04d5a5-a84d-44cc-9cc8-322f29aac576", "indicator--b25e44cb-7803-4c0f-a302-37ad62800853", "indicator--f7e66e40-e76a-4bb8-8763-6139c10185ec", "indicator--188363f0-054b-421c-a50d-e0d2618d6f2c", "indicator--c2f73096-396d-4b60-bbfd-eaf9bc581e7e", "indicator--19428d73-29b9-4d5b-8600-891ff124c25e", "indicator--94c5caea-cf51-4685-911e-8d9c7413cb84", "indicator--7106a259-6694-4d32-930d-140136729059", "indicator--28d56488-5a05-4eba-9667-ee05174e5604", "indicator--0110d901-f8b8-4942-ba1c-47f4d012fa93", "indicator--d2e93e39-3c7b-4ba2-9520-c20f3f474a21", "indicator--c0674036-7209-41bb-8466-67480d8f185b", "indicator--c1dd49ca-d441-4fc2-9ab7-347a58d04a26", "indicator--f0ce1c05-6dcb-4db4-8485-85a5e2eed94f", "indicator--4a5872c8-3ef8-4997-bc9e-d66c2574a458", "indicator--526ca8c9-13db-4c4e-bbc1-12e93b058e69", "indicator--e61ec0b7-41d7-4e60-9c7f-95b24958cee0", "indicator--4fafaf12-52a2-435d-a610-c1e6d39a715f", "indicator--99e264ac-b584-4a34-b1d2-7cbbc05b712f", "indicator--9a422c23-3bbe-4e90-b705-ef13d90a167b", "indicator--4be8fd9e-aedc-4d29-acbd-7590aab423c5", "indicator--79bbf277-d92b-42c8-b1ab-31c110208fd4", "indicator--b50e41bc-c651-418f-a213-2dbd0e449c96", "indicator--fe4e54e0-eca0-4aad-a7c3-4348b743832b", "indicator--14e8ea73-e6a2-44e4-bca4-4ff94c111a69", "indicator--7ca412f6-6a91-4a0b-b495-09ddb70f2d40", "indicator--834ca156-7b94-4653-ab83-e79d67febd29", "indicator--d853d5ac-0dfd-4d85-bc87-7b8c2d9eb692", "indicator--c5a4158b-88fc-48a0-bb75-d7cd790092ee", "indicator--4f701ecb-0e0f-405b-8965-67efd27242c6", "indicator--6d1a13d3-034c-446d-83c2-391802a85c10", "indicator--24901954-0fc8-4725-acc6-a63113474b53", "indicator--c590a758-143a-4842-aaca-d2446c34e12e", "indicator--6b360cd3-9bae-462a-85ca-6da53711731a", "indicator--f086e7fe-c8f5-4254-9c28-d962dfa3e46d", "indicator--630d971c-86c0-4195-b67e-c740d0f6d38d", "indicator--3acc1375-afdb-4ee5-be3c-7fb5337eda86", "indicator--c2299cac-1cec-46b2-9868-2b99e6b7747d", "indicator--2cb0b2fe-32b0-4023-b94d-c2d1b479c9d9", "indicator--7b8a911e-1ba9-4d53-a3b2-051bec776532", "indicator--345a3214-5b17-4ad8-812b-31444c4bc866", "indicator--1d2e3e65-e7ad-43c7-a0da-8a03ea31e5d5", "indicator--cee30743-3e3d-4ec9-b233-5f85d0d602cd", "indicator--80a74e74-ec91-42ce-aaf3-3774d221e41e", "indicator--91024ffe-d402-4e0f-affa-f6dadafaaeb9", "indicator--99a83a89-8ba7-4f89-b9a6-4794bdd782f6", "indicator--12905081-9f24-4a32-bd2b-ca2b08225d2b", "indicator--b5a31c78-1e9c-4342-9a0e-a4e55fe69da2", "indicator--36bcf87a-999a-4571-afae-cc23274522df", "indicator--3bf38f1e-ff7d-47e6-b650-9cce149353cf", "indicator--ab44daa9-c2b9-4075-960b-b291d6b95c4f", "indicator--d26da2f4-e5f6-4880-9b50-851d6f256c71", "indicator--410744fe-64bb-40f4-8601-af49ac2753ae", "indicator--3cea8733-00c0-48ac-b237-c9de37df7359", "indicator--ad2f806d-ec25-4998-a4d7-35478129b86c", "indicator--39b20fc1-ec63-4aac-88a4-d70f4616ec25", "indicator--4756aa51-1c82-4653-9b3c-f0148b7c21ee", "indicator--a1514043-8f59-4895-9673-efd2ba6215cf", "indicator--7dce547c-f58e-4cea-9508-4bedf3ab91ee", "indicator--eff79c44-9cc7-426c-a70a-57e637c8e3b2", "indicator--1d07501d-e60a-4f44-ba9f-89012fbad540", "indicator--60f2792c-45d5-4891-be4b-c815646bf0ac", "indicator--453930a6-2baa-4db9-a939-2c59b9947430", "indicator--e9ed0321-96b7-400c-a228-2048bfc3e00e", "indicator--ee3d05c0-16dc-477d-bb50-39dcccb3dffa", "indicator--ca48e94d-9641-4175-87c0-758d16bc2107", "indicator--7b64e2b0-d6f8-49ff-9466-0e23a3a1f301", "indicator--a2646c87-e89f-408d-9d45-0ef0280c7f8b", "indicator--0db57e5e-15eb-410d-b453-7de32cfadc1c", "indicator--eb2a26b8-5f40-45ce-a8d3-acfb9489c1a8", "indicator--1f14c326-c7c1-40ce-8f80-ebd28695df1a", "indicator--cc4e035e-61c9-428c-9d30-50d1ad6b0f25", "indicator--fecd3113-6f2d-443c-afcf-6ebcd81ae915", "indicator--ed03a8f9-8494-4302-b328-eac9a7fc0e87", "indicator--0463dbb9-9954-4a0c-a20f-4a6514238609", "indicator--e34af8a4-c421-4b05-a093-13b0be24faa2", "indicator--7ae13fde-8478-407d-a01e-55516fec79ba", "indicator--5d4c5c13-ec9f-4fea-9d3b-dda3168874d5", "indicator--5b46d61c-3e4c-462e-b0aa-b869226ebd3c", "indicator--11a6c73b-95ad-4872-afdf-211a23d85967", "indicator--7c7667b1-304f-4187-a54e-aafe2397cdf5", "indicator--20ec7528-4dc5-48ff-9be8-b47c27de065c", "indicator--2e6c9b61-423a-4c13-ad7f-bb2b9f634f1a", "indicator--a5e0b785-84ac-40ce-b3bd-4e532d5e3615", "indicator--d2ecd0ad-b823-4776-bd43-f90c782e595b", "indicator--a6e0301f-f506-4ba2-bd5e-0aedbcef39bd", "indicator--f0898a8a-78c1-437b-9dfb-60a6cdaceead", "indicator--a32a3a65-52a1-418e-ab69-c721890efc6c", "indicator--0ec5629d-d3ca-4f66-881a-6ada17e1cc47", "indicator--436a9758-0a37-473d-a277-f03aa0e8fe44", "indicator--b2e14aa2-0d3b-4c7b-86ef-90fb00f3f770", "indicator--318207e2-a6f6-4f87-98f0-2b91076bb7fc", "indicator--f38e8b05-a18c-4587-ba7a-83b40c9d15fe", "indicator--603401c5-8e7b-4e0f-848f-ae773da27675", "indicator--d669c2ba-a056-4964-aed2-5f1676e7d1c3", "indicator--23072715-e8b4-462e-b3f7-a193f9b7996c", "indicator--d89fc5d1-0ccc-4d96-87ad-ef6fc79763be", "indicator--3cef61fe-f250-4464-81c7-53b94a516c19", "indicator--44fc8dcd-ad46-4886-8dcb-d1a0f79c02b2", "indicator--e36ae155-447a-44bf-ae83-f08c9ff2c1f3", "indicator--1c1be9b7-8211-4fa8-9214-0ea6d68a6f83", "indicator--a5efc7ed-e4cf-46e5-aa7d-7d71bc4c227f", "indicator--0ea67889-5086-4efd-9d57-ded4e6687b87", "indicator--31c3f269-d4c4-45b3-acb8-f54750beae4e", "indicator--2f7c6682-2d9c-47fe-b08f-7c91726e97e1", "indicator--9ede6223-dec8-46e3-bdb8-d248a479573e", "indicator--1774947a-fe34-4e91-b902-4a62c7763827", "indicator--66b18800-b90f-4cba-a012-09b240ddf60f", "indicator--230ff03f-8f95-4e58-82af-b6fdab051a20", "indicator--2689e17b-7525-41ef-8ef1-98879ed8a246", "indicator--6980cd5c-9cda-4c47-9499-a173db4bc132", "indicator--3d0adcaa-a596-4ecd-9bd4-d25e98a1e04d", "indicator--760e2cb3-de8d-4f51-9a49-dde0a51bdc5c", "indicator--6ecd50cb-e549-4913-aab8-3b1ef4b7a8d2", "indicator--29096b77-bdd1-448e-902d-72a518e69bef", "indicator--2fca7509-d447-4035-952c-a1105cb24a41", "indicator--db53b6d6-1ec3-4672-9ed7-282f71356a44", "indicator--e00bf5a3-039e-4105-9be4-7766739dbec7", "indicator--9365bbe2-529a-4284-8409-aec0c0f4cd25", "indicator--fe899d44-bdd9-4718-b297-46caa80b1736", "indicator--5f1207f0-4a70-4f78-9611-a56c543341e7", "indicator--2e1bfce9-a300-46b3-9e77-7b9da6a84d5a", "indicator--bcaa7adc-9782-4af8-b3c8-0f0742a79349", "indicator--d3f4b956-5593-4ac6-9baf-7b9813dea310", "indicator--f986c9bd-41cd-4beb-8470-1029c4344934", "indicator--fa6e9ef6-a079-4abf-ab1f-8923fd2d2dc8", "indicator--d9910e66-db69-42d8-be3a-991119f1d1f8", "indicator--3430565d-8790-45af-ac27-6cdf3056be32", "indicator--85b8bd32-3ddd-4198-947a-74bf23706bd4", "indicator--d266e0a4-8876-44e3-a8de-65aed5e16bd7", "indicator--e368a132-716f-4511-b9d3-af9cb27461c1", "indicator--ee9af5ff-f86a-48c9-9b9d-4e95c040e903", "indicator--d23a6f20-0339-4518-94f3-2de93366c4cf", "indicator--9f2fcb76-c4c0-46be-8887-c099c7894eb1", "indicator--9210fe88-3e10-4585-8673-653e7c8945bb", "indicator--e4cc2b32-bd2a-478a-8bda-d975fe52edbd", "indicator--ddc753f3-421f-4c5d-ba0c-7e946ff03449", "indicator--0725bbaf-a8ba-4d4f-8100-507416f025d7", "indicator--9e2d58c2-e535-43bb-b5f1-1f35f441dfec", "indicator--c3b71485-1eaa-4c26-ac91-04e6a2359ffd", "indicator--55fd1a39-d923-470f-ae87-4a1754e88586", "indicator--81a5ba3b-a7c6-4bb4-889b-4dbb3cb65fd0", "indicator--da971dea-c64a-4ce4-9d32-dea3c97ca3ea", "indicator--9a317e5c-028d-47b6-bec0-4ef725e6bae5", "indicator--0a1388d9-35b5-45a2-95cc-d31d01b5f2dc", "indicator--fba6ece6-1785-4427-927e-57460d52914f", "indicator--26956deb-09c3-41af-815a-2cf623b289e8", "indicator--dc976e21-07b9-4b91-a0e3-171890928577", "indicator--5cba6ad1-e8bc-4362-b687-3e601546e10b", "indicator--fbe7a003-1393-411a-84cc-ccde71e809f9", "indicator--b7319ad1-eccb-400e-9e72-7b97c86d5548", "indicator--176ad622-c526-4f9a-98da-0c48b030ab69", "indicator--65cb6a7f-924c-4a73-8d07-f499aaa2fcde", "indicator--3950f43e-dad5-4100-85e4-e51510dd3198", "indicator--8c299d3c-c361-4278-bf0b-da618f57cd00", "indicator--ca121c10-d53b-4fde-a7f5-e1d5d059555b", "indicator--64b4c739-6be7-4572-8a85-e1c6a4ba72da", "indicator--4689aeb6-29b9-4312-ab76-ecab2fbc9edc", "indicator--5b4b7761-1b40-4d58-b8aa-908b93878b36", "indicator--6ad59367-d702-4da4-bbe8-c1f332517ff8", "indicator--57538976-dc2b-4fc5-9fec-5a4abdde07ac", "indicator--7d41d570-1cff-449a-8582-3ea4f618dd60", "indicator--054d2e91-7b17-49e6-bb95-30cca4775a41", "indicator--d4750a66-7a98-4d01-a66a-9704775571c7", "indicator--bb63a24c-93a5-4d3f-9cdb-5cd11f972199", "indicator--fa6bbc85-a9d5-4f3b-acdb-ed1a98571eb2", "indicator--f2a17f73-83ef-4c67-bec9-f62a6d8477c0", "indicator--fcc2eaea-37e1-465a-ad67-428e0d8595dd", "indicator--5270669a-060b-4ade-a8c9-536558a1a385", "indicator--add0906a-2fd0-4a80-ad12-d45a5caad8ae", "indicator--732ec6e4-ea3f-43a7-9172-7cf4e873d1f4", "indicator--79c7ab20-4baf-47c8-880e-770419f5c559", "indicator--439a88ef-209c-407c-aa84-7b97ca8563e6", "indicator--453f8d00-7ff8-4e6b-b5dd-f6a726337148", "indicator--949cdf06-8a3d-496e-9cda-5e5986248489", "indicator--6732624d-8952-4403-9b3f-ace0f78fc605", "indicator--5c45e77d-d0d0-46e5-aae3-506e439dab74", "indicator--1a6ecfc7-23bc-492a-8768-7da9d3b7b2dc", "indicator--3cc4b9f6-12ee-4717-8b3d-90986169fa7c", "indicator--fe19d723-6661-4913-ba8d-53394f9e9c18", "indicator--6ed82a06-eb1c-4f21-9429-f490bdd5690d", "indicator--a2b817c6-de53-4b15-b490-7f52a17bc6b7", "indicator--8926173d-ab29-4d2b-b5d9-7744bd1cfe1f", "indicator--e419c33b-b0f7-431c-836e-1184067d31c7", "indicator--f5aa12ad-74a5-4f55-980f-137b01e08546", "indicator--46799beb-6a90-4d11-8775-837f7eba0c1e", "indicator--3cb9c188-31f4-4bc6-bb8b-c865e1bd3531", "indicator--77fde254-abf3-4b7a-86f7-d92c3fb8345a", "indicator--29e3696a-0416-4acb-b619-749fe4a847a9", "indicator--9a720396-e072-4a5e-9756-9d146ee1ae82", "indicator--6de08b46-5cf0-442f-b0d9-0237fdbd6bf7", "indicator--e33edad0-2b92-44b4-bf8e-c9a9a7405238", "indicator--54763d7e-1bdb-4f9c-8246-efcaba14ccf7", "indicator--fad9d3d9-1763-4500-83f2-6428b0255da4", "indicator--70546a1f-d9b5-488b-b612-8490a3dc09f5", "indicator--b0acba23-7a1d-4d5a-8da0-02cea77bf1cd", "indicator--76e325d3-4603-44f5-a174-116cdc82c23e", "indicator--66c1faa3-5d8f-4f24-9f65-173109295bd3", "indicator--d6b09d01-cc53-44e4-8351-74f5f5dbebfc", "indicator--5a45a267-734f-4b6a-a88c-e0ed4d1a99e7", "indicator--bf2c30a7-09b7-4205-a058-244e561eeefa", "indicator--0a7edc98-e073-493b-9caa-4ebb0a142f35", "indicator--b3213199-3562-4cba-8902-d0a8131b8f17", "indicator--4b6a2187-b70c-457a-a217-836ec595cc7b", "indicator--bd42b020-d020-423f-ae3e-42eb0332058b", "indicator--285151a4-5871-491e-9f5e-55b8144380c8", "indicator--99b6fb2f-21ee-49f9-9bda-76dd13f56288", "indicator--1aa4f95f-95a9-4a5f-be16-759486c1c997", "indicator--c5ed0a1c-dfc8-4d6f-96e5-14301e2ee0db", "indicator--d08424a2-6764-4009-8c6e-3ceb6e0a096d", "indicator--ff88ea95-04f9-453c-a98f-e018ad8381c4", "indicator--3fd0714a-02be-4b8a-bb1f-e6b1d9dcf8b4", "indicator--ec32a1af-7158-489e-99f1-6b34d4ee84e8", "indicator--7efa675c-3bcd-4069-8ce5-c0accf8f3682", "indicator--cb3483cd-0324-4919-a3de-a2ce5d8fcea5", "indicator--451cc433-248f-4966-a97f-9285dd9226c3", "indicator--2455624c-cb17-48b0-a402-d0f52918184d", "indicator--2f926554-5c04-47d7-a86c-415a671c6b0e", "indicator--4aa6e60b-e2cc-4cdf-893e-a9d8a3ac7405", "indicator--9162cf3b-30a4-434f-b31f-e67fb8dc89ec", "indicator--d29c738d-186a-47d2-b030-da38a176d4a3", "indicator--aa824aab-19dd-446f-a90f-f26713a5384f", "indicator--96cb6dfe-ffd7-42fb-99b9-169aea709ed9", "indicator--6b453e0b-29f7-46e9-ad9b-45a8dafec9a9", "indicator--e35de30e-4a9a-4d91-a92b-36f55e031d31", "indicator--d543074f-55b5-496d-86c9-10be405a887e", "indicator--72d910d7-e49d-4b13-979c-b15b6217b9a5", "indicator--5d745ebb-0209-4e30-8269-5ccbb53e4ea1", "indicator--b7d0374f-9646-40b0-adff-4a243df7b4d0", "indicator--1d437fc1-1243-489b-8a35-4045e50a6b61", "indicator--6131d024-5fcf-483f-b648-18364c219fe3", "indicator--f30192ef-95f6-486a-8f9d-4de0998e4ab6", "indicator--0a2824d9-7329-4898-8df1-25c5ba31d9fe", "indicator--d35d61cd-2042-4b23-b909-70839dad22ff", "indicator--d15eae7e-35ff-41c5-bd03-2a1d63f71181", "indicator--7b728eb0-fe2e-4d28-949a-d3c28f6c4cfe", "indicator--95615e6b-abbe-4f34-be3c-92cda31e1e0f", "indicator--a0f46067-d8f4-4c3d-b6cd-e070c0a8dfc0", "indicator--35b92799-81e7-45e0-88cd-db255275bb21", "indicator--e671d128-dcb9-4374-a604-3f3abcd0c83d", "indicator--2a4280e0-580b-4352-ac1d-22c95574aa4b", "indicator--bce8d08e-5f78-4b15-8194-e8d3646a240f", "indicator--d1d490a0-51d4-4a66-b16b-82e595b5b77b", "indicator--97018862-2685-42e6-bba8-71984500e41f", "indicator--0d5f1e31-4ba8-4a4d-9f0c-4512f5725807", "indicator--0eadb4e5-908a-4253-974d-a101ed9f183c", "indicator--e07a7b97-f010-421d-b027-6aa3afe048c7", "indicator--4740accd-41c8-4381-953c-15667552a35d", "indicator--63cbdd0f-2b3d-4b19-b38a-fc4b6a0c4606", "indicator--d7e4b714-bfb4-4102-84ab-eabcf9bc9d43", "indicator--50c1d976-5c18-47bc-b3f2-88626c2247aa", "indicator--20c7ec7c-3a81-4071-9134-0637bc87ee5a", "indicator--e79f3e33-6aef-4481-82b0-5fe84e62b109", "indicator--c5ab9a55-e38e-4a8d-9e68-39deb691ca1e", "indicator--b934481e-bc08-475d-adfe-a302872fe63b", "indicator--2839683d-9931-4079-9f1a-2417740c1bba", "indicator--004c43f8-366d-4f2c-a588-494bb181d229", "indicator--d57c9529-9a38-4115-8f8c-31113bcd6ece", "indicator--77841757-d09d-45f0-b808-2581c7f8ac12", "indicator--d1501c8d-26cc-4dcb-a992-68cd53c973ab", "indicator--cb9ff2b3-16d9-4f3c-b57b-b5aa6f93d217", "indicator--cb49e109-1251-4cd5-9f33-4dd6483ae2bb", "indicator--0dac2f0c-bab8-4bbd-ab4a-b8ddf631a563", "indicator--084cd015-01aa-4992-9736-1a1e1d585000", "indicator--26582c14-7325-4b41-82d4-03b3e9690ad7", "indicator--5d7a2bf8-fb9c-4155-8b75-119ad6b21df3", "indicator--52490fe5-45ff-4b63-b873-caed8b11dcf9", "indicator--5d363676-fd75-45d3-af4c-b1e13ac7314f", "indicator--9ad1c688-3cbb-4282-9cc2-9dbc3023a4a9", "indicator--821f0ca2-4c40-426b-b801-bdc383d662ff", "indicator--8e6ee0de-38e2-4fd8-8be7-3405078892bf", "indicator--5bd867b3-fb3c-444f-b4e3-2c1d7dfc3349", "indicator--3871c0b3-3535-441b-8482-7ccbbac6e418", "indicator--8fc955cd-483d-4ac6-98a7-87d5b3f7a4aa", "indicator--2eb6d8b2-6986-40e1-8e97-a62331708f94", "indicator--dc2a207d-64aa-4e5b-9187-ec604a209a67", "indicator--f96f677c-a558-49bb-bc0c-c9e0863ca3d6", "indicator--8530b529-4069-4c95-a75e-c4f9d2292ac8", "indicator--b95f471b-5ea1-4518-96dd-cb57a57ff888", "indicator--7ad1c21e-5168-49db-be15-a37b54fbd5f9", "indicator--aa7b441b-1ef9-4363-99b5-5a6412ea6621", "indicator--c388127f-0c7e-42e7-beb4-11ec99da8b35", "indicator--09233e02-6f89-479c-96c5-933e237fb7ec", "indicator--ecc8075c-41be-4755-b4cb-2ac311f27c41", "indicator--d6ec41df-a13f-4c77-8e63-75c40f9397b7", "indicator--ece26b2f-a62b-45f9-88d3-10f4b6fa9189", "indicator--f96eca21-ac5d-46c2-bd0c-026fab0f0580", "indicator--67ed72f1-b5a9-4082-85da-e8f1d62f1c36", "indicator--8786bc10-31f4-432b-b681-37a34c2024fa", "indicator--09227865-a37c-424c-b358-2956683f005f", "indicator--6e37649a-b79b-413b-8225-f055c1b704bf", "indicator--4a1c9ab5-173a-4530-ad1c-0b127391bbff", "indicator--6fba918b-64e8-47e3-81cb-a77649c512d6", "indicator--61d11705-03b4-4303-8870-e5d380af5698", "indicator--01bc8836-4bfd-44d6-901e-ab7b35de10ee", "indicator--7a59f204-c4ae-4d69-9a5b-014e16466114", "indicator--37ed9a02-ead9-40d6-aa25-ca144f12e3be", "indicator--cda0aa53-5fe2-4ad4-819e-ef5eef662495", "indicator--ffcf029d-8d44-4322-a7c3-c241380b8393", "indicator--d6424abc-880a-4ff6-b774-710cc447e8eb", "indicator--1d4d8ee3-5809-4776-a50c-69ab39ce477b", "indicator--534fc73a-7fcc-47c2-b5c4-3ef20c61ab90", "indicator--8b7ebe6b-edb6-4394-b871-43b0050c1a4b", "indicator--a154b393-c45f-43c4-b113-572f22587f21", "indicator--360bfd62-0b72-48df-940b-8d9c84dfc491", "indicator--67ea35c3-cba3-4973-a5f9-eedc2a95615e", "indicator--34362a69-2946-403a-bec4-c6820de6f550", "indicator--9812d9ad-af12-4b33-b80d-5958e67a9a6a", "indicator--97a22469-f3ae-464b-a5d5-47670754ddc6", "indicator--ec357679-88b0-411e-a274-834387ca2589", "indicator--50a160ab-8a28-4b03-a59a-ca0577a97bed", "indicator--728ae162-0b3c-406c-a545-d5fe5005ff2f", "indicator--7e9fcd2e-5399-4cda-9ccd-53d36c148f01", "indicator--5ae7cb50-a3ff-4868-920e-204a0db6d80f", "indicator--b9d87130-9cf7-4c6c-9cbc-0e50019e1937", "indicator--0c939bde-bb67-43c5-8365-f8ce7f3259a0", "indicator--f2ef2cdb-011f-4d28-a06c-ecd110ff5a35", "indicator--dcd8e906-7367-43c2-b9fa-7a29f74fac59", "indicator--4f9274ca-18f2-4a0e-a1e2-34861a52d567", "indicator--edfb0928-ac81-4385-b026-b50be5949ccb", "indicator--ce85f377-c898-4115-b558-3846e7e125bf", "indicator--c11b6e79-adac-48d8-aaba-be3d3d5f2485", "indicator--57188692-3689-4386-8d9b-6b33e71012a7", "indicator--d8a9a2b8-0363-4f38-b1d5-5b3dae19104f", "indicator--5dbcb99b-4564-4ba1-abe4-8c0ea82b9665", "indicator--63fb7b21-b9c4-4ec3-98fe-c864f580b444", "indicator--11af603a-89f9-472e-9071-5dc2c59e452b", "indicator--088be65b-446b-4986-b873-70fd553a65ba", "indicator--763b4676-8863-43fd-9903-0c90cb653b8b", "indicator--0fd4f685-ec7f-4f19-9a54-a6a6b71b89da", "indicator--f3a710ff-63a7-49d8-a7c8-3bc65753c663", "indicator--2ae962b8-a413-468f-8e64-fbdc59e2586a", "indicator--b00bde0d-b4e1-4404-9800-d5ea08d982ab", "indicator--cdc23e35-5f2a-47b0-b888-fc196e5447d0", "indicator--c879ad90-d852-480b-a9d1-f01013e57e41", "indicator--b74be215-0d65-42ea-b304-6e8a6fd71c83", "indicator--66d678f2-9d59-4b02-ac9d-d611130529f7", "indicator--057e48d5-ee1b-4340-8b60-68540c7bbe51", "indicator--c6095e9b-befe-401b-99d3-c742af3d26d3", "indicator--e1e3021c-7ddf-4679-90b0-0a8125d1e65b", "indicator--790273a3-8122-46fc-a620-8b9a748b6d75", "indicator--6ccaacc1-1d12-4394-b087-dc933bc46f15", "indicator--9fd4b9ec-6040-47cf-b342-2fd998f39012", "indicator--73f35a7b-b9ac-4ca7-b3b1-c447fd67d25b", "indicator--522e427c-7fe3-4c61-ac32-6890e7f275e7", "indicator--8c55d8d4-479c-4ab3-bded-ae2ec7069b9d", "indicator--6c8312f4-ed55-40f2-83c0-a931ada64ec8", "indicator--a64649ed-c948-4da4-b1f3-905b557aaacf", "indicator--ede32d3a-e03e-42d4-b899-feb81b3fd3e4", "indicator--c4172a94-d411-4b3c-b0bf-0ca6eff9b382", "indicator--de15f787-056d-43a5-9665-5444e883a83e", "indicator--8638fa3f-535f-493b-bcb1-c86de91acfac", "indicator--201dd062-c1fa-4de4-9619-493c4ee6a10b", "indicator--bb5c2902-9a8d-42f7-b51c-b6a2addd66b4", "indicator--f9be7a28-dd0d-41b0-a7ca-83e8befe7237", "indicator--85e933d6-2ae4-4fe4-9c48-018c6aef1eb2", "indicator--08421418-7534-44be-bc22-f892ac4c5f16", "indicator--878de015-77f0-48c7-b0f9-16ffdc1aa819", "indicator--5efce860-0078-42e4-9143-ffa34d955ac0", "indicator--31b4a322-8558-438d-ae10-672ae0f99598", "indicator--70164b34-04b6-43f0-86d7-92fe8eced68c", "indicator--83249902-a97b-4cb9-87bb-8130ecf73678", "indicator--327b12f2-7636-42a2-a399-1022d47b5f04", "indicator--ca7aebfc-94ac-4aa7-ab00-4766b9ab34dd", "indicator--cf875feb-8def-4768-9c3c-712cab843620", "indicator--377d20b0-00d4-4711-b01e-6e2b4a3f8e60", "indicator--c8a3d906-5668-4bad-b7b7-b265e622a606", "indicator--a5288ee4-e0e7-4ae5-bbda-dd9b0b213d20", "indicator--cb944c89-4a71-4cb9-9c1a-0948d5d0f9ca", "indicator--1d96224d-6522-4629-8478-74690a61b43f", "indicator--5718b67f-fc82-4288-81eb-c10163c9aae1", "indicator--6dce4eba-7883-497f-a442-294d32097c4d", "indicator--07e4e261-69db-40d0-92d7-fb7950975f09", "indicator--75af7f9a-390a-4a90-bdd4-02c6e631c261", "indicator--b4383d82-2c3f-4517-9ef2-a485a16fff68", "indicator--87253396-3e46-4abb-8d68-a1fc5ecc5785", "indicator--8bccb425-c2ff-4637-9ba7-b450fd7fff50", "indicator--6388a938-4cac-4090-a6e1-08f5586831f4", "indicator--d7a8b3d6-41e7-400a-a3fa-5a0a61e2b30e", "indicator--d7e835b0-ecdb-4995-ba03-a21255915daa", "indicator--413b7ac5-acfd-41ab-9ce8-b611bc978915", "indicator--7ff15787-1587-4032-bb44-c3337ac94a2d", "indicator--bf2d75c2-ea85-4b13-898c-a0a6cef33486", "indicator--bac58970-f883-4bbd-abca-fd0ac5befd05", "indicator--ff21023e-3c7f-419d-baae-4348f18e9592", "indicator--df335226-8277-4e26-a6a1-b792d1fffe93", "indicator--532e39a7-b0fd-404c-818c-e5f3fa0169fa", "indicator--8ed78805-8d7d-4ea5-aac1-5a62919902fa", "indicator--f4bb82d9-26a8-4402-b258-eaa00e05a514", "indicator--e62fdae1-363a-4371-8d92-2e1f03a6206a", "indicator--0db68f27-2136-439b-9922-15419addc8d5", "indicator--1cd22a1f-6106-4dce-a70c-32cd5b25cd16", "indicator--abf69961-5789-4581-baea-276e3be98861", "indicator--ff4d9299-c8ce-4fd4-aae8-9a95aaf22bb7", "indicator--eb82f280-5246-4e1f-b4ce-bd5eab771c27", "indicator--ef86c2e9-81e4-435a-8d09-60d40700a176", "indicator--842de0a6-fe58-4c82-b83c-a25b39115c65", "indicator--34d1c811-fa78-445b-8618-0333a36798bd", "indicator--562123fd-a0c8-44b8-acc4-e1a6ddad989d", "indicator--e9c624e5-9cef-4534-8709-e19372296c5d", "indicator--6f71dea5-c811-42a4-a9e4-1c9cee9d9746", "indicator--e5b96522-417f-43a3-9ed7-e21b61eb69a3", "indicator--34d8db85-0f49-4ac2-b4c9-3a8fef490ad2", "indicator--4cb558c9-b77e-491c-9d06-f44c8226a676", "indicator--e8321aff-8709-415e-ad21-a483635f6639", "indicator--76093bf2-5a39-4ee3-a6bd-37c38726efe0", "indicator--28692eed-e2da-42a4-ad92-af736c7764f9", "indicator--b71fd704-ad7e-4802-8755-4a61c5f357c9", "indicator--f4895eb2-b72a-4687-83fb-9c1802322cf6", "indicator--e6594e46-db59-40f8-8792-be449d8dd85c", "indicator--c3b32ac2-d692-4f87-85ac-7cb87faf3953", "indicator--169f7a8a-0551-4022-9a42-9851c42d2d47", "indicator--f03fc59b-7be2-4255-92c7-6fae8cad292e", "indicator--a7c687e3-2da2-4db9-a42a-9c28ce529ec8", "indicator--c482c644-a97a-4d34-87a2-6d094c1735e2", "indicator--5807ab4a-a6a5-46a6-836f-2a0a65ff0747", "indicator--39dfd354-e3e7-460e-bee1-0e1da0ad4997", "indicator--8d900a3f-7afd-40fb-83eb-212b731b3abc", "indicator--9256f91f-c387-4009-8cee-70a7f1fd4f3b", "indicator--7d66cd61-1811-4e7c-81ab-da0b347836fe", "indicator--f3f9759f-cad6-41c6-ab47-6a54e3eb75c6", "indicator--b1d15e4f-2513-431d-92d2-0305ed9f91c4", "indicator--3be1391f-f303-4fa6-b400-b5186101f590", "indicator--b7e7d570-d37e-46d8-b356-57a59f922f2e", "indicator--a3d8e846-a6e8-44f3-953f-90236427d696", "indicator--bb9687c5-ddbc-4886-b70b-f3313956ba20", "indicator--97cb8173-16bb-4e46-8cfb-d0a6287e9c16", "indicator--978f23ae-668f-42c0-9aa7-09fc438f07f5", "indicator--96cd35e6-aa03-4bbc-bda4-564fddb0e951", "indicator--8ed417ac-f7e4-401b-8f35-98dd1fac2b34", "indicator--d7ef5e61-56df-4d32-b168-f3ffd187e90b", "indicator--2ea4c6ce-8375-4429-8b92-c8b4bad03dbe", "indicator--15c41789-12d7-412b-b79c-956198177a9f", "indicator--54c37706-8aab-4046-9d21-3c212372f933", "indicator--c0d298a9-bff4-4b30-9d88-5a0c253ab4c0", "indicator--f28b1d59-7741-47ec-9df1-e1035909e3c7", "indicator--26326dfb-8745-40ff-9715-65dca3766c95", "indicator--95327dec-c01c-490f-b16f-644daf83a5ed", "indicator--7e570b78-9ab3-4830-a7d0-f729e9e9b15a", "indicator--393cfa21-0d2b-4275-8354-e69bfec056f8", "indicator--27f00be0-69ce-49d6-bbce-1ed40b25afb7", "indicator--61055440-2210-4c14-bd8b-5c40cdfbc8ba", "indicator--21ad05c1-10af-417c-a39a-d9eb12490a2c", "indicator--63ba6afb-bfa9-4776-abe8-200431d82fde", "indicator--772b9c87-2143-40da-9fc8-59447a9cb671", "indicator--6c48eb3d-32f2-4bf1-9c5b-3ddadf474217", "indicator--c6145726-3c7f-45bc-9950-3c6bdf63b718", "indicator--7433901f-5ae1-4c18-bd2a-2cdb2f2d5236", "indicator--f44f4382-7911-426d-b9a6-326e16ff7be7", "indicator--4ac913b4-4042-44ef-9ff8-4e10190428af", "indicator--e1b8a81e-2ad6-4789-9dc2-f288d1bb69d0", "indicator--4e74cd01-c162-4078-bb3c-ccda9fefaed5", "indicator--a1accc24-faa5-49a9-97bf-c59ed7f3fc0b", "indicator--86306dd0-006c-4ce6-ba45-43bd3d292bb9", "indicator--a7dd63b2-ec69-4b6f-a927-73f51e989b0d", "indicator--b85dadb4-54b5-4234-84c2-d28d17e63fea", "indicator--fc2d4d83-b284-41b3-8a72-517f639684fa", "indicator--a4e062bc-c28d-4aab-93a3-38c704630fa2", "indicator--7800c115-e1fa-4188-8d27-7f0f6945f3aa", "indicator--b1ee8a5a-c89d-4c44-90bc-e007009f8434", "indicator--d2f3e5ba-91bc-459f-8b86-b6eef7456dfe", "indicator--57ce5ff0-1a95-45da-bbbf-b1a0600d36eb", "indicator--d4beda5d-9b13-4076-8485-bcab748d7e94", "indicator--894e3853-157d-4879-97f9-209735e2292b", "indicator--a1e111ea-0e67-489f-920d-133a768ac5f8", "indicator--cfd4ab2e-4304-48cd-9cc1-f46b22ea20b2", "indicator--d653fdc3-17cf-4bdd-b4ba-335f421e0c80", "indicator--7c8503d6-2c08-4871-ab9a-bdb30049adf6", "indicator--7921f883-19a9-43c1-ae14-1b0f0761f6e9", "indicator--2c43f95f-03d2-4e28-b6a2-1bb7395f1e25", "indicator--75d0971b-53a7-47db-afb6-3eb1a4e97251", "indicator--5af2278b-acda-4a4d-a14a-ee1721621989", "indicator--94a2af90-b38a-4583-86c0-e3aeb0911de3", "indicator--beff2446-5a06-456f-ab64-d37e81fd5fd5", "indicator--ae06cb70-04fd-45c7-90f9-b7523149059b", "indicator--35b8ab6e-043d-4108-9d72-04ddc86021e6", "indicator--44864cc8-78d4-4d7e-9f03-bd837a397c09", "indicator--1344c2d5-a60f-459d-ba30-ee7231f9fc54", "indicator--56af4783-d397-4302-a8c2-9f2c535d283a", "indicator--8f13f21c-ca8c-4d41-9f00-f64dcbacfba0", "indicator--e6012993-fc02-4179-987f-8fd4155c3975", "indicator--8eef699f-a14a-44bd-94df-41e2df512344", "indicator--411368bb-aafb-4fd3-97fb-ae34aa22aa95", "indicator--aa681de9-869b-4256-814a-caddaff421e2", "indicator--3054f5b0-951f-4fd5-8d0b-87cb3ea72e85", "indicator--4278934a-dd49-4798-92a8-b3530b69e09b", "indicator--7c2a2d4f-fe6d-447f-a4f6-154d04ccf48c", "indicator--3ae69ebb-0568-4fba-9fa1-9edd72c38c15", "indicator--8b474009-ad6e-4290-91a9-ac798624c8de", "indicator--d07d7ab9-99f2-485e-845b-6322cbc83c5e", "indicator--f05e358c-8af0-48b5-8f58-18aaa0b54dea", "indicator--54a11309-2b53-459b-aeb6-2f76a270c6fa", "indicator--9d4a588e-c64c-4bce-b32d-59eec4b96cf8", "indicator--a218a44a-9d56-4be3-8adc-99af5e54e563", "indicator--e4529cbf-441c-443c-a920-2cb2d307d221", "indicator--ef759871-9a41-4943-ac73-1e674d61a2cc", "indicator--610ffa41-d0c6-4437-8622-aadcb3870c09", "indicator--0c399fe5-2643-40f3-90ed-034969ff0b38", "indicator--def354c7-e1c2-41a8-a9f7-80488cf5c68f", "indicator--4b365a7b-ac46-404b-abef-6141146e1209", "indicator--ea4ee9c7-5d71-43e8-a46f-f008649b15d3", "indicator--a537bea5-6f66-4ea6-a9b9-a3ab6a9ee577", "indicator--f28e7f99-06fb-4ba8-804f-0ae0f563bf7f", "indicator--5f3e480f-ced5-429c-85c0-816ba949b2f6", "indicator--205a6aa3-7a75-4b9b-b626-8c4219db3e01", "indicator--26584951-8a47-4c0f-9777-139c5e5d3c7f", "indicator--92835cbe-5495-4c74-a984-718c2f061417", "indicator--44d457b9-d9dd-4dff-9676-cb185063da29", "indicator--f39f1ea8-ceae-407b-a6ab-cb920ece7907", "indicator--97135ba7-6c59-499a-82c3-6e5111a51078", "indicator--040a4540-fc80-44a4-8041-ab7cbc0a220b", "indicator--0113f1c2-7712-4a10-98f1-6d8f3c5adae3", "indicator--ff675089-ea09-4c81-8e58-98c70579589e", "indicator--49d88c0f-7867-4f31-930f-5ddfcdc8bf2f", "indicator--fcd9de57-c76b-4da3-a85d-1b7bf6a82ed3", "indicator--f386c33e-c1d7-438c-bff4-fd58bb4be81e", "indicator--d21c324f-df11-47f8-81ff-bc125f898988", "indicator--3ada70d6-3a57-42a1-82bd-3bdadb31b091", "indicator--c76bdcaa-9a2d-47d2-8af8-0b91faa5c687", "indicator--7cdbd2ab-f03a-43af-89d3-619002ca838b", "indicator--d5c9c0ef-dca8-4c9a-bf9a-e7523bb28348", "indicator--fffa84e3-40d7-43d4-a5f7-461b5c692283", "indicator--2ff5a58a-5002-4574-8c24-b5a54d22cde8", "indicator--2db205f1-fef4-40b1-9aac-99d3542a7225", "indicator--1b15a858-5237-4e65-9394-e140c5e6ec63", "indicator--09ea2671-d8d0-4d75-ab99-70e7244c1931", "indicator--c24618c6-6efb-44be-ba04-fb0bfce21074", "indicator--68526087-873f-45a7-a23b-a012b47d5a56", "indicator--d613d58a-ea3c-47e3-a5eb-536979229abd", "indicator--eb100013-5a90-44ed-824e-a34dd630bc06", "indicator--490e4965-418e-4f5c-a712-61b11d29c4c8", "indicator--f4417e72-e056-4d6b-8943-fe38354c5f73", "indicator--b8dae628-5e7f-4830-8d04-4119a65471f1", "indicator--05ea40df-ac0e-4fc6-9ca5-736225674de8", "indicator--347a1121-0c36-446c-af70-4c5af65d11dc", "indicator--cca4d71e-7627-489a-8624-90726812f86f", "indicator--38afe9ba-138f-4ca2-b07c-4d94e8472465", "indicator--678c16d0-0e60-48b1-9342-5886585ea5c3", "indicator--a372cae4-4b83-4943-879a-848dc06e5054", "indicator--df7290ac-1aef-4ded-862a-a1c71ff6e0ec", "indicator--d3fa1162-6c33-46ab-b87b-2f90546316c3", "indicator--d2096907-a8c8-4527-83e0-779aad562b6e", "indicator--060d11c4-f7a2-4181-ae41-df4225b6dbfc", "indicator--fc623dc1-5dcb-4b00-9b0c-63dbbfe135be", "indicator--56905341-d79c-4cbd-8669-f77a52b2a3ab", "indicator--939be790-816b-49a9-ada3-34af474b6239", "indicator--a9ced857-2689-4ac1-b23a-aaf0d5e66a0f", "indicator--74744496-6954-44ed-a7ef-f229a2d289cb", "indicator--f2076fb8-42fa-42f7-a670-e01c3d164e55", "indicator--0c32fb36-9d51-40d4-9108-8941c7f114d3", "indicator--9665766e-fdc3-4d70-b530-389ffc1f7260", "indicator--2beda3e0-2299-4367-9baf-e5ce38b29428", "indicator--bbbe4e0b-7355-4db6-b171-0f6c0c2c7370", "indicator--f2af560e-b2eb-41bd-890e-79fbda966129", "indicator--e7e48fd7-5fbe-4b7b-9eda-7e02e2a8f2f6", "indicator--c28d1e53-b51a-4768-a98c-53b4629bd060", "indicator--e4fc61ae-d32b-4689-a73e-2b385c4d665c", "indicator--51b263f3-15b9-487b-9943-20f755a8d10f", "indicator--f361b2bd-475c-4bee-b6ce-f6be8548a93e", "indicator--ae50a055-ad1d-407e-a3f9-bb3363cdc737", "indicator--1215a870-00f3-4bf6-adf9-2b9bd750ea0c", "indicator--52b64dbe-a903-4ccf-a079-2270c0746c0d", "indicator--458dddf9-7482-4940-bfa6-d9628903b258", "indicator--e1ba652e-e77b-470b-b7da-e7ccf1c45fd0", "indicator--e5bd4406-ca7d-4a89-a07d-03bbcd69f445", "indicator--7e130362-261e-4cb0-9da2-471170b6ba41", "indicator--8e241b3f-f2e9-4276-897c-a2a61d1356b6", "indicator--df1f5e51-9125-4d01-832f-bf9286a0f2f3", "indicator--0650053d-ad57-4798-a389-ac27f01d17e1", "indicator--672e271e-5cd3-4946-96a5-235060968800", "indicator--1a690579-536f-47fd-86e5-677264f89f83", "indicator--f5938238-004f-46fe-a6a7-e8aa6b73cb9c", "indicator--86cb81d0-96cb-4f42-86a8-dd99c9efe974", "indicator--bd947c92-d95f-4bfa-8e8e-c97457869372", "indicator--deffe5b4-5a80-4cfd-b25c-356f0f8d26b4", "indicator--3c37c0d4-b1c5-4fbb-b008-7d1de9aa47b7", "indicator--55ab47a7-4534-4af0-b974-e8b52eaa58cd", "indicator--fc85c463-b493-474a-a5d0-60821654f076", "indicator--45fdef0e-9966-4bc9-99a0-aa86c798f08b", "indicator--39604409-bd7e-40fb-a64b-1736425efca2", "indicator--07d0ef29-9e4e-40cd-a92a-1a0c8cd572de", "indicator--c4fad2bd-d8bf-4214-9602-66532ed9d431", "indicator--20c5cf20-a970-4008-888e-6143e602179a", "indicator--737ea77c-4a6b-4fd2-b173-c6d1e361339b", "indicator--52a182e5-1f37-4249-a795-5eb727365ad9", "indicator--026cac85-fde9-4713-8d52-06beac1a08a6", "indicator--31db1592-45f0-4a0c-96dc-4e3e70aa6a6c", "indicator--8e511b6c-f87c-4ebe-ba04-e9e778f742dc", "indicator--ace0f82f-a74c-425b-84c6-2b069f609871", "indicator--fade4773-96ca-4fb4-be10-96be3787d74b", "indicator--e634af8c-cd16-454c-b736-a5be4066586b", "indicator--cfdaf724-3747-4a34-9527-5b5fae5b1c5c", "indicator--07773b01-44f9-415b-a707-7c6cd844b6dc", "indicator--51cb5031-caad-4b34-a8be-c8ab5519da2c", "indicator--9b43ab74-c4c1-4e89-bf89-6b81a64556a9", "indicator--668c8888-f312-47e1-9e89-f1eeacbd433d", "indicator--40a54d1e-c12e-4ca4-a9db-ebbccad31ea3", "indicator--5cc4dede-af81-41c0-afd0-cee7e30554f5", "indicator--2a521de7-b311-41af-b877-d1817c24c0b3", "indicator--1db82226-8666-4bfe-bdc6-9ef36b85502d", "indicator--3f6068de-8a8d-4397-9c81-96726b3e9f7e", "indicator--dd838106-8a95-4896-a089-a852e0edf100", "indicator--b1bc4a58-41f1-4afe-b46f-519c6f12b938", "indicator--79227e24-66e6-4a66-91e1-3ca0e307c6c2", "indicator--66ff9ffe-3626-441c-a410-071b5f180604", "indicator--884e19d7-bcf6-4482-b75a-65067e478ebb", "indicator--08778de0-74c2-4645-94c5-d4f20819c438", "indicator--06a695ff-b2b9-46bd-8c8d-f0a44e3111e4", "indicator--516a243c-fca4-4438-a2b7-eace36008749", "indicator--edd45576-d036-4086-9d9e-cb32af78820f", "indicator--7ee00d9b-5269-43b2-aba7-9d94927ad115", "indicator--7f2f4236-4d19-44ca-af72-c955701f0757", "indicator--87ce1f22-ba8b-472d-a670-e93a84e5c6eb", "indicator--1b5e4114-fdbf-4a77-96a8-e1499854c43f", "indicator--883878ee-03a7-46e4-92d7-8eef9104af80", "indicator--f514b3ff-294c-45fc-babe-099384b3c7ad", "indicator--c17d7092-5625-4c9f-97f5-e06c05c3c63a", "indicator--5b1c1912-7403-4a35-9ff4-049f46ef408d", "indicator--376bebb4-6520-428a-9ff4-dd5e85a170ff", "indicator--3225d5ec-a5da-4071-9b31-46013a58b40d", "indicator--ed64badc-b1fb-4076-8cda-09c8dbf792e6", "indicator--faa869f3-7ecc-4ad5-8337-810aa7224c7c", "indicator--a58eca9d-e342-4e5b-9415-7c7825c14dec", "indicator--81da1b2b-0f74-4405-b3cc-35ce3fcfa1ce", "indicator--7b85f4db-d2c3-4ab4-a933-3183c77b5d3a", "indicator--ef971daa-3350-4487-94ce-de209804ce61", "indicator--0039acda-2d4b-4c7e-8bc8-5976a824d295", "indicator--41ce3ccf-d60b-4ce9-940c-c4c299d5b212", "indicator--654bda63-2c12-490d-98eb-3d5ad6d7d5f7", "indicator--23a6f4f8-efab-40d5-93e5-ebe2c61ceb74", "indicator--d0cc4cee-bc29-4a74-8acc-7683c6bfc9dd", "indicator--90d6de02-f37d-457c-ba97-5001f80d8f09", "indicator--bb6dc1fd-5703-4f68-9f67-2d2fa56bd60f", "indicator--542c49c3-116e-421a-bee0-f7c4c5957e1d", "indicator--002c1a38-cd4b-493b-961f-f8a272b55377", "indicator--4fe5f553-2553-4857-86d3-ef436602ed36", "indicator--9e4ae509-fe26-433d-99a4-a21bce3990f7", "indicator--78d79c54-8536-417b-8d19-c23d28e79fa9", "indicator--dcb50efc-78c9-4f56-8577-d06977eb19b5", "indicator--670c5bcf-84b3-46b0-b0d0-c675e979cea7", "indicator--0d3ed84a-cdcb-4dbc-8394-40685c1a47eb", "indicator--0fca7296-b591-4ccf-8831-497898fe7d94", "indicator--d0419441-d0e2-498c-a6c3-c4062842b85e", "indicator--ed742512-b8a8-40a6-a5a2-ad044b72f3f1", "indicator--c17bba4f-722a-4564-bfb3-3928070ebe80", "indicator--589ea2e7-b0e8-458c-bcd1-295f48acde33", "indicator--5391b0cc-00e1-4845-bded-544d0477f208", "indicator--55d019b3-9186-4018-82bc-0112fe5533bc", "indicator--b38f4eab-79ff-47b7-a849-e9a414b7b53e", "indicator--6d3be0e8-1c97-445e-b207-9cef328a3de3", "indicator--16a0c917-04d9-445e-b589-50ecf3236f90", "indicator--c31ffa66-1933-47d7-b9e0-799031a269bf", "indicator--8408868a-f901-480c-8800-a4ce42dbda6a", "indicator--f548ee74-d048-4902-adea-985c76d5312a", "indicator--42c9ae59-d953-4ac6-958e-0481b65b6d8d", "indicator--7f2f522c-8cda-4989-a30f-28dfd42bb71b", "indicator--79a61656-60c8-4bfe-b2a1-99f8b96fee5c", "indicator--8e18d9e3-d61b-4c75-a245-a80fb73fd9fc", "indicator--1303294e-596d-4a29-8482-1b78e16bd389", "indicator--35d3a6cf-694e-4e0c-890b-cc8a8c1932f5", "indicator--6c950448-2779-4a5f-b7ad-59de941c197f", "indicator--64a81e82-1c21-4184-ba51-12643dfd233e", "indicator--4f7ddd43-87f6-4369-9c78-0db55f5d3c17", "indicator--560d266f-6eb3-4d42-ac1b-36cb4b16768e", "indicator--7ee45ab7-b86d-4a82-80b3-f2ae97bf6f7d", "indicator--0e545e8e-0b6a-4cc0-b50d-e9c30b8348f3", "indicator--61905946-2b31-47b7-92c0-f77a495c3579", "indicator--e5b9d2ad-4249-4ee5-9825-17b68a3ba472", "indicator--dae19b19-5d09-42ab-a2c0-285a380b3374", "indicator--434bfef2-3a8c-4a2f-b4a4-93f42c5ba608", "indicator--73cd935b-3b83-4786-83e6-a3683bfc7aeb", "indicator--a136b07c-a754-4c28-b79f-0491b64448ed", "indicator--7ca8a99e-4fca-4e0e-9ce7-605b56701ac5", "indicator--1faad8a3-241b-4cd3-b2c8-99e606f741e4", "indicator--9982d8f1-4ecb-4853-a14a-483c9e4ce88c", "indicator--e64c3228-46d4-45ad-9e0d-415fe5afd1eb", "indicator--d9f909b0-8e8a-4bb9-8cdc-851ce62827cd", "indicator--24bca79c-8df0-44a9-bb2e-c0ef9aee604a", "indicator--9bcceb7d-8d3a-419a-ad30-597e4f9a833c", "indicator--c90b7d12-baec-4eb2-b0fc-3d03a78a5a7a", "indicator--ac2c1990-1d90-420e-aebc-f9f39a9b00f4", "indicator--dcaa2a6c-efe3-4ed2-aa3f-a69925ae2d60", "indicator--c792af44-5915-4dfe-b002-c0a980673dcb", "indicator--b00dab99-b963-431d-918c-2bda5eb29a43", "indicator--7ed3cc6d-0b6a-42bb-8b39-c188db116041", "indicator--0e6e834e-3d86-4b38-9414-621cd8030598", "indicator--cb63e894-87a4-4e66-9b67-fbf56d1f1510", "indicator--a60c0770-00c2-4f38-813e-59d97feefc90", "indicator--2fb610bd-c234-4a67-b1fa-eae34faf8658", "indicator--fe8feb79-02b2-42e4-af23-233c93760ed7", "indicator--6784530a-c3be-42e3-a042-8a22a248d79d", "indicator--8db9a561-1178-412c-9ffe-c8d569caa327", "indicator--d2f4bb90-0cf1-41aa-86b8-e811254f16c2", "indicator--a46f23f7-8acb-445a-b010-a27383382a3a", "indicator--5b57e3bd-c72b-4c04-a003-e074bb137fb5", "indicator--5cf3e286-026b-4a2b-bb49-169831becc37", "indicator--24818d05-c381-4250-96f0-8a00bbc9963c", "indicator--6dd7da71-ae76-4440-94b3-df24d1a96af0", "indicator--810b953a-c7da-4d5f-aff1-ca58ddfe73d6", "indicator--820d30f0-87fd-4762-b91a-be773d36cbae", "indicator--5f0a5a7c-3d52-4c7a-abc5-4f730528ef48", "indicator--9f4a74b2-57af-4af2-928c-f2408b4a1aaa", "indicator--41eaecab-5538-473e-b58f-57e25a194b9c", "indicator--933ac7c4-727a-4db2-bc65-c3b99e08b7bc", "indicator--7a8eaa20-b877-4ae7-95b3-4b56fd818775", "indicator--dd5d82e6-e322-40c5-ba98-a25ea0688149", "indicator--a62fbc71-95a8-4834-808e-2201e109d211", "indicator--720cee22-15e3-4312-b2bf-a38580307558", "indicator--f35f566f-1ca8-4555-a77f-d0520aad62fb", "indicator--18b36176-03d9-4824-a9e3-f2ae9908c868", "indicator--d476ef0e-446a-460d-8700-f65c2b6f92c6", "indicator--5cb7f5cb-06b6-4215-be87-2710a1de3675", "indicator--e603fa4e-e448-41a0-a0cb-fbcda2a6d69f", "indicator--3dd436cb-501e-4c66-a61e-85cc26f6b172", "indicator--0653f7da-286f-478a-8322-121f59c16043", "indicator--52ed128d-4271-406e-a221-b9aff0edf713", "indicator--09dc2ab8-355c-49f0-934c-4fa9d17c4532", "indicator--29e32fbe-abff-43be-a2cc-84f8ca2f70a7", "indicator--d178a8c0-faf2-45a7-af87-9caa0c2c33f6", "indicator--d22fe6be-20b7-4b83-a9c7-a9f3ed641f52", "indicator--38863e17-13b6-4bb2-aa66-8b5e3fab6344", "indicator--f5b5ead6-771e-448f-9c8a-d74692da460d", "indicator--d04909a8-7938-4e88-a142-9506c90820d3", "indicator--88963617-1170-45df-9a20-e89583637563", "indicator--2a8f1fe8-e993-4924-99d8-06d64e12556f", "indicator--0b635356-9785-4706-9fd1-20cffb53de28", "indicator--688e61e8-dbf7-4c5e-aae5-5aae75d01766", "indicator--8513efa6-1154-40c4-9b7e-5d0fc98b4c5b", "indicator--0d09477d-09c5-40a2-ac15-ccfa18f37499", "indicator--b28dc2ea-a8ec-4a91-aa10-46c5899933a6", "indicator--da930a24-4535-4f90-ad1c-987b5241cdb2", "indicator--bce4f869-ea14-445a-b158-add089505017", "indicator--fb7bb616-21c2-4872-8ca7-b695192cf378", "indicator--fca3265b-f55b-4604-9e26-77ba908263d9", "indicator--748ef65d-b397-4588-8f9f-b7c777e69153", "indicator--ad94ebc6-43d3-4e21-8e3a-ab9a6c7cacd7", "indicator--0171fb3d-ae47-4638-83e9-816d9d37f520", "indicator--c12a8dc5-999d-4db0-b083-732a97326c20", "indicator--7b4280cf-55be-431c-9342-d0763a263bdf", "indicator--75223883-901e-49e7-b547-9430d0bf1e6b", "indicator--1d325e5e-52de-4ddf-87fd-de3c1316d743", "indicator--f5b0ca6f-5e3e-4207-a257-1afef5ba8f29", "indicator--686332e5-65f4-4c21-b75b-1a69a57402a6", "indicator--4125c440-e365-4389-95c2-e9216d23a7d3", "indicator--c4d11f7f-bca7-4cde-b411-173963971d26", "indicator--6de84d3d-51fd-4480-872f-42fec204af65", "indicator--9509a6d5-eb02-49fd-825e-96b3e6c8d8ea", "indicator--c1b266ee-0530-45e5-88b8-ba8619ee66fc", "indicator--725dd837-8525-42b7-b855-83b98f3d4030", "indicator--20c44c96-9b8a-4fa2-bce2-8809556be535", "indicator--959e7f34-0fc6-44b9-b83e-57491918f843", "indicator--24d3b8b3-9b2e-46be-affb-1b7bbb4aefad", "indicator--f837a551-24db-49f8-8eb0-4707553d3d55", "indicator--708c3fa8-d3d8-41f9-a38c-a120bdadaaa8", "indicator--2db8a89b-d2ef-4e68-9ea1-bc99205e2542", "indicator--3a43f1c7-d611-46fd-9525-ff96bb9436b1", "indicator--8837e15f-95ec-40c7-bbad-42dd342bb121", "indicator--7369f9ff-7825-4422-b1f4-fa7abaa33f6e", "indicator--302faadf-ecde-4e32-971a-17eb7cb3e90c", "indicator--c8d0ae7b-eb1e-4507-a675-244cb3afdb76", "indicator--df358655-ca21-4234-8266-069477b75dcc", "indicator--233b3249-6f33-458a-a16e-0344dad9cb4b", "indicator--46d06f5d-98f0-45e7-83eb-a364509dd23d", "indicator--70d1f3b6-eab0-40b5-8389-2ee90e2018b8", "indicator--4db6c90c-768d-4aaa-94e6-83c0cb8d8442", "indicator--90f3eed3-ff3f-40ae-90dc-8ee06b3b67c1", "indicator--4423baf3-9153-4598-95a3-30d46d4a65b0", "indicator--65c1bd53-a20d-4c00-bd8b-babf03dd36b7", "indicator--8cef608e-3dec-40e2-9d1d-b9a908f461fd", "indicator--be066b25-dd7b-4a0e-9bc7-f2b89916b4ae", "indicator--fb08aaa6-0909-4aed-87b7-f9addf393139", "indicator--d9d86a43-f540-4106-b9bc-a41178fc70fe", "indicator--e21c1135-c7df-4d69-9d43-679892c034c0", "indicator--ab2b2e44-9ecb-46b5-be79-f74d46e6eacb", "indicator--8cdac3ab-44ae-4bc6-8f8c-25942d52aa4e", "indicator--89f6c373-acae-4ee0-8731-5b38bf9461a1", "indicator--638545c5-a9e1-4aea-8a92-268ef5ce0106", "indicator--bf6b39de-359b-4f13-b2b3-f5945b2f31ef", "indicator--878ef36c-2b44-41b8-b166-afa16c01155a", "indicator--31ce49d9-9d0d-4588-9ff2-d8fe565e1ef1", "indicator--8cccc680-3a2b-4109-a358-162a1b55cca7", "indicator--aaf19933-b148-4f3e-9704-5bd22ccee68a", "indicator--32d2f428-0ef9-4c65-97de-fedb5c217fd7", "indicator--de0863b6-fee3-4cbf-8644-4492297a9d62", "indicator--826b0cc9-54bb-4974-b0dd-49032626dc05", "indicator--3154bc5c-7800-4c49-85f7-b1d59e95f9a0", "indicator--ab1fde37-d04a-46ba-be03-d82872100a5c", "indicator--70b992f1-f70b-4e82-9f4f-b9a0bd2c65f7", "indicator--a0ded050-6231-42e3-b8b2-f279e71d0c5a", "indicator--22c5dd2c-bdfd-4536-a414-4a8bfb64bdcf", "indicator--5a1676d8-2c4e-4069-a6b6-6e281e81d34a", "indicator--147aa6e4-5e77-4419-8482-17b824893265", "indicator--f3c001fe-249c-46b5-ba6f-7e84885220cf", "indicator--3df6b5e7-7147-4226-8a6a-bd5caa0d5536", "indicator--ab0f9937-475c-4123-81a9-caa84cb3829a", "indicator--fec68ec8-38d0-43b5-a808-367020153cd9", "indicator--a40bae26-9a0e-48be-9a81-7a282ad24e60", "indicator--2fdf9e78-4a36-4ee6-95eb-19980aa3b484", "indicator--00d31f50-edc6-4589-9478-acc659dd0550", "indicator--816b4adc-7938-48be-8d32-3610837e7a82", "indicator--57ce7d4a-bc9e-4ddd-bc62-19789020d12a", "indicator--7fcc3733-7f54-4c9e-9783-a958b922b517", "indicator--a80cc2f7-264b-4a97-89c5-67c0f9e8ef1f", "indicator--5a409062-5721-4820-83f1-e99d42c9c23c", "indicator--1ba35891-b550-4ccb-9273-26fa61e791a2", "indicator--c490f4f5-3614-4197-b24c-c04741d7b682", "indicator--e370a739-166d-4c41-b1fd-c790742dbffc", "indicator--d38eff85-0155-48bf-94e1-b715e094a052", "indicator--85f1eea8-23e8-4cc3-b917-d352c354be7c", "indicator--5297f87a-26b4-4df8-96e7-16b986b03ca7", "indicator--0693ad45-7c27-4f7b-812f-c5f425335b85", "indicator--883d18df-2a76-4146-acfe-7a83c8c742e9", "indicator--a2557890-c523-48c6-8a33-d800a7542b25", "indicator--7430dc31-81e0-4dec-9f42-e9152a0a0345", "indicator--e89fbff4-73e6-4175-82f2-a0a6b4280839", "indicator--94e0f41d-7b24-45e9-b9ae-1d5124a23535", "indicator--e7c06899-cfaa-4303-bdcb-819a865cbeda", "indicator--fcff69c5-710b-442b-9c00-7e802a759c15", "indicator--8b0be7de-81b6-4e54-93bd-9c614b7e0ced", "indicator--76102325-f13d-477f-bf9c-c9e477a50a7b", "indicator--9e1fca61-9c14-463f-9b42-4bf31ae9d45c", "indicator--7ebb56e5-eb9a-4f2b-ab23-c614bdaaec25", "indicator--0b8c63f6-a2ee-40c5-93f7-332a231c9519", "indicator--3559d2ad-f4b9-4cfe-8bd3-f2c5e6e9aeb4", "indicator--b10f63f6-d2ba-4d25-ab05-d96f867a2b83", "indicator--1f9e79fb-2b5e-4d71-aee7-d8d7eb958ef6", "indicator--44dcf3f9-a375-4cd9-8f9b-cc4c55c416a8", "indicator--cc5de44c-d900-4c4e-9b41-db412bbe4a29", "indicator--fd2fce5d-e7a5-41f6-95e8-cd77d308e9df", "indicator--a31e0f3f-ec58-4a44-934c-0f200ef846c5", "indicator--bc4e77c3-7d6f-4ff4-adc9-1d5f46bf3ff6", "indicator--f7467daa-dace-4335-b2fd-d2b654941ae3", "indicator--d7c9a30d-5f96-4ff2-87a7-f9aa8d771e36", "indicator--f4e8d7ec-5773-4a29-bba7-5d9f2b951d48", "indicator--b43c9ee8-2715-4fbd-822a-76ed54fe009d", "indicator--ed825f13-bb1a-479a-8dd5-405c82c1cc51", "indicator--852582c7-a4bd-425d-afe8-b410805a156a", "indicator--44daf571-fc38-4e1b-878a-aa7a5334c3c7", "indicator--676b191d-6881-4b83-a63a-c8b70a62ff35", "indicator--ecc844c6-5795-4c6b-bf6f-c65bcf4a515a", "indicator--b1eda0f6-4390-46c3-bff2-57c77e952570", "indicator--71213cb6-4be7-4447-a770-a7f9a9fbe69d", "indicator--677798df-4116-45fa-9aeb-5c90c0f3dd43", "indicator--31f8f6c7-5f47-4b0e-a589-32451d80521e", "indicator--08dcad56-bbd9-4057-98bd-a9174559c082", "indicator--b5cc70c2-c16b-42a5-8661-8c71a7578671", "indicator--2a245664-a250-4dce-8881-0072a3ca73bd", "indicator--b7605873-0136-44ed-8884-7a19a271d0f9", "indicator--ba9b9c57-6e50-4474-b77c-63e06d487b9c", "indicator--760087fd-363c-4116-8fdd-0d076ea06134", "indicator--d8981279-86c9-4bfb-8d60-0c9aef0cc552", "indicator--dce13d12-daaf-47bb-a347-40d7430f3a4a", "indicator--35c73982-87b1-488f-9a30-a0b94c3b0065", "indicator--ffb1bd62-bc45-4861-95aa-37208cbebc68", "indicator--9533935e-df87-4fba-b881-31baf7ddfa0b", "indicator--ccdb1b62-8a6a-4474-8cdf-67127ad47e97", "indicator--b7c68a0d-cfc1-412b-8d85-38900f6222b9", "indicator--1b4e8785-94a3-4fdd-b6ca-ffd96d6a9754", "indicator--fdc80a78-1ca2-4926-ad39-d320e5393b74", "indicator--d32000c0-6e18-44bd-94c6-feff3c4cb850", "indicator--df58e764-b21a-4601-988a-767a2d7ba7bd", "indicator--06f40c20-2054-4ed3-8cf5-51a3815a1e58", "indicator--0e0834fe-e547-4496-9071-f2f992a92644", "indicator--52058bd0-1208-46d3-bd47-41ac3b8fed6c", "indicator--08c55a87-d11e-4498-ad10-9c83dddbef70", "indicator--e6bd06ed-6ab7-4014-be3b-433a9a287ba9", "indicator--28feb7db-6db2-40e9-bef1-a3b8d058f193", "indicator--326b4b57-491d-4bf2-9661-2808863b26e3", "indicator--debef8a1-2300-4f84-a1fb-54ebac59a8ae", "indicator--3e752afa-10f9-470c-ba79-8d90081ee1f9", "indicator--cf017d56-7ba6-40bf-a783-b99fbc76b1c4", "indicator--f5d88bf7-a6ab-42e8-8894-9cf2523e1408", "indicator--871991fb-f87a-4851-906a-1469f45431d7", "indicator--b228fda1-c28c-43e2-94d8-61ba205cbe81", "indicator--36f81329-b24d-4d90-abf1-28971493ed64", "indicator--531d9c22-76e8-4bf3-8003-ddfe33cccfa0", "indicator--2c8e250d-ca8d-4de9-967a-da28332cfe38", "indicator--3abc3a0a-76d8-42e9-90bb-20c371c45038", "indicator--849fabe8-7cec-402d-9ec4-b6605724c470", "indicator--e33229b2-14fa-4ac6-b994-6d362ee86ee5", "indicator--ea4ad80f-d543-4237-bbfc-981b18091007", "indicator--4f2021de-a242-4141-a1fc-f4816a119365", "indicator--7251374b-95a5-4415-a578-9a638f15e4dd", "indicator--b0c90682-9c47-4b77-9d35-cb5bc774d32c", "indicator--457470d7-882e-48fc-a9e4-db70cb9c626c", "indicator--377604bd-63a1-4234-b280-f0aa7f90e937", "indicator--07e7ae98-7885-4088-8975-1dc79e7ddc65", "indicator--5b049f40-d384-4433-81e3-d43dc52f9dd4", "indicator--6280757a-1a6e-410a-99ed-883e58fa8fdf", "indicator--2a5c87f7-6903-46cd-ae3b-426aebb4f4a9", "indicator--4d7e117e-1b2f-4b26-8045-91795a7f5a4e", "indicator--0f3b4cb6-9cba-4bab-bb0e-381eace47336", "indicator--5fbdf428-05de-4450-b28f-a95a132c99ac", "indicator--7f571661-d5a2-4d70-81dd-373329f821e5", "indicator--cc0f48ea-7cd8-439e-91e0-0277ced121bf", "indicator--df199a33-a4b1-4c7e-b635-8316f8db03ac", "indicator--651a1af1-7323-440b-a3b8-e394f4a0de2f", "indicator--5a1ee19c-da41-4de0-92fd-74c7235943f3", "indicator--e6955617-61d3-4c1a-8fc1-7a32fef6fd71", "indicator--b746a230-b7b3-498b-9c41-a233085c1fa2", "indicator--eb73da6d-d9cd-45ad-8de9-6ecd25b348db", "indicator--76f0762b-a43d-4f69-92e9-d41d060726c9", "indicator--035ca247-b454-462f-9da3-6634563284cc", "indicator--5b81ade2-db9a-44a5-8ea1-c11ac42a76a0", "indicator--860d0312-8ca3-4cf9-8ede-85ae2853eaa3", "indicator--bab604ba-c9c6-4e0f-9060-cae528795cef", "indicator--acdac624-3838-4521-baf6-86071deaa773", "indicator--4ea339b5-0a92-4391-9cd0-3b0d19c238b6", "indicator--83daa79f-f948-41de-9eea-df6f7611091e", "indicator--dc859046-7080-473f-a60f-984ab723b900", "indicator--a5226456-be02-4628-974b-ebd5f6b3e971", "indicator--70662335-0759-4603-a304-3e8a37a7a379", "indicator--2f646544-2f97-40ca-a263-f9a41e2fc4c7", "indicator--401b690d-7f54-4e6a-a7f2-b702a65cbe03", "indicator--7e918f45-756d-4fcc-8e0c-7a028889cca0", "indicator--00958fc0-bb1a-4a96-8ca7-7c2972cf7b10", "indicator--9ebee985-2f28-42e2-8f9d-712a6c5f7b0a", "indicator--56e9f44a-cdbf-4704-937d-0670f88f43e8", "indicator--b1787d91-a923-4690-b63c-6855a5ddeab1", "indicator--842b47a8-7587-4fc7-b026-1f62618c6913", "indicator--b33fea95-67ee-49ac-be96-787102213098", "indicator--36ad8a1e-1390-4972-a32c-e9c4db1bf2d6", "indicator--0e4493f2-88e9-4d98-83df-7e100e6a2fee", "indicator--5d880702-efa6-4422-9a77-c2bc72ea7d99", "indicator--20b77236-7a15-45e7-a0ea-9e1bd7e99171", "indicator--50697c52-2055-4855-8502-eb7dd16d800c", "indicator--3db43da2-7cad-416e-9189-07a920b78f5e", "indicator--202f2fdf-176f-4087-85df-8710e025e365", "indicator--e9f5fae2-d0e1-49b6-bf1b-cebfb93c97e8", "indicator--3a79bc40-e517-4a50-905e-e3496e8f4192", "indicator--909d4e0d-ff32-4096-8b68-0bbc2e76652c", "indicator--9861fc8a-efc2-4ca0-be6b-0d37dcd64c24", "indicator--33218147-787a-472b-a8a0-852617a4b1a4", "indicator--b8c82d64-e18e-4d68-b747-8e85fbf85a1d", "indicator--1f8bc761-1f13-4748-8c16-060b310df375", "indicator--74ef1402-a417-47b9-994b-3ca0c5d98ee2", "indicator--349cd6b9-d52e-47d1-ade9-f59b391e76d4", "indicator--ff5800f6-1250-46d1-a5ff-9dfe80705969", "indicator--3513258c-d74d-417f-98a9-f397d727468c", "indicator--c728c924-c0d7-4212-9398-9f482676b4ea", "indicator--a51e8ced-af84-4031-a3e0-a8708eba2c31", "indicator--32cf0180-3eb3-4c8a-9ca9-7273f8bc038f", "indicator--563942da-2a0d-4b42-8450-562dd2ba6f3d", "indicator--7090a950-8581-496e-8a1a-d97b2d3a420b", "indicator--6f7b187e-9005-44cf-8230-c1764a73f6eb", "indicator--1dc3e773-1551-482f-b007-6b1ec1d4febb", "indicator--e0d63f6e-eaec-43cf-8087-d56ed9e30b69", "indicator--f947dc87-584c-40b1-b8fe-7bf20a6468b8", "indicator--3043ee01-76eb-478d-9bc0-a1c8ba9b7a80", "indicator--8ccbfaba-385b-418a-99e4-e018e552bc40", "indicator--a23bfb55-a971-4e0e-82b0-a1983ecaa195", "indicator--8ca22e12-159c-4b91-a996-ad16fa2a42dc", "indicator--1b5c68e9-d897-438c-b8b4-61c40807fd5b", "indicator--8458eca3-62b8-4d55-af9a-ab3bd16350bb", "indicator--b0627329-52d9-4828-a34a-2d2cab05a127", "indicator--71ba5fa6-0427-424c-9b51-60561b4d7eb7", "indicator--1ae7de64-8a8b-46a0-b33e-41d4d48f0e3e", "indicator--fd3bd330-c9e9-40a1-93dd-970f2cb5ba02", "indicator--29523223-a2c5-4523-b2e6-abfec3fb1f1b", "indicator--cfbf9c23-5617-4fb0-9dd3-8236777ff1f3", "indicator--c5575454-8ca8-453d-851e-17de8bf6dc40", "indicator--58106b3f-8986-4dcb-b2c9-b9dd998fc77e", "indicator--22480e39-5ae5-4f37-9061-eb30e72fb049", "indicator--e456795f-dda6-49d4-9149-e4348dbcd81f", "indicator--b00c230b-fb90-4de0-a708-c49d7934e5c7", "indicator--0358773a-c75a-4190-8281-19ae3595526c", "indicator--6ce71a8c-3f41-43da-8279-1c1df437cdba", "indicator--9a89ee95-2f39-4ea3-bfc4-8632901efe1d", "indicator--0506a798-c947-4b42-953c-09fa40856ef5", "indicator--7b2709ac-49a3-4ca5-9f7f-536971c80870", "indicator--3b992199-f104-4112-9026-38ac3fc39612", "indicator--56995785-7cb7-49d5-a2af-343e24469f82", "indicator--8d8fb3f2-06b3-44f1-a044-f726602b5f2b", "indicator--02c1fde8-fd7a-482b-a8d9-dd6176544d14", "indicator--8c3dd2d9-8adb-4e97-92be-6370a3fe7a68", "indicator--81b18cc6-2857-414a-8fd0-7643ddefe47f", "indicator--11bcd05b-b347-4c37-ac7f-83183891f90e", "indicator--f3165cee-02ba-4557-a442-43bdbfb64439", "indicator--b7675f96-311e-4a33-88d6-a157fb3cc104", "indicator--ffdf6bd2-49f8-4be0-a1ec-0b6e1c7bc6ee", "indicator--09b4cb70-d01f-45a8-b2a5-1b762e2b0338", "indicator--61317267-1a9c-4f45-996b-2c03a8bd8d86", "indicator--0a0d18eb-12f4-4524-8b7c-3390d8274f61", "indicator--25958e14-0ab3-4393-b3d1-79caf5de8615", "indicator--16807f09-61cb-49b1-87f9-55a4e664051c", "indicator--93bfbffb-d6be-4e5b-9f3d-776c02221c49", "indicator--a0bbe695-4493-4ad0-8949-4b84b2b7b93e", "indicator--f79a7b65-43a3-407c-8b72-d865ceabbb01", "indicator--ec0d0ec0-3b6e-4e93-af9c-52a8e0572bb6", "indicator--c752e222-8f43-410e-aeab-15ed2545dfc6", "indicator--98c8da15-1f3b-4eab-9e74-f18c7e085a9a", "indicator--1373d740-c27f-43f1-8d32-7c2ae4aadacb", "indicator--5cce637c-6a2f-471a-815e-0bf46587f4b7", "indicator--be32a90b-e0a2-41c5-8b66-04666f8873a9", "indicator--590b173c-c478-4ff5-a8d6-9f70ad3f5d0a", "indicator--6b966aca-eb7d-4e90-b45f-ad1be22831e7", "indicator--4e6fca48-6e62-4100-9d01-bf8e20b7ae06", "indicator--1ae03616-fdb1-4f69-a3c7-ad5eb26cfb2e", "indicator--039e2fe6-92e4-4181-ad4d-d1534ca14294", "indicator--ba76be8f-d8a7-4881-a0cf-a6b7217704a5", "indicator--a93f2395-ec3a-4efd-a457-9bf87fedf98e", "indicator--b5b5d29e-5e5f-4a8f-944c-10a5149c521e", "indicator--e368a2e6-f746-424f-9131-85f6fd739a74", "indicator--9155f753-1a0e-43e5-9577-b2f23150cf54", "indicator--5f44b242-794f-4bd8-b320-1671bd0cf75b", "indicator--afc09de0-68dc-4d42-8c27-316a0b157ce0", "indicator--f983913f-94e1-4ed4-9684-cdd862d6edad", "indicator--0079b704-2012-4b3b-a07b-96b8ac05b9f6", "indicator--73f2eac9-68cf-4a31-b81e-791887b6b9b5", "indicator--b6f91b12-8d8c-41b6-a52c-0e147ace02a6", "indicator--74b92e15-d819-4adc-9748-02f93887535d", "indicator--bd5b3c5c-3a54-4316-84d8-b7005a777f96", "indicator--f6e77800-5be1-4888-8a7d-f9451407c41d", "indicator--0b8aab27-ca3e-4184-8847-d9acf556cfb2", "indicator--5fcea4a7-4ec9-4e52-802d-546afb9e7ee6", "indicator--7fdd2161-24f7-4802-a68f-167f5255c099", "indicator--39618978-0b00-4be8-bace-16786c044326", "indicator--eec634fb-9aca-4195-8a11-3518dc518abb", "indicator--4dce8f9d-c58d-4210-93cf-db377f078579", "indicator--4f38b892-b9fe-4b47-814c-657649a65135", "indicator--bb2576aa-1e3d-439d-9181-9caf63f6637b", "indicator--db06f681-5d0b-4d55-8ed6-13525faf4e29", "indicator--e90d32f3-cd9b-46e0-a8b9-b5dcd60cce31", "indicator--19917efa-05b1-4e14-a414-43f8df1ea8ca", "indicator--b40d3397-7f13-4df4-98cf-46df27427a34", "indicator--c126f84a-488f-4952-a614-6e81730b2b4c", "indicator--afbc7143-5589-4563-9218-72c0c327005e", "indicator--449fecf8-a2b0-4750-94f6-d8642692c88e", "indicator--f59fe90a-69ab-4d6f-9e27-8802645ee96d", "indicator--35b8a7a9-4b20-423e-8dd9-84bf5cc386e1", "indicator--522d48b2-b664-411c-870b-63df6e8fe56b", "indicator--44abcccd-259c-485d-bd7f-910384a7b153", "indicator--4321cc0c-920b-493a-b4bb-b8f9e02c338f", "indicator--75d64cd2-6916-4777-8285-f4bc5b9ea8b3", "indicator--fc96c103-a1a8-4046-9f5c-035b12498fcd", "indicator--905f75e5-99f0-4ed7-9d16-bf677f81ff16", "indicator--3bb043a9-28d7-47ef-9dc6-31a8c2f6a86c", "indicator--c06bcfbe-b982-49dd-89db-afac5c2b1924", "indicator--fd06d6d3-ab45-41be-970b-46348d98b02e", "indicator--fc9b0fba-d2be-4506-b3e8-7ff5762df535", "indicator--54adb448-8468-4924-aa57-4b8418252be1", "indicator--e7d1f9be-46c9-4f8f-86dc-4bf2fa6fd5f5", "indicator--6e592aeb-e18d-45e5-ba8c-d42c89dcd21c", "indicator--4fab678b-6919-4227-8e24-6e9af11bda71", "indicator--e973bbd6-f80b-4e63-98fe-b3c7e15910b7", "indicator--96a8f4fa-829f-4209-93c8-0b691df01ddd", "indicator--aac9ec9f-813e-4f86-8e57-646082989809", "indicator--ee39823a-11dc-4e9e-8c59-60867c410eb9", "indicator--fa786b6e-01ae-4124-b671-0b4f351f0dca", "indicator--22b14d07-8670-47ac-bbfb-809eaf8c785c", "indicator--80548d0b-d941-44c6-a35d-e05a5fd5e323", "indicator--5f66c8e1-3f65-414d-b07e-7cf1de4bb136", "indicator--a70cec16-2b67-4a01-8a54-19635f975447", "indicator--7509e2da-6080-4b73-9aca-3c1892139a5e", "indicator--eae7fc5c-7366-4573-a3e5-0659314da178", "indicator--42613ef5-0d05-4f95-8539-a604228dd4b7", "indicator--50057465-909f-4ed5-ba57-33687bd15634", "indicator--bd635fd1-b4e0-4758-884b-3ea8a9e257d3", "indicator--603ec65b-de1f-420b-a7c2-94da84ba8420", "indicator--74d4cb8e-3aae-4a67-b2e5-a09101b46135", "indicator--d402a3d9-e351-45a5-95be-2f2cd0546b1a", "indicator--150d98ae-f6aa-4e21-81cf-00475dfec180", "indicator--0a8c3b2e-89b5-4989-ad6b-d5c1b0480e53", "indicator--0ef1219b-7d0a-4f48-8b80-8653e850011e", "indicator--208bc650-1214-495e-8158-3b0ba8a7c40d", "indicator--0532f378-9808-4d57-a3ae-e34724a90e50", "indicator--01f9108b-4769-42e1-9065-55d5b7acc7ae", "indicator--205b40be-c954-4822-82c6-7b784f843683", "indicator--c63a7ae5-fa06-4c5b-baac-888c68e81c06", "indicator--8801847a-d12d-46e9-adb2-31d1e709d7d8", "indicator--b8415e47-aa98-4c41-85c8-1843d9e1f39d", "indicator--14b9f459-8757-4cd6-9f25-6f0c699bba13", "indicator--f43456d6-8401-4195-8553-a7106fe54a12", "indicator--8fbfe4b7-6ff3-4992-948c-5f1ebf1be24c", "indicator--d2cef91d-4658-4b98-9ed6-10138845d3f1", "indicator--f189b0f3-2902-48f7-b0a5-742033a8fb41", "indicator--9c92e6a3-51cf-4549-a1e5-e3a38bac48c1", "indicator--2459f93a-bc58-4b36-acaf-f9007bdecbb4", "indicator--a0c0ee2f-369a-4c62-be42-50db9cc33036", "indicator--8fce2318-f461-4317-a406-88a3e2075992", "indicator--e0d2f578-5c1e-41c3-afe6-3d73d8a1df63", "indicator--4c88b839-d226-481b-92db-454b6dedb2b8", "indicator--c0a46164-987d-4e3f-b76b-55b936e32260", "indicator--8ff4662f-aeb0-4d8a-8771-419b8669b373", "indicator--5e491273-9c61-4e7d-9e3a-80b3bcc3124b", "indicator--581c025e-2a25-4d53-9aca-6ddc8ad00d50", "indicator--1518a44e-02f2-4651-a633-c71a9a1d410e", "indicator--9a866b79-413a-43f9-a6ed-65c6979ff743", "indicator--6e796569-a9d6-4599-aaf9-90261a637adf", "indicator--5552c217-f34c-4c76-8371-14df638c7a7a", "indicator--cf3f836d-2643-4006-88db-6b8623c71843", "indicator--f5bbe578-518c-4844-97fa-a5fa309335c7", "indicator--1fa1dfcc-8d15-499e-a914-a29a19e099f4", "indicator--b9806818-c16f-48f1-ae43-2efb1f09e1c8", "indicator--b6ae580f-2ee5-4865-b34f-43834c58392e", "indicator--0668d71d-1974-44f5-b0f9-0acdaf0473bb", "indicator--1368fe29-18c2-4ed3-8898-8d17d151c8bf", "indicator--4dd78f32-ebbf-4b4b-82fa-d2646850d670", "indicator--3e998c1a-c013-4178-a060-843af17b0bc7", "indicator--e7f7f88b-fd64-4cfe-ad53-66ff67dcb9b5", "indicator--bb35294b-bf07-4fa7-9ead-2eb634309a17", "indicator--fb58b0e4-31ee-47cb-b356-7889f4c0872a", "indicator--693a2041-0e93-4cae-832c-f791707217e8", "indicator--0563f579-6b8f-4cbd-b9c0-5710cc90526a", "indicator--0f51f5df-ea43-4e44-90bf-b42df9f4d457", "indicator--661ad937-5fae-45fe-b53f-2d6acaa654c1", "indicator--3ea0fe9f-05b7-4f38-8d1d-8fca8be534b9", "indicator--c0542f56-f9b4-4967-ad6c-a05925ed82bf", "indicator--f58fa7d6-d405-41a9-b9d9-8458a39a52e0", "indicator--0bde1ddd-c069-45eb-b1da-afb3b458fa47", "indicator--2dd0ec40-3f1e-4ea4-8bec-ffb07163439c", "indicator--8e35d5f0-ff0d-4095-8501-2a2ee7b3e959", "indicator--ea22256b-5bff-4fb4-8971-4f97016ddd8b", "indicator--9f5e3b6a-2eb7-4275-9d58-cf5bc2e6e8af", "indicator--4b913a13-85ae-412d-b7d9-89ac23fd94f6", "indicator--df88831f-696e-4630-a7d7-9d22ecdb0a7c", "indicator--3fe0ce49-c08b-4b28-80a7-d4c899fafea3", "indicator--65173762-cc47-4490-99a4-92d219e9b966", "indicator--ead4c31c-a090-4673-a6c4-934bd25979e9", "indicator--cae8013d-efa0-461d-b6c6-ccaa36524008", "indicator--83a00fc4-8193-48fa-b4c9-d7d42a3635a0", "indicator--801591d6-27e1-40ad-bccb-b58b27d33e1f", "indicator--b97ff287-f653-4749-8e2d-dd9ee6fccf5b", "indicator--4c18b8dc-b259-47d4-84ea-a7c35693d3a3", "indicator--e8a326fc-203f-4c9d-8eba-e910f22a3475", "indicator--d10ddfab-9a26-46a7-a128-558d78256f13", "indicator--cbfcbc91-b5b2-4b3e-b15b-7be3a1d312d6", "indicator--1f798939-a070-4dcc-af89-2b8137c080e2", "indicator--673df132-0e05-42ac-94d3-90be4312d204", "indicator--c3cc9109-c88d-4af4-a4e4-8e66843676a5", "indicator--b8b2e703-f915-4aa5-b012-a3f7b07d6254", "indicator--889822e4-a6e5-4cd6-aba8-4aafd312333d", "indicator--8be28362-1909-4bdd-89b5-774f6b6f5008", "indicator--6904a93a-d49a-4320-9fcc-0d2eed5aae38", "indicator--ba96adb1-8836-4a31-9cbc-862d375e8164", "indicator--99f356ac-9e2d-41cd-9ce5-cbdc326405e0", "indicator--a852543c-f383-44a9-922b-36ac9a9b296b", "indicator--67f99ded-e86a-4734-ad24-22f9e9c967ac", "indicator--2cb92739-ca22-4eae-a9ed-96f411df4669", "indicator--21d1fc83-f32c-43d6-a394-c360e0a8be8e", "indicator--6fdbd6a2-427c-45be-8561-fbf98be855e6", "indicator--2292ea06-5347-447f-9092-6606d04421e0", "indicator--a1ee16be-c005-4b4d-92a2-f34601d228f2", "indicator--c466bce3-1a7d-4a6e-8279-9d94734f55da", "indicator--b6a6bbbb-6b8c-44a5-a52f-68583ed1a652", "indicator--d930458a-6cef-4380-80dc-db7e8ae58157", "indicator--3c0d6cc4-84e9-4ecc-a2ad-827ed7e5061b", "indicator--e8764bc1-be83-4a9a-902f-49fa5e15dff3", "indicator--b39ebcbe-3a17-4609-b707-baa452737fc1", "indicator--4c799b6c-c179-49a4-abc8-37bed29d298e", "indicator--421e3eb2-10cb-4bb1-b956-8d5d9164cff7", "indicator--a20ace04-deaa-40f9-b4fa-0f5b073a3a22", "indicator--8c50100a-24bd-43ca-a10f-3e3494fd38b0", "indicator--6658c1d7-62e4-44ff-9ccc-6588b9e7c7b7", "indicator--7baa0b4c-4ca0-4c29-9900-2c93cd01737d", "indicator--b0877bf1-b686-4145-9482-0a88ad1ccec1", "indicator--2ee076e6-0d9c-49ce-8546-d46436ed5805", "indicator--27fc6163-d9d7-4202-9fbf-313bac4ce891", "indicator--2801490d-62b2-4854-97cd-a89003409338", "indicator--f397525a-d07b-4051-ad32-e733a848450d", "indicator--2c4ee7eb-e891-4e3b-86d6-4dfc64ec67e5", "indicator--b3c4b8f0-29be-4942-9610-c99eb52ac388", "indicator--b5face8f-87e1-4693-865d-7405b980ede0", "indicator--a0b48f8c-6ffc-46c8-a223-605b055523dc", "indicator--0c17aee9-906b-4287-abd5-3ec796d79cad", "indicator--32f8eb31-3bd3-4b91-bfe0-069f5a21a47c", "indicator--84c4f44f-d3de-43cb-a191-2070205f4c4b", "indicator--649ae3ef-e504-45b5-afdd-4dde9de36133", "indicator--885b4124-5269-412f-9031-14d4f0c0f611", "indicator--00354ad5-be30-4744-b6a8-c26cb0c44fa2", "indicator--be1e74bb-39a3-4abe-be96-0b189a5b8ee5", "indicator--3b0415ca-7903-45f1-9cfd-8bca467286ab", "indicator--dc424b37-34fa-41b5-8dda-c1c19047caab", "indicator--7c81703f-985f-46b2-9570-e71e566132a9", "indicator--09faed54-3409-429c-92ed-c7e2209e7c5c", "indicator--58f2200c-100c-488d-8be3-4d64196cda76", "indicator--28d22344-87c8-4080-be5a-a71891581231", "indicator--2f3906d9-6475-4e10-b796-6ccbddb5deb7", "indicator--502ea086-0b40-4ed5-8f43-f884926eae20", "indicator--0fd2f25b-816c-49e5-a86a-fb96f9faeeb9", "indicator--c933dde5-fea9-4a69-b41e-3382d784578d", "indicator--eb720210-1d79-4f0c-97f1-f85960707b11", "indicator--48fea121-4ca0-4a07-9842-17463eef3859", "indicator--f3aac285-0a1f-469a-a261-fbd6bc1a22ae", "indicator--ad582b8c-ca1e-40f4-91fc-e05d6de182d3", "indicator--57d7c0a1-ece9-4464-b999-f6a16d737d31", "indicator--fb604a94-ed12-42f4-be19-9f73735a3b29", "indicator--82cb0db6-91f9-421e-a860-17c7d680e850", "indicator--b6497b4b-dc92-4603-bf95-2c89efea60ee", "indicator--fb0dd15f-3760-493a-8e05-7044c6d7a37c", "indicator--88aca465-7e97-422a-a627-ce805238ad36", "indicator--4361cf39-9b39-46a8-8407-edb2e0bb4d15", "indicator--36dc4672-0edc-4a6c-95ef-368f01782802", "indicator--771187b5-865f-4c72-acc8-6c8b1a927a05", "indicator--adcbf351-fc90-4db3-bbc3-9fe6d76c0ca9", "indicator--cd7641f4-4db3-46ee-b9a0-2acc7ef01dbb", "indicator--200b1d66-3c6f-47ec-9f7e-4b3d80048216", "indicator--128dfcfb-d8df-4ee3-81b9-949a9c441312", "indicator--70ad3693-48ad-47b8-ae86-dfb1dc2a95a1", "indicator--2e5be27d-3857-4348-84e7-f7c23fd5b6bc", "indicator--9e46d6bd-af4d-4364-9b12-df401bf5a8f8", "indicator--92e4dadf-1b3b-4791-995b-22ff87886bd4", "indicator--c53658ea-143d-4fda-a54b-72ebe1077071", "indicator--a4ea8e16-8049-429a-9771-152264680022", "indicator--920e7d7f-d4f8-4e3a-bd2e-26bcb8d579db", "indicator--08357ffb-8b50-4369-beeb-3ce8c831ad6b", "indicator--5b8f1022-f31d-4f7e-9949-1ce548409a78", "indicator--86851720-977d-4a0f-8116-b6cd36eeb89f", "indicator--c6051051-8eb9-4d12-9d6c-88fc8bffa697", "indicator--151c67e5-7ca2-4770-afb8-fd4b1de75057", "indicator--f840cb76-4da0-4923-8aef-0dee9870b1f3", "indicator--830312ee-8244-46b8-8ea7-96ebf0e22a59", "indicator--f550582d-876c-4bbd-890c-fa7b74e6c775", "indicator--eaeb5755-0417-4564-a4ec-b66fc02a2a97", "indicator--67318c85-efe6-4339-b862-c3f91fd727c0", "indicator--bf3f2e13-e98e-40df-9088-1d2bdd77131c", "indicator--22d2f0eb-291d-4113-9796-a86eba51f211", "indicator--c5a53261-1dd8-4caf-8e9a-8d8ee8c9ba8f", "indicator--a870464a-080d-4e65-b079-901a32eb671a", "indicator--fd5b52b1-5ab9-460c-a7fe-27b260574f19", "indicator--3c2d79ed-deaf-4c58-8185-9488f8fb1b21", "indicator--67a33d39-5210-4237-b28f-78b025fc706d", "indicator--1749c752-53a6-4ca7-a1a2-11b45694f18b", "indicator--1dae41e6-5471-40a3-82c5-335d76e28d21", "indicator--6b2e8556-83f6-46a8-9cc5-3a894c5e34eb", "indicator--dbe1d167-f653-4220-aaf4-5c0971e14e01", "indicator--7367b8a7-e556-4da2-9ac5-2c9f89222200", "indicator--6c11a271-eb23-4d78-8a4c-f6f3c6af3645", "indicator--18bb5495-f8b0-410c-89dd-1674a6f95878", "indicator--afea39f1-b492-48b6-9a3f-427c0034ba80", "indicator--6ad9985e-1d9e-4c04-be7c-679694b5aab5", "indicator--8a7975e5-6619-4680-aa7f-2d0bc3dfbf86", "indicator--5550ec6f-8477-45fe-bd42-74898ee26faf", "indicator--2e690957-f8a1-4ae4-a63c-e4c65f928259", "indicator--a122bbfe-77ac-4fc0-a8a2-c4f2486c9f98", "indicator--8e037193-6b16-4e3d-b9f5-6312ae85cbeb", "indicator--029c6aeb-9233-47bc-b513-2828d9dfb5ea", "indicator--d62fee9c-512d-48a7-abf4-3d5f73e96577", "indicator--6e9fa8b5-5b53-43a3-b4f6-5f66e9d7255b", "indicator--9bf70ec0-b2e9-4664-86ea-5f8ba2bad16e", "indicator--0d39cbb4-0c3f-4346-bfb1-81db127b84b8", "indicator--a9037cae-7f62-4fd1-b0e7-f288fcc6b32d", "indicator--7d06c3a2-0c17-40ac-944d-8093af525f14", "indicator--5e90eaf5-e532-4ad1-ae75-e0a49de4a708", "indicator--e8b24fe2-fc1a-4db7-85a9-15f314b40628", "indicator--13efe62d-002d-4e69-ad99-394efb772ac1", "indicator--49f47872-b54c-4f28-8e74-d2df82757c0b", "indicator--5a80f5ed-0ae6-4587-849b-0c8014e9212e", "indicator--d5999b1b-69f7-4199-963d-01812f3eb26e", "indicator--992a89ca-988b-4ebd-935c-1dfd1ab02175", "indicator--dd089cac-9953-48d8-986b-5a2742c8c162", "indicator--31c6763a-010c-4369-87b4-e8f0a92c292b", "indicator--52a96d89-d634-4d49-882b-37c6151120d4", "indicator--7ec7e430-dd67-4d82-bd48-c72151460a36", "indicator--05db8972-3c59-4467-92df-73e90aab95f4", "indicator--1085f982-7ca4-4e55-abd6-174ae6c46843", "indicator--8313b2cb-5e69-479a-9211-6fdb1e390a1f", "indicator--240bf20c-0693-4f97-b9f8-ad0fe32c17e7", "indicator--df10ef84-a9d3-435e-8b17-eb005eed7ec6", "indicator--f441a6ee-c498-4413-ba66-ec9e584d8d93", "indicator--1c9fa4b3-dbd2-41a1-8e0a-68a1ec30afc0", "indicator--5cdde3de-3a70-481b-a811-9583c6363e2b", "indicator--6c716c18-11b4-48b3-93f1-83732415d757", "indicator--f1654c06-589f-4924-856c-179be777c0b7", "indicator--2f3fbc64-82bd-4d57-b856-14b6694a95ec", "indicator--e6f9776d-232f-4402-982d-5a2d7dd3d097", "indicator--2bd9e462-db99-4db4-bfde-c7507510e96f", "indicator--64b5e134-3db4-4175-8b52-61582c2a101d", "indicator--aa867eef-8370-48d7-b382-3b499ccfa015", "indicator--97d47314-5bf8-41a4-a242-25601e321144", "indicator--d68dc7fd-9496-4cc5-a312-5007d16443a4", "indicator--8ee6d1b9-0bb8-4458-b73e-10a8b7a5101e", "indicator--80edb53e-a436-4936-8eee-c19790887b5c", "indicator--4c3dd28e-0c19-4049-a010-1e58fe1e3da9", "indicator--4b1e1a4a-70d0-4ed9-bcbb-2799ca81dd0e", "indicator--6c88c6b1-821b-41fc-9356-6b0c8cbf374b", "indicator--35bc1f52-753d-4b7a-b946-078df54a3a55", "indicator--8d8123fc-2d04-4a2c-ab18-5b80e8c7d0d7", "indicator--782eb7d3-a585-4c2a-8589-5e7f2314e196", "indicator--949ff482-9d94-4160-973b-3b3c42f283ab", "indicator--16aee340-dda5-4de1-b319-b8483737d3a8", "indicator--6694be82-e658-4c39-8192-e6b6727a8602", "indicator--317d789f-401c-447c-9241-bd9d36f3e265", "indicator--19cd953a-f2e0-4497-a843-f3eb1952005f", "indicator--f504387e-9203-470c-a9c5-45a8da49a8f7", "indicator--744a1081-6fb5-41e2-bee7-b1c2bbf0a56c", "indicator--ff05c5fd-d5c3-4863-a8da-1fc88930db00", "indicator--398e0914-7fef-4983-ae98-9e13f41c6a4c", "indicator--f833e873-54a6-4bec-9bba-148a2b6a48a2", "indicator--c0dd0722-c677-46df-9607-dfdec29f2ab9", "indicator--041e375b-ada7-41e9-81c9-53c4771e4588", "indicator--49985fe4-194d-4210-8a00-932ba7a9f7ec", "indicator--78d9fad1-caad-4926-86cb-6cff5a579abe", "indicator--f24987cf-89a7-491c-8ec2-048672666f16", "indicator--d513e1f9-03a5-4edf-8031-9805b4504be4", "indicator--2cca3131-c369-48cd-b031-bfa565203846", "indicator--27782920-3a59-4a7b-92b9-3c89817f9a55", "indicator--40c973f6-2981-4e75-824d-22361268ba59", "indicator--06935eee-d7a5-4540-b346-26c14223ea29", "indicator--fd2159a6-a436-4ce0-9544-d2ed24c6835b", "indicator--d4036db3-5acf-4503-9363-4153cbb52d40", "indicator--8a15ef0f-ed5b-4afa-af7c-a1b06998334c", "indicator--9417a73e-b133-4541-9b2e-7b4cda66b591", "indicator--cac2e2e5-d551-4c8b-b3db-8c53ffc64279", "indicator--2e268988-61ef-428d-b623-4dd58c594f1b", "indicator--d90c176a-ed01-41ed-ad8f-4054fa81d2df", "indicator--7c8dc123-c829-47e5-8250-d2606225e3ae", "indicator--11e94a8a-c987-4715-a066-b9cba90d0112", "indicator--64e700f6-0e72-49de-8ee9-21852382465d", "indicator--fb9a2a6c-f61d-43db-8824-b14929bae618", "indicator--3ba8b839-d77e-4934-8063-3e90e2ddb28e", "indicator--ba19e0cb-1c03-4a49-afce-39d750ee0521", "indicator--f903c8e4-1b83-4ce4-8aa4-e7a2237ed540", "indicator--d0a7f63b-348f-4074-8f69-cf21c8002870", "indicator--e8d2ab5f-5d62-4c2e-b331-51475d2bbbc4", "indicator--5c847486-21e9-4cc6-9196-b73965f5d3a4", "indicator--25e776cb-ed0b-4803-abcf-8a6e70442390", "indicator--7a62f4e0-c61f-48ec-9cc4-721ccb340e3a", "indicator--8c2b3f83-e318-4868-95c9-7c9ed404c9b3", "indicator--f8b7acf4-2f73-4661-9ce8-b04eabd00b95", "indicator--94bcff3d-1ce2-4aac-9e77-3b812e35d39e", "indicator--1cf265d8-79f3-419b-9b10-c73177db647d", "indicator--544559af-79eb-4212-95d0-4bd5cd9a0cf4", "indicator--bb16d4f3-c515-40d2-896b-944017388f03", "indicator--9a75876a-7824-4088-b296-b659aedc7911", "indicator--399396da-f25c-42b6-b924-c6b03baf0f4d", "indicator--6baaaa95-4dc1-4477-ada5-16efb83c7f2e", "indicator--c6ec8a12-8163-4988-9421-92b45dc2f80b", "indicator--bc77a4df-705e-426b-a064-fc72a5ce6c91", "indicator--684f6793-4bec-49bf-97fb-442a610f5814", "indicator--583402cf-256f-4ae4-831a-927725aee717", "indicator--066bc984-75db-4b9c-8f80-d828a42e1c27", "indicator--39365c04-f90d-4b82-9188-18626dd566c8", "indicator--e264668a-70af-40d1-bf6a-8d19b1e47c17", "indicator--5f8d6fae-2334-4610-891f-b0dbe13e7de8", "indicator--8a93bfc9-0cda-48cd-a83d-301c92d24330", "indicator--ba8d33f2-318e-4429-96ad-24b9ecb75fff", "indicator--2d4e4b11-a262-4acc-a4c6-777bd923e58e", "indicator--68c04b68-c68e-4b7c-a814-e47183572c96", "indicator--4602c91f-a5be-497f-81ef-54815c2c3345", "indicator--6d61ba0b-5b16-4371-8347-80e2662dfa6a", "indicator--24777b01-9340-446d-a607-32d23fe651c4", "indicator--d79b4d46-ac35-4e64-8332-7e8f6945b499", "indicator--0a649345-8c81-4a25-85d9-75536c75e43a", "indicator--50679401-22ba-456e-a047-13aa3b30b37e", "indicator--68561b4e-3282-4ca9-9a54-84b96c932870", "indicator--2eccd5dd-f6ee-4339-a907-15e1c51bed85", "indicator--7b7b49da-510b-4e55-b2d9-5d363f438c75", "indicator--91adc92e-acae-4a50-bcc3-55dab0788d4a", "indicator--3ec19c9c-0d1d-4c28-873f-87ad42ca8aa4", "indicator--2312f298-02ad-4b2b-9555-86a15cd0fcc4", "indicator--79037b22-6395-417d-90e8-9524fa45180f", "indicator--fe634393-7b55-4a77-b677-d2f3a5f262d9", "indicator--9f205ea4-ba86-4dec-9696-0b09ba6d7054", "indicator--02c0939d-a7f5-4000-8a03-503724f1a8f8", "indicator--20c6a00c-477d-432b-8bae-67f82fed5d23", "indicator--c36fb0a0-474e-4554-b53a-108d79fe8a95", "indicator--034f3037-2aa4-4baf-8f0b-2b16de389823", "indicator--8df752b3-d99a-4047-9a1c-53c8bb5d7790", "indicator--fa41fb97-8428-495e-bab8-868768b9aea1", "indicator--fb5a71f4-581e-4498-8fcc-0a59caa7e621", "indicator--b2e20e1f-2ee8-4a48-9983-8331785676d3", "indicator--2ba21888-009c-4683-8982-b77760617fd3", "indicator--f074c4db-4230-4b96-988c-d7eeb43e626a", "indicator--10d43314-1116-4439-8da5-63c52b4bfa95", "indicator--7f20fd9a-41c2-408e-82ec-dccf2dd80925", "indicator--cf84b88c-709e-4ff8-ad4c-f75d306d66ec", "indicator--aca30edc-d331-4f77-a06d-fdd20d7b2dc8", "indicator--bcfa03f3-9499-4202-95c2-c0b3ff622efa", "indicator--4d09a826-b590-4fb9-aab9-eaa8fd535a34", "indicator--68cc9ad2-a67b-418b-bba5-78889e08e860", "indicator--77966d58-5bae-4a17-844f-d854f83b784a", "indicator--05da2242-116d-49b9-93de-f6e94de05025", "indicator--7659f410-477b-4722-99fc-e25006ee5770", "indicator--7ce188f5-f607-447e-9394-5c991764452e", "indicator--3c524ea5-a5d2-486f-a76d-e8da20c43285", "indicator--9f6375bd-0282-432f-a28d-817d1148fedb", "indicator--e708705e-6cfc-46cc-bedd-cc0474d84f3f", "indicator--21559589-8880-4b46-93f2-000e6ba5ed3f", "indicator--c96e6b2d-2757-4e0a-956a-74f7d7a6e4f4", "indicator--88a23a3a-e751-4da7-ac60-de8e322b11b7", "indicator--9af6df85-063f-468e-83ba-dbfa0c0946fe", "indicator--6d29e3e9-2b11-4b6c-ac31-28267a7854f9", "indicator--f54f8356-13ac-4945-8495-8864e4a065a9", "indicator--7ff243b5-a6a9-4e89-99af-b1df0f928777", "indicator--ec8f94d3-ab13-49b4-a523-c55c3a736764", "indicator--b51c1a30-d11b-4fa6-b0c3-773c6337521e", "indicator--fad637c5-bc5c-4048-993f-73d3301e5266", "indicator--05913797-ba41-425c-8f2f-eb1045ad2d21", "indicator--726b7c92-603c-4df4-8264-5b24a5b8e26e", "indicator--3c3f8b31-6e09-4483-8ebb-d4fb78f4e86b", "indicator--f81157e7-c73f-4e98-96a9-e1d6fa61aa5b", "indicator--d2fdbec1-1e2f-4179-bdcb-339807c08e7c", "indicator--04722ba9-4825-45e8-8e5a-fac823cd91a9", "indicator--86c04ef3-877c-4059-ba11-65daf4bc2977", "indicator--73e693f1-3455-4e8b-a9c9-7f2175db6b3b", "indicator--23296cc6-cb12-4491-a2f1-f222384f7180", "indicator--f8b0ab45-43a7-4b9d-8caa-d537dd247e3b", "indicator--2336b1cf-0fc4-41cb-aeec-e0b81ca840b4", "indicator--e29bb77f-bfc3-4f17-a102-efb39fa94180", "indicator--72384b29-13ef-4654-9907-2cfb2016c30c", "indicator--f3584384-25a6-4856-b141-0048a3ff0da5", "indicator--b46b3a08-1739-46ec-821d-d2f2b0b13bf9", "indicator--260e32c5-7cf1-4030-9f6a-2f116c9c207d", "indicator--467133c4-265b-4f40-907f-2e4746680517", "indicator--b58eedfa-b28e-4cd6-b57f-5782571290d5", "indicator--26ad8b55-fb48-4d33-996d-22521a354c0c", "indicator--2f8b6879-ec02-4e25-a905-22feb3795c9e", "indicator--ab84294b-15e4-41c3-8b4c-b8b7c9b4828c", "indicator--de3b121b-30c4-474f-a3ca-f2697c751fae", "indicator--e9488486-8ed6-4437-8a84-cfc0b2a23d29", "indicator--ea600308-9b1d-4a45-bf8e-7be3ef3d80e4", "indicator--4da3dd47-f2f8-4bcf-8563-81c251f8ac4b", "indicator--eda27ad0-27b9-43a8-83bb-1c054edc24b9", "indicator--320420e2-11bd-43c9-83a8-fb4d37fbb98f", "indicator--04dc679c-1b46-44a4-8d2b-7badf45755ff", "indicator--2b0444b2-f076-4c41-b5a1-5bc242046084", "indicator--e75470fd-424b-4858-8b97-35a28a3d0a4f", "indicator--7034913b-fa8a-4fe2-b633-3f8699e824b0", "indicator--bda43ad5-f025-4913-9c42-f96d8bbadfea", "indicator--e88dfa87-cd18-4f74-9385-ab72d9a93bed", "indicator--eff4aaad-8260-4890-b6f9-3406f55e63cb", "indicator--9cfa079a-f996-413a-853c-95c54022010d", "indicator--3fc52861-1b74-49e0-9300-225227793542", "indicator--b80d4f98-f6fa-42fe-9696-db037a6ebf01", "indicator--2f94f2cf-c774-4553-99b2-a363027234d4", "indicator--49fa65fd-4090-4701-91d4-ca029d7ba13e", "indicator--d7435f61-2173-4902-88a2-9096d102f6cc", "indicator--4f5acf8d-8992-4c68-b6d5-5a2fa08b4b12", "indicator--7905d294-bc50-44f7-b574-98191f638cb7", "indicator--f3c911f4-2b33-4dd2-88a0-d9b305eb64c0", "indicator--3721ede0-504c-4d90-a2aa-58e20c2afe90", "indicator--d4cc1158-5825-4547-b98e-d0ce756e9df7", "indicator--477953df-0c70-4217-8283-94d75b293ddf", "indicator--65e5414e-c71f-432c-9db3-3b4f873ef7f7", "indicator--b249fc80-eb19-41e2-91c3-72423d5574a1", "indicator--64c55410-ed87-4d8f-b50a-cd63f29ad04a", "indicator--dd04ad7c-6961-4c64-974b-1b66c3c41b3f", "indicator--cb5cda13-d5d0-4b6d-8e28-b52a84ee7387", "indicator--49b6eda9-e608-4c04-bb31-c39469d872c4", "indicator--3942b9f3-9001-469b-b130-40a5082755a3", "indicator--3a3b805b-6d9f-4f2e-83be-10efff1c4612", "indicator--f0b3c134-55c0-4bab-b55a-c3e7fddc8e94", "indicator--679b68b2-3daf-464f-8bac-9c6a77dc87a8", "indicator--ff9aa6cd-0c39-4e3f-8246-4e70b4b69125", "indicator--54870799-5a7c-4f5f-984b-418b53e71117", "indicator--e19e8f9e-5262-4b14-b82a-eec1ced216a0", "indicator--f5653a7e-9ddb-46a5-a5bd-adfb871b760a", "indicator--3c054593-aa7c-429a-b141-f25783d310ef", "indicator--d9f53b91-53f7-40ed-8a9d-19ae4aac0d08", "indicator--af8e22bc-efe3-46ce-bec1-f922c8c86fa6", "indicator--6b43baed-cec6-4321-b581-f44aac027304", "indicator--92714df0-c09d-4a20-b36c-62dfb171003b", "indicator--7a254507-72cc-4f3c-9efa-1d5e374e43d4", "indicator--35e81fa0-3b23-4895-9491-1d8d28f1e453", "indicator--ec564d38-3c7b-41d3-aaf3-ee56d201dcd4", "indicator--eeeb4bcd-ef4f-44f5-9ea3-93d658f8d22c", "indicator--abef1af9-764b-4614-9ae1-b349271e5c8d", "indicator--56f2a0f1-3708-4045-8677-901377746ea6", "indicator--bf0a104f-6eb2-4060-ab06-ad87fc4785ac", "indicator--b05c44b2-1b00-4338-af56-232ef9a070cf", "indicator--0d988a98-0bf1-4104-a4d9-3c89de7d7815", "indicator--40777d9c-ed8c-4b43-bcd4-0f0a7db12cc7", "indicator--9881890f-f714-4409-8f77-f81e1d05ad5d", "indicator--7d149e22-5f83-4b4a-8faa-faf00f477a69", "indicator--07ff2dd8-9367-482f-bcfb-78719f567b34", "indicator--e86c2e24-ae1e-41e3-ab50-ffaa997e390c", "indicator--673f06ee-f577-4863-bc4d-5ca622af1472", "indicator--3ad7b246-9342-4cee-b1de-af8b55ed157c", "indicator--3f44dae0-6f69-41b0-a662-52d19b4fcb83", "indicator--d357912f-72c0-4d11-a9ee-576f79fec0f0", "indicator--7633097b-9598-47cc-9572-9338566fd2f4", "indicator--396ae2f3-a079-4eae-861a-7c08239f2d64", "indicator--b0cad94a-7899-4b26-848f-f8911b3c3019", "indicator--791622f5-d200-454d-ac26-eb96a2ec8fbe", "indicator--e82ba164-8540-4fc8-89f9-eb5674812e2c", "indicator--9b59e2f2-9b85-40d7-a39a-1797e59a12ab", "indicator--aba2ee3f-55b1-471c-8a3d-c82604684363", "indicator--5b9f9848-c2e7-44fd-aa7d-9d3a6eeb7a26", "indicator--81a2fd1d-1be6-410c-b977-f64219a4b09b", "indicator--1597afa8-5a3c-4b77-8fbc-25817155fb9a", "indicator--5ad1d552-308e-4379-a730-073a5ebac952", "indicator--8d1babd7-792d-413d-a4bf-1a1715cd3766", "indicator--02902d3c-c8d1-4282-81e3-4ce901936b47", "indicator--08b1daab-30ae-4fc5-8408-423213b8a325", "indicator--536435a5-a2ce-4501-a84d-9c41914e534f", "indicator--4dd003ee-3a02-4a8e-ba3e-3e892f93b550", "indicator--e14ed3e4-34ad-4dff-8182-0d822f2cdc0e", "indicator--a41f459b-5cdc-473e-afd1-74fcebb449b9", "indicator--781f4857-66b5-4fac-b73a-fa7d64f4b6fc", "indicator--86e28806-3808-43cf-89ec-f06e6cf39281", "indicator--e78642b5-61e7-43be-92fb-2282844e8a98", "indicator--c0a7bf44-4be6-4056-b42d-bd907fec53b9", "indicator--ad32eb53-6e2f-4015-bb72-538745b3c7c0", "indicator--4c41e7b1-aa65-4b00-adc7-ed9aa874c662", "indicator--c98714d5-5c14-49c3-91d8-5a1763de27cf", "indicator--9ea5a62a-9ec8-4b38-af74-e0f7eaa09ce7", "indicator--76838263-bac5-485e-9cf3-1569fd98e4f6", "indicator--e95a3a46-5277-48e9-a630-31fb3e5c6808", "indicator--f2c5261a-ce45-431d-ae17-86ee0c96870d", "indicator--dc9ad6e6-3f45-482b-a938-06c33d042f41", "indicator--8e54a85d-6326-4543-bee0-d482442a9786", "indicator--61d30d7f-853a-4cc3-9e72-dd07fd78dcbd", "indicator--e854401a-7bed-4395-8410-ba261109c144", "indicator--cf91d992-039b-4e3c-8106-db2a2e59c547", "indicator--67c0fff0-40ea-4785-9dc6-8d9773251010", "indicator--2fbb2595-69d5-4341-8df1-bb5b467b2d01", "indicator--b7039fbb-c5ed-4b7a-88dc-8af3aefbe26d", "indicator--a9a9f644-2e82-4c58-b774-9895ff2966c5", "indicator--713657a4-e845-45d2-840d-4d540730b024", "indicator--14f13d80-b114-42da-a88c-5842c350c862", "indicator--30ddb0bc-ad45-4d76-a703-e8b8b6e7b730", "indicator--6fdf713e-9414-4546-9ad0-53723a2057d4", "indicator--daddac90-2664-46a5-8655-6d81c87a6e5d", "indicator--d28a5ed7-628e-4f6c-a16e-2243b5e2c6f5", "indicator--53118d3d-fc80-4e10-85e1-700ec2a2bae1", "indicator--11c8b72f-ac13-432c-9aa2-3fac210d8b66", "indicator--b61cda75-73c6-4b09-b630-b1ebb1a75fbf", "indicator--81c4a920-d93f-4854-bbef-0556fc5fd9c9", "indicator--980b7578-5a5a-4e08-a087-992a37aa25b2", "indicator--a8638adc-bb44-4d46-a12a-afa4dcc7d607", "indicator--f174a5be-8719-49ac-a761-343f55e1d086", "indicator--c761b6e8-374d-4512-ac3a-73e84c33ea91", "indicator--0d0d7aa7-9ecc-4b0f-9152-60d197c236d7", "indicator--cc433480-2beb-4227-bcb8-cbb68e9efc06", "indicator--4493ed14-1007-4d6c-a081-93f48127d2e4", "indicator--84b1fb79-7d4a-4221-9f83-79ce9c1d19c0", "indicator--21b9a53e-fc3d-4ba2-91da-bcd49898272d", "indicator--a38bad22-c392-4ac7-a354-fc17d99da088", "indicator--d659a97e-e272-4f4f-aad4-cb5edc7b47b1", "indicator--4b92e34f-cda3-4402-86f5-16628fdf3414", "indicator--1554545b-0321-4922-9d8a-e244417bf57a", "indicator--db74a77a-f862-44c9-8930-ef8751d070e1", "indicator--dd3e0c1c-875d-473b-830c-e2f553f7f0a5", "indicator--d1a3423a-b566-49d3-9f9b-fab9a1c03243", "indicator--69307064-a7b7-4b4f-9454-446684cf576d", "indicator--ae0c20fe-0750-4c79-b1e4-ab1d78962a88", "indicator--a7290ef9-fac3-4a94-bcea-e32197a38206", "indicator--e6de21d8-269c-46d4-8aa1-b196b5b28a77", "indicator--3310e674-32be-48ef-b84f-3a7e69572126", "indicator--0402f084-3ad5-4d47-8bde-0bd2df3b1f64", "indicator--26b68d33-e0d5-43c4-9541-16ab222cf6a6", "indicator--cb04934a-acb0-482c-a050-e88bf18a6d2e", "indicator--ff9f41c1-c3bf-4a29-93f7-b0ffe3294b8a", "indicator--e6ccece1-4e25-4a84-8d79-e83a4167284b", "indicator--a8d83d6f-56cf-4ac3-87d7-189bc5ae15fd", "indicator--cc8f7c07-a0e0-48c4-99b8-7083a8451504", "indicator--117823a0-c3ad-4206-9c8e-9c4caf98dd5f", "indicator--26e3ee77-ce45-467e-bfbd-24ccd3328063", "indicator--6686c8ea-0298-4faf-8fdf-91b624c4872d", "indicator--0ef3fe11-ffd5-4e93-95f4-aa4e13e8ffa5", "indicator--87b4027f-3536-4b1a-979b-2fed0165aaf7", "indicator--8e5b3fe3-28c3-46d8-acc1-7889efef17e2", "indicator--270f3ae6-e35d-495b-9e55-7b94f9537fa8", "indicator--6a8b7db9-1a44-48da-b9ea-3f70af0bee7a", "indicator--7b6e5486-2181-4b78-a6de-d0f5520c26fb", "indicator--954d2ccf-6e86-4dd4-b32a-7038c4c28bf3", "indicator--304f25af-9e81-45c4-b27f-1ec92aafcb69", "indicator--1326064d-4306-43e0-a0fe-85ecccff8d19", "indicator--63b887f8-14c1-4b3a-99ef-b88ed3dbfb19", "indicator--00dc229e-4c55-40e1-ab03-6197b9ced71b", "indicator--102dea82-01ca-4159-9ba0-c8ed4af177d9", "indicator--9a497113-a45d-4cf1-82f1-e0d18ed8c95a", "indicator--368aa922-9fd2-4e21-a516-59e8da7bc335", "indicator--f538544b-ebb8-4d8a-90bb-79fff13d34c0", "indicator--dc67445e-27b0-4785-9481-d259a2ec98b2", "indicator--852d974c-8b2d-45ab-a483-38d64744e5c1", "indicator--a4af51cc-54f0-4480-8804-cc5e5d0b3d19", "indicator--2a09cb92-4832-40c6-a63c-a611e7e8a703", "indicator--153acbd9-b352-4c87-b224-6b84f5d8d619", "indicator--3b811faa-4e06-43c7-bd8e-087bc2e1663e", "indicator--382cbc9c-a606-4c72-8b61-3acde6b865b8", "indicator--445252be-a052-4258-92e2-e58493033400", "indicator--c64d5a65-5b46-4af3-a755-bbe01221bd30", "indicator--316d1f38-390c-4ed9-8267-afb807d72689", "indicator--cd05a8e5-43a7-43cf-a3a2-899dc0f2bb70", "indicator--338662c9-227a-4336-aef7-7bbe1f79de2d", "indicator--f3e82d98-e7e9-4e8c-84ff-f1b9c9cb8bdd", "indicator--b12d2a49-a9ac-4e79-aa69-049a132b89a9", "indicator--cfaa66da-3c0e-4f47-a8ff-a55bb3fc7a3b", "indicator--6bbe4a30-f554-4fc4-934a-db2c357f1c25", "indicator--35c4eab4-609d-41e8-a694-7bbe8a25106e", "indicator--2cd97854-d845-48ac-b40e-4572d0b0e1d0", "indicator--d40f878e-7f42-4cd9-b9bb-bb1c5b00a647", "indicator--767a62fa-ecff-4bac-bd60-8348247a670a", "indicator--b99f1dcd-ee38-41d0-bc27-83c61e0a3bb1", "indicator--cd2110dc-2521-4e13-9e1e-028b7e153b93", "indicator--32804078-707b-46a4-b1b9-e46e3a2d13f5", "indicator--ebdfe81e-2e8d-4f05-8215-ec7f3ddce17d", "indicator--a38db051-c3f0-4033-a779-d7128523d2a8", "indicator--de1e522c-ebb0-4693-a2e2-cc590efe4a6d", "indicator--c12fab05-8668-431a-a27e-d19c8877833c", "indicator--d3aed5c2-6369-4837-ae80-5220202ad187", "indicator--8b63ae5f-4944-4e0d-92d5-29b0f777b4fc", "indicator--e891ae77-5408-4b4a-b37d-7768d7b21c60", "indicator--8d320c40-b9a0-468d-9608-dce3cd50cd9f", "indicator--352296c7-b485-46af-ba44-9be630b4b48d", "indicator--cb0f11ea-fc27-481e-b419-c444ff830afa", "indicator--43a5e152-ee94-4bcf-b78a-5bb349baf70d", "indicator--810f5e6d-5f96-42bf-9e9c-9023831e4622", "indicator--d18d5cdb-48a3-4187-be1c-cbebfcc93549", "indicator--fe2425fc-ea86-4ed2-8823-9425ce901237", "indicator--2f3d2b80-0c5c-47db-ab8d-f064bdc4d3fa", "indicator--1353cb2d-c02e-4f30-bbcc-91d4e0a65b5c", "indicator--33159b4a-2bf6-482d-84ba-296dd16ccbd0", "indicator--0101fde1-abd4-41a7-afea-4c6f4fc38fd5", "indicator--b722005e-0039-4421-82a0-9998bf81fd75", "indicator--e72f2cb8-106f-4034-adfc-cea569d26f14", "indicator--c0472e0c-afb4-4679-92d6-b21cf2729957", "indicator--3864175c-d18b-44d4-824a-5b775be05ddb", "indicator--2ceab1ed-4810-4459-ae0a-afa8926e72e6", "indicator--cb7e2ae9-83b8-468c-b617-fdfa0b54f920", "indicator--ff5daa94-fbfc-4c1f-931f-7c36ab1fbc18", "indicator--2c789ee6-fa9d-4dd3-ba0f-6f238cf59742", "indicator--14baf222-328d-4deb-acab-e2d991c6b628", "indicator--1ea13e13-7091-4361-a387-c9dd6f61f9d5", "indicator--eba88a3c-258b-4c95-8b16-db28f583f3f9", "indicator--0f97a3d0-d3ac-43c8-b32e-84c7bb7ad453", "indicator--53cf3475-4a66-44c4-a5e2-c69d5eb5ce68", "indicator--972db347-4db1-48c5-8a59-c5e2898e9928", "indicator--e2e8308c-d491-4a52-8ade-b242f6bcd892", "indicator--868ca74f-a4b9-4d30-8292-a95d772088b1", "indicator--afd617df-2f0a-4439-842f-eec2e8f62a43", "indicator--5bc793ba-5a91-4622-a574-13f6bb7f98d8", "indicator--6d30fb79-e226-402d-a3f1-064a62c711fc", "indicator--496d39b2-3c8c-457a-9999-3a92a71e9d69", "indicator--37fa929a-544e-4e95-8a46-0234c0e4376b", "indicator--553c5299-b824-4c33-8b61-20834d497744", "indicator--5542710d-11f3-460f-ad8f-fdd421ec4f97", "indicator--9d988f0b-af48-49af-9850-a96c0a00f2a6", "indicator--973092d7-7511-4f12-a6bb-8a47052f9171", "indicator--a6fa378f-6151-4ca9-996e-6b69dc5233b5", "indicator--e0b95587-5b46-4eb4-95f8-4cd9d3f28842", "indicator--77a7e87f-5147-4e2b-b858-363d1b80ca33", "indicator--09e540f2-acd7-48c9-997b-80bc6c7dee5c", "indicator--4baa4888-47c2-4843-813d-70ac8dfc6229", "indicator--4ab27e23-ca0a-443f-b60f-b0b3b6987cab", "indicator--7977cd53-fdca-4dc3-b5c9-780c169b912b", "indicator--2d62f657-ae5a-4847-a251-f1d70da42f96", "indicator--0966898c-9f2c-4f4f-9efa-c5e67a97d01e", "indicator--b6e81f62-b206-4b06-92f1-7e30ad8ac94e", "indicator--60940e08-4cbb-437d-a657-466d14c9bc3d", "indicator--ac29117d-eb88-490e-be1d-64954b872d6c", "indicator--4abb0ab5-423e-4f03-990d-4efac5d9dda4", "indicator--d84fb9db-ccc2-436e-b2be-554540485afc", "indicator--9bfa444e-44bc-4d5b-8bb5-174574403b50", "indicator--5f3f1d99-d065-4be3-8770-ce8a06826c46", "indicator--46dd8748-8efc-43c4-9b3b-547509057031", "indicator--053a0cab-f585-4763-9532-2bd91c8c99c0", "indicator--934d199b-49ba-49f1-8bad-9923bae99d97", "indicator--daa03441-fc28-492e-ab2c-79b8a6b4c171", "indicator--b4754cce-f9f7-425c-abee-1e419bcc5279", "indicator--37c8556e-a672-4654-a1f3-3110b894754e", "indicator--928ae098-9802-48a2-a532-ebaed934405b", "indicator--d0f21ccf-1dbc-453e-a463-65c002501abc", "indicator--81037bd2-f068-4a9f-a8d6-b509eebf32bf", "indicator--3b7c2489-37a7-4f41-ad50-99860a4874fc", "indicator--80a7412c-607a-49cb-80e5-65321e0dfacb", "indicator--8b44312c-380c-4c00-ba76-e282304da50e", "indicator--93b472db-4130-4bd6-b60b-08df578807d8", "indicator--f886ffea-3426-40e5-b15f-00d633be49d6", "indicator--40517a04-82b6-496f-8ae8-d457d58145f0", "indicator--c21afd76-b635-4d9c-94c3-182fbd726e2e", "indicator--da17d896-0689-4ca8-9743-8c0f185e2070", "indicator--4248ab99-c861-4204-a00b-c6ba12bdda0e", "indicator--0d0f0085-0fec-4f3e-abad-029dd3ee3869", "indicator--7cab61c8-fdad-42f4-b90b-707c4474fe77", "indicator--db05d54b-a3ae-4c42-84d3-ec64ebc70d72", "indicator--20f05eae-5171-4ca7-a041-b2fd8b5a9940", "indicator--f760bf54-08d2-4dce-8678-852dfd9b630a", "indicator--d06ce0e4-0c65-4a86-8e7c-5c1742f0cb83", "indicator--3da00cf6-368f-4e27-a30d-28ab61b4d90e", "indicator--3cf0c905-6974-43f5-ae08-60490d18069e", "indicator--9fea9ae2-704a-4620-b689-2e84ebffc624", "indicator--921173fe-fba5-4b9b-acf2-4650d3de8cd9", "indicator--13af6467-3c92-4b86-8db2-478cf3acc8d5", "indicator--0d0f3ac1-12a8-48b4-af19-0e6bc2a0e719", "indicator--6e4dde13-f3cd-4be5-a649-d5e536e5c094", "indicator--a6832fcd-8419-4bc1-bb48-089e18e77ef0", "indicator--955d1965-2f94-4df3-b543-8b5a93c922f2", "indicator--ae731436-3467-4ac3-af32-c7399349fc12", "indicator--a2dcfdb6-de07-46ca-a411-2770f47d1ad5", "indicator--98369830-e31a-4b45-8f85-70d508b91c1e", "indicator--a5c315b8-9685-4c2e-8041-9cfbae05c255", "indicator--fc568abe-57fa-4a31-a535-6c04ceb14bed", "indicator--4b7c594d-c4a5-4833-8493-064c9b53ba44", "indicator--b36a6017-6b76-4770-980d-c19624a9dad9", "indicator--ff81c474-d70c-4d3f-91d7-9d2995032416", "indicator--3b75fb0d-e0e8-4e41-84a8-6e77213fd65e", "indicator--12c53716-9b68-4edc-afd8-24f781895dfa", "indicator--0ffa1034-3547-4719-811e-42c168227c1b", "indicator--389d0952-8dc4-44a1-b000-d329c138f209", "indicator--37bf3699-3325-4bdb-a110-9e44405ca14e", "indicator--51a478ea-faac-4320-9791-ac2a019fbb9c", "indicator--e3171ac4-c147-4f33-9501-70ff1aebb44d", "indicator--1196832a-0b81-4003-bb5e-7e237103596f", "indicator--d3c1b5a0-c574-412f-b5b2-c8da90d739a3", "indicator--14617476-bf14-4aea-b5d4-561c6fa3d524", "indicator--c0eb4e60-5507-4183-82c3-ef65f559df80", "indicator--f0b48218-24e2-456a-aed6-b7cc9a52686d", "indicator--e336e0fd-9d60-4dad-b70f-4a02934616d8", "indicator--23a88a62-7cb4-467b-8e4e-d4a414d30fdd", "indicator--509ea57f-3a66-42e8-93a3-6ce4b5f368cb", "indicator--3ccf2e36-dea7-4d59-8b64-5b43016cc399", "indicator--63e833ce-6c75-43bc-bbd3-0046a0f4ebcc", "indicator--bd284464-e767-4b0d-901d-84e7f5774ec5", "indicator--975863a1-9d72-41cc-86c7-a9a4c1e8abe9", "indicator--01d69b75-4955-4dad-a874-e2f427098d02", "indicator--a7a4c3cd-1f10-4b9c-8d29-e2f66b3e6ef7", "indicator--826e6ff1-4e0a-421d-a0be-d5da3f893c97", "indicator--08904d5a-6264-4808-b735-c00908188c1b", "indicator--9a144ca9-cff2-48f1-bc74-2024844993e3", "indicator--39d711d3-39c0-4d4b-9297-41f25e79337b", "indicator--bc2a806b-fc3a-47fa-a80e-9a8bccbe88b8", "indicator--68982719-5dcf-4f19-a413-bd0ba6a1a153", "indicator--f610d356-8a1f-4fb7-a12a-cf8bd4032973", "indicator--2b7c64e3-2e5b-43fa-b3d9-ea0da1a16efa", "indicator--7c8ea291-853e-40f6-b231-78e70aa18771", "indicator--aa30826f-2702-4d55-88c1-59f248ac3fc0", "indicator--4b5d0bf3-b5bc-4403-b321-5d01522a0827", "indicator--2bb96972-9eaf-4b6c-84f6-92b3e201abae", "indicator--d8200364-556f-4607-bfcf-f1f82404ccc9", "indicator--427b905a-89a1-455d-90f7-e4106ad40a13", "indicator--7339882a-9342-4991-bc87-77708b7f2dd9", "indicator--7c246196-f226-4b92-96d1-778c0f0bdba5", "indicator--d441f04c-ca19-44f6-b7d1-287a72246bc5", "indicator--938cbf91-1237-4fd7-860b-42b28b1ccbf0", "indicator--4bf653ec-f903-4144-82d3-1fe36a55b00d", "indicator--f806de82-d525-4bdc-8cfc-4bb3488a3c1e", "indicator--23287963-7ceb-49f7-b6d9-4fcae78552a8", "indicator--83e00a9b-52f4-4098-86de-0e513bb06887", "indicator--4aa02171-4689-474a-b7d8-f35ab1eacd41", "indicator--7fc73c14-66de-43d7-9ced-6f02bad7ab3f", "indicator--ac191a30-d876-46ee-ab37-f4d72b7a5924", "indicator--e0c6a59f-50de-4092-9205-0183714501ca", "indicator--8528f6cf-abda-4ac3-a79e-f71d4f74208f", "indicator--23767f89-56a5-4bc9-bb50-012a0dee86f8", "indicator--5bb6e3c8-177e-4e54-80a4-cbf5838505da", "indicator--c0315641-48b3-4223-8e5c-dfcca632d56d", "indicator--ecb601ef-07e8-4ae0-9ef4-11fa17c8c1a8", "indicator--382c62f1-0879-49f4-bc8a-99f9334db08e", "indicator--22f7a06e-38bf-4040-8db8-4df0c99eca21", "indicator--17e1220a-4cf8-4aef-a05d-961785b998f0", "indicator--72783db1-b09d-41af-9b50-dcb752407700", "indicator--a627d882-f7e9-4b04-828f-91c6a6e0d5e6", "indicator--537cd212-2f87-49d8-a771-ab028eea4ed6", "indicator--11af3b2c-41b2-4279-927d-d6d5270085b9", "indicator--1c364d13-025f-4147-ab3c-0ad67d3908bf", "indicator--4f16325f-66e4-4253-bd57-93665b2a91f8", "indicator--c3994849-c8e9-4e9d-9239-95c7bf24d156", "indicator--fd7700d4-8811-4836-bcf5-59fa87d6b3ec", "indicator--06a7a206-5cfe-45b3-99bb-29a6eaba4980", "indicator--2259fdf2-02e0-41c1-ac90-02b243295db1", "indicator--4be592cd-d5bb-4ea1-94b2-daa8538b6256", "indicator--5210eb06-f3d0-415a-85ee-690822e240cc", "indicator--8e2b41a3-4533-4a24-88ed-048e0fe0b189", "indicator--a84791db-379d-483f-8d0b-0b76c3f6060b", "indicator--3630c996-5bf7-4cd0-b8ed-2e70de28a9a2", "indicator--d7ee97d0-6613-40ab-8e27-e507a4810473", "indicator--0ba544e7-c9c2-4453-9ca0-ec3d6a8798d6", "indicator--aad55912-aac7-4ab0-bbe5-ec86ff5bd596", "indicator--d0ee2415-f421-41d5-836d-3c1162c1ef9b", "indicator--a5754b35-55a5-42f4-81ba-4915dfc24413", "indicator--f489af56-d9ca-4d78-86c5-4531b41d4853", "indicator--509cadb2-96c2-4002-ba65-3527447d8d59", "indicator--b8472378-924b-4fc6-85f4-d87f4c5e5ad0", "indicator--2d2769ba-c3b0-4539-a546-e534f40a309b", "indicator--cf4e853a-4eb8-4644-8ef4-e7460105c5e4", "indicator--eabf8010-3153-4308-b341-e0f1d6425265", "indicator--d188daf5-6bdd-4f93-9626-f13a7f29174d", "indicator--8a21f5f7-7768-46ad-940f-67e06ebb5017", "indicator--b7a79abb-2b12-4acc-bb86-91cbf3fa7b2a", "indicator--6abe0224-b34b-4973-8b39-64641c1583be", "indicator--3f82d643-f19b-413e-9c01-670a0e821849", "indicator--0154396b-0bf8-4e65-b9d6-800604fd5070", "indicator--2eec9cd7-981d-438d-8b78-5cdce5da77af", "indicator--f029c9ab-3e39-4212-9c61-66b4c836d1c8", "indicator--a242d317-c0d7-49f0-8832-70c266001772", "indicator--9d085790-e6f7-4c7e-b7c2-0b7139ff5949", "indicator--4c1e27b5-00a5-491d-af08-c94c8c679e26", "indicator--612e17d6-00d2-4506-ac40-82b44980d10a", "indicator--d52a5de7-b6f6-4186-a2da-e8b54d2d0255", "indicator--7dd7f667-7ffd-4a9e-bfa6-9471037d7137", "indicator--717e03d9-268f-4910-a1a3-ea41d355fda0", "indicator--591bfebb-01ad-47b3-b74d-b49c43bb5d91", "indicator--c4674b22-19bd-42df-8e7d-3d748eb21eb9", "indicator--cb348c1d-bcf1-4e6f-807e-0f1d91c42434", "indicator--a84d7bb5-4c98-408c-a998-e5fab53e7676", "indicator--4a9a557c-59c3-49cc-a270-aaf606de741f", "indicator--61e60b0e-5d84-41fb-a248-cd77b22e51b4", "indicator--8dfd61f5-8eb2-4fa0-acc4-e18203bffabd", "indicator--884cfa74-038d-40d4-a488-92f1b47b97e0", "indicator--fb01624a-2aa3-4239-91cc-24c937c72545", "indicator--1efd02ab-7f2b-4802-8c91-d07b26b3f6ca", "indicator--0df47a73-020e-4bb2-afdb-d43460ce2935", "indicator--7a816526-d1e2-4600-b371-0ac4052711b2", "indicator--ed5feb0d-8e52-4bd7-97a3-3d2ea3d81a29", "indicator--147263db-8b24-490b-bdfe-db807b5ac030", "indicator--361ea2bf-ef12-4484-b0f8-5274bb74d9b3", "indicator--562e667f-fb10-4369-af2e-4f6d7e373863", "indicator--279fbda8-09f4-4ae8-84f0-deaaec941ec3", "indicator--9d420557-2239-415d-94b1-97fa66f68b09", "indicator--b3eb68f7-b9f2-4f62-a15e-ca41272df298", "indicator--ae4fbfa7-31a5-4f93-8cfb-e0417d7cb327", "indicator--1e470dd4-bcb0-428a-8a73-6f4303f79fd9", "indicator--e0641d0d-af48-434f-b9ec-ea2dc849c1de", "indicator--28b9b7d9-5e67-4c87-b36c-6d7de91e241e", "indicator--2ad7edcc-72f3-4bc2-9718-16f786a00cb6", "indicator--a264af3c-d2cc-456d-8e04-2ecf580a8e8b", "indicator--3e72da13-e57b-431c-8716-f80a2ed80487", "indicator--f2e4ccc8-ec4b-4ffd-94ee-5bbf04b689a4", "indicator--576022c3-7619-44b9-8bca-be43807b52cc", "indicator--906f0a7b-70ac-43b5-a9a0-f3eb4b85f5db", "indicator--6c5526ab-b601-460f-a9ca-a71ea7b8e131", "indicator--582591d5-79f6-48dc-a929-aeb90017ed5d", "indicator--b01612be-57dc-465c-95db-25ceb080b5b5", "indicator--dc3ae268-d465-490b-9813-3e06dd2402bb", "indicator--d215d103-f21b-47f7-a2b8-aa0d16bdbed7", "indicator--36e45078-aa43-48f1-8752-7e861c6aed93", "indicator--15c82dac-da2b-4f55-a1f1-6c42ff4cda94", "indicator--bcf16de2-abab-490c-959c-213279f80f3c", "indicator--838197ff-8d7b-40eb-b070-6466242bb28f", "indicator--79c2c5cd-60fd-4f72-80c7-22415b04a7e4", "indicator--7c4bae3b-6a05-4f54-be0e-d8512e0963e0", "indicator--af59bd95-6f9d-4f0f-9769-d4f80a410ef0", "indicator--f77d868c-ed5c-418d-a1e5-6a55934930a9", "indicator--e7ab62d8-0332-48fd-9aff-3f13552f4bab", "indicator--29ed448d-cfe2-47af-846b-a79791172d8c", "indicator--4ab9c5aa-d9e2-4589-b878-d87bb5847ac6", "indicator--f43e3937-42cd-4f55-862d-2cb7c07ecdd2", "indicator--b91dbb86-89c2-47f6-b199-e68e3c20c1fb", "indicator--791688bf-dea8-4301-b023-41e8676a7a96", "indicator--add058e6-b9d9-43f8-a090-0c07fb922f99", "indicator--083f6c2f-096b-457f-ac28-430d5de15bc8", "indicator--719937d9-2658-48ec-a792-9d7fc249668c", "indicator--68f4a7fb-754b-43ab-a78a-730e16e039f9", "indicator--e61dad0d-c131-496e-b1a1-f5ca4e8074b6", "indicator--be45aa53-15a7-4fd8-b542-724e118455dc", "indicator--c621ae27-87bc-47a4-8244-84dfc559e006", "indicator--1e30f1d0-a364-42e2-a6fc-34b738da5180", "indicator--610fe809-ea92-40b7-bba1-1a7778a4acc0", "indicator--dd428216-8c4a-44d5-a7b8-08ea029286db", "indicator--ba38a697-e251-4e6e-a0f2-b69f73af0fe6", "indicator--b47b0261-e099-48f3-9d2b-80d2bfee4ce9", "indicator--3737078e-4716-4ec6-beab-c42de9f4571b", "indicator--310683b4-b2f4-410b-9dc2-6664967c11fb", "indicator--70080c75-65af-41ed-991e-4ec9a2aa3938", "indicator--f8a6eb99-6fdf-45e0-8999-9e0521d65854", "indicator--198b74db-c0ff-4904-b9ff-a58719f19110", "indicator--cc62a78e-f245-448c-9047-1e3660072876", "indicator--47c6ece4-6a83-4f2c-83f2-995b3de2518f", "indicator--0bac19fe-84b1-477d-a6ed-23d6e29afe41", "indicator--0cd96403-1871-46ee-9884-a19bac27ddf2", "indicator--33fa687b-43c0-4bf5-8a79-8785284b9800", "indicator--de306716-7084-417a-8e02-7e2043c5c2b6", "indicator--f911e22f-7155-4510-af3b-082c78eff22d", "indicator--91c27fb7-04b3-4e4a-9778-068ae93d6172", "indicator--d4f401f4-3de8-4765-84c1-cfd0ff1f613d", "indicator--1607b482-077a-4cab-b627-63d5a7b44d6e", "indicator--74d60893-7ff5-460c-85d3-1911fe52602f", "indicator--cfe3293b-9aec-497f-bcf2-9bf1077eba27", "indicator--b1ea4445-55fd-4ef0-ac76-400bbabce92a", "indicator--13ddc090-7825-41b0-b101-ecf53afcc9cc", "indicator--46a822a9-e3ac-46b2-afec-3643690bac10", "indicator--af7daf6f-1a54-499c-ad87-0b36658e9a79", "indicator--47332d05-33aa-4d04-a7b7-15415a009d95", "indicator--d4672a7c-4474-4eb5-9bc9-ccc2b0900945", "indicator--d2032173-217c-481b-bdac-b7a1bfdd0104", "indicator--a8c7eae5-403c-4917-a0e4-d6c7df11885c", "indicator--81e455f6-c63c-428d-bb61-35a1cea8bda8", "indicator--d090f68a-427a-4eed-b27e-4cdbad0593b6", "indicator--532f4b29-74ad-4871-af68-8d802c715761", "indicator--e6197e25-400f-4cf6-b078-d097ca728784", "indicator--4d033123-4bf8-483a-ae45-69dd3a09a214", "indicator--6a04b3c5-c2bb-49b9-a0e8-3698f7ed4dc3", "indicator--36655528-fb11-4769-a12f-907e11ac0b99", "indicator--c53ecd9a-cf6f-4a42-b0dc-fd5722a725c5", "indicator--02066699-95ce-481b-9730-b69501b06f59", "indicator--473f36fc-572a-4170-98b3-3b873c0c19db", "indicator--4a1823b5-fe0c-4335-8dc0-5eac50cf55ab", "indicator--313d51d1-29de-4e7d-87f7-815e80e3997e", "indicator--e444958e-b9a8-48f1-b99b-4398745e5187", "indicator--62b9dd1b-dc2d-40aa-ad1d-096602bc0884", "indicator--38aab87d-1999-4d97-b289-a9796d3c38fa", "indicator--87b005a6-3096-42b4-975d-ab4e04180d43", "indicator--3c309342-a860-42b7-9a3c-79883eeab754", "indicator--94e1a386-bfe2-4c56-8bfa-222b437b1918", "indicator--b8b455c8-9d02-4aa7-80cd-834beca0d353", "indicator--bf530c51-ad74-42d8-8e59-0a099e296500", "indicator--c97d11b0-5608-4147-8097-70e482e0ace1", "indicator--3d73a244-1ba6-466b-a85d-23bd036fa241", "indicator--839b4237-6f78-4636-8441-28b20a76bff2", "indicator--c0cf657c-5b88-4a9e-bc0f-9bb2498043e4", "indicator--1d8fb0ad-ba99-4f03-b5e3-d5bdfc9e1941", "indicator--af22e7e3-3017-44f2-a2b9-9bd8c27c25c2", "indicator--a66fba2a-7160-4d1c-8e04-50fe7d4abe49", "indicator--9a88983d-123c-4b91-9246-4a93f311eca4", "indicator--03c64bdb-614a-49c8-8759-7eabd57d7102", "indicator--0459d723-a9e1-4724-8eac-1c92a97e9efa", "indicator--3721f306-f87b-4d33-b3f7-95c8e96a7b2d", "indicator--81f43988-324c-4818-bebe-c3371cb81551", "indicator--0b87dec4-a887-46f6-bd09-c6e9773cf57b", "indicator--4bd018dc-4623-4e34-ad41-93c5e966291b", "indicator--bf0c5207-ba74-46c1-98f6-e8356e4d8b0c", "indicator--3f6c24ed-bb83-42bb-90a0-b1f7e62be487", "indicator--3a9fe368-2117-492b-8bdb-f09cf32a16d9", "indicator--6d546349-9efb-4172-9fb4-a626e1f3c71f", "indicator--42c5d559-c967-4c20-a974-537cddf32638", "indicator--4cad92ee-d777-4ec4-87fc-1cc81afe3000", "indicator--b231acbc-6952-4ea4-8ad6-d33051628236", "indicator--833ca776-1eee-4f8d-b5a5-a49124ccb1eb", "indicator--d010c4e7-8301-481c-b79e-898187bf491a", "indicator--2204055f-4371-444d-bd34-59e7e377bbe4", "indicator--c8de198f-7fb3-4b49-aee1-207b25c08587", "indicator--634d8be1-f362-47d8-91c5-b0700ffed8e8", "indicator--c649a777-c3c6-442b-b1d1-3bb03367ea5c", "indicator--67a08453-2510-48b9-a2e4-eb4f2a95192d", "indicator--a774633e-71e1-4eee-85b1-efc2ce9fa108", "indicator--32b6ba4b-5b69-4eb8-85b2-2ed1dd9a3c0f", "indicator--77aa879e-5e7e-4657-aa61-61dfd9ac08ed", "indicator--c14ae92c-aa66-4b38-bfaf-4fdf16b25fac", "indicator--006674c5-40c5-43fe-9c98-77c4e7230bad", "indicator--878369bf-5800-4661-961c-e13500279fa7", "indicator--ef8ae083-7267-4cd2-8efb-43ef4ae36f7d", "indicator--6c03452d-7c00-4cc3-83e5-fa4da9e1dabd", "indicator--96ed473a-6a30-4976-b80f-4857c430bc2d", "indicator--b6c1864f-cca6-48e8-80e1-887fd5708f33", "indicator--80fd7b3c-3684-47bf-9d48-2eea14939e0e", "indicator--1074bc12-9407-48f9-861e-73a62fcd5938", "indicator--da9a59bc-e57e-41bc-87dd-ceeac0e41647", "indicator--90f13d26-a840-4274-adad-7be4d9a3bd00", "indicator--b9d01d80-34d0-47ed-a80a-d2c3c89e4125", "indicator--6067838c-dc14-4927-82dc-4b62f6577289", "indicator--cb7e5263-12fa-4d57-91e0-7a5f60048885", "indicator--e697a9cb-0beb-48d1-a496-28633f7c3152", "indicator--5a6549ab-c34e-41b6-99d7-0fef77960135", "indicator--eb7893af-2f61-4d77-a1cf-56eabfee842e", "indicator--d4a1032b-f8ad-4bc7-a138-49d2619eed14", "indicator--37167238-6333-4df9-ab52-07b6c8759408", "indicator--7bbb1c4c-07aa-41ec-8a9d-f3f5f910979e", "indicator--2ad1037c-61b1-49b0-9cc2-37d71892c42d", "indicator--09e2e5f8-25b7-4623-9734-024f79692ab8", "indicator--0c2c7432-889a-4492-9eff-210e6371d66c", "indicator--35e73908-bb35-49d6-bf6a-c23cd90df866", "indicator--a634b6a5-33b9-43f1-a467-79363616059e", "indicator--d73149bc-b42e-4be9-969b-63d33941a515", "indicator--61f0e636-a99b-4415-9a10-edb0a57cabc3", "indicator--587f6523-242a-4169-9365-7ef9a9f0e91b", "indicator--f131f36e-d3d1-427c-aa49-c839f16d821a", "indicator--7c0cf8e3-1657-4e51-aa9c-f1b9151ec152", "indicator--19c416d0-0c76-4fb3-bc88-373f0336cd40", "indicator--dc91bc8f-bb00-4deb-b8f3-75d6850a3fd4", "indicator--cbabc970-b529-4ebb-b1c0-aa024b8423f9", "indicator--c5f8344f-8600-4761-9386-ae1b3d38c60b", "indicator--b33e0881-3e2b-4488-a27d-d44172f33a2a", "indicator--4554e63e-eb3e-48e3-bb3d-ee0ea79d6e54", "indicator--69efab40-5ab3-4a36-a852-f59e9e5302a7", "indicator--c1a754d6-3986-4813-ae6d-a9147b7b295a", "indicator--2d22b628-badb-4852-ad58-82ea9f890a8c", "indicator--60e997d9-6fd7-45ac-acbd-cbd626dbca7f", "indicator--19270701-0f5a-48cd-8cae-8b08ba648c42", "indicator--9fc5f4b2-926e-4696-8b10-69e66e43d7e4", "indicator--8f39ac7a-b5db-43ba-a40b-0eda82fc63fb", "indicator--119ff812-be97-443d-8466-b0c1b1a2f97c", "indicator--f0418175-7e60-4e4a-9447-151e056c15e8", "indicator--51e2f5e3-d89d-4388-9c0e-9542470e1578", "indicator--b236079e-2363-4d0c-8422-7667ef9fe397", "indicator--46f53dc0-4ebb-48a8-b28d-5a81de0f881e", "indicator--fd886b06-1536-461e-9e7b-72abe06f1514", "indicator--44427cdd-3860-447f-bbf7-2febd9eeeb6c", "indicator--eab95aea-aa1e-40c9-a996-20a6013c0f78", "indicator--49625fc4-59da-49f0-9db9-5649b1cc71ca", "indicator--56a2dc50-2b3c-43dc-b987-2f880abd9428", "indicator--13adcb40-00ec-4f80-be95-ecbcf9d739c9", "indicator--126fec85-8d63-4e37-9c70-fa2b25f3ef3a", "indicator--c0ca9e7e-b093-486c-9b86-3c7f368a7838", "indicator--ac40217e-25e2-483d-a334-adfc0d1234d4", "indicator--a2613d43-b72e-485b-94b4-6d384d7f9066", "indicator--4678d789-da20-47fc-8fab-83d38c02fa58", "indicator--fe23ba98-e6bc-44c3-aaaa-799585ee2cb3", "indicator--9cc26b93-3a7d-43c6-a589-b0955b263d2d", "indicator--854b940c-4b97-4e53-af12-a95a462215e3", "indicator--be2b76eb-049f-4731-a265-42e9ea890874", "indicator--fb4f11db-a587-46f0-8ffc-fe44c00c88bd", "indicator--700cd4d0-32d6-47dd-ad62-8497cd10479a", "indicator--26cc2b06-980a-4b92-9af0-95bfcf0dd77e", "indicator--dfb536f9-d9f4-43df-952c-78ecfc189132", "indicator--3cfb041b-383b-4d0a-88e0-3a4b3d8da830", "indicator--26d73c64-ae4b-4370-a06c-063078471d70", "indicator--1a5b0690-a7f1-4330-a305-3638b4267435", "indicator--36c43c7e-e5a9-4011-b2a8-ba25de6ebfd7", "indicator--4bd027f6-df7b-4eec-88fc-17c7dd9e6ab7", "indicator--9819774b-891f-417d-9b9c-82cfde94577f", "indicator--411e7722-0da3-4308-94c2-31971175fa56", "indicator--2720da36-6956-4d90-949e-93b033a03509", "indicator--650bbbdc-67b2-4aa5-9584-59095cbcefe3", "indicator--05efae16-1f1e-4633-9809-3f5959e2f4f4", "indicator--58fc3f3d-a033-4b85-afb0-2cb82f64a5dd", "indicator--9ff882ed-f0c2-4b0b-93c8-72987dd8a00d", "indicator--eef520c0-63cd-472d-a7c5-c82523639062", "indicator--1172e337-bc16-4b84-8316-5fa41e747508", "indicator--7a0df79e-10d0-476f-8cb2-8666cc202cb6", "indicator--cad42b7a-e81c-44c8-94aa-e5a2fe0f702c", "indicator--2fafdbfd-4b20-4ec4-9dd9-cb146bb1d5d1", "indicator--9ac01a55-6b13-41a7-bb75-4553c45cb9b9", "indicator--60819664-fab3-4d93-a216-b0d2cb420225", "indicator--60dac2ae-0ed1-4833-8671-36d6541ea661", "indicator--bdb248a9-a393-4c0e-8656-b2f11d9cb9c3", "indicator--8a4e2f09-0bca-4418-b446-5cdca9d5c884", "indicator--88fc6b25-2138-4da8-a202-ec0a135254a8", "indicator--7cc556bd-1f14-4785-aad3-dd3544da3a50", "indicator--7cefbf08-cd29-4f41-a45c-ee60beb2dd4c", "indicator--3d593ab5-289c-4e9b-bfdb-da3e92f2a559", "indicator--bce98971-3ce5-42ec-82a0-9b410ec29219", "indicator--e294ecbd-959a-4a77-b7b0-c9c9bc8eed6b", "indicator--721ada76-47b4-44ec-b53a-fe67db452dd5", "indicator--1cc7badc-06fe-4db3-adbb-d4c1e50627d2", "indicator--b9e50932-b205-4046-af6a-fe10b1d8296d", "indicator--1a15eec8-0a0c-418e-b180-8032625ab0e6", "indicator--c44c869d-0d5f-4c8d-b844-f28f2e03ae6d", "indicator--9c41ed16-cd04-4e4f-86af-e3465e62677a", "indicator--c3ee1bc0-1bc3-4208-97f0-0aed4d1e431c", "indicator--dece2d20-61cc-4e96-bfb2-64d756d86195", "indicator--0e54bf1b-0770-4566-b31b-f3712fc994a1", "indicator--f2e90d86-9215-4379-9b82-fea5097d7abc", "indicator--bf27dfca-896f-49a5-badf-9c059952fa2c", "indicator--b724eb56-38ba-4e26-9fcc-b85e682f32f8", "indicator--9183eef0-51ba-4243-8a4d-573830d19fa1", "indicator--f6477bfd-ef8f-4e20-ad5b-a7a3743ce511", "indicator--56fc64c3-2c7c-418d-be7f-8ee46be6407f", "indicator--aeb529cd-4cea-461b-ac3c-f3d688907078", "indicator--b902408c-c27c-461a-a8b2-794f67b8a3c3", "indicator--2ecc749e-3c6b-4dbb-bac2-ae527ce21a1c", "indicator--3388b876-2198-4072-9c1c-f1d44fbbdc19", "indicator--60c080db-7849-4f64-8133-12ad2eba15e4", "indicator--21a7288d-33a9-4296-92f3-3108b1c163a4", "indicator--41504b7d-f965-4021-a09a-6f5ec0dee688", "indicator--cd16550b-7819-4254-86e3-bd4a355ce696", "indicator--b392f4e9-ca34-463b-bafa-8ddba1884120", "indicator--1fb8193d-489b-4b7b-863e-45aa377aa702", "indicator--cedb260a-e04c-47f4-93f4-637a59872741", "indicator--2e5552b8-c05a-4e95-a27f-461efe0e8b96", "indicator--5f6e5c87-0509-4bf9-b32c-783be86cc16a", "indicator--96ff200e-c170-4d3a-b0b3-56defcada0b1", "indicator--16bbaf08-5b38-4b38-9262-633b5492243c", "indicator--01a8efa9-c16f-43bc-aca1-85175636cb35", "indicator--9e8c6038-0b62-473f-8841-9fcf1e1e6bc7", "indicator--36aa8ea4-5ef5-4ad9-9407-e95e0435636c", "indicator--921a3915-b7ba-481e-bd51-b25611b57e26", "indicator--c82b2fbc-867e-42df-b653-b108cc67a3aa", "indicator--57f08003-8faa-476c-b426-e907894bf542", "indicator--acf85a17-7a31-45e6-be8c-c8c15d2d6ed8", "indicator--d64a918b-871a-45bb-9f45-d8d55948aa9a", "indicator--0aaf994d-0e3f-4eb6-9959-4393def49a50", "indicator--8544a251-8c1f-49dc-90d0-7ad4f59e1c5d", "indicator--57807fe3-0b95-4261-83f7-4fd7c6d37af2", "indicator--5468f5a0-3303-43a0-be31-249461924ea8", "indicator--a9bd00fd-4d95-44f8-a2f6-9441263201a0", "indicator--0d7f7ada-596c-49bc-ba83-a9be7e9bdb8e", "indicator--4b7e12f9-6855-49f3-ab7a-890d079b6a7c", "indicator--672bf57b-0370-4911-8a2c-6349b46c03d7", "indicator--0fb6202d-244d-4b07-bdec-2bf5312fc480", "indicator--55ecf767-275b-4a89-8cd4-ffbc72657bb7", "indicator--b324706f-0443-4af7-b879-e3409705c418", "indicator--709c7222-3c27-4324-ac39-4d83ec775f8c", "indicator--fe7c84c9-68b7-415b-a229-678a4bb7d5d9", "indicator--9053210c-6f09-4121-aebc-860ff5a1b9b8", "indicator--f24b0cf3-397a-4832-9606-abce85f17833", "indicator--b6d61a4e-bf77-4730-bd0d-cf8fcf8502db", "indicator--47ed1412-26d4-4089-bb2e-768599cf410f", "indicator--44744bdf-b73b-4bd2-bb13-32763b04da7b", "indicator--832bc34c-95a8-4e36-bf2a-cd12a89a06be", "indicator--536aac2f-0a5a-48ae-91a5-3836c8789465", "indicator--5fbe0634-b5a3-476b-b5bc-33763d84c5eb", "indicator--0c11fd58-c7bf-4046-a2ae-0bcd2bbb0e68", "indicator--fd3dfee3-6bab-4b29-a8b8-c2007d4cb5ec", "indicator--e025227f-4424-4695-a0f6-9953ca145c88", "indicator--f3dc2465-0225-45ea-a715-79baae5232ae", "indicator--dbc52945-7098-4822-9bd9-00cb5e59e709", "indicator--a1c896d3-3865-4177-a49b-328d5de29847", "indicator--793d8bb7-29f8-451c-8b6b-72984938e3c0", "indicator--39e49677-6f9f-443e-8876-caab8a9361ab", "indicator--33c2296a-5ec6-4d4f-a444-4d3306ee9a3d", "indicator--c200149e-15bf-4380-90c8-cd19fbd88da8", "indicator--6d89e5f3-f8fe-49e3-8691-20e26d087f4f", "indicator--83d58524-2714-4eec-b40d-c1db32959983", "indicator--f9846897-5367-4fb3-a4cf-d7374abb5eb8", "indicator--5c7ba86c-8c33-42a1-abe1-fb0a2fc70c93", "indicator--2a44f479-f19a-49c7-8daa-69d59dd386de", "indicator--83a9dec2-d83d-4e79-82a1-4f8d8a1e18b9", "indicator--b0038def-bd0a-4cb3-a0ab-da7dbbe18e26", "indicator--0f992e94-bbf5-43be-933f-e496519ea5a2", "indicator--a24c6628-39b8-495d-bd5c-9dcf69698cd6", "indicator--a198543d-0e9b-4d5d-a7a9-f9a330e4a5ea", "indicator--145f930e-54d3-4731-bfcf-104b4ef6ff15", "indicator--e808ecca-c0ce-402e-b23d-1e2fde63c0df", "indicator--3feb1c67-b548-41b2-baef-6d6772bb8245", "indicator--ba37e42d-a582-4563-9d36-e2a66a5f76e7", "indicator--e8e3a861-ca1f-4264-a745-0b25fee30bd3", "indicator--71d36517-07ba-4ebe-95f4-9a228963010c", "indicator--b51dea35-2cdc-4fc1-af67-1d19bc856347", "indicator--0318b727-1161-417d-a5ed-ac465330a68b", "indicator--0ec6c415-e246-433b-884d-bf6f6e439486", "indicator--41d67753-3efe-4d33-87f5-7d519cf42ffb", "indicator--43ffad2e-ad0c-4739-ba70-7f7991cae9c8", "indicator--61848772-8396-497c-bbdc-2ba2b8c71f91", "indicator--1c7d367f-8b11-482e-8bda-89152514937a", "indicator--71dd1bcb-c0ac-4205-b0d5-18297aab6696", "indicator--32015bbf-ba74-40af-85b4-cd99cdaeb7c5", "indicator--d175e6da-705b-49d0-8912-ac8a010493d2", "indicator--21e5be1b-3458-4938-b3b6-6adde19b4ec2", "indicator--3f3b91ad-458c-43ba-9d1a-35642209646e", "indicator--849ca695-bb7b-4cbb-8d05-f468029c0d5d", "indicator--23fcb73c-a4fd-4e9c-8260-eb02e4352fdc", "indicator--4d7c4672-b44c-4800-8857-8aeaa3d6d28a", "indicator--33b76cd6-7223-487f-a3fe-a61568647223", "indicator--e96517ef-dd82-4b0f-9376-5236d95db77f", "indicator--24e4d77b-eae6-462e-a06d-f6bc781fa498", "indicator--abaf6bf0-6754-4b00-b242-fe79ce381390", "indicator--26678775-9f6f-4933-9032-bf6b28406860", "indicator--db64c2a3-aaf5-4e79-8fcf-55674b16a61b", "indicator--61c7ae72-e673-4663-a96f-59c7fb9ad87b", "indicator--043e91fa-78e8-4e1d-ba3f-d0d62ed4c16b", "indicator--68fa5d19-461e-4799-85e6-781724e1a016", "indicator--b39981e8-8979-4b3b-b160-26557c727699", "indicator--c768cc77-4b70-4384-9064-dd7fd4be4e77", "indicator--10846262-6b65-4adb-a6fa-92a9112ee354", "indicator--b614fc25-5cee-4b19-a834-2e64f005f179", "indicator--2db1e8ae-87f1-4cbb-8580-bb2d6224fff5", "indicator--8ff31c36-4a20-45c3-ab08-576aa4c4d7df", "indicator--a434f94f-4bc4-4fa4-86d7-5570155d844b", "indicator--f87ecb3a-b58e-4e4b-a9ea-1fa3952b31a2", "indicator--dc607d9c-1cf8-4789-aee1-5ecd8efa177c", "indicator--a5725223-95b2-4cc6-87de-2f5a111073f6", "indicator--a568f2f8-570c-4cd6-9a0c-19f4797ec578", "indicator--85fb8ba8-5d97-4d42-8bf8-7689b27672ee", "indicator--07409131-3499-4daa-a979-51878469ca4c", "indicator--f912a223-9435-4685-8812-194d3a90239f", "indicator--3d5cdffb-afbc-49bc-8e88-8854a858385b", "indicator--9578e067-44e6-44da-8056-b9bf0c2d2d96", "indicator--63ea4637-55e0-4b51-8a5c-6e1afef42cc5", "indicator--e3e2548f-6af6-4c0b-b5b8-145ab5e174cc", "indicator--9fa234e0-c74a-47b2-a12a-aaa0c0b58d66", "indicator--5aba89b6-83b3-4d9b-9bb0-777e143c2bf9", "indicator--45c5e7af-553f-41f0-996b-864ba2084f0e", "indicator--cfc56692-e67f-485f-8bba-72c3245b8caa", "indicator--3ce88ebb-2d54-48a0-b05a-1932e27ea26b", "indicator--4c5dd005-0643-4afd-af88-c4de7ff93637", "indicator--7d6dfdd5-40f9-4a3a-986c-02247d4d2f75", "indicator--ac65f8b8-4b3a-4b7f-bc0b-a2ce549e4214", "indicator--c6cf2c7b-0f24-480b-a435-b32e673ce722", "indicator--1440df79-2f2b-4273-974c-85eba40b2335", "indicator--41ab02fe-0638-4949-9468-10e0a53b81c6", "indicator--acad8cde-d1ad-4a53-9fd4-f6c968bf56ee", "indicator--89126dd4-cf60-455f-abe2-e422e0dcc3b1", "indicator--913a2032-9d4b-4607-8e7a-6b81e6b09a2d", "indicator--8839dfd5-f200-4b97-9238-21e96f475b94", "indicator--f85c8042-b346-4910-b9f5-0ca2d7b49372", "indicator--d5c4559d-0c3d-4599-bd3b-e194b363d5af", "indicator--4578095b-5131-4116-830c-83f0bf1943a3", "indicator--d156ca0e-c10f-4873-9f74-32f96414a7f0", "indicator--eeb624e2-d92c-4502-9962-7d29bb9b21b2", "indicator--9d2a049d-bbea-4bfa-a6c7-651c8a828cef", "indicator--eff5e1a7-bcae-4be8-8a7e-3cedecbe3420", "indicator--6d9ef742-e2e6-45c0-a246-e090b2594584", "indicator--9f449974-4041-4719-8fbf-633144e49fc0", "indicator--de261c3b-3db2-4d35-b16c-f06c5fa9444f", "indicator--b8edba8c-06ea-40ab-801d-1e6d0cdcce63", "indicator--45be0ba1-0fca-4a98-99d9-61ce81c4b543", "indicator--d216f142-0911-4f43-b410-7ba6b2e5d878", "indicator--effff210-c7d1-4e17-8076-4fd6bdd3b0a0", "indicator--c38a2e29-8e8d-45b2-9d8c-6dadac747b9e", "indicator--22a13835-4167-4f37-89a6-4c060ce131d8", "indicator--02b06942-16f0-4836-82fd-a4877ecfadcb", "indicator--73f780bf-8843-4c5d-ae81-09b931ce0cca", "indicator--78371116-dbee-4dc4-bb1f-f111bf742267", "indicator--7510ffe4-258c-4484-a2e9-2fae72da76be", "indicator--64320b1b-ca74-4645-906d-78bf011b9d91", "indicator--d008218d-29ee-492e-b283-61362f41a352", "indicator--01860a28-5fae-46c2-9894-99f38824c42e", "indicator--de6083c2-d134-44ea-9162-d78a67b43df8", "indicator--29b2be07-641f-4a47-97bf-9a80745a537d", "indicator--110fca1b-6869-4947-a718-76d02781d28b", "indicator--7dcaf3fd-84d6-4881-86db-df52c168e9b0", "indicator--2a2f028b-37ef-47d5-ba60-53822fbd001a", "indicator--2e21415b-3adb-4846-b45c-1ab8bc4a542b", "indicator--fe7fc1fe-02fd-4552-a6b1-925b15bb3a0a", "indicator--d33fc874-e5d7-4e96-98b9-f6b852623c9f", "indicator--abb16ae3-19df-4101-bbc1-391b2d610ef5", "indicator--7ad9e314-5191-4cc4-88cc-b94fe799f420", "indicator--24c32c29-5f69-4291-a144-4cf6b42b91ed", "indicator--254158c2-d608-4149-ba45-2eb4529fa3af", "indicator--d7a46c82-5ed2-4521-961a-08329a5dcfca", "indicator--bbddd117-81c2-4b30-89a4-684b702920ee", "indicator--1d06b8c6-23d5-4c39-bb58-fac0c9a41d2d", "indicator--b76e1b28-2adc-4194-b035-d9d2d9b16354", "indicator--832ec9a6-e58a-4152-b9f9-60d7a908915e", "indicator--c6c78c4e-10d3-4d25-abe6-b69d8ddfabff", "indicator--ce49de79-81ae-4b2a-a41b-20ee28f0d934", "indicator--b674714b-bd8f-492f-922f-4fd6c89c7453", "indicator--b5f2cc65-a348-4847-9d8c-bd6a33966c3b", "indicator--0ed47b5f-c1b3-4cc4-9958-d72f00c175ca", "indicator--fbbba1de-531e-44ad-ad59-78b875be4fdc", "indicator--4921ccda-e944-4a75-b500-4de23b6fe104", "indicator--9ce00194-8148-45fe-a938-4110055075a0", "indicator--f7770034-ca2a-4477-be14-32ded7331617", "indicator--1c0320e1-2553-4f8e-8092-e02fe60338dc", "indicator--7169e172-168a-49c7-ab09-f27276be6193", "indicator--ebeab474-bac9-40da-b91d-67dd61391157", "indicator--948ee420-8b24-47f3-832c-88f8948aa552", "indicator--1bbcd79e-d3f0-461b-abc3-c8a58893fd3f", "indicator--bb1957bc-b62c-4635-bbf0-432817b09c62", "indicator--8f64cfae-0ab7-4a4d-a9dd-add19d1eed6b", "indicator--6cd220f5-904a-4498-9ba8-1ef86c2498be", "indicator--0eafa998-cac4-4ee7-a1eb-e9c29be0132f", "indicator--9acf932a-e520-44c1-92c7-dad6867037e6", "indicator--513a0c1f-6d7b-4b74-8ebb-f4caaf63ece2", "indicator--6aa0a301-0743-42a4-b761-37fe02407797", "indicator--80203739-9a0b-4c29-8a54-30595d6ec3a7", "indicator--0bac0220-a2aa-45ff-9e29-0ae31edc3205", "indicator--e01428ea-a43d-4258-9a22-3cc18e3c95e7", "indicator--a1fe7b26-0617-4fb4-972d-95314eb2142e", "indicator--291b3ab7-4a17-43d5-b165-3cfe37e8490e", "indicator--c96b21d4-82bc-448c-bd1f-b745b405b0de", "indicator--17083d91-49ce-41a5-8fc3-e87a4f79de7d", "indicator--65c61177-386e-45ad-9288-c6d6dffb81f2", "indicator--7a6f2eee-32e2-4cd6-9a9d-756f10e4050a", "indicator--84dbb793-660a-43a4-ba75-251e430a98c0", "indicator--159317e6-5ef1-436e-97d8-652df9289d16", "indicator--d5454bdb-93a4-4c54-b13c-ffe9d17f81be", "indicator--f56531b7-19dc-427a-bb53-aa7c9f3ad6d5", "indicator--f40d6980-5056-4bbe-babc-86cc038bed2b", "indicator--2dcca329-2683-4b6b-8251-7bfc7801e7f1", "indicator--f7f3c2d1-bf48-4a60-8a93-8b343c3d5397", "indicator--f8017e97-c502-440f-a672-44d9cf69649a", "indicator--12440753-9c9d-4fdb-9dd9-96c9e3f28df6", "indicator--2f2de229-cbb5-43e1-aaea-c3d663f21701", "indicator--d5571b9c-3f47-46ae-a814-a0dd174b1bf5", "indicator--a3d23d49-32e7-4742-a54b-d0768a583aaa", "indicator--7a7ab07c-165c-4857-83a1-be3d0d96ae7f", "indicator--26a843b9-e5ea-433f-94b7-92c040f0731e", "indicator--972f732d-f09a-4f1e-ae69-f2ebcd3be3e6", "indicator--4dee55e8-f293-496b-ac2f-e4434ec809e0", "indicator--786a28e6-fc2d-4ae1-8473-fc81bf6c0ff3", "indicator--87ff98b5-d6e8-42cb-92fb-1deb8d6a8e19", "indicator--8bdbbb37-73bf-4f29-be3a-3400575e0b5b", "indicator--a9f6a3f2-d76a-46d9-89dd-59f34088aa37", "indicator--b0ba347a-ad9e-4d44-b6f8-61bd059317eb", "indicator--0f857eba-6a4f-45bc-8b09-ca9babaad1a1", "indicator--c5ad2c93-f551-4c2a-98e1-43ebeb626b70", "indicator--26b4dcbb-4d74-489b-b3b1-7284e9eb0b54", "indicator--83680474-d30c-4a87-8319-d85b092e2de8", "indicator--23fd9ca0-f843-4302-9459-b899b044fa33", "indicator--d0f1a744-8c0f-4082-864b-d829562d7431", "indicator--acb69c21-dc9d-418d-b88a-3e1356465299", "indicator--ff30a21a-8425-4f8a-bc2d-974abba79c96", "indicator--2d1452d6-86ab-4bac-849e-737fe3d23985", "indicator--8a7b40aa-18c1-4094-af81-d52c0136f1e2", "indicator--31022fc5-c03f-4b1f-babc-b773f3366209", "indicator--51067c74-f962-486e-b980-ebeec6fa69d5", "indicator--992414d9-fa97-4284-9977-53096ba8cfcc", "indicator--9f208997-a850-4e87-917d-dc9dbc82b756", "indicator--19d4f7f0-c381-468b-88f9-05356dddd5ff", "indicator--88ad603c-ef48-4eea-b119-364632230dcf", "indicator--f078f456-bad5-4b61-bddc-6c6acaaf923a", "indicator--607f7160-e760-415b-b49d-1f80a450c4ec", "indicator--3fc90f0e-6db1-4d4a-a798-7916b7b03f63", "indicator--3f567b9d-ecf5-4034-b8cf-ead69f698fbb", "indicator--5828ef9e-7f9a-4a6f-860c-098e97d88cef", "indicator--50775a04-e806-4d5b-938e-31869371673b", "indicator--f5cfc633-02cf-4fb0-ae77-dc2c5f660eac", "indicator--10a4ffec-dae7-4686-8130-fbd61473bea1", "indicator--7fe91708-ed56-49fd-a51d-acb0e68549c4", "indicator--98a0ba4b-ba31-445a-9521-377cce8cdc59", "indicator--b0d6b113-adad-4090-b996-3f08e001ad59", "indicator--c5a45c71-1de4-487c-b686-7b9a74e71750", "indicator--f702cb29-dfe5-4bdb-8489-9f367ef1628f", "indicator--82f0bca0-fc3f-4512-a1e1-778c195cb22c", "indicator--7daec3cd-2a65-4760-8b3d-7a623e6a0bab", "indicator--63239618-4cf6-42be-a50b-3b727983e8dc", "indicator--1b24ae58-862a-4817-8716-059c82211d8f", "indicator--995ba71e-636f-4a6c-a0a9-192de0a7ea00", "indicator--78fc57fc-fc93-4b16-aed0-fe0c8b2f50b8", "indicator--e78161b7-b480-402b-91c1-4c68dc0937ee", "indicator--3bf7212b-6689-4cfa-af98-91b4b32c9bcb", "indicator--8a3182f2-5cff-42cb-9122-c6c5222357fc", "indicator--0e215cc3-0814-48b6-a232-d38a64048a08", "indicator--e3abfeef-792c-43aa-b62f-750eaba1f086", "indicator--d81d409b-4d36-4cd6-993c-1b87a6baac76", "indicator--6515d49e-4643-4230-a8b9-02aa8a16f161", "indicator--d28e6102-878b-4450-bad2-63334416c8c4", "indicator--1ac9a70d-ff39-43ab-89c6-eeb68b2c5587", "indicator--23dd8dc5-5860-4afb-8b20-f20ab37133dc", "indicator--0ba63c2f-d750-47f8-9fa9-41426b934f54", "indicator--1e5ccd7b-852c-470b-b16f-5f5f87469f5d", "indicator--23d237fc-2ad6-4359-ba2e-4a0242e47d36", "indicator--7900d8b8-31b7-46c9-951f-988ff0bc9eda", "indicator--ff049cb9-3474-431e-9fa5-33698fcd22b7", "indicator--8d0a694d-f321-4887-a212-cb2c2fbdf396", "indicator--0c62e6a2-956d-4370-8667-0989ac931714", "indicator--95f7a661-ba80-4567-936e-645368d6b691", "indicator--b2eb346b-5310-4df1-bb35-558caf50d486", "indicator--c2d64cd9-2627-4fbf-a1af-dbf31fe3022f", "indicator--69b69732-d3f5-441f-921a-e74289d00c02", "indicator--acd54966-a295-40c9-83cf-9c0bcbe388ad", "indicator--97229bea-8684-4334-9bcd-56c87b2fe521", "indicator--9563c0b5-8cf5-4b38-864c-1ea5c0052db1", "indicator--8c5901af-a1f0-4242-b7a2-f0af25803a23", "indicator--fe951c0e-38dd-46e7-8e7f-002c09dc336c", "indicator--3971000d-e76e-4183-bb2e-17210af4a714", "indicator--775a46ec-5458-46f8-820f-07350c37cc46", "indicator--e9a6158b-171f-4fe8-b508-5721a747ad2d", "indicator--16c594c2-f141-4f09-9c08-bf6dbfc67e31", "indicator--831b2148-d0ec-4bf9-9b98-879826994bd7", "indicator--4b550aba-92ce-41bd-a745-185362a4c961", "indicator--bc6bf665-e266-43f0-ab6c-66803767105e", "indicator--18b5f9a7-d802-4b48-84fa-b93cf0288fad", "indicator--817acc39-d545-47e5-b43f-710c37445d4f", "indicator--0c55e66d-4474-4842-b046-22b7ce6bee24", "indicator--ed47992d-9b30-456f-aaed-0870e4917e00", "indicator--0121ac7b-0ca9-40f4-befa-5944d0da28ce", "indicator--753f1ccd-e745-4790-a8d6-95e72bcd34a3", "indicator--5412ee1d-0441-4b43-a13c-fda9cc241f06", "indicator--5325a4cc-78cd-42b9-bfd2-be76dba6a5b8", "indicator--11d02a6e-2c8f-4824-b3b9-9904a994a2f6", "indicator--53ffaf06-d53d-4fcb-a6f1-e575b60ee536", "indicator--9f341f9f-5c68-4cde-90c4-e7c77db26e13", "indicator--b3351f19-e3d0-4540-97f3-7a6467016e3f", "indicator--87d9bcf7-18f3-4aec-a9b4-cd4df27c776a", "indicator--2c1c327f-6df7-4de7-9b93-c1e81b74ea93", "indicator--83e4861a-324e-45f6-bbfb-4239548473b3", "indicator--d85f9940-2be8-4561-b32c-d537c8751c2e", "indicator--e165dd3c-26dc-40b6-8a97-52eb12325a5e", "indicator--4973c4bd-941f-4fdb-b085-a96d6460e24d", "indicator--56624093-e29f-4dbe-b136-c680b14a79a9", "indicator--af185437-6c47-4461-b045-b284fbad545a", "indicator--5554e1ef-5502-4c67-a4db-06458457dc6f", "indicator--113cb450-75fa-48df-b629-9e7328581158", "indicator--4810b29b-6edd-4ae8-b035-434e3175e877", "indicator--af6973aa-c053-4a16-b9ea-18d8e1102400", "indicator--7c56cf1a-c08c-41d0-b441-e373056b4d08", "indicator--f3956399-edb5-4a33-ab14-c4112a643d53", "indicator--1ec7c976-881f-4fa4-b990-57b81acff043", "indicator--c65c3307-fe6e-4cf3-8e56-368638c4dc29", "indicator--8120c82d-f21c-49bd-b246-205fd0cd728f", "indicator--117ff4aa-c05b-4882-b616-908a2fc914c2", "indicator--b3f8d23d-b5c0-4456-b1ac-08ad73d6697d", "indicator--edf59dce-2b21-4904-b0fb-02107ac7bbf6", "indicator--62d4b012-34d6-42b8-8edf-cae040fdd275", "indicator--115d551d-152b-4d41-8a0f-f4bb98e51b76", "indicator--b1301bee-1ec2-49c5-8ae6-8abf0500ae44", "indicator--a9a817c6-fb73-41c9-b447-4fb0c07ee109", "indicator--454102a9-c241-43bb-9e21-c543fec403f6", "indicator--92f79362-aba0-4033-942f-ccf83c3d4ad4", "indicator--c1457048-ee67-4da8-af1a-de9740007519", "indicator--166bfdd0-53ec-4798-803a-6bb3f3bf5933", "indicator--766d2a11-d5bb-4ecd-9d2b-473735031daf", "indicator--3224e0f2-52a9-4298-a0df-e0d2dab88126", "indicator--b92ed134-6ab5-4158-8760-e9365a02ea3f", "indicator--784d3660-2c54-4769-89cf-4b15dcccdcec", "indicator--71bc23fd-dbe4-4119-a6b1-f1840f68f791", "indicator--7f6a8303-aa90-468f-8892-aa8902aef767", "indicator--8b493a13-dad6-4029-981a-3f1aa2f5e7e2", "indicator--0287aa58-768c-48c6-80ad-366fbe6b7461", "indicator--feca0c76-dbef-4ed5-9fd1-77427c329d2f", "indicator--c661e4f7-e09a-4503-8664-395884584158", "indicator--dac71de8-ce42-496e-922e-605e6528a510", "indicator--04e325ae-2434-4aad-8de0-6d302822b6f0", "indicator--d1075113-382b-4a74-8497-e31c7e05be8a", "indicator--2d9a16c1-6bf7-4c64-94f6-519f6c980722", "indicator--0fdcd5f3-aaf4-4b64-8f16-01362530a607", "indicator--8c1d978f-2ddc-4c88-a0c1-e86d13471721", "indicator--3aac7f91-cfc2-46d8-a1f8-5d8cdfc20661", "indicator--689eb88c-e040-4f40-b9a2-94c0ff7821e1", "indicator--201afe06-8b82-4c8d-aac4-c5ed1aa77146", "indicator--334aaea6-0bf2-44ff-98de-48cbc5bd25f1", "indicator--102cf01e-4122-4105-80ca-c49711390527", "indicator--94591a53-20cd-401c-874d-e9011da21263", "indicator--4ffa9b33-e87a-47f0-9b62-a0fdb067335b", "indicator--9ac436e2-7c18-4493-8d26-1f9e4e6d012b", "indicator--b2cb544e-80a8-4ca9-ab31-eec460b17b23", "indicator--78cb7a2a-39a1-45d6-8761-3d13799cf409", "indicator--cbabdf35-0a03-4998-a024-c2a1f8736ebf", "indicator--ba6e7f86-f7c6-4706-9ac9-25dc5831966f", "indicator--60b3407e-61aa-40d6-8005-7216911ab8bf", "indicator--2eb1c0d9-51aa-430c-a9ef-343d7211d50c", "indicator--894a921a-ee28-40ea-ac93-956beaee871a", "indicator--88c63a95-a89e-4927-a834-5d76a203bdd7", "indicator--bc64caab-5350-4417-b6af-a0ab2e38edc3", "indicator--2cc8c375-a7ba-4708-87f3-6899b008ba37", "indicator--6f2f0bb8-442c-4182-b10a-d5fa15f38852", "indicator--99322838-bf3e-46ad-b04c-d8b211c9acb7", "indicator--2d56b900-3900-42c5-a5b1-736f921e40c8", "indicator--c9be5998-429b-4717-a884-906fc071a432", "indicator--94a9cd85-a3b9-4301-b40b-204169ca726c", "indicator--418d6d3e-a030-45ac-95b6-e8e0fad7e311", "indicator--53b64f57-10a8-4235-a428-e19812296f81", "indicator--e94e6a63-87e3-40a0-a0c1-ff8917cfe239", "indicator--433b206c-8c7b-4c98-8d0f-d56f70c0adf1", "indicator--c6d9b6e9-42f7-42d8-80cc-8b73532a763d", "indicator--55c1f5d0-5367-4462-9489-a9490fef9ca4", "indicator--26889849-6b88-4877-b6cb-e8c9565128a0", "indicator--4092f7c0-5700-4175-b30e-77e4f5ad4c31", "indicator--a1f205da-0cef-454b-a821-10ce7829d779", "indicator--6d51cb14-7a38-4eaf-ab90-e5848f08e10b", "indicator--21d3f4f5-ce38-4cc5-8d19-0d158bdee4fb", "indicator--ba1fd45b-0a0a-422b-b803-f014fea5fea6", "indicator--825c0989-4045-4723-afad-88af725d32d6", "indicator--bd0aacbf-1601-4c93-81c9-517f56b56429", "indicator--43da97e8-addd-4dce-8868-398c2e11b5f3", "indicator--20a22568-9793-4f0d-9657-509dfe0d822d", "indicator--9345da89-59d8-4bb4-b369-268965c7edfd", "indicator--89cbc8de-3ac5-4476-86b7-ef5e6f476f9a", "indicator--d439cd32-e289-40b3-8cfb-393240ff797a", "indicator--ea9f3ac1-3536-4f05-8076-8de5e978709d", "indicator--8b63dafc-e60a-42db-9f2b-b97b67f070d6", "indicator--c0c02b33-acde-40d5-857a-82add71909d9", "indicator--d009eae4-dd15-4c12-ad57-98e3534295f1", "indicator--468412ad-8400-45fc-a2b9-bcaa69bd4977", "indicator--e75221d9-4354-4b66-a59a-ac98bbb820c6", "indicator--27ff8811-6c41-4a0d-a877-478daf6306ad", "indicator--baf7b0e6-f90f-479a-8adf-f448749f13c1", "indicator--a357e58e-6353-46bd-8f85-39f2f6b2e374", "indicator--5508b541-25da-447f-95a6-8c33907f59a5", "indicator--5f0d3697-67e2-419a-9e19-bf8d35e3ef11", "indicator--dd4b5aeb-89d1-4d2f-b519-3e27aaef526b", "indicator--331638d0-0d65-4c3c-a11b-5c6c26686be1", "indicator--902a679d-6ac6-4ce8-9cb8-3050b3d45c3b", "indicator--c2da556c-bee1-4d70-931d-d092c72a4750", "indicator--c9bd5c96-d31d-4f9f-9aeb-d4290ce715fc", "indicator--e2150326-d793-4be6-a0dd-f22f2c910f51", "indicator--88614cfd-407a-4e4d-8091-06a666a24b9b", "indicator--4d13b030-8e8b-4a9c-aa86-9cef366dc5b2", "indicator--c7eaeb32-f05f-44ae-8258-397fe8be5c4a", "indicator--125368c5-727c-4aba-85f5-a5689a512a01", "indicator--972607fc-e16e-4e7e-8e47-f0db32f3e97b", "indicator--022b0d6c-541f-4f94-bfe5-98f77a752ecf", "indicator--b2d777bd-e7b2-4c2f-a702-8383b8649fbb", "indicator--f26a5d4b-2c2f-4f51-ac5c-b5d208b757bf", "indicator--3314d680-701e-4ecb-8dc0-bd093db873fb", "indicator--c840036a-4551-40c2-b259-d5c498ffecb9", "indicator--909741a7-8202-4094-8145-215ebe6b6a9d", "indicator--9801f286-6c20-45e4-8321-d4fae4c63bef", "indicator--daa9f973-ffc5-4629-abd7-4cbb145f2a74", "indicator--7bce6a9f-beec-4903-9f5a-3a73d641356e", "indicator--6ef31486-40c7-4fea-893e-aa0ef97afa6d", "indicator--91ce990f-5d1a-40c5-873d-fa93bdfbf568", "indicator--d732ddd5-6dba-483c-adea-34ebafc5f8b4", "indicator--5bf53c7c-d69a-4015-8f37-cd5630594ca7", "indicator--8bc3de38-5f69-4d66-87a6-3db26e46000c", "indicator--2f50165d-f7a1-476a-a5cf-de67259e49f0", "indicator--b7ab140f-bbe6-4c47-9349-48790f7cb1fb", "indicator--dd0844f9-e7c4-499d-90e0-89df2a7fb9fb", "indicator--516e8c90-a0cb-4dac-b7c2-3f7c2f413d2b", "indicator--2f712a2a-085a-43bb-af34-fe726a2580f4", "indicator--86ecedf9-cca4-4ca9-b679-d77ded80e9dc", "indicator--57b6565c-0cea-4a4d-8b9a-fb8b425ea8f8", "indicator--58f884aa-e716-4468-ac80-c15d10499ea7", "indicator--a6253e94-4a37-4d62-93fb-3766ac6f50f1", "indicator--190d882c-d064-4854-a4a7-fc3e59bd5b9a", "indicator--0e88f587-1641-4407-aa99-2143a2b5418d", "indicator--613b2c35-d900-48dc-ab15-cb35c614abe3", "indicator--4395c2d3-6fba-4af9-b534-67ae2dfa7feb", "indicator--478c0968-12a1-4690-a302-31c256c6a335", "indicator--a2684bcb-a47a-4d62-aab0-c6fb7bdf454f", "indicator--a2460ee3-4118-4a3a-ba43-0ed35f142af9", "indicator--f2438dec-edc8-431b-b440-a9a8992e6d97", "indicator--1f208c17-a240-43f2-814d-1a0caf790cda", "indicator--5459aae3-2610-4045-b42b-f959558f1e01", "indicator--d0a99195-7a7d-47ef-a219-d4930f8a5272", "indicator--0f725c1d-de72-4b70-98e3-ab03532b8583", "indicator--8d274a11-7d08-4d0d-8107-394338730455", "indicator--49440d8d-cad0-4362-bcc4-a16dab743716", "indicator--d3340980-4e2a-481f-a781-cd44ce233a83", "indicator--fc419b0f-0db3-46be-8fa4-248198fdf9bc", "indicator--db20e9c0-b4ed-4407-bf80-932d28c39293", "indicator--a1194cc3-303c-4895-ab0b-703ed5cd985c", "indicator--d096f2f0-cde9-4c4d-bb18-4a6d9cf11b6c", "indicator--96f4f24f-2d1d-453a-8614-15cfee320ff4", "indicator--56091263-f478-4e36-bd5b-40cde679833f", "indicator--4e0c9297-b52a-4274-a3b0-f4b1112fb197", "indicator--ceb97656-35a2-48f0-8914-117fe17f5e77", "indicator--55d8e530-dc95-4f30-8b6c-e15afe91f5f7", "indicator--08f1fdc2-1886-44e5-a0cd-9e4f9b007a6a", "indicator--867a90bf-f3ac-4125-ba79-27e66ab3ea74", "indicator--7c9c80da-5d72-4d98-8b18-e54390273535", "indicator--e7ae1325-e630-407d-b4cf-408f2e3092d8", "indicator--9c91c418-7a38-4f9f-b522-d7ad826da8be", "indicator--e7928271-c42b-409d-bb2d-85b5a4466ffd", "indicator--75d03950-5aab-487d-bc1b-9fb1ac67fcf1", "indicator--9d85eb7a-e4d0-4901-bac1-f71df609122f", "indicator--da5d3fec-4341-4e4c-baff-558980d2dd55", "indicator--859957e1-3df6-4e78-b349-25c88bab574d", "indicator--cd67da05-b6f3-411d-934b-833ab8e691f9", "indicator--8340a36f-b0ed-4a62-9ffb-65392b8cd578", "indicator--0cb1456a-7f15-4346-bee1-d8efefb51caf", "indicator--d76d5954-7d97-42b8-b73e-26925dba77ff", "indicator--f622979e-dfd4-4e0c-b27b-240496485ac7", "indicator--436432be-12f7-4dca-9364-ae8496aa65e0", "indicator--0f361666-882a-41a0-94bb-c84175c177f3", "indicator--6fcff553-951f-43e8-98d9-251954d0c72d", "indicator--23eccc36-01e7-4bb4-85b3-94cea4ee0245", "indicator--40c91e84-bd35-45fe-8e62-5e115329ea64", "indicator--45a09794-6e51-477e-a435-520ec1b8c646", "indicator--42fbe5e5-a683-4b8e-8a63-b4315823b370", "indicator--d67c0006-1987-45ea-9ab8-75309c8d3ed6", "indicator--23def433-73b2-4bfa-a02c-6f5846e93ce6", "indicator--41f5fc11-f844-465d-8ead-41484a15a658", "indicator--da29c026-f335-40d3-9c97-ec3d1c342d96", "indicator--aaf26d66-7e6d-470a-9507-e6baac4fec2f", "indicator--54ffa2fd-f830-4776-8aae-763ae301814f", "indicator--d3340059-1a99-443b-84cb-02c05eae6a61", "indicator--0cb7e124-05cc-42a0-95a7-63aac34383aa", "indicator--6e87758c-5685-49ee-85e1-790ee447b0b2", "indicator--24a4e8fd-1759-4ff5-8c78-cedee65903a0", "indicator--ac86a4a3-6459-40ee-92de-ab8a6cbcfd57", "indicator--5f50d9c0-4757-47e2-847a-5bdd1797660c", "indicator--4bc864f1-7f2a-4382-83e5-ce8118391101", "indicator--e96f8c35-1baf-4802-bb95-eabd68409afe", "indicator--637b5834-1ffe-474a-9ac3-6a02271131a3", "indicator--951ab672-cba0-4242-b3e7-dcf3172bd523", "indicator--a750a924-0696-48a5-a39f-ea747cb6d480", "indicator--c4b236e7-4463-4de9-be57-191d15b4a5d7", "indicator--a9ec1c8f-f186-4d2c-86f9-e6a25245eab0", "indicator--7804e0de-4f7b-4db9-a001-cd4f873bf901", "indicator--ddf17ae6-0883-4e22-874a-cef93eca4c81", "indicator--9df2d50f-8d60-4017-a44b-2a45d0723bf4", "indicator--860e8a81-5587-4869-afbf-dddf256b33bd", "indicator--83810318-afbc-4b25-9192-d8417f16f40b", "indicator--e3f1b8b5-0520-48d1-ad64-78b9a95f45c0", "indicator--3e24e990-0f5f-4c39-9796-e8ccf4b1d1a1", "indicator--2397ea84-9c60-442c-8de4-d928c1b85cf3", "indicator--028a4de0-c09a-4fc8-a618-6b019fd0621f", "indicator--34bae9a8-e315-4cca-a629-9db27d9afd6c", "indicator--4cd804eb-50e9-4dec-894a-3394979bc584", "indicator--2cbc4cce-3663-48ca-b5b8-31dbfdb8d142", "indicator--bacdc958-9695-4eb8-9362-d6dee17b65d3", "indicator--2c2b8d76-423f-4db6-8397-70d62c48316a", "indicator--63d01001-c052-49cc-ad36-87c52f87ba40", "indicator--6e517cf0-f9dc-4117-90cc-fcefb1e718e3", "indicator--0b531b15-99d8-4c9f-b5ef-c1f3ee1e25a2", "indicator--a6180539-6f78-4901-a29f-e25056b3c7fe", "indicator--ba447647-ef2d-4d91-927c-38aa247a4f04", "indicator--b6ed080c-7bf7-41cf-90b0-1553c310513b", "indicator--37ffaa9e-c431-4dc5-ac05-79f9467e3dc8", "indicator--f2e9dfed-87a9-4887-beb6-86fa45063d58", "indicator--6b969435-29f4-4642-9e81-074e83463e23", "indicator--6f0ab763-5955-4e37-b937-7b707ac8e2bc", "indicator--56a8e7fa-ac7c-4e8b-9f5a-a22d950e5ad3", "indicator--ed056b2c-d58e-4af5-8793-c38d9f7c82a7", "indicator--83f98a78-4e44-48eb-b951-6a791e94debb", "indicator--5a92606b-e4f6-48ae-81cf-bdb2086eab32", "indicator--63c44a26-d25a-42f1-a801-8a4887cadee9", "indicator--14655b1f-a5f0-4548-868d-22bf7e423695", "indicator--620f95c0-189b-401d-b929-c1c8b4332456", "indicator--88823db8-9e4b-4e78-a649-0d6e2de19823", "indicator--34e95717-dd5f-4e98-8006-9af01c1415f9", "indicator--004926eb-8f3f-4c44-bbc3-56533b0fdc92", "indicator--92ecb43b-bf16-4768-8014-99a0174d85c4", "indicator--bd67b68f-b1ec-40b9-a5d0-2d326d7568ba", "indicator--dd2d5072-96d4-4263-a7c1-e291a8aab2e2", "indicator--c47b1f40-4e04-4090-86f2-865a1e5d383e", "indicator--f1015cda-5976-4e09-8b79-50e0c0738c6f", "indicator--0a261b10-857a-4613-8b4b-090da883bab4", "indicator--e1421f43-0ff4-401c-8c4f-4ce023549336", "indicator--b485509f-34ea-4aea-856f-1f8893e1ab0a", "indicator--0972bff7-0eb9-4fea-bee0-af76e5c96ce4", "indicator--daeac037-fe3d-4d34-9c80-c1df42b1f29c", "indicator--d506f96d-dc32-4fc4-8e70-f90fb48b0e19", "indicator--7665461e-2e89-4504-96cb-89d31e88a46e", "indicator--376682ec-61f0-4c51-85dd-6e116bfae210", "indicator--48e7b7f8-945f-4ff0-b481-222e977b0bda", "indicator--ee80954e-9f6d-494d-81d2-afc778fa68fb", "indicator--6bbe1f28-45b5-4c00-a066-71dc5ff78bbd", "indicator--cb09d473-7aa2-4738-807e-7ab44dd9a35f", "indicator--3991d143-1041-40d1-982f-f32e2d69f80d", "indicator--dc648132-cb80-402f-b147-e59ea78d95bd", "indicator--3eb8a0d7-9a6b-4d30-a116-003c1263298a", "indicator--892bfe0f-f828-4e43-9785-3103e34f3e38", "indicator--973d573f-ffd0-4e42-b736-1b71c9f3a1a1", "indicator--800b2fb9-19cc-4b6e-86ca-fc4cd6ed178b", "indicator--da559505-901a-46d3-9fb0-e9f7bcca4727", "indicator--67904f9f-0a92-495e-98f2-d5249add44a4", "indicator--897f61a7-14b5-49b6-a4c9-b44773547ce8", "indicator--26f58fbf-3d1d-4337-be52-58df1d1ae843", "indicator--9a5874d4-78dc-4c31-8c75-39a450077496", "indicator--e8074306-9b17-4856-9a86-83a8de26f20b", "indicator--3399519d-9b62-48dd-a6f0-0f331a2e8a89", "indicator--cbf95387-2972-4f4d-8297-1892ab2cd7b2", "indicator--3610d2e4-cc0c-41bd-84d4-eaa316f2ee68", "indicator--90648670-93ea-4c70-80f3-5ad95d5055b6", "indicator--5982c1f9-dcf2-4379-83d9-bdb8a8be88c7", "indicator--d34fcd45-2e48-4960-91e1-7f0470973248", "indicator--d1a05945-be57-4543-bc48-c3244f5f90ff", "indicator--5ba269d6-ae02-4716-ac8b-0b60a5fde124", "indicator--61d6c26d-3966-4729-bb5c-8b830524b251", "indicator--15c37b82-0e14-45ad-9655-b9ceb429f47a", "indicator--437df29e-07d8-4d86-9e54-8047e84d44c6", "indicator--4e288a35-4909-4372-a4b3-61cf203698a2", "indicator--9fd702ca-994a-4dba-9f46-0f9b85853f5f", "indicator--839f0ced-bb83-46a9-9ff8-aac5e686cb1d", "indicator--72ddcd78-ab19-46e7-958e-416af3a2c90e", "indicator--7ab9948e-aa55-4a00-a335-8fc8e3129b4a", "indicator--326e250b-e8e8-4128-825e-48a086ecabf1", "indicator--f399f9c1-fb4e-4c82-94ce-afd150778560", "indicator--e5a0dcf4-c42a-4062-b53a-172f44d5cad2", "indicator--585d0f3f-0d98-4a31-851c-415a1ad0c385", "indicator--0b5206dc-4407-4322-8744-986a24d6215e", "indicator--48d622fe-c83d-4a7f-b235-d2a9e3b89bcb", "indicator--611df30a-8802-4afe-b79b-5db864fb11ff", "indicator--7fa4e588-3f14-4138-a851-4ea38e4ebb5b", "indicator--5b695943-4af1-4ffa-89a3-fbd8b88f9da2", "indicator--57e0f75c-85c7-47ce-9f58-436fd8de9740", "indicator--1e29931b-86dd-4ca5-b3cd-2c01fffc9ab8", "indicator--f963c70f-e28a-4828-8894-0cdc554459b3", "indicator--223c0d08-ba06-4bc2-9d9d-9ee45dbc2c02", "indicator--fa8d981c-570d-4fca-9cce-bdee15bf07c9", "indicator--810911f8-16a3-4550-b13d-c935402deafe", "indicator--05fb6c8e-5020-410b-a4fb-c59fc05608d4", "indicator--4a62464c-cecf-422e-9462-8b6789dfe589", "indicator--a7bfd8c2-db9f-4007-88ef-08507ef7dd87", "indicator--299fb717-8e13-4801-9892-017025cdad58", "indicator--b0ada4bb-c7cb-4abf-85b0-f0df745a954b", "indicator--de0f9768-674d-4f55-a316-8d68ab035a70", "indicator--582543fb-7b05-4d8c-9115-f41a9684bff5", "indicator--054beb2f-62ab-4ec2-9909-b9c132e523f0", "indicator--93fa445f-795c-4164-949b-bf41aac258c8", "indicator--32bc4c10-5537-4b9c-b5df-105ddf76b355", "indicator--3daed2cb-19b7-426d-a012-ef50288ac0f3", "indicator--d103906e-534c-40b9-a536-3df6f032cb40", "indicator--ba4736a9-6e70-48e3-86fa-9ee9f923972f", "indicator--3ac756b6-a48b-49e2-a322-cfcdd29bd521", "indicator--8043ead1-20b3-4e09-b38d-ba9edceabb72", "indicator--91e869c8-645a-4fa3-a419-af83ade8d6cc", "indicator--cc7078da-a060-4191-8ace-ba918715c068", "indicator--89c7ad92-072a-42af-8702-0f418ea9f93b", "indicator--adac2c49-0bfa-40e8-ba50-aede135e6123", "indicator--56de0881-4447-4b6a-8aa6-bee7751725a9", "indicator--49084456-e566-4690-926b-3401a197a9f9", "indicator--8edc2af9-aee0-4330-ab3a-dfaa1c6a0ed5", "indicator--51da0471-0428-456c-985f-33ee5f931051", "indicator--f1b9527c-b67b-461c-93fe-3ee571ee5429", "indicator--fd76521e-18fc-4d28-9e01-2a038d607993", "indicator--daf24e15-665b-4633-a58f-2c7f2474f15f", "indicator--1c504e48-4572-4f51-8e6a-6cd240e6db3c", "indicator--01486e80-ade5-4f91-bde5-0b74a2ddb9d8", "indicator--e81c55b2-1fc3-4e38-81f6-de9169ef3c4e", "indicator--8c7e50f2-8ea8-4e67-8422-1bc244ebb974", "indicator--e01152c7-6e22-41fc-a80e-c270f897dc8c", "indicator--c2e54049-be46-4cc7-b242-0cdc5b0ce153", "indicator--dbc8ca19-b6b0-4654-bec8-5ae2267971a3", "indicator--4346a0e8-a3b6-4a4c-88bc-74be2eba58cf", "indicator--fd22e508-ec61-4e4e-845e-4827d41f9638", "indicator--da5db5ae-cc0c-43e6-a86b-2682e38098b3", "indicator--a05e0a5b-470f-467f-9eae-3fa302505e0f", "indicator--00af0f6d-3383-466f-8be8-0f06dbc3b862", "indicator--f69d369f-6616-4d15-8071-d3ff7591920a", "indicator--2e83f3f4-86cd-4b5e-bab4-44db98fc9339", "indicator--315232e1-9684-4fca-9210-6647ba320c4a", "indicator--89e1949a-9b95-41d7-9ea0-037fa2bee19a", "indicator--9e0f1f3c-8f9e-47d5-b6e3-7ff08579ce81", "indicator--95ca7303-e800-4c74-b3fc-dad2cd920a21", "indicator--a5e3ed48-1edd-460c-a6d9-250fcbfb2535", "indicator--3ea8436c-d4d8-46c3-a0f4-c7f7905e530f", "indicator--556de51b-4591-4204-9cb2-484a08883b56", "indicator--05b29f5f-e2ed-4564-9fcd-ee5036239ab0", "indicator--b0a1041c-7b31-45f3-a13d-bc2090d0d445", "indicator--2c5c46b0-1c15-499b-ba29-52352bc5e746", "indicator--c10c797d-63e8-4d9f-97f3-edba83be3b0c", "indicator--5ac35fa2-5896-4ff6-a987-564c124e8148", "indicator--eda607c7-09f1-4f45-b43e-0e89c8fdb06f", "indicator--1997f8aa-ade1-4869-99c7-fbc6e240482e", "indicator--2a08d12a-ad23-4fad-963b-979b30116926", "indicator--70a23ea2-013b-476b-92ea-87f9cff7f099", "indicator--a604edf5-5c4d-4e33-90e6-0c3729e29303", "indicator--af626f29-8f1c-453d-b4c9-37d6d1284211", "indicator--36983c7f-78c0-462c-88ca-9c9a54cc91f9", "indicator--1c6c5cb0-9f69-4410-841b-961673c547ca", "indicator--0c48c5ed-8cb7-4530-92be-846a4e9843c4", "indicator--6dc61c34-a568-452f-93c3-dcb059f96a48", "indicator--3acac42c-da95-4907-830d-0bd4f6dc2dfd", "indicator--1a1b5fe2-9997-4ab5-88d8-2aaa353571c6", "indicator--0a1eb327-a417-4ba9-ba4d-d353c48040c1", "indicator--eff76dd7-517d-4c47-a4ef-7dd4dc5635bf", "indicator--29743638-cb3f-4b64-8da9-15f33b512ca9", "indicator--bce22a01-a6f5-4b32-b196-0fd68a831337", "indicator--7bd2702b-5bba-498c-8f40-23a25a8fdda7", "indicator--a4435cf6-b966-41e9-9111-d7008c917c46", "indicator--3237bfa3-c6cf-46da-b3cd-2e38b59b7526", "indicator--7afc7ea2-d85b-4647-a6f0-ef393bb0ff33", "indicator--9128e66c-e9b3-40f8-975c-b5fe9d6cc346", "indicator--8047523d-5635-4b1b-b4ab-00931393e5a6", "indicator--4ffb979f-187b-453c-807a-04df7068fd79", "indicator--43447bc7-a3b0-4953-a588-f12e6e8a361e", "indicator--18b47475-b3fe-468d-9f9e-e183c2523493", "indicator--f76d433e-b729-420c-a98c-84c5d046ff56", "indicator--9dbe76f8-ce3e-4574-940d-1f03f8100f88", "indicator--7eae22f0-7f9f-4f63-a42b-961cb30040a4", "indicator--539c0515-b878-4e18-9bbb-2e4d0bd8956b", "indicator--b0b90c8e-1aab-4892-8be1-6a4606c7c555", "indicator--51a946da-cd14-45fe-bcda-e5f6eac2b755", "indicator--63628131-b9cd-407a-bd57-cc53f8a746d8", "indicator--759d1d6f-7d21-4db6-8b2d-f3a73068f859", "indicator--60b0b43a-86dc-4c86-9c3a-0ac679f6d688", "indicator--994d1661-3203-40c6-bb5b-cd14f34a6e31", "indicator--626553ff-cdca-422b-b746-08fc8a6f2811", "indicator--8b267b08-89de-4038-83c6-e0175e77d99f", "indicator--5506b141-b1e2-4a80-94d1-ae744394530b", "indicator--a0f523e4-7318-4765-a80f-9e602f042aed", "indicator--03bf1cc7-11e6-4bad-94fb-fb9243325fd2", "indicator--9dd2509a-a615-41f4-9cd6-301bbb013d82", "indicator--5da54953-109f-4e46-8446-a494c68b7478", "indicator--5afd057b-df8c-452c-b43d-5b87b50b82b6", "indicator--7de1f50e-3b2b-4439-b885-176db16f4d76", "indicator--2abcfc69-d7fe-45e3-bd3c-69868cac29cd", "indicator--bc3c89d4-32fb-4be3-abec-f3e7bdf70103", "indicator--49b6fe74-c1db-46e3-90b0-4b3cf1107489", "indicator--e0b8cd23-8765-480b-89bc-79636c09a6b2", "indicator--824f5d02-fc2b-49b1-a0b2-b0048e928721", "indicator--a86555d4-157d-4699-a36c-62db234413d9", "indicator--84143c69-e60e-423d-bfa9-569fc71ecf55", "indicator--a0e50a8a-f250-4ebe-a8fa-08ed3d5fe29a", "indicator--a12baf56-24c6-4b17-9aea-c5cb82db4fc3", "indicator--8608bc3d-790e-4687-8f76-26ffd9cb5cbc", "indicator--18e76780-0584-45c8-8ebc-97542bb33892", "indicator--df9031cc-360a-45cc-8269-dac92b3972b1", "indicator--23015e77-f801-4e70-9f17-d7bed7e3503a", "indicator--b6f7c240-e5dd-43dc-8172-b8089e552ff8", "indicator--a51e85b1-bb13-43ec-8100-15f7952ab572", "indicator--52625053-071f-4a99-bf37-7b80635e921c", "indicator--0c9932e7-0c82-4e28-afb9-0b6021b93247", "indicator--554f7257-7463-441c-b8f1-6448e2c69db0", "indicator--71b3f933-d257-47e7-bae5-de235dde4f13", "indicator--0ebcf528-db8e-4304-80c2-6d7a33216828", "indicator--b14ae71c-7257-4931-b009-55fc78c721f2", "indicator--ec81e10f-b6af-4834-9f8b-0f013527481d", "indicator--63df8cf8-c9c7-47a3-a61f-6eb28ea91701", "indicator--77379b03-c42d-4836-98a6-9819a29f47c6", "indicator--bfb0007c-1011-41c0-8af6-e45a1c5eb98e", "indicator--07b16c4a-b749-4178-99c5-f63b999ba183", "indicator--299b9804-2437-469a-b816-55f527a7eaab", "indicator--0816afb7-d52a-46ec-b85f-99574469f7d7", "indicator--aa720d77-42e3-4143-a9b6-fda3fede2b3a", "indicator--673726c6-4144-4711-ad7b-fbd6946ed03e", "indicator--53d5478a-6f12-4db4-96b4-46e693eb4ea7", "indicator--d35f2e34-c22a-4476-a08f-adf654588538", "indicator--54c0b7ab-eee3-40eb-9938-75751fcc65d6", "indicator--74afddd3-f1be-415c-a198-203dac7d6fe1", "indicator--51ec3539-ce3e-4be7-aadf-ecd9379d63d9", "indicator--5a6a0b52-4e1b-47ce-91bb-166966001fc1", "indicator--54b36eda-6ce6-440c-95c8-3b6c8ee561d3", "indicator--1ed71cfc-9516-4129-82a7-75b99692f3cd", "indicator--74999cef-0ef9-4ad1-9ff3-044007f5c7fa", "indicator--3801f400-f596-455b-a585-b5789b6b70ce", "indicator--3b4667d2-c7f0-4e8a-86fd-ef636ac8d1db", "indicator--a23af410-c096-4203-a073-5c07a568e034", "indicator--c595d3d9-68b7-4698-b8a4-9d83f2a7693c", "indicator--184bd054-716b-489f-a5df-4194464d20ee", "indicator--e6f898c0-6786-493a-9cbb-4b299cf31908", "indicator--f426b146-91ba-4521-ab93-fb7314a26341", "indicator--1cef52dd-3620-4270-a2d0-0dffce87300f", "indicator--edb3ca99-1a21-4189-a29a-4e821d0f65d1", "indicator--87b358ba-400b-4e12-ac07-2fcc6bd8b143", "indicator--c2c11f0b-5b2d-47f0-9700-30016163122e", "indicator--a964131d-c209-4641-99bc-2e920c7ab629", "indicator--fbd8eb51-a4a6-45da-b4cd-73baf3aa1dc1", "indicator--f6671be8-18e2-415d-b10e-9ed0336fe9d2", "indicator--a549cee5-6d97-425d-928f-8ac72367abf0", "indicator--6759ffb7-6cd3-4351-830d-8ad9defb921a", "indicator--6b5e125a-a52f-49bf-9d69-04a07a95500b", "indicator--301002a9-af15-4f69-9bbf-1609f942b32a", "indicator--14599510-a306-46ae-a054-d2a070bb65c4", "indicator--2d31a02a-fbef-4116-9a85-4fb392161c8d", "indicator--50174de2-00b8-42a4-b8c5-296759a504d3", "indicator--94c5cd6a-0701-42f2-bc76-25cf0200146e", "indicator--eba2e029-1c2e-4915-a10d-df6f61b985f8", "indicator--0cd67e97-56e5-4c2d-b834-8b98c05f4027", "indicator--ff6704b5-0c27-489d-a5fb-427945b4bfca", "indicator--20e3067c-1d9a-44a3-b645-53395941f920", "indicator--b452a9ef-a40c-4aba-9515-717e84687ad7", "indicator--388623f8-b557-4a83-ae08-7f0d7fe1af33", "indicator--1f4783e7-2d23-48a3-ba3e-8d93692f23ab", "indicator--db6294cc-1c78-4260-95a5-d1f8f37131f2", "indicator--3a9ddee4-eb59-4e46-a518-adbcc2ade89d", "indicator--98a60220-5465-4653-826c-1dff3d8821cf", "indicator--7810e737-6671-4018-87aa-30f61b940142", "indicator--87bdff63-a946-4f14-9969-2f408d4bd8fb", "indicator--a049b652-271a-47c5-b3f7-3f4803d144e2", "indicator--941a7a6a-7539-413c-9a6a-0e8d0604d503", "indicator--51dc5d76-522c-4101-8874-f505a6c5a1ff", "indicator--2cbeade9-69d8-454a-8b94-f6edc51b9738", "indicator--3ebad500-6889-4e54-8f36-6a8f6492b512", "indicator--a6a7b264-9a0d-425b-a39a-fdbc0a9171be", "indicator--6036740a-0bc4-47cf-886e-c00836aa81a9", "indicator--1895e0c0-7a15-42ff-ab7a-47217d58702f", "indicator--098e7e74-e69b-4eb3-b18b-2d25fe7bae52", "indicator--eb730e69-62f5-492f-b971-1693f890f54b", "indicator--32afb38f-2aa7-432b-8f20-2b57c9c4c357", "indicator--a776dce3-a5d1-40c3-b5e8-3f45afe87fb2", "indicator--30e10207-29d7-47b3-801a-3415400b4fef", "indicator--b53c6b17-dc2a-46d3-92bb-6580aca780c5", "indicator--40419d82-979c-4261-8523-c554d2100b4b", "indicator--0c4f9c6e-6f75-40e4-8701-e729a875466b", "indicator--6cafc4d7-48be-41de-927e-159bbaa9b44c", "indicator--ef73cc31-cdda-42a6-9ea4-df96539b66a7", "indicator--ef960997-e7da-49cf-9602-856205d39101", "indicator--ce860d72-fd97-4e45-a883-959019583703", "indicator--02492f91-7f55-40e6-8cd9-b505b6a5933d", "indicator--09b7d53d-6067-4bcc-92a8-d3b05cf3b778", "indicator--4be9355c-e065-4e96-b0d5-a91d4a343ed0", "indicator--b0ed8785-0961-4bb7-8400-023f73846ba4", "indicator--9a638b98-b33f-40e2-bc3e-61aa82493425", "indicator--57931477-521b-4d48-bc99-93c1110cf616", "indicator--127deaeb-9748-42a2-85a0-dc4484b43581", "indicator--8c435f4b-ef9e-4ce8-a026-0d928df81556", "indicator--9a61c578-9eb1-47c2-a9d1-ac0857b4b32b", "indicator--da22bcb6-0c2e-4945-9838-5632ccb5b8a9", "indicator--41076044-90a6-437d-8994-a00ce9a51923", "indicator--fc3443a5-e7f5-48e4-a538-db040e1b8820", "indicator--7fa0da9d-66e3-412b-8ceb-86bfbae4556a", "indicator--53b0bba7-0342-48de-8084-fd8240cb3aa2", "indicator--f0c14158-5443-486d-a531-44459fcb7886", "indicator--87ed22ef-8fbd-431c-becf-ebfb2a74a6e2", "indicator--9ac32dd5-249f-4cc2-ab1d-b87aa5b04d8b", "indicator--9e4d0132-58a5-4012-a976-57a17456f0af", "indicator--ba591964-bcd8-4adb-90db-830394bf6011", "indicator--1bedf782-6c6e-4686-862c-e53bdd80967f", "indicator--184794e8-24e0-48d7-87be-e8ab313578a0", "indicator--35daf297-cf20-4160-8d7a-56b765c4794a", "indicator--c87a1f03-81e5-4987-bd06-888e3ed3b87c", "indicator--fdc798e6-5c45-4e48-b2b7-c86b8ccbee8c", "indicator--b93a622f-d773-4169-b56a-30ed99dc5464", "indicator--23987ff5-1a2a-452c-82d4-e80d7686d5f3", "indicator--2c5c2f0d-070a-47bc-a430-9f739ff07b27", "indicator--8260ac75-d3ab-4b4e-a3d3-cd0b2f22a25f", "indicator--bc621377-d2ff-481c-85c5-5525a10261ee", "indicator--a0368db0-d3af-46a2-b7cf-37d73a73a579", "indicator--165c2226-4292-4f51-a8a3-4fa8c51b159b", "indicator--69bbfc06-4bae-4dc8-93f6-ffe8830a231b", "indicator--f69e3130-c767-41a1-9e96-e1e93bcea879", "indicator--8105a10d-5e8e-4d7f-9dec-c64e7471f3ae", "indicator--598434a0-3524-4430-8d2f-303ee5678d6e", "indicator--ff4d026e-0362-4c7a-8d23-75ef6b7547ee", "indicator--13cd1bc8-960a-4aad-9266-247754f74416", "indicator--02936eaa-0ed3-4767-84f3-b5d82ec80feb", "indicator--77bb5551-b279-410b-a55f-f0bd0734ecf1", "indicator--111ed771-12aa-4031-94ed-7134ae46e314", "indicator--15b6bf3e-a120-40b3-921b-bf10d98309ee", "indicator--01732226-ba15-41b7-ab5a-51fc2cc2a6aa", "indicator--c132d5e1-460d-4c54-9f54-f88f0bb6b80c", "indicator--27d409a6-7376-45a3-90ec-b4968bab6462", "indicator--7a749a39-813a-4813-b9ec-060441160118", "indicator--12c460a0-84a5-4576-aba5-6e76ecfaa861", "indicator--2046e681-5af2-4a3b-a66f-857adc963dcf", "indicator--6e6bd7a5-7916-46ce-8342-11e367a22498", "indicator--e7504dec-4e1f-4ba6-bf3c-e37f3d97910f", "indicator--a57be5a6-0a6f-4178-b8eb-99e3e87dab78", "indicator--ea4b8606-ba88-474b-a7ca-084f9a302e11", "indicator--8616c51f-5a86-4aaf-8416-d39234f0e612", "indicator--fe3c63a0-b1d9-4806-96ff-752484a44b81", "indicator--874340f9-9176-4757-93ef-65bbe4ad6a8e", "indicator--ab5838ac-9e1d-4291-9cc3-e25ff7854ba3", "indicator--fca1d19c-4c8f-472a-ad2c-078abc6a0365", "indicator--eb7af617-f0bc-4d18-a28e-3c192bab1e60", "indicator--e5dc2a70-a078-4062-98ea-6dbca653ea67", "indicator--bccaba3c-13ce-4ad5-a3c9-a046b5684650", "indicator--5cbe84a4-608a-45af-98cb-3e21b9300fc5", "indicator--a5a5c7e0-729f-44ca-91cd-881c1faa848d", "indicator--a0be1d16-2397-4adf-80c4-8fdebc78af0b", "indicator--b4e252da-211d-472a-a2e4-0cdc5d36faad", "indicator--0de74edb-fbec-454c-8eea-d4f85631143d", "indicator--c4da3745-007b-4eaf-8f94-c2a8c66a5d5f", "indicator--2db36830-b0a5-40cb-9a4e-7fe3d3c8dc6a", "indicator--51776777-81a0-483d-9bda-4c13307df23e", "indicator--a4ba9bde-2add-4185-af78-2bed21c05ba0", "indicator--4cc54ca2-82ad-4ec3-b9aa-c5536442ecb6", "indicator--04610e85-e0e3-44c8-b11f-6f3fcebe797f", "indicator--b5ba9f60-4f03-48b1-bae1-1e8228de7f47", "indicator--f627e52c-e392-4f66-bb56-cf80316c9e91", "indicator--82bccf5c-4bd1-4b53-8ede-cd612942e4f0", "indicator--168492ed-46ea-4023-ba1f-5ff170745f20", "indicator--7b01b97c-7f74-4c96-962a-5651a12de7b2", "indicator--691ae59a-8fba-473c-b253-7c56825954ba", "indicator--18bf2e5d-421c-40bc-9a3a-c25d72e65ad0", "indicator--c5e85b7a-2aff-4381-841f-93de605fd40f", "indicator--2a927d5f-0045-4985-8ebd-0f9f50e92cf7", "indicator--07e1c043-8acf-4c45-ae1f-a94ed24eebbb", "indicator--8dec3f05-de15-430d-8aec-6c630613a272", "indicator--acacd604-d7d0-445e-aa85-e192fbc8ebef", "indicator--5318b0d7-0ed8-4e7c-88ab-200cf5a87950", "indicator--aeac9211-6e41-445f-8862-b2307d0c534a", "indicator--39ba7cbe-34f4-4816-a692-60b9f2347fa5", "indicator--d138f7f2-30ee-40ad-b746-d0c92a87e799", "indicator--7e118eb6-1b24-47b7-b39e-6d3dd5533b08", "indicator--6d875585-39dc-483d-8f54-02f4dd9037e9", "indicator--b516954a-2de3-4b3d-b1d6-a4fbbc70ef74", "indicator--6e6f45c5-2991-4072-ae55-1f9863bec955", "indicator--e4495a8c-4166-4a5f-85b5-ba31e40a5e2e", "indicator--c6bf9507-1f97-434f-a273-fc343282f1c9", "indicator--e9cc62c2-8696-4168-9265-c1480d0f1768", "indicator--c54f4b0f-9e6b-4934-bc23-4617ce46d28a", "indicator--057e6193-575b-4ce2-90dd-96b7f776e2cb", "indicator--2ea0b096-ca96-43f7-a65c-32d69df029cb", "indicator--6ac6e9d8-2c0e-4323-8575-56d860cd80fa", "indicator--c8fa3321-752a-4a3e-814b-a924d8764332", "indicator--b1816396-c1dc-422b-a029-4e5f4ecf9858", "indicator--9db044d0-200a-4916-a0ba-f86bd88f52ad", "indicator--7d6d7c30-9596-492c-9fa6-795f9ca1ba65", "indicator--10a6d7ae-7706-4f31-ae79-d0863dc948a9", "indicator--7f9d52df-c1bb-4b42-97f8-c0bf9de4721c", "indicator--9132de6b-5a1e-4134-b3e0-e878787d6364", "indicator--854f7ef6-a26e-48aa-be60-ef8a7582dc24", "indicator--b6bc4c8d-3f9a-4773-bea9-d01cdaa512ac", "indicator--ed4c24e7-d695-4db2-a093-e2457860bdf8", "indicator--c695dcf2-0eac-44a3-a885-d95a1145c185", "indicator--f220aefb-96a3-4aa2-a3f2-6b7780faf7d8", "indicator--bd427e33-4347-43db-9610-8a687877ce9f", "indicator--1a0d4349-f210-40d6-8511-e245fb70a766", "indicator--8b98bce9-82ec-445e-b979-d782c3933ccb", "indicator--387ca29b-b382-4ff5-8f4f-d137e58a39ef", "indicator--116e0077-9d34-48e6-a89e-028cd48f1444", "indicator--6832feb2-f92f-481b-8e9a-eb47dda5082d", "indicator--2d12e8fd-1691-4da6-aab0-71037b05aa66", "indicator--f526fe7b-c823-4901-8752-11bea7730054", "indicator--7c424bd0-d071-44d6-b7c4-5afc4ec260e9", "indicator--bbb1cdee-f590-424b-a2c3-46c9192c6c3e", "indicator--d242f2bd-cee6-4fec-8625-de8642c5e104", "indicator--6b5378db-0686-41b7-b54a-6efe36aba3da", "indicator--b8455b47-3a7a-4d45-9c07-d3208649e068", "indicator--90f9a504-8e83-4ebe-8268-d01cd2a079e0", "indicator--3bd23620-bbac-43cb-b81c-1cc7ab474266", "indicator--b623de27-bfb6-4acf-925a-5b63a33b1404", "indicator--26b07218-657a-456c-9293-1f9a9d753484", "indicator--4cf67c57-a15d-4068-8563-ceb14173d19f", "indicator--607c0a0c-75fc-490e-a6ed-c984b3959451", "indicator--ec80a7e7-6219-4a0d-8c0a-7576ad7903cc", "indicator--3396c1ea-4f36-438b-bfe9-5352250ce2f5", "indicator--1b4dfbc1-74b4-4cfe-9f5a-ebcd51c82f4f", "indicator--792a2992-1b1b-4166-b9ab-5b4d02479cd2", "indicator--a4c181fe-a47f-4cbf-b2ee-5fa988a05cd3", "indicator--0d627a97-ecd2-4530-adcc-d709f00e38e8", "indicator--b93d0b41-fdb5-439b-b69a-3731a25e13ad", "indicator--29a3f31a-d25c-4dc8-b5a5-2e3327fc7340", "indicator--24088925-58d7-4c17-b889-9653945707fa", "indicator--2e455b58-82d8-4e8b-af34-2edbb417fd14", "indicator--f25c2fa0-0cbc-4d09-a6f8-4ea1c1473dcb", "indicator--b826d654-5b38-4bb0-ae3d-a8ec2de55243", "indicator--94c8252a-47cc-4b77-880a-378f475eaf76", "indicator--e142ccb4-e380-483b-82cc-bdd2d870d5a1", "indicator--9f04ce06-b730-451e-88d8-7b06d8e74da0", "indicator--ff61dc6d-fe3a-4e42-93d3-ef9d4d3abaca", "indicator--96a5f3d7-ac68-41f6-bd8d-5f2a182b5b11", "indicator--fd2c400b-7439-4769-96e8-94ff3ea76786", "indicator--592f9c88-b50d-4101-a1ef-02bea7a03685", "indicator--d9b452ef-7b20-490b-b52a-38f9c8da8988", "indicator--1720f91f-3567-4626-bff7-72b037194068", "indicator--9017a915-ddc6-4719-aeb5-0787de8fcbcf", "indicator--f66a64a7-feb3-4f9e-a0f2-0cc3c5b19bae", "indicator--0cbfbd09-99bb-4591-8e11-34cf0f3cd090", "indicator--975e7866-7463-484d-af99-2558bb756503", "indicator--d7030e62-491a-40be-9cd3-8135ac3ce99d", "indicator--6149cd9a-9e1c-45a7-a61e-406e640bd8cf", "indicator--c2279d94-4fcd-4794-aca1-6ede170e5837", "indicator--7053dd33-6c08-47ce-a2b2-ce739d5cf2a4", "indicator--1ed4f028-24c1-4f6b-9b00-b5be0f11d8b3", "indicator--c155caa6-b9aa-4ca2-bf5f-5f073a046d6a", "indicator--b40df0d7-24e0-417a-b258-2b3affc5ebab", "indicator--5f31ee6a-1a45-47c6-b696-552eb41f899d", "indicator--51f8dc77-f8d1-4780-9502-8b37e4ac06d4", "indicator--f4980eac-ef9a-4093-a4e3-a56d95b49c35", "indicator--404c4269-3463-4a6e-bdb0-e16db9e9cb2a", "indicator--00e552b1-a62c-4131-8e86-e7297ec46126", "indicator--0d1b2da9-2318-4b29-89cd-67fa3b46d668", "indicator--ff94c7a2-870b-4f2e-973e-dd831139ac2b", "indicator--5f77f3cf-2517-42ce-86be-03a6500ebca3", "indicator--849fc8ee-920d-4f01-86d2-daaca855b290", "indicator--4f485916-00bb-4e15-a3b5-c88b1980b489", "indicator--59f4ccd1-319f-4e20-be44-59a253665803", "indicator--88101073-299e-4dbc-9fe0-ae9b4ac7e397", "indicator--05db9bec-0f20-46fd-a389-9caaed6023e2", "indicator--609c72a0-b2af-49e9-b82b-b97e9e3c0d0e", "indicator--9ada8ede-93cc-43e9-b708-e449d93b25a1", "indicator--e5058305-c744-49af-b6ec-c6980f578f63", "indicator--ac85b99d-d8ed-41f3-b8cd-8222f215a354", "indicator--698fb019-3490-4cc8-b62f-c99c37d1bf85", "indicator--7527cfcc-16e8-470b-b767-6b8646b1d7a8", "indicator--3848d43a-2b37-4950-913c-8348debfe804", "indicator--5b1383ef-60d4-4d9b-8de8-2e68c534c04b", "indicator--1c9efb12-7b25-49e2-8a02-e6c3ffd4945c", "indicator--0b2db35c-110a-497a-b9aa-67d55f626460", "indicator--b9950a05-6e22-47ce-820d-1de4f9cb94ed", "indicator--f073a215-94b0-4598-b479-5a917f85200e", "indicator--1bceafc6-9c8a-43e7-9e79-71a50090e86f", "indicator--d708b6c4-269e-4d5f-a8a9-a5c73d1be9f3", "indicator--355f76dd-1c9a-4db4-8bc4-49ad43345ea8", "indicator--68b7c2cc-0503-41c8-bf03-876df10cad8c", "indicator--966075a6-506f-4e05-b600-378d098e57b1", "indicator--8b2c760e-f3d6-4b66-973d-4220b5828037", "indicator--ea05e457-0f21-46e5-bc59-d941ca63675f", "indicator--aec121d3-11d7-4e07-b9c3-1672557c2230", "indicator--31752a7f-3bf5-4c88-8251-e36d64e2f5c3", "indicator--ef917e0d-5fa8-4632-99a7-b86879526e5b", "indicator--c419f0e4-8bbc-4dee-b66b-0cdc199a3a25", "indicator--23a6a523-cb52-45c8-8c4c-a2d70de58123", "indicator--43e3b5d3-c34f-4f6c-afd8-cf858dd3907f", "indicator--323ca024-e38b-4817-a25f-a977112cf737", "indicator--c47bf536-1887-49ca-997d-04fb018bb092", "indicator--fa8def04-3a43-4a55-b83e-1d8fc9ff65b6", "indicator--7ce7b00b-86ae-4305-b817-1c18b0796014", "indicator--f93e9ee1-51e8-4459-b3b9-de19ae2876cc", "indicator--23cade17-42b0-4ced-bade-90ea515b4248", "indicator--52ebd5e0-c1f4-4652-9bff-56694442cd49", "indicator--064b5a35-2598-4ca8-92c1-db03b0002235", "indicator--596467c8-f3d3-45b2-b27e-e300bb5bd6c9", "indicator--881cc0b7-8d16-46cd-ac73-0fd16ad966db", "indicator--3ce4bb74-2a75-40c4-b206-f666d2c50a2e", "indicator--d2c2787b-d407-4e96-b3e9-c400ca83eb34", "indicator--2eeaef37-8042-4f7e-ae1f-76066c5a16cd", "indicator--28561a01-6f0a-4631-b7b0-b99a1b8a4749", "indicator--881fba9a-9a0d-4060-9c82-ecc5772a3892", "indicator--9538df37-8065-42a6-b42e-67e42e9bf6e9", "indicator--e84a5355-f898-4f3d-8b56-6aff6f44727b", "indicator--17d0d484-e1f1-4b8c-9336-ef8f7e2fc4e9", "indicator--656efc94-ca86-446e-9df8-e18485377753", "indicator--ffbd03bf-9fea-4d2c-b2e3-c9b3949d84c5", "indicator--bfbead98-3cd9-4941-a399-ff014eb7ccdb", "indicator--37864449-a9a1-46ea-a12d-4fa7a7ade0e2", "indicator--e0ae694a-e80d-4c73-8855-9ce940021933", "indicator--860dd91d-13c7-402d-8ce4-ae4275dcebb2", "indicator--ca4e5eb4-c62a-4953-b0fd-34b00a0c227f", "indicator--64db0726-022f-408f-8f96-556104d4f0b5", "indicator--d81ee874-2d00-48f2-9868-39aac6db2e17", "indicator--754a81c2-5301-4619-ab18-d15b905b395f", "indicator--5b2728fe-4214-4050-aeff-cc1efa7d2bd3", "indicator--bd58af32-0725-46c6-81c6-57774a09e169", "indicator--aeada496-343e-4780-9501-9f1f010d1444", "indicator--d6eb9a6f-4697-464c-bce9-c37d08ce811d", "indicator--bf1bdcef-554a-4d98-aff0-f51fd0222087", "indicator--6ee7693a-5813-438f-8ba6-5b091e24e268", "indicator--4ea5c574-ac72-4eed-a7a4-c541d75b2b6a", "indicator--7a3b57f8-31f7-4faf-adf6-2701beec4430", "indicator--b6bbedae-7879-405a-915d-8587794e22ed", "indicator--cf7e1c60-55e4-417f-a03d-c7c6048dd43a", "indicator--485f3695-10f2-4593-80d3-eef96f5dc4f2", "indicator--c2fcd3ce-5d91-48a8-8631-246a4a0a024c", "indicator--b57edfdd-d53b-4299-afe9-e794983b543d", "indicator--59314acc-f4ae-459e-8cba-00c1106c1b49", "indicator--6e6407ce-6f18-4924-9043-c6dd6b4e8b77", "indicator--797f39ff-81bb-4b5c-ae43-90fdc7965063", "indicator--e3458310-2560-432a-971d-453ab4e1f89c", "indicator--8aec5ed3-2a9d-4db0-91b6-7489efddd556", "indicator--335d9812-680a-4b02-9cdf-19c526eb7037", "indicator--95dbf88f-71f5-490f-94fa-3964146e2875", "indicator--ff0a0291-3eac-47c8-8aa5-279697295af3", "indicator--1c3c6a7a-21e2-4907-a3ce-5ec09aa7195f", "indicator--a07a2101-2007-49ec-b8c8-ce3cd5e9ddc4", "indicator--be037e84-2929-4b67-850c-9addb65c873d", "indicator--d49776b5-33c7-4f65-8657-4c3316598299", "indicator--1703a4dd-e7c1-4857-b687-299d0668db20", "indicator--c2a55ce8-0d68-4b83-8b12-d16769afdd3d", "indicator--2bb44764-99f8-4fdb-98b5-8b417428c7a8", "indicator--7e80ee35-c8d2-40e3-ac5d-17e37a018b4a", "indicator--b315020b-84b4-4252-8cdc-32dc7936425f", "indicator--92044d54-6b66-4717-bb39-11296cc6b3d0", "indicator--2d7c1be3-772e-4117-be11-11bd5a4931ac", "indicator--222a05a8-9b7a-4726-9a8c-8114f6be4013", "indicator--a56bd277-f661-4f56-a2f3-836c00141a45", "indicator--21ce8547-113f-4d26-89a7-4536e549135f", "indicator--fbe21f8d-fbd5-447e-9c29-207ff5b86e3e", "indicator--fa2df64a-f80f-4c3b-8324-077e1a12fdb5", "indicator--3a5954ea-6e20-4d74-b2a8-ac3a76d7e1fc", "indicator--a1d8c984-442c-4beb-b2bb-56aa69722cb0", "indicator--d0d9e0a0-d6c6-4acc-877c-06637d505531", "indicator--900da2fe-3b26-4e47-a602-7956f9f9a185", "indicator--f76891c4-7f25-4a1a-b327-6b7e4cd0753f", "indicator--77afd163-7a8f-44a7-b677-cfe87e966598", "indicator--5bb8de95-c338-40b5-9e77-b82fef8669fd", "indicator--aaf6ad82-d31a-4920-abf2-2cea3c321aa8", "indicator--28f8e5c6-e360-4375-9702-a570fd29b348", "indicator--2596d5c5-65b7-4ae2-bdf4-baaea523af0b", "indicator--1b65d867-4526-4188-80f0-50084ac3ff0c", "indicator--4460249d-9680-494b-a89d-ff5cd07913f2", "indicator--da073f01-4eb4-41f2-acdc-1d2800d1685b", "indicator--c250023e-1ea1-4f86-8aac-4bc1572e5285", "indicator--4390e966-6e07-4dd5-bc4e-76a65a274d3f", "indicator--3e6fba80-6aed-431d-8e63-46e078bdab42", "indicator--e9484e1a-b4a4-4089-a908-939798fa0874", "indicator--6bf20c61-2909-40ca-aca7-d975be9ef7e5", "indicator--f00227b9-fd36-4016-b393-ea74d3503acd", "indicator--7df7dfad-96f1-425b-b573-b25bb1d24f6f", "indicator--c031a60e-fa64-4d7f-8877-64e84a0961a8", "indicator--0fdc308b-3b7a-4d5d-a020-f5ab2748cc22", "indicator--37fac4af-cb0c-4447-9fdf-28139b378612", "indicator--2acb45b5-f753-44b8-830f-8966db1b6a2e", "indicator--e7c9aba9-6f2b-42ea-8646-ce8fb46eccc7", "indicator--5b1c5b04-5c42-4bd3-8dc1-166e3818c00c", "indicator--904d5546-bd9e-4477-9e73-d2d54c24c0c1", "indicator--2ed0a20a-e389-493f-bd20-f08ef452083d", "indicator--309c7a84-b17b-4077-8cde-7ec9248c41f6", "indicator--55b36ba0-819f-4e14-980e-024603992d2b", "indicator--e21f5b2c-5f8b-4c89-b547-e323dd8d0010", "indicator--28a44ee6-0354-4453-8b35-ed2ff414bac4", "indicator--a5d7621c-886d-4ac3-b521-59c6708cc09b", "indicator--4e6e305b-a6a7-4a57-8cd9-f642100cce7c", "indicator--d5fba9f3-bab7-4881-8519-fdeee2b434ff", "indicator--be694842-ca41-4be0-bb3c-ab7b2ea72d7a", "indicator--00d455e3-9ee7-480b-992f-53168116f1a1", "indicator--fa9e3754-8327-4389-8a15-d5b767d7468d", "indicator--49b98e99-daa2-4ab9-89e4-9f32f29dbe2d", "indicator--9c5674e4-c95e-4813-914f-2aed0abd9616", "indicator--7fb2fa22-d034-4f55-ae99-552a0a3734aa", "indicator--1798a6ec-1f3b-4267-8fa7-791fc2c999c0", "indicator--5f4a49dc-2c54-4572-8c63-e77ccf54c714", "indicator--bc2045b7-fddc-4680-850e-4c9ccee28aa6", "indicator--1ebaf546-6974-4518-8b36-f3ef7a98e12a", "indicator--402f0c48-f1d1-4623-8c3f-e72858949671", "indicator--c9ffa678-9d61-4c1a-ba42-9950d3677c65", "indicator--4e7dd018-fe5b-4f46-8900-3d697c827b37", "indicator--f577f5a2-0ff7-4957-a44a-3463bd186bf0", "indicator--9e728596-f619-4904-81cb-ebed84d2eaa4", "indicator--255ea533-1370-4060-9276-8de41fb57a4f", "indicator--0f87567a-a403-4c76-b67f-0b680a822988", "indicator--b32f5a12-0505-4b11-b34f-0ef618f2ba5f", "indicator--48b7c8fd-24db-4b97-aa32-05e5ad37f93d", "indicator--9f5d2a0b-88d4-4f4e-b5ed-6fe4db248886", "indicator--587380a7-99bf-4c0b-a4d3-f8c2b81b70ef", "indicator--10a1bdf8-e361-4115-adc0-0c65caa701b7", "indicator--1236dc26-ab2b-430a-8e79-1b7a4047eb25", "indicator--007423e0-1cd6-42a6-ab62-e056aa143db7", "indicator--a4fe5f7f-4c78-48d3-853c-4d34d606624d", "indicator--1ebf00a4-4707-47c5-a329-e5723d56b324", "indicator--d7d6bf97-d6c2-4225-93d2-6efbb02d558a", "indicator--4e41d739-8df3-42a1-93af-32cf1d93014c", "indicator--32306e9b-2adc-49bf-8821-ea367889681f", "indicator--f55b96bc-8f4c-4c0f-a0e3-df937bab334c", "indicator--0d9485dc-04ea-4148-b805-ca4134a42656", "indicator--b19937c1-9496-4f32-96c3-47ea6c533c8b", "indicator--0a7aa92f-4158-4080-ad76-6468715d9df3", "indicator--4a8f7f7c-13b2-4b91-887a-e833a281b8fc", "indicator--3d1abc28-1863-4ed3-bee7-c838c8265f6a", "indicator--3c4e22eb-dfe8-401b-bb1a-d31166f353d6", "indicator--e5885ccf-4b74-4dac-a14a-a4250683bc9d", "indicator--ccb1c16a-8cdd-4cec-9fab-be607b1c5352", "indicator--6054fcd1-8f61-425c-9b9a-984cc3206ceb", "indicator--c2fdfdf7-aca5-4f70-b146-3484eb339d29", "indicator--e7e1ed45-f8e9-46e0-acea-4ea667e7e97f", "indicator--836c257a-9448-4c2d-b886-0e33076e4131", "indicator--2d1a6082-5e06-4e19-8fd3-5a9868c3686f", "indicator--fea5a852-d485-456a-93da-39c310b22e48", "indicator--fe629e5a-f831-41a3-a85e-b883b6002c82", "indicator--511b6e48-c6c9-44b2-a390-79ef3584327c", "indicator--0eea5ca9-7103-41f6-ab4a-b42256d35dcc", "indicator--84c0bdbd-73af-4f73-a1ae-f97bdeb46bed", "indicator--bd5ecb72-50ef-4837-bf57-dd9cf1ba4e22", "indicator--0e17a653-c1a4-44b3-8aa1-61d4a342e27a", "indicator--5d0abd86-ec04-4a23-b46b-2f168c19f93a", "indicator--3a2a3167-4624-4d1a-a0d0-3fa9dc990fd7", "indicator--4c92bd2b-2dbf-43e0-ba21-abdb0dfade6b", "indicator--7430fc6f-f776-4a4d-9e5c-8d4344be7067", "indicator--d13edb86-0c1e-4d36-ad10-3f4faa16129f", "indicator--5b7ba57d-2e9a-4e03-a470-4865d3da4a0b", "indicator--2b8df8b9-1507-4942-96ee-e44029ee0b66", "indicator--889f9b3a-0385-4d52-832e-c5733c63c9d0", "indicator--e43ed4ba-0d70-42cd-bb22-24e1a06a33ab", "indicator--98446097-f0b2-46f4-ba0e-6a3eaf59c9ce", "indicator--1ec39927-2215-4eee-a89b-9a33e0f75e87", "indicator--dd96931a-ba6a-4d0d-838d-0f0d56e6b29a", "indicator--16abf94b-cfe2-409e-9367-a671d19fbfde", "indicator--dafec83c-0f5e-4822-a9c8-13c1f1b10d3b", "indicator--d2ebfec3-bac3-4eea-833d-9bda85cb3e81", "indicator--2c80cf5d-8129-4a81-b09f-0c6b8d7a3379", "indicator--d04929ea-7899-4ba7-a91e-9543857d4a90", "indicator--b6a659d6-4817-431d-af88-dbe611a7d7ea", "indicator--bdc48ec0-4e69-4c47-a715-b19a50e2911f", "indicator--d3deaa6f-5e39-4406-ab32-afef430d67f6", "indicator--bc3b4e2c-bb63-4d53-9b46-0c74a23fd718", "indicator--bc8929a7-6e2c-485a-813a-b6e2231ce3df", "indicator--f19d4ecd-9654-4bc9-a8e0-e9d1d9e58a7b", "indicator--d5add8c1-4de1-4440-bf0a-0a161a66b573", "indicator--15c69738-2031-42cb-8d4e-2907ab6daa23", "indicator--5b184d74-e69b-48b6-b396-610eeb5a2b4b", "indicator--399ef0c1-b67e-41e6-ab23-3c65d9293517", "indicator--af057484-1c46-4f66-af65-62af6b74b571", "indicator--9a115302-a6cb-4d4b-badf-c3e8ec307033", "indicator--4e7698f1-893b-4b46-b837-7ad4bf427610", "indicator--5311099c-cba3-431a-a954-eacddc30b641", "indicator--926a73f4-91ea-485a-ae5c-00454c40974a", "indicator--d16fad45-a95f-419a-8d9c-c69b487a1a52", "indicator--8a6ff35f-79ce-4ed8-bf25-eb0b43f22af6", "indicator--28838259-1c5e-4041-9369-f44a778bdd18", "indicator--362f777c-4532-4343-88b9-6a1fa3d83fe1", "indicator--5a31f0f6-d051-423a-8a8b-ae7bca8b2116", "indicator--7f43bc23-fb78-4a22-acf1-66a458e5eecb", "indicator--8579d123-5a1a-4aeb-998b-2fa8c32578c0", "indicator--222a5ff6-33b7-4a27-87e7-b49bb6184cc9", "indicator--e81192b9-b1b9-4c04-9e54-04ada07a9b8f", "indicator--4e11f0ac-cf83-4e93-a6c6-f6b6880fd8b3", "indicator--40a1f3d8-70d6-468e-b46f-017c8d0156e6", "indicator--7b22bc5f-fa66-47cb-82b6-16b552331e47", "indicator--8385328f-3c89-4c0b-9e10-94899633187b", "indicator--9ddf1687-6bf9-413e-92f0-b2e0ba243716", "indicator--bd76fd8f-4097-46a5-bc7d-95bbec555d11", "indicator--230a90a3-4e78-4efb-baa4-7a160276e652", "indicator--cecaca49-b490-4f7b-8ce9-d7679aaf7879", "indicator--95eb3077-4b5f-4434-b0e6-4c92c4fb743e", "indicator--c3ded0d0-5d1b-4e62-8de5-b7e37501ef8c", "indicator--9c3c4dd6-c67e-4a82-8086-b1112d3d6689", "indicator--7d54f1b1-6161-4840-8304-9351e306afad", "indicator--7bda99a9-89bd-43a9-bb36-6d20036a7faa", "indicator--27702fac-c078-4ace-8a81-96d7377adeab", "indicator--2ed1e33e-4e48-4cfa-ba0a-d1013e62671e", "indicator--7a670cc8-15b4-4a00-b64c-f57b93cd9779", "indicator--2ebc2ea6-be3e-42d5-b8f8-3f53a8d4b524", "indicator--00e3af3a-5b5e-45c3-a642-a9d9b4f679d9", "indicator--b13e16c9-5665-423b-a776-ea27471410d0", "indicator--f7c471ba-d1e5-4f9e-9fdc-91ae4db758bf", "indicator--c6fc8366-b0a9-40db-9e0b-40689d780c32", "indicator--5d80b36a-a007-49b9-b017-1af4d91f7635", "indicator--8572d9c3-35b0-4d99-badf-d4988d1ccf22", "indicator--2fc0b8b9-349a-42af-a2a7-0337d29021b3", "indicator--df1cd2bf-4a66-4220-bbe5-46bac2d60cc9", "indicator--40def7a2-77ac-434f-96e1-df069fcccd2f", "indicator--30fac12a-8e0a-4760-a4d3-ca5f9d767cc6", "indicator--7b749a09-5dee-436c-996a-d640220923e5", "indicator--813180c6-dc2c-4a87-be10-4e63d948c454", "indicator--8b00c33f-3603-4b45-a5b1-bee48852a44b", "indicator--07f6dab0-d0ce-42f3-bdaa-c1b4ec1b5969", "indicator--32656604-ac7c-4c74-9141-aa0df9d4bdd7", "indicator--11da2306-4a58-4d49-b6d7-8c4579c5d241", "indicator--a2143782-d61c-42a6-a4c9-e9052b70e805", "indicator--7e043358-d74f-4463-9497-106ebd336dd5", "indicator--0a4ddf90-d1bb-48a4-9cd3-7357274df0a6", "indicator--8b912e84-5821-4a3e-a5a9-5383ed871b06", "indicator--065edaf9-6984-4de4-af7a-bd00eade037a", "indicator--9314a3aa-07ff-4876-82bc-73586c144789", "indicator--e5ab9518-1475-44b7-9881-724f5146d895", "indicator--847911d2-2ffe-4a0b-a63b-3871ac6475c7", "indicator--53a2fb26-af66-41c7-b42f-a375ed20eb88", "indicator--22118857-e391-4702-9726-73a9106ca5f6", "indicator--f5c5fec7-2d74-4635-8c99-6ebda91842d1", "indicator--193c671d-0f0f-433d-a927-ee2b9606a4e8", "indicator--9339cc95-ac64-458a-99f3-2ff10bdbc927", "indicator--5e518c38-3acb-46da-bc6a-1bd92873c66b", "indicator--0a1f56de-279c-4941-8019-4e84b64ed3bd", "indicator--f9df0641-a8ac-4a20-a151-6264e0d8d357", "indicator--ca7f8638-308a-4cd1-adfe-e520902931da", "indicator--311ca9bb-d733-4582-a484-69aeab653131", "indicator--c36a1dc8-95d9-4d29-b0d6-2cf12c097c3d", "indicator--97cf46ae-b8e1-4c8e-affe-fe21b3305211", "indicator--dd360873-2c27-4c46-8a53-04173360d756", "indicator--d7496d33-c2fe-4c48-b05f-a371280318da", "indicator--ae696892-fd97-4815-bb97-cafa7f598cfb", "indicator--95024fab-e3fa-4e37-8171-3ffc77a0b591", "indicator--f63ada20-6649-4587-bd53-f0984acc3dff", "indicator--47abaa37-bf3e-4908-b865-e4ffcd281bb5", "indicator--09a76dfa-6b5c-4225-8977-8fdd13bee6e8", "indicator--17251a91-df70-4e9c-acae-1bed550f0fb6", "indicator--cbbfc56b-df8c-4c5f-9b34-7f11c82959b8", "indicator--044d079a-f8fa-4191-9553-c7b446654a6e", "indicator--89ebb023-93a0-4226-96ce-ac1234ae0db3", "indicator--686fa2dd-e3f7-4a39-9856-1b82d8d3e10a", "indicator--dc8008e9-d6b2-47de-aa13-d2cc456928f3", "indicator--92883d08-7a2e-4f90-92ab-c2857b0d24f2", "indicator--6a1f6d36-39b8-4c20-a1db-258fd407a5dc", "indicator--12b191ce-682d-46bf-85dc-b25cc05d6baf", "indicator--f0c89cd0-7b48-409e-9c55-8c3941ec7090", "indicator--1dfa69de-4a53-4d85-a7f5-a30b5a4054e4", "indicator--cf49ec06-7959-4419-8c0f-e429b21248e4", "indicator--19ebd845-b039-4856-bb02-e6b9bad8f0b1", "indicator--c9e1a18c-953a-4fb2-9be0-f84bff63d703", "indicator--2efaea7a-f9e5-4606-8507-ad36bc575123", "indicator--b927770b-7d66-4e17-92e6-3f8d21a175a2", "indicator--4e7bc8e9-4532-4268-ad55-ffd8cc1fce7d", "indicator--32140a43-b57e-444b-afbd-465d10c214e4", "indicator--acfa4a7e-ad85-4651-8d2d-58f82b1957a7", "indicator--78329a16-b9a2-4a16-a914-ec92859bd673", "indicator--f2b62ef0-0b3d-4ecb-8566-3938415921ca", "indicator--4a200b70-9c49-46c5-986e-ca9f02b5cd17", "indicator--5e39b8ab-fe99-4385-b0c7-bb5a053747aa", "indicator--86d07a6f-cd7a-4ee4-b0ac-206c2cb9aa71", "indicator--fcb268db-ebd7-40c7-bf56-fcab04cb4de9", "indicator--1fafc7b7-1b55-461e-82bb-deaa7eee295c", "indicator--33d7d7f1-61d8-47fb-955c-eea8ce287ce5", "indicator--f9fb77c0-ee95-43e0-8417-276cb73b58df", "indicator--4c335c61-2f6f-4626-a3e4-089380af03bb", "indicator--b280d403-ec16-4cf2-a25d-e9fe8cf7f920", "indicator--907599be-9da8-4dd2-8aca-f41206eca742", "indicator--8452d404-8832-4f6d-a31e-cb7f0253102b", "indicator--761f73a7-6f35-4915-8203-4857a93625a0", "indicator--08fc32a6-090c-4fe9-ac71-21ba8e52e646", "indicator--e04b62ae-904a-40e2-9f56-5d475196c66a", "indicator--2847223b-e90a-455d-af42-b6008052d432", "indicator--d3983e14-27fb-494e-8f46-c1ea1698420d", "indicator--bc92691b-f6f7-4875-bb4b-042bd181498c", "indicator--fb1c739e-0e6b-401f-92a2-d6f7216b799c", "indicator--964fbeb0-fade-4544-b385-47e79400c147", "indicator--97c8fdae-21df-4273-921c-e3c6f4943272", "indicator--d4d13dd7-9bfa-4eca-bfad-711a3a0f635f", "indicator--7c747ba0-3d22-48a4-aa60-34df1e3286c6", "indicator--1cc66500-ad92-4165-8caf-8004c5853967", "indicator--dc50f1b8-acbf-42cd-9a2a-687749906ca0", "indicator--736a0104-fd28-4f82-bedb-2508feb8e3b0", "indicator--176bf59d-4c72-4264-bc42-328766a1e53d", "indicator--1708a57a-6cf0-4d9f-b2d0-c5696f22f738", "indicator--31565d31-41e7-4cf5-802e-7a09ebba0a26", "indicator--236347c9-7716-4035-87b1-d5326a2e789c", "indicator--c4013116-2308-4db2-8b8e-1cc8896a1645", "indicator--204fa4ef-ba51-4b25-bee5-2984d58c2d21", "indicator--a5d1739b-a2fc-48a7-b198-0e2eae41d9f4", "indicator--44232e64-9692-4ad0-8840-5448439bd238", "indicator--dbdffae1-b66b-4cc7-90f2-800c0951d2cd", "indicator--207e1449-7909-4ea5-a4f0-61e356ffaf1c", "indicator--b156f9e0-cf83-4cd9-8786-1b63085297e4", "indicator--ef3cb067-6137-4bd5-934c-27d120155829", "indicator--b573c34d-8b61-4343-a210-3fb3c9195c36", "indicator--ec84dc6f-85f5-4987-aab5-7b46b278a844", "indicator--f851531d-5749-4d99-a0bb-0380b2ae9598", "indicator--2755c506-fe4b-43ce-ae25-8552bc475d62", "indicator--232ff792-0025-49fd-936f-fca5ecf5b686", "indicator--9f8685ba-668f-4222-9cad-94d4f9486e1c", "indicator--0ca264af-a581-4203-9591-1d74e73a05ba", "indicator--e18d05c5-356b-483b-a6ca-189fb5f24d13", "indicator--65e71bb5-8677-47ad-960f-1c3d93471ad5", "indicator--761a7ab5-4110-466c-a28d-24a8bc869c84", "indicator--06b9721c-5e36-4712-923b-a36424bf1b4f", "indicator--13b99bbd-b5a0-4a4e-94ee-1297d98094af", "indicator--c2967761-b979-4075-ada8-aa0c36acfa43", "indicator--63dff5ef-ec05-4eec-8dff-a4f6a38a9e5e", "indicator--dd384798-6c7e-4bc8-af3c-457c41e6a73a", "indicator--8651d51e-851e-4dea-b674-a9a4d959cf95", "indicator--e94464b6-baf1-4a86-8c0c-2655b3071ad7", "indicator--4f830ad1-4df3-4e33-8fa7-a54a1d910a3f", "indicator--fce0f399-bded-40ef-98c3-852bbf9643ec", "indicator--a8c9d700-1508-4d14-9b5c-5b763fc39674", "indicator--f05dd060-3953-41a4-9c59-50c4ed5aa443", "indicator--f1267de8-a39f-4e16-a24d-5a45b8416e98", "indicator--270ba26c-7ce7-42cc-9757-02a427a879a8", "indicator--56d705f3-20ed-499e-af0b-9ee6bb5995b8", "indicator--bf4099ef-5e9b-484a-bea2-48cda4f33621", "indicator--3736dbd5-eb4f-4de2-bde6-717436adea31", "indicator--424aa424-569d-440e-af31-07b6cb0f4f38", "indicator--60f6d1ce-8daa-4560-905a-db5f81e24068", "indicator--5684c8c7-e437-4512-9a84-473a583444a7", "indicator--34d96be9-396c-4723-87ad-19b989339282", "indicator--f87d545c-7b9d-4b08-8d5e-3b1cc45b5825", "indicator--044358c9-84e7-4b34-a147-535187470ed6", "indicator--e998ee3d-ba53-47c7-9c25-d0d24bbd1b28", "indicator--385e906d-964b-49ab-a25d-0fb623d3f0aa", "indicator--b9ba711e-4a27-4d98-9134-a6b837ca15af", "indicator--9dc453a7-a6fc-47d6-9850-450d75598c94", "indicator--3cdef52d-ddc4-4c02-b9ab-5111dc6a9d0c", "indicator--73bc7501-9a6f-404e-b917-bb98d12fa0a8", "indicator--cc86e46d-8b66-41f6-b634-6a4020e712e2", "indicator--9b637c86-bad7-4c58-a99b-4495626d4b08", "indicator--67204b51-38f6-47c2-bd5d-8ddf4e3f4380", "indicator--40ed934c-3e24-4254-b77b-b3843bfcb4d2", "indicator--f71b342f-aa7e-4ddf-8d1a-ffe4f27a89d4", "indicator--a4fbcaa4-325a-4a0d-aa3d-def40dd371c9", "indicator--ccda65ea-3d41-4911-b70d-becdf75e7efd", "indicator--3496fab2-25c7-40f0-aeda-40c738fb7040", "indicator--c62a9f20-27e1-4f80-97ca-20eea94d5801", "indicator--8591e3d8-3b5f-4fdc-adaa-8b82f74c2f15", "indicator--7986611a-aca8-4737-9e64-4ae8fa89d336", "indicator--ddb46dd0-4f94-46a3-b3be-1fb8c58318ba", "indicator--7f69f407-ff58-4e7c-b442-567d314045e1", "indicator--d9c2d678-cb49-4a7a-a57c-9624fe09e443", "indicator--37c04bcb-15bc-4dce-a3f5-36bb99326d4b", "indicator--c5356e6b-c8d1-4d2f-a4c4-16582a7ab4b2", "indicator--03f72f54-6336-487e-98ef-aa00d720a052", "indicator--942585a9-b29a-4743-9222-82b54c7f097a", "indicator--848959fe-03e1-459b-a87a-ba9e3d29f558", "indicator--a3fb50fc-3fe0-47fd-8d76-48f0b20b745c", "indicator--1806309c-8f9f-42f3-a9c9-1821cac0c6e7", "indicator--20995e55-1c44-4505-b66e-c4aab1e8cd3e", "indicator--dbb33d7b-0dfc-4b83-a345-d16576f889b4", "indicator--5c0028cd-cfed-4143-a4fb-2cb92909da67", "indicator--8f3d0b14-a5cd-4b82-9655-cd5536514635", "indicator--847697a0-6b2f-4c88-bf75-78f6c75eca41", "indicator--6fd13792-ec9e-4153-a88a-04bb372a4a27", "indicator--bb1cf356-14e8-45b6-bc3d-188041cf534a", "indicator--00fa8f04-e182-4987-995b-a54028c39452", "indicator--bf3c0021-9ec8-447e-8f9d-90fc0fd4f3bd", "indicator--3a946627-62e8-4f2d-a91c-608e28fc6504", "indicator--71cb023a-d70e-42bb-adbd-b7aefbe0787a", "indicator--7fbfb2d7-b73b-43b4-9eb3-dcd4dccdadf6", "indicator--9436e492-f006-4cc5-9220-095c45299639", "indicator--fe781a9d-a523-440a-ba58-d32802ccbd31", "indicator--d1fd544b-f5cb-4c1f-8cbe-8faab162967d", "indicator--77f82f3d-e9be-45e8-90df-bccb1c96a168", "indicator--e093e682-0acf-4b41-b9b5-7d8907b86e86", "indicator--41a5e1f0-698f-4f74-9a12-7d5758d9a75e", "indicator--cf5689dd-7136-4c7f-8800-c70ba979dd1b", "indicator--bd92ba3a-22b0-46a1-affa-c95f1c8cbb72", "indicator--d3798a09-6d5b-4171-9d5b-57484397db2f", "indicator--87ad17ed-2aaf-4ed9-bd5c-ac4a99ec5b0c", "indicator--48289d98-3b3f-4eb1-bf1d-8fc0ba0287f3", "indicator--8eb674d3-39bc-47a9-8c4f-126e79bff9c0", "indicator--68877007-3cd5-411e-b423-06399e327947", "indicator--26a3ab4c-1893-44af-889c-fc521346fc71", "indicator--ecfa3d27-34eb-4abf-a2a9-c76d2fbfb594", "indicator--16fbf13e-d033-4976-b45f-99616eb6d76d", "indicator--8e8d0ce4-0a64-463b-9cbd-add6b48ee745", "indicator--a71c4271-b852-4265-8c64-8acab5b5a8cf", "indicator--b6a1f063-753b-4a09-9b0f-c537ba52b529", "indicator--a6378bfd-0dac-4fd5-b694-ded05f463e2b", "indicator--161efc5c-6d4a-47a5-8632-d8c774d03aa0", "indicator--88216555-1f26-4b02-a778-e5b19ff491b9", "indicator--2ae03ca4-ddcb-4add-8c87-dcaf9a757bcd", "indicator--cc0842ca-f8d3-4e65-ba50-65195a8f773b", "indicator--8bb94be8-ff94-42b4-986f-f523aa7bdb62", "indicator--a99992a2-862a-4d18-8952-deefdae91491", "indicator--6e8cef15-de5a-4672-bffe-ade170c4570e", "indicator--16bf5eca-8280-4c4f-b8d7-6dcca26b3b6b", "indicator--96022867-3430-4bda-9ea1-6b3d02dba72d", "indicator--4d6696db-5dd2-4837-8f0e-9e1efcecdce6", "indicator--f92eb5ad-e960-4859-84a7-9c3716c6a420", "indicator--137a2ed2-ea81-4890-9198-4634082bf0fe", "indicator--346df071-87ea-483b-9c5e-e80fac863225", "indicator--911c502b-2a21-4462-9cf1-39d6d1d828ff", "indicator--3fd0f155-c4e8-4de9-91d6-81105240ec52", "indicator--2a7c9cea-2839-464b-be41-6dec0d39aa1a", "indicator--785177e9-fd2e-4210-9184-11d035ec290e", "indicator--d63ab0be-dc6f-4a4f-bea7-dc5d9b255e97", "indicator--1c7f926a-6456-4de1-8593-e846d8df50ce", "indicator--80325439-1082-412a-bdaf-d4b3b5cbdaf5", "indicator--5621f5cb-85fc-4033-a18f-7eb735d71da6", "indicator--4573edca-a5a3-475c-ad76-e59952c0e05a", "indicator--61a9a9e4-72f0-4ba8-805c-e068394e15a9", "indicator--24161593-323f-4025-b549-1b4c2c09d777", "indicator--c2174dea-be4a-4585-935e-8d0d614332de", "indicator--93120612-81ca-4075-af74-8553589fce63", "indicator--322782ca-8fad-440a-a7a2-d83dfb691fe9", "indicator--eb48b9cd-a177-47d7-946b-737ceae5b5e1", "indicator--16d22f6e-38d2-4bd1-ad22-2d4af3b1a55f", "indicator--76f11a51-0520-4118-9d1f-83342bf967fb", "indicator--6aba6b1e-574e-4b47-aab2-8abfd0c6a3cb", "indicator--a09be246-05c8-48a4-906c-cf0dfed57cbd", "indicator--9f8a67fe-70c9-4a9a-b54c-cd4ae2ee41b7", "indicator--838f2fe0-e007-4800-98c0-2d0b47ae7b10", "indicator--37ce6f84-3867-4066-8352-bbee5ac41e5e", "indicator--cf40fd23-bcbf-472f-a8ec-1366dff9d70d", "indicator--9e05114a-df73-4e09-9313-39cb0073a8f6", "indicator--95aa0e42-0eec-4a49-beb6-6d54a22cf922", "indicator--cc434dfa-0967-41c9-8cbc-6717900308f7", "indicator--ab066b88-dc0c-48b9-b75c-5f65917a7542", "indicator--ef2e9997-4093-4d43-9852-880031d36623", "indicator--51d3baa3-4b6a-44f3-bed4-71c06072da1e", "indicator--c13a811e-52f6-4202-9e3c-df94581c6877", "indicator--f0d29052-2749-4a3e-a00e-13167cc0763d", "indicator--437a8b07-1e48-4b47-8b55-59e190c8d3da", "indicator--a9de314c-1b6a-444e-be47-19bd7619aba3", "indicator--97596816-8f22-40ee-8c87-03258a77d7c2", "indicator--c79ce6c7-9ca0-4b51-be60-10a5b85869de", "indicator--f844cb63-a399-4e1a-a294-a20e85938ecc", "indicator--c2d877d7-cd5c-4b77-9b3f-c0e75a694632", "indicator--bf6f6e54-53ef-4bbe-a63d-2fee8c4c44fb", "indicator--0a6c3265-3493-4dec-baf1-9aabc83a29b4", "indicator--eb957b78-cd1f-4cd7-992c-8ae32174b770", "indicator--8e52d820-0a9c-4371-bd85-62ffe0ed65cc", "indicator--d2b59646-f016-4642-9a04-794c4f88e94c", "indicator--7ecafa26-12d3-4e6a-94f8-10c1655b74d2", "indicator--13d459b8-c33b-4dff-8e2f-bbf408517033", "indicator--bcb25055-89f8-4ed3-8385-a1d69845c46b", "indicator--3fe2e94f-688f-4385-8b50-ef09d3c23128", "indicator--f729b51d-d603-4735-82e0-6e063f4f3f30", "indicator--27b24325-52e1-4aa4-9396-6ecb531ee023", "indicator--aee9a094-6b70-429d-8a26-17172261c573", "indicator--a9e634cd-8cce-4236-a494-43fbf8a252b9", "indicator--d4bcfa45-ff84-4f42-8a6b-89029c413aad", "indicator--414fbdc9-8693-4e73-a48f-6560ec0b2247", "indicator--a47f7877-0c6f-4f0b-b222-ff7cd3c1ba62", "indicator--8df95f5a-1e44-4e13-8634-0e35d9271223", "indicator--1bc47074-d792-4b17-87fb-821abe884151", "indicator--045cf901-ded1-41d0-a0ec-07556602d668", "indicator--995d54b1-3e82-4651-9e0b-9fd664809b15", "indicator--8ae4127c-0e12-4294-ae5d-840a8f64b48d", "indicator--2c0d571d-0ccb-4460-815d-520b8bf1439d", "indicator--a0afe078-1b18-4069-97ed-42e66ad91f9d", "indicator--e1b0f302-05b0-4599-988f-7517afb561cd", "indicator--2b6ab872-36f6-49bc-abeb-bb9671c11681", "indicator--df9a13a9-9d43-4c74-a0b9-86b4e3292343", "indicator--ed395397-dfa9-47d4-99b1-3fc560ad37e6", "indicator--b85c0997-ff53-4678-94b8-9a30c54f2ec1", "indicator--36d52aa4-4222-4815-9fc6-1c5d5481be27", "indicator--53663473-8a53-4562-859f-3bfa96fe6b8e", "indicator--d63f1f3d-c602-48ff-a455-cb1e687ef150", "indicator--bcc25044-a57c-4104-b266-d163ae6970f2", "indicator--d75f27a5-2520-4a15-8428-8de61e998fa9", "indicator--e81a13ee-7a2d-40dc-a48a-30bc10adf35d", "indicator--b1de7f01-e118-4023-87de-66c83988ddea", "indicator--21791df4-5785-47b2-9595-b5a1d7b1e7f8", "indicator--bf4edbb8-8f44-4094-a55c-b28665ce022a", "indicator--1406a493-c3d5-4aea-9579-b5f723ee45bb", "indicator--07ae946c-d6e7-4f29-b17a-28f03b2320a2", "indicator--a2f4ac21-f475-4a1b-ad22-ef1fa7ae6dc6", "indicator--ffb78a70-e793-4c16-b116-1f9e48c23d39", "indicator--ddd06a93-7e50-439b-8b76-257c77e20a1f", "indicator--756bdae7-5858-4d6d-a2bd-d8c7640493df", "indicator--0b9f08ed-9667-4c7e-9f67-626c9416b0b6", "indicator--b13c22b0-708c-4bfd-9885-9ef1f7d695f2", "indicator--21123b34-cb03-414e-8f39-8815b1e13773", "indicator--1f01dd7a-60e9-464a-9e80-ab7827d5207f", "indicator--e2cfdb36-d49b-404c-bf21-cd1bf35f0b88", "indicator--ad06c6a1-b9ce-4513-aba1-f483ff32185c", "indicator--c767d499-3150-4ecd-ae76-82e963ba8b8c", "indicator--78d29e0e-5e47-416d-a65a-71687ee56419", "indicator--e83b34d8-4089-4536-bef3-335c4475eb65", "indicator--7367389a-fdd6-4e6a-ba7e-587cec2a34b3", "indicator--a375df16-0ed1-405e-a80e-cff69225ac20", "indicator--edd1ca91-7328-4c19-845a-4b89a6b89d81", "indicator--7bcae8e4-a997-41ec-abbc-f7df90e23f79", "indicator--165e12c1-ea05-4296-ad2c-b945d418f313", "indicator--b7dfcdc3-3658-4ca0-9dd6-e944c77ca06e", "indicator--ba3eea57-cdeb-4ab8-9c73-0fc2784b43f3", "indicator--b6581a5f-46fb-4adf-bfc0-016af3b77a7f", "indicator--2e6f204a-880d-4cac-8741-0dd121db70bb", "indicator--b8fadd36-99c6-4a23-9544-391f7a6b0d88", "indicator--3035c7cd-16f5-426b-96fd-aaf7f22b699c", "indicator--49bd3be9-6845-40c5-aa3b-82cad9cf27d7", "indicator--117d5bb9-7558-4279-aa34-c7ef7dddc465", "indicator--1392a2c5-0b39-4eb7-a41b-6349f7d334cf", "indicator--2a0479b4-74cc-4ee3-8f4f-1803264581ac", "indicator--1822244f-dbe3-4e0f-bd47-ea0bf28feab8", "indicator--9c0652cc-2c07-40a4-90ec-740e6a68ffbc", "indicator--717ba0b7-ad4c-4d78-9194-627fab2b1bf7", "indicator--5bd1b1e3-1be4-4678-bb65-75c28e84f976", "indicator--8edb3477-bb00-4651-9540-bee1384d3fac", "indicator--5a716c49-5991-43fd-b1ff-36189316ff14", "indicator--ff245bde-5f5b-4a40-848c-41a00dd86ab3", "indicator--3884c34c-1b37-4a29-80bc-3445bed62a08", "indicator--7d4c8f1b-517a-435e-a70d-06aedcb27e1b", "indicator--8eda0fd7-98fc-4b4f-8d91-63e85891c8f5", "indicator--828b3a9c-85d2-4bc8-a833-e4c409d1f976", "indicator--be2d3f04-e32a-429f-8b7f-88d00e77d03e", "indicator--89b7fdd4-6ca9-4d17-99ce-3e01337ff932", "indicator--62b02ba3-b45b-49af-a0b8-c6c8e0e32678", "indicator--837301c9-6a4d-444b-ab33-afeba59af4c5", "indicator--e9f48cac-cdaa-4a38-bec4-2f8f942a5f59", "indicator--9a681e7a-a78a-478a-8a82-95c7a2ad920a", "indicator--b4ff7e39-65d2-46ea-b858-c7c37b9bc70c", "indicator--a50502d0-56af-45ba-87ca-15a5442c0b41", "indicator--aabab764-58f7-4c67-b39b-1abdc5a22d4c", "indicator--1457a5dd-70e6-4b2e-be6e-c5382f5f2567", "indicator--35a8f222-16e9-4625-b307-1aed1918570e", "indicator--a0205c6c-c162-4801-96aa-f97655bc4176", "indicator--0b1b56a4-2036-4872-8af6-f7be716ee03a", "indicator--a8efc315-92c8-4f19-ae5f-a1e6bc77165f", "indicator--165d1aea-d0fa-46c3-b1ec-ed4fa5e601a0", "indicator--4574563d-deb9-4702-91c3-8d37a0f6e9bc", "indicator--80fccf92-4b2f-41e4-bece-80b910ff8d4d", "indicator--0c052cde-c02a-4170-b4ab-7638d377b958", "indicator--29d7e45d-c1d5-491b-ae52-a28794340a78", "indicator--46821550-d78c-462e-8cf3-0444f5bf2dbb", "indicator--08ae514f-ae1e-4ca0-a4fc-5204bdd61c77", "indicator--82b29092-63e1-4ac6-90a9-76decf35317c", "indicator--e66746ae-4488-4a92-9f4b-d5704dc98af9", "indicator--62c31b89-93dd-4cff-b7fd-839df2d3db6c", "indicator--623abb21-7f52-4de4-ad7b-d9488bdb21d6", "indicator--fde9cc80-f0c7-45b2-a376-1ea7bf0b74cb", "indicator--3415b898-1068-467b-8dd5-1317055fcc1a", "indicator--98f046e6-88f2-448e-a0b3-6941bb53ce73", "indicator--b1415187-9ce2-48c8-947e-663fd0c2bdf2", "indicator--d31b45e6-4588-410d-a9ab-a06e16fdf22e", "indicator--55c80332-13f2-4072-b0ea-be721920cd10", "indicator--9a3093ce-7f87-4d0e-8984-4f5ed63d5af0", "indicator--e5fa5656-0608-4983-a98f-e05d08249cc3", "indicator--b01fd261-c656-4df1-bb39-3ef03bba0290", "indicator--c19e1a53-f94c-427b-b52f-97bb84a9462e", "indicator--1ea2bcd6-c4aa-4eaf-a1ce-99482cb300e4", "indicator--4588a990-83d6-4db4-ac4d-950d42edf1a2", "indicator--4569467c-df1b-420b-aff8-565fb4d7f7bd", "indicator--280a9fe9-305d-4aeb-b698-50a40cfd5d0f", "indicator--1f30c2d1-e34a-46e8-a827-cde9f7981f0c", "indicator--61f4fe32-9224-421c-b5b6-190bbc588a18", "indicator--de7fd117-0303-4ae9-a381-c1cf3eaa82cd", "indicator--5fecb3e9-4146-4220-830e-ad5e5889ba13", "indicator--2cfaebf3-a421-44ff-b922-593e59844d9f", "indicator--fc8678ff-c604-4a19-8340-b97d0901500c", "indicator--42abb247-f905-450c-925f-ae92e0c25241", "indicator--86a02133-e40a-4097-b731-60b70f8c96fe", "indicator--f1486999-24fe-43f4-a97e-a52fb4d9b546", "indicator--647edbda-20d0-4f25-98d2-145892c7a303", "indicator--a489a898-08cf-4128-8ec2-ab71c9fffb15", "indicator--2e0d6535-de9b-4c0f-b2d7-76d5be12570c", "indicator--03654a60-9f6e-4e1a-92d8-29355683fc14", "indicator--92c834d5-07c4-4eea-bcc7-bd40c77f7bf3", "indicator--cd356907-5b07-4c30-bf32-8f7dee8dd10d", "indicator--f1803227-f1df-4c7d-afcd-867da2a7f830", "indicator--2bdafe0e-e732-4a9e-ace2-4413755c2ebe", "indicator--9b9d8cc8-b360-4f72-a817-2cdfc93699a1", "indicator--d20c05b6-68ff-4d3d-a580-c5ab38895238", "indicator--675da18b-5db0-4cbf-80d6-414ac806fa82", "indicator--a87a0327-02f5-4c5a-80d6-26ca854bedde", "indicator--032f3d4d-ef9d-4be7-8b3c-4f5bc756d9f3", "indicator--04667a78-d520-4b1f-ac70-f7de73f97aef", "indicator--e0ecc68c-0170-4f14-bf70-79b37f33a72f", "indicator--a2fb5f20-0db3-47a9-a5c9-a3552a55f32a", "indicator--9a9bdd64-eb5f-48c3-b941-b21651b6d86c", "indicator--1cdbe61c-1b16-4e45-9287-f6c4c58640dc", "indicator--aa482de6-ae60-47f7-9444-d0c71bc7b311", "indicator--dfc2cb0d-bf89-43fb-ab15-2b3dbca57e86", "indicator--dfb2c3fe-036b-4679-853c-39503f48133d", "indicator--cca12fe7-18e4-4c37-9421-d661a0b914a4", "indicator--3db3c94a-7dc9-4ff3-b7fa-611c0a99ce30", "indicator--402be288-0f70-44fe-85e5-1ea009d6da9c", "indicator--2492c82f-fb02-40c7-9557-fa751125b09e", "indicator--0663068f-dff0-4656-a7b0-41053a582923", "indicator--17a20dba-ce12-4425-bd64-a47a43e60751", "indicator--b543939e-92c4-4abc-b3d0-62a91b21a7b5", "indicator--2fbd77e3-4edc-4dd3-83ff-ee144e2963f3", "indicator--46a7274a-89de-4a6b-ab05-1b93b40a9cde", "indicator--8f3d389d-af72-49be-9652-77072685e765", "indicator--9a0fb4a4-561c-4b30-9221-b9b1c28a222a", "indicator--5bf16925-653e-4ec7-b93c-c7148d72292d", "indicator--1aaf49aa-5e59-4eac-b9c0-7f87aa9178c6", "indicator--ff09318e-0b83-45c3-b586-3a79b34cc506", "indicator--69871f56-1b38-4636-846a-5668220dced9", "indicator--af139193-03da-4f4b-b682-b9fd8edcaf0b", "indicator--266c0cac-494f-4406-b9ce-1d0f815eb18b", "indicator--30293de2-af2d-40ac-a736-8c1bd160eb8b", "indicator--dd0a048e-66c3-493c-b5a2-efa45af8ba24", "indicator--4762fb80-8f83-4793-8d80-3a31b5f3ea7d", "indicator--f1008d7c-5494-4095-b76c-7ce79dd98d9e", "indicator--d88cc9f5-b1d1-4028-a0f4-3207435ffdbc", "indicator--469967ad-a883-4e48-b4ca-8ff0b80fd61b", "indicator--cc297634-30f8-437d-8b44-0caa7c5ad4b1", "indicator--556f7957-5e06-4650-b768-5a8364fb5199", "indicator--e9fc7849-4b49-4691-87a5-272db8c7c205", "indicator--25ff29a1-165e-43e6-b7b0-e9afa7d909da", "indicator--5dc2ecb3-3c0e-40a2-8ba6-070454063f05", "indicator--b9748ae2-b30b-448e-bd62-3dc837c41581", "indicator--74cafc1a-30fa-48b2-b0c6-422b407f2625", "indicator--722302de-7a51-4463-a042-cb552491d856", "indicator--ac812483-2e23-4bd9-8f83-193858ec7036", "indicator--9b460d6f-d034-410b-88c5-5d335246b88e", "indicator--546171ca-354c-41f7-bc01-96c7671c171f", "indicator--10e12d3a-b6b3-4e9c-94f0-aa0737831c53", "indicator--49099d82-0e6f-447e-9fed-5bd3bde6b471", "indicator--85c5179a-3205-46b8-95c9-a1515e7d0522", "indicator--529b38a0-8111-4203-a8ee-878400d32ebf", "indicator--340e879d-6bb1-4240-861f-d971e7a0125e", "indicator--8bcda532-7a5d-49a2-830a-83f8a371246b", "indicator--b9e2fab3-ed3d-450d-8b04-f2862e55d656", "indicator--a98ab54b-a4fc-4ce3-8a15-28a82b124c1a", "indicator--42c3780a-984f-41d8-a540-39b1a7632ce5", "indicator--799e2432-bb28-4716-8768-bc68281b7b6a", "indicator--ef4927ad-bf1f-4739-a72e-017b4e7c6933", "indicator--ea086cea-3af8-419c-9dbc-78b39fbcfd58", "indicator--7834dc59-96c8-479e-9bcc-39c66aa8b83d", "indicator--6d30993a-3377-43bd-8fb2-61c97ff9d26b", "indicator--198ee80b-9789-4a5c-99c0-b03264dd6966", "indicator--b16f9034-bc92-454f-bed3-542cdb1725f4", "indicator--1fb59b61-ac58-428d-8251-3f32db627b75", "indicator--46a99c9c-223f-4cda-b7d2-e5d6517e2857", "indicator--66dbc04d-2c8e-4467-ac9e-49eb5a245911", "indicator--6c188a1c-82fe-4e39-8303-1a0e7de10c38", "indicator--723ae4a8-85da-4aa4-8022-b947af98f796", "indicator--61de77d4-4e61-4919-a7d0-274ea156367c", "indicator--27b18871-97e5-4918-8760-7899f329a94b", "indicator--552d49fa-482c-4116-97ee-3c8bb5c09c18", "indicator--5886090a-059d-422f-9a22-be7365056028", "indicator--6b60e3a7-9a90-40bc-a024-fb02a69dd4f6", "indicator--2fc96f75-65aa-47e3-b5bc-509c914fd887", "indicator--196f28cb-80ae-4c73-aa4d-3f0face2920b", "indicator--38de205f-f5b9-4650-b679-7974a9873f88", "indicator--565b5245-df9d-42c9-9f80-19099abac186", "indicator--ccbfd131-cf0b-4e54-9502-2f724bad3fbd", "indicator--7033a6e0-fec2-4da3-88ea-e66603f62f8f", "indicator--88eab0ba-2591-40f5-9857-4def9d612b84", "indicator--d2715146-a195-4002-9bd6-5948e14a4d9a", "indicator--db23de88-93eb-4e82-8fe1-c04d5bed86f2", "indicator--9ac9580e-afd7-4776-a413-23fea34b468d", "indicator--56b3fe2f-4d6a-4837-a216-4ac64b63773c", "indicator--49cd56c6-d7d5-45d7-adcb-e9b2d306b304", "indicator--22d21950-4669-4141-bfbf-1cdd4dcd08f0", "indicator--260d2d72-fe84-40aa-8ee9-88506f665dce", "indicator--5511f9e8-2be5-4d20-8836-6c8c6cb499e9", "indicator--f5abc090-7ccb-4a6d-85af-32f4b7a97b20", "indicator--fdc7593a-d206-459a-81f2-dc5728fd6348", "indicator--50a2ecd1-264d-403f-93e2-6c4f1df4f5d0", "indicator--e4afc29d-2a76-4a02-b5df-174cab7f23fe", "indicator--968179d4-5578-407e-9ce4-8b3768b2ac71", "indicator--2425885a-e814-4386-8624-f244cc41d43d", "indicator--67f0f2fa-14fd-4f94-9d92-53b315f7242e", "indicator--771649d0-6db7-4dc9-8fb2-1d62aaa84d78", "indicator--f761c482-bb6f-4ec8-8d72-1af6374baf0f", "indicator--8dbd6291-ce01-44ad-a93b-6e755e5c068e", "indicator--6d7c481a-482a-4706-83f5-aeca769a8295", "indicator--2de10796-642b-4abb-bcf3-e9f3b7079eab", "indicator--a94b614b-90f4-4c12-96d8-37fd594285d2", "indicator--da399742-c48e-4ba2-b153-7171c9171057", "indicator--2dba554f-ab74-436e-b85c-ed82f13fcb12", "indicator--351a9efb-1c03-4e93-8029-840e4b5e3279", "indicator--fd2b8236-1c9f-4e32-9c04-0e896ae48d4d", "indicator--8abd0064-0faf-4da7-a32b-fb9830a7cf1c", "indicator--2c5e5bd4-8b4c-4199-9642-ad0ad0a80087", "indicator--d379dcc1-3ba1-4e1e-908d-29026bcab2a3", "indicator--946e2701-2f9f-470b-b72e-acf3248d9dad", "indicator--60c2aa17-5d03-4a82-8cf1-f8348151902f", "indicator--a767ea5c-5e64-4aa5-8ac7-72215f93bda0", "indicator--cca728de-4ce1-485b-8412-613cffcee3b3", "indicator--6e22daae-2cba-4bec-938d-502eeca78fd3", "indicator--ef07c501-ac09-4443-94c0-b92a67b7cc5d", "indicator--3cae1fd6-023f-4a92-b62e-6ee76cb2fca4", "indicator--49d08c03-9f2e-4e23-ac11-a92c0dc98aea", "indicator--3afedab4-c56a-4c79-acef-64d8cd6db170", "indicator--f9ae3000-2cc8-4dfe-826e-c28a16738559", "indicator--612161c2-c4a5-429a-8f46-e61a1b63df18", "indicator--2b07b810-0253-40a9-ae2a-307dc393c1de", "indicator--78373c12-c037-4aa7-b595-26b8afd4d3cb", "indicator--a217ebb5-b6f7-4ff4-8fd1-71484d60f29a", "indicator--e30abd8b-31e3-42fa-b4a7-3bef3c1ac150", "indicator--d5b6f6f5-cabf-42d5-8b51-25d4ca0e0c54", "indicator--e09bb634-5b01-4987-a684-6be2eb0aa6f1", "indicator--e6b5dd97-d75e-455e-98d7-de91a8ab5882", "indicator--22a4875f-1e2a-4535-a7cc-ae0c91ccc036", "indicator--23f0163b-074d-4471-8441-c2d4447e0757", "indicator--d8c864d1-0a37-4f90-8728-3247adbaff2f", "indicator--0cd4ec3b-f891-48aa-8fbb-c5a5ac1ff228", "indicator--55078345-6cbb-4514-93b1-81315b291911", "indicator--f07e9ead-9028-4ac0-90ec-d3f6b64bfcf3", "indicator--e0de3bf4-35d8-4806-b2d3-6f0a4b14e82d", "indicator--a366fb32-2ec3-4868-98c2-837bbe38a89c", "indicator--00c66815-b39f-489f-b521-cdd3dcfefaa2", "indicator--a9df274d-bd34-4243-aa08-09b578ab57cb", "indicator--22e06031-bbd0-42c1-9ed0-52d05f0a407a", "indicator--26de84c8-7d04-4cfe-9a33-b380477f0b4d", "indicator--31da1cb2-14be-42eb-926d-95daa52c488e", "indicator--cb96890f-de90-4e42-8705-19f1c4380518", "indicator--7d596ca6-9297-479a-ab01-552e458b2ed3", "indicator--c43276d9-b7d2-46ed-b5a2-2299bd32b605", "indicator--8cceaefe-2002-421d-ba4b-10e954ca46ee", "indicator--e9772f2d-4935-4160-9f0f-87766c93785f", "indicator--d7c73ee6-87f1-4dc9-bb9c-1dba91bebea5", "indicator--0e2408eb-eac0-409c-8a23-59eaca2401c8", "indicator--48b97912-60da-4d87-9aff-59f71bf75868", "indicator--f251cb3a-59d6-488a-bce2-ee0ef6e4e5c2", "indicator--8ead62cf-702d-4657-a129-863d47e9a9b6", "indicator--9c130a5b-6cd8-42bc-8b0f-1a03774cfa81", "indicator--40d2fd5e-c2f3-41d2-bca9-c1c29346f014", "indicator--f528082c-277f-463c-851c-4c4137d71452", "indicator--51cbadcc-b981-4f0c-931b-4058619abfa1", "indicator--7a3105d8-d309-49e0-bae1-9a3f4df87212", "indicator--c37edc24-2033-492f-b10e-0c612519db82", "indicator--90da19f1-7a70-4821-a810-e7947a069d92", "indicator--8973a26a-4e09-4edc-9679-07e41b5d7389", "indicator--b5450533-efba-428c-bfab-72214e3050f8", "indicator--6efd0454-e136-4d0f-a321-efa0a9a48b3a", "indicator--8f2c15a3-edf6-480f-88b2-1b0bc854bc1d", "indicator--8938d611-118c-4670-9789-99daee90d4b4", "indicator--bfd99b18-cde8-42c1-9212-2b5697364114", "indicator--6d311a67-1a8e-4d2c-95aa-7051d2727424", "indicator--370d1878-9243-4911-9f59-7f71908ba850", "indicator--c74721d4-3217-4b3f-8b5d-4e597ee5fad7", "indicator--234a0144-3237-438f-b757-d338afdf24c5", "indicator--c2d65e74-7a8a-4bb0-9f24-e7aafc6c12b9", "indicator--3cc9a8ec-c0dd-409f-a20f-914dedaff305", "indicator--914af027-6011-482a-9112-b84b3db38346", "indicator--dc7b985c-f81f-4dd7-b72f-9e922ad3d539", "indicator--38feffb2-9cca-48cc-b2b9-22efda26a4c5", "indicator--c2dcde56-6884-4841-b682-fef5615c54f4", "indicator--6aca78c5-8ebb-4a77-8e2e-e81adc1a8415", "indicator--9921d3b6-9eb5-4e79-a4d4-ff77da813c73", "indicator--f2fa54be-ae03-4b01-801f-23d94b656223", "indicator--e14b552d-3e8c-4f85-817d-c7ae8636d265", "indicator--12169fda-eb9b-4db2-b4f7-6ebe46e548ed", "indicator--2c3c1ac5-444d-4257-96d3-c0db05bcb715", "indicator--d39eb2da-688c-4cb1-a158-52ad0cca8f21", "indicator--1b2371ec-c037-463c-8c4b-6abb8814dc07", "indicator--97122b09-aa15-437b-b1dd-16327c307992", "indicator--c9e3791f-949a-4f33-846e-c2e4d81af4c2", "indicator--0eb78d87-c611-4203-826c-cc6b4576bc7c", "indicator--f0975e55-a25b-4ca7-b7ba-9151efc49e38", "indicator--3c008540-a43a-4272-949e-4f9477d48a1f", "indicator--5aed9a64-034c-4188-a21b-cc93f84dcf2b", "indicator--4599977f-1ee6-4111-9897-55c859e3bd19", "indicator--fe29be39-4974-4f55-8c93-cd7a7644ded9", "indicator--624d154a-9166-4b8a-b3db-7e9283d4b092", "indicator--677628d7-96b5-4994-80a3-a9e55a46371f", "indicator--66842d06-63a0-4752-a791-47a68122441a", "indicator--bb3fcff3-c4a0-4d75-8fa6-2b66027ec34e", "indicator--9d339d26-8f53-4d17-8a05-815a24a554ee", "indicator--f61d7e5e-a08e-428e-bc7b-573835144f6d", "indicator--717c9e6d-fab9-492c-937a-21da19107fbd", "indicator--61294a9e-45a7-47f6-821e-6599afe57d81", "indicator--e361fde9-5300-4f21-a343-0170620c633f", "indicator--08550cc4-d8e3-400d-a344-9a3acfdbee49", "indicator--b8c50148-8c6b-42fb-9482-76c4d57ba0e7", "indicator--cb0a28be-c259-4664-87d5-ac143d4b955a", "indicator--ddb5907b-b6b2-4aeb-bf03-5a53adb7db54", "indicator--c74bcad8-27b2-4c8e-a522-da3eab49ed35", "indicator--f8d2caad-1259-49e3-ac7e-8ca5de659aa7", "indicator--782e8755-9235-4fb1-b35d-03fdec6fcbd5", "indicator--4b2749fa-d4ed-4e6a-b4e1-1fb2ae8104f0", "indicator--88a1e348-83f9-4b60-af43-0a3bae6cfced", "indicator--2e755679-8f7a-43a7-a12c-3ff730821a3b", "indicator--5da45487-3997-47a8-9742-fafdb7887060", "indicator--a35668eb-8c6d-493f-9977-8e9016ac14e9", "indicator--14a3e20b-a0ea-46d7-ae39-f102fba5925e", "indicator--f739a65f-910c-4649-afe8-3b1003877348", "indicator--bdecb57b-cb23-4185-9bfe-f9e8d81ce1cf", "indicator--d718362d-7615-4821-beaf-ba1bc19c008c", "indicator--b41a83ed-8d39-4417-b95f-7c0fdfa49cfb", "indicator--fb2e2672-730e-4afa-8aff-483b8c855556", "indicator--43f62878-a7de-49b0-bb6b-bddf05908569", "indicator--135004f1-1daa-4322-b771-0d792e4fdb40", "indicator--b0f13d5f-0438-42cd-85bb-8a14a4491c85", "indicator--595a1295-8009-424e-9a5f-de1b31e87b9e", "indicator--f5b0231a-2127-42f6-9c80-07126f0e1804", "indicator--09fa0a75-4ce4-4111-a16b-026dcefead5f", "indicator--aab39694-75f6-4452-86d4-94ed2697fdc5", "indicator--3b5a8dbd-620f-4969-bdab-159b23dfd406", "indicator--fa195caa-ab90-463d-a76f-2f263abda765", "indicator--3088a1b6-392b-4f1f-a2cb-261330fd9dd2", "indicator--e6410bbd-536b-4395-99fc-b0ad02650a47", "indicator--f59839e2-41d7-4c27-8c22-817cfac7e91f", "indicator--30cffbdd-7a88-46e4-ad5f-c1575251be20", "indicator--431f898f-f90e-4d0f-bad5-089c4046f8b8", "indicator--d309363b-7683-4d44-aad0-f19b10229a56", "indicator--28a1bdec-206a-4bfa-8d4b-95c65c3bbed6", "indicator--718e5226-73a3-46bc-bce5-7b8ceb7da672", "indicator--91eef7b2-c3d3-4a06-86a2-1dbd34ff7968", "indicator--463f2de5-59ce-42f9-9894-f31c5e5f02ab", "indicator--50bd695e-bcc5-4c5b-9223-38139045abbe", "indicator--169faa26-dece-4810-86ea-4fb6b4b90eff", "indicator--e98296e0-4bca-4926-bd0d-985597acdcde", "indicator--77595f26-11cd-407d-ba09-bde867acc816", "indicator--5679471e-a698-4968-aeee-8380153b170c", "indicator--ae5bee60-11a4-48e1-90a2-b4c7e433f7d7", "indicator--fecf36a9-e436-4571-b0a0-fe196dc804d7", "indicator--726935bb-6458-44da-8dca-c1d9265589b8", "indicator--b1c98eb2-bb5b-4636-bff8-5122d82828ca", "indicator--d2b8e5ae-49f7-4714-8507-f10966e384f4", "indicator--1acffa55-3309-4aa6-aa90-6ec21179e57a", "indicator--75c432d3-a93d-48ca-b4ff-8074606bb48a", "indicator--f312d892-ced7-4d44-9bbc-e8df93f889aa", "indicator--4bdc72e0-b37c-4c43-95db-8f66c90bdce3", "indicator--192ef4de-e8a9-451a-8b14-df65c47c35ae", "indicator--b4bb7550-7d0e-4770-92b0-faae042ec7ef", "indicator--9ece79e2-ff3f-44b6-851f-a4e8edc02789", "indicator--b1d0083a-b371-4fc9-b612-047c08aee1d5", "indicator--53b518ab-14d6-41c2-8307-e99f9344980e", "indicator--84cd7081-2eba-45dc-84fc-c911449ebc2f", "indicator--e4f034f2-1698-4e0c-9861-f8b93289b380", "indicator--a57f2563-233f-419c-bc12-b5847e041bb5", "indicator--6723089c-04c4-44be-bca0-9269192d4282", "indicator--5d82cd9a-96ff-46cc-b3b4-3a0017702063", "indicator--ed8c13d4-961a-44df-8ee9-05f8dd16eacb", "indicator--a8356a7b-b6a2-4abe-93a8-574dc4262223", "indicator--55cc7dc6-a67d-47b5-a521-cb629813c38c", "indicator--c51e83c6-e34e-4341-8fe5-1509fb3af297", "indicator--86a87ee3-02e6-4ac5-a47b-3b44594074b1", "indicator--9f3a7e17-733a-49ac-bb7e-24b442d9bb74", "indicator--1d9c01f0-d4ef-4545-adf4-ac088285a0b5", "indicator--9141d6b5-6dc7-40a5-91f5-109b2dba4349", "indicator--2df6d019-c451-4ca3-bc34-46af51d3bce9", "indicator--df792965-979f-4b19-b08a-044adf3dc070", "indicator--e1548a5c-8841-4ff0-ba63-f16d821a2125", "indicator--4f53c53f-75ea-4b6a-a7e7-e6a04b62c836", "indicator--0c2005d5-3897-4746-8b46-427d5f3c2553", "indicator--6085d7eb-b90a-42e2-86b3-a4e0427abac3", "indicator--40b1f782-8352-471e-82f7-79821fb64284", "indicator--15d85847-4375-44e0-9b8a-9532e3654153", "indicator--c73dfb30-e90b-4af2-b6de-56b4ab15c56f", "indicator--1519ccd9-0c1a-4dfd-b971-c4a83dea22a7", "indicator--37f836fa-0a0e-4a15-aae3-a51003233935", "indicator--edbc7bfe-06e1-4265-9bcf-01b9bd83e6d2", "indicator--3233aa7f-d3b4-4051-bdf9-20acbf045d0b", "indicator--daceedd8-db42-4f60-841f-e4245e456e3d", "indicator--e454879e-a4a5-4a8f-91b6-b7c1ac0e642b", "indicator--a1f2b465-9c05-46b7-9137-2e595b97f54d", "indicator--0e31e12d-d06f-46ee-b5bb-300fdec0dd2f", "indicator--fe93af61-6444-4b16-84ea-62648a70f28b", "indicator--67b89dc1-322b-414e-8334-ce092b5e29b6", "indicator--209a3f4b-5f78-4991-88d7-29702b909335", "indicator--ad3f73b7-102f-4bd0-a891-b57f1ca58d93", "indicator--b6be8895-76de-495a-a91f-d4a0b585b9b8", "indicator--8de6a3e8-3cb6-4a6f-86ce-5b2b952487af", "indicator--eec6ac27-39f6-4db7-8b0c-506f30b1eded", "indicator--b65a3c0a-88a3-4a54-972b-74728c9f640b", "indicator--6c456971-969d-4098-b8a9-3fe57af886ac", "indicator--70399127-70af-4df5-9c3b-261844eaac0e", "indicator--9190649c-b03e-43e3-be93-0ff803daf445", "indicator--a6d3fd3e-597c-437b-a9a3-8350969a8dfc", "indicator--7f0badf9-541f-44eb-ae1a-5b9038a0b221", "indicator--819d001b-aef6-4aa1-9d56-6f4d9dfbed2f", "indicator--cd7842ab-f685-4cc2-aebc-cb2c0045c84b", "indicator--c9e0eadf-8764-4a71-8a05-6f66a4bac113", "indicator--bef17e4e-c347-40a4-a941-d76a87e0e61b", "indicator--b0617029-4f68-424d-9f1c-afbf7086a3e7", "indicator--ae4112ce-099b-4513-b443-97ec42694724", "indicator--f662c35f-7509-45a1-9500-2c0d2cebf578", "indicator--5be04c3a-723a-40f8-945f-cde58ab1d4b8", "indicator--e0a7f934-f451-4970-8e18-a235fd3fb276", "indicator--4c6b647c-35d1-4c09-9aa1-aeb9b3d1fe3e", "indicator--5092bad2-d69f-4e6a-9d5b-f6755899e1e0", "indicator--f9e4e544-a774-44d2-ab6a-42d46f2d547a", "indicator--52b9a4e5-1e40-4dcb-be83-e70bc74c0d18", "indicator--7022c3e2-089a-411f-9d79-ed2157710868", "indicator--896e55ca-6067-402c-abc6-0963f3580e6f", "indicator--96cda543-d67a-4afe-827c-02061a7b99b6", "indicator--51b5c743-6709-4ab1-b964-a710b165a1f1", "indicator--3f1cdf83-6ee8-4b53-b3b7-f75700666999", "indicator--61a3dd31-d69e-422e-8bb7-6e85639913e2", "indicator--a929eab0-774a-4bf5-96ad-f7fb2ef678eb", "indicator--df880958-b289-44f5-8d24-6bc02c663e48", "indicator--d9cbeeca-4bf1-4c1d-87b0-dbaa04ab2592", "indicator--79f53c69-f0c8-4868-acea-13d9e0209500", "indicator--f555d1e5-0e55-443b-aa0e-f2b9b5d722e5", "indicator--60e214c4-9ef7-4ffe-8d83-b9fae4855e29", "indicator--e97e4484-5a5e-4beb-a872-ded0c6d5f32e", "indicator--7b5920b6-d394-4f07-94f6-8ed193eab00f", "indicator--cd87d556-a31e-4282-82f9-79416ff965ae", "indicator--3b34422b-4a99-4156-a742-cf7d2ba0879c", "indicator--95e5123c-fa9d-49f7-b4d3-632b90a41458", "indicator--847b54ea-3511-4887-98cd-5cce741b79c5", "indicator--982cb123-dd4a-4576-bf25-7bddc9127fdc", "indicator--b8004732-9765-4795-a4c4-3a3112d04634", "indicator--c815d1f6-36d8-4d00-9f2c-d22687172630", "indicator--64840442-2b89-426e-a862-293492b1c2fd", "indicator--47dd8091-e7a6-4ae8-9667-a5079c16244a", "indicator--93f6bfe7-67ab-4d79-a0ff-7c9d11222b49", "indicator--68fe25b8-1a58-4e13-a50b-6146dd185fa4", "indicator--f271c7e0-2d7a-4c9c-bb65-d3e4e1668d84", "indicator--44225db3-53dc-450f-bec3-9a0603950c24", "indicator--5adec222-e1ee-4147-8367-241fa89582bc", "indicator--2ff891f8-bd69-4851-a59a-34d755d7ae92", "indicator--8238088e-81d0-4a4f-b03d-f662e1bbbcac", "indicator--79b33353-0089-44d4-85b0-fd19fcc18479", "indicator--edecae42-4f83-4ba4-bd14-1f5a68996915", "indicator--ec4dc9d8-3732-4b82-912a-fe7738a621c9", "indicator--b5b5bd7f-b7fc-4bda-8735-9d4041ab2ea6", "indicator--bd1fa222-8437-4f7e-8328-8333fccea45a", "indicator--475be40f-f75b-48d2-a8ed-c0b6bc2966a1", "indicator--92cb6fb2-616c-42c9-946b-9f18527d9c39", "indicator--907b6da7-46db-4a5a-8910-dd86cadb8fe9", "indicator--cdb6092d-4db1-43a9-99d5-dfa89b1fcc23", "indicator--ed5de5b8-b3e2-43b0-9f7b-db8ba3d081e7", "indicator--fb53f489-d52a-40e5-b49f-c4c3d38f9dde", "indicator--e2f252f9-34a4-437a-ac05-4e4da96dbedb", "indicator--23dbe31e-0b9e-4288-9060-40ae0b6f3e59", "indicator--310922b0-29fb-4050-b0bf-b697f9d5851b", "indicator--cea3a469-72c6-401d-bf95-6337abffa168", "indicator--8253c195-da16-4eed-9c2e-0b761d46455e", "indicator--69c9f866-360a-46a7-ba67-b95755f9908b", "indicator--afe364ab-fc89-44a4-8c08-439bc26c773b", "indicator--89e82d97-f10b-4153-b597-12f6a8525af4", "indicator--8cb7231c-a66a-4e59-bd4e-81775dcca1ec", "indicator--11cb82ea-0947-4338-8cfa-b86c474109d7", "indicator--ebaa2541-246b-4cdb-8fca-96a0fae0ee83", "indicator--74e9d4a3-bf0a-4953-a835-f086619c44f6", "indicator--a54d8d77-da22-497e-b2f0-092f493a9bb9", "indicator--51437481-64ad-4be9-a276-c544dacb5ad7", "indicator--15cb4b77-0837-4146-a461-a867f1135fb7", "indicator--125fd62d-d3f1-49d0-8921-c9b2b32b7f70", "indicator--a8683255-ae3c-4e03-8e5a-a710b3df1da2", "indicator--b79fddb1-cb52-4256-bc87-55607f7f3cee", "indicator--8d8aa0a7-2397-4fd8-ba4d-b5c85813ede2", "indicator--df5aa134-5a88-4639-aac5-e96f985f4022", "indicator--d14d079b-3a27-4bfd-aab2-9a2ec782c1c0", "indicator--cd0cd570-7034-4ee6-9e6f-588d466c5f89", "indicator--88e7b2c9-eb5d-466b-8a3c-a556d75379ea", "indicator--4c27e79f-6646-40f4-a55f-73b002cedbdc", "indicator--ba237568-d3fa-4942-9035-26f843179256", "indicator--723d9384-5986-4146-9488-43ffb48a77ae", "indicator--9bd221d0-6251-410b-b163-d91d8485e6dd", "indicator--b640a66e-c9f7-4d73-bc30-a287788aad5f", "indicator--94ed68f5-33a3-4d62-ae20-c157c45319a1", "indicator--07cc07c2-a333-4de3-aa2c-500b5f920426", "indicator--1c5d337c-f2a9-429f-8c54-aa79288178f8", "indicator--a64fc964-20ec-45d8-87a3-61aaca79663b", "indicator--750fb850-787d-409a-8d5a-ee7ca5c99d2d", "indicator--955f8f62-e8e9-464a-b32c-ef3462196658", "indicator--8c639fea-edaf-44f9-b8c4-dc98c6b645f3", "indicator--7a36110e-e61a-41c9-8afd-ff1ab4d18374", "indicator--f112f9af-760a-457e-8983-347e7078bf95", "indicator--15bde649-770d-4fb9-a9b2-8416f1fb0bd2", "indicator--b8a18ce9-68ba-4606-8e13-82379e016042", "indicator--a90c5b97-0780-4c43-8104-d131b9bd5d87", "indicator--b0167e36-074e-4922-9eab-37c9b53721d7", "indicator--54e3fc7b-0b1b-44b4-ba07-9a2782732807", "indicator--5868eb27-6c29-4bb2-a0c9-29b8b20d709a", "indicator--84372ffa-423c-41de-a6e5-a6ef71ac9c4d", "indicator--ceb6d09a-e70d-44a5-a843-75e94cf2f6e2", "indicator--1221df9c-7c60-4806-8096-fa4879da5edd", "indicator--11a9fc48-52ec-454c-8b0b-58d58c47eca7", "indicator--ceb4c455-403f-47f0-b562-77ae3732964e", "indicator--cf467733-19ea-464f-a438-4fedf3f46b16", "indicator--e0071d91-2fb5-4b79-8a85-65e93f606625", "indicator--7b8faa51-111f-48d2-ad06-551c8b683bcd", "indicator--1bc8506f-f195-4f1e-9f42-551e1c4d8473", "indicator--eb42f38a-c44c-451a-bb83-b29d97bebbf0", "indicator--1b6257e4-847f-4496-a37a-bea4e5674f4a", "indicator--94e4b7c5-a5f4-48db-8097-918add1abae4", "indicator--d08c19c4-e0dd-4148-8b4e-55e79eb532d3", "indicator--ec23384a-039a-4b9f-9d5f-4354b58f6d95", "indicator--16eca3b7-edf1-4b23-87ac-195f64261e92", "indicator--57e49c86-e257-45ce-a43b-ffff0614e7fe", "indicator--6d53316e-6ee7-4997-8144-9f8a91c964fb", "indicator--c33ad0be-d4fe-4e38-8fb1-bc845871cb57", "indicator--32281cb3-ef19-4f4e-afa5-b529116cdd3d", "indicator--230451ff-4dd4-4412-94ec-790a4638ca90", "indicator--f529361c-e771-466f-adb0-7ac2761a5685", "indicator--c2114a1a-2db2-42b6-802b-79905f3d9fb8", "indicator--575891d2-0e74-4b04-bb31-dd06d4818efd", "indicator--452a4f29-a3d1-467c-b877-545b1673af58", "indicator--465d9a6c-7f26-4543-93b9-2d71d07ef92e", "indicator--759b0071-2ce5-4794-8df6-0ce8daa91dfd", "indicator--00ffdf27-0ca5-4225-88b2-42c277e1b365", "indicator--6faff110-dcce-4012-a334-17b83149a1ae", "indicator--9505c600-2300-4cd5-87ba-ad581d1553af", "indicator--c8a61f95-94f4-4ea8-9031-8c8693d5c892", "indicator--a1a53d02-94d5-436e-b2eb-3d2774dbbcad", "indicator--0ff474e1-2f71-4784-a6b1-8bc0e161a906", "indicator--87bac1eb-d442-4b6e-b915-a8cd3d5963bb", "indicator--7445c1a5-4e01-43a9-9a1b-b251e330b3ab", "indicator--460f1432-7618-48a1-bb13-c7df6ff005df", "indicator--a6896fc0-b2d5-47f2-980b-b6a6099fff7f", "indicator--b8d0c830-93dc-4430-88ec-3ef64e48788d", "indicator--1ac224f6-accb-46b9-9052-3393e4245b73", "indicator--7b1460b9-3a77-42c0-b6f7-2969a9bab726", "indicator--7f95095c-632c-42f2-a552-e97a521d8777", "indicator--e42eac17-9e1f-453d-8e13-dc56c92c0c95", "indicator--62484f6a-9e01-45f6-8fd6-b84c200950e3", "indicator--5414a147-77fc-4f12-b383-ed6a6df2a7c9", "indicator--88449a2e-3958-4c4f-965c-871f2f3fecfc", "indicator--d842fdb2-7e84-4c7a-92d4-3bd7fe0b74ea", "indicator--3ba87481-e24d-42be-9588-0456695112d1", "indicator--3befc1dc-0873-4f42-9f22-3e64948e4e19", "indicator--3bec18fd-47fe-48ee-b6eb-28152038e522", "indicator--4ae9dcf8-4607-4904-a3d3-77b644c36824", "indicator--2d7b8517-1753-4c0f-a62e-a214779e8f62", "indicator--8d123880-cce6-4b37-bb6f-594b7384ffe5", "indicator--1cff1293-f476-4279-9b1d-ee81e4bee848", "indicator--035f6b0c-d693-4598-b84c-3294ecd9f21a", "indicator--7397626a-9d24-467c-b855-b1f82b3d74ad", "indicator--aaa41296-1c7b-486e-9b64-684025d1da35", "indicator--8d195ae9-b20f-47f5-94bb-f46730053f31", "indicator--572ebb7b-1b39-4724-9d01-50b906d00348", "indicator--59c7d7cd-1ead-4377-9e9e-b2865a7015a6", "indicator--ba23e3ec-d947-4522-8d64-13f79d7f5c0f", "indicator--4a35984c-b822-4ce3-b3d0-054d4f792ad6", "indicator--c186b57a-db0a-48b6-88d5-90ebcfcdec3f", "indicator--ef3e3d4d-d18a-4be9-ade9-705a41e05f07", "indicator--fc7a43b3-f30b-4022-b16d-e2222df3ac1b", "indicator--236bfbdf-ab82-41b8-9023-19e64b2f1d62", "indicator--fdbac691-383c-450f-a9f9-b9aaa11d1924", "indicator--d204b3c7-57b0-421c-9b63-18fc014fc1c5", "indicator--2cf91339-fe3a-4b52-bdeb-32cc1d9bb438", "indicator--5441c4f2-8841-4543-a9f6-b12cc67e6ae0", "indicator--fd4c2129-26ac-4021-93e1-a74a75e99e73", "indicator--5b344b16-82d0-48d1-a0fd-cf06e33fc8df", "indicator--f0a45137-ffb2-4d9b-aa88-92e0bc029e19", "indicator--be1d9b14-771f-4f3a-a347-322d099bf2ab", "indicator--4cc6ac54-4d83-40e7-9d5f-a3f1c047e4aa", "indicator--c94e109a-f412-4dc2-aba0-08bd55c15375", "indicator--7882de4c-fb1e-40dc-9cd3-22f8fc6e5d15", "indicator--0d2c6581-b09a-4bc8-bbc2-ecb95a8adc56", "indicator--619aaa1b-1169-436d-a5f9-80575c9ee4b7", "indicator--8eba6905-59eb-472d-a115-b6234712111a", "indicator--2797836a-5017-4ee1-b132-9434ba77d2b0", "indicator--b27afe60-e135-4632-baf7-7bbd5d24fc6f", "indicator--5b7fa373-4278-4b73-b057-22896a8ec49d", "indicator--f1f288ad-60e0-4507-9303-ba80002618f4", "indicator--4d23c2e6-14f9-43d2-a114-9377c62aa9d6", "indicator--0c23bd22-2991-4f41-9fed-5ef5a4c54e28", "indicator--9442853e-cbdf-46c1-8ebb-247cc1443d02", "indicator--1b215187-d91e-4470-a6a0-5b0ce68fcdde", "indicator--8e8ba850-1016-47d0-8ee2-26c1bb370fce", "indicator--2835cfcf-2bac-4673-b4ae-930a6fa32b92", "indicator--a1e52997-d2f9-4055-9f95-067f92e9dc29", "indicator--4d2c0dc4-bd72-4054-8147-2dd264d3ee82", "indicator--454367ea-dd60-4ccc-ae6b-fb1ab900c45b", "indicator--9a974c8f-110e-4904-9ef7-41e4f313747c", "indicator--e4402e43-c7a1-4511-addd-ed7291b751ca", "indicator--34c233de-7aa5-4c82-a05d-1b570d7c5cef", "indicator--c9efedda-f14b-4ae6-a3ff-c768723e8ed1", "indicator--6b4ae7db-3acb-4156-9681-f6539a3dc5b6", "indicator--d884c7e3-905e-4925-9de2-535ef396768c", "indicator--b8115300-b4e9-46dc-9fed-8bdc5e053a8f", "indicator--ff491f10-172d-43d6-9811-bd3db1369028", "indicator--7a41d533-fc5e-4f4d-aa3d-690ef0c6ad41", "indicator--1c17a727-66be-4771-9400-b75959494119", "indicator--762786c9-0d47-4630-b76b-2cbb4af76da3", "indicator--644e1c1c-0d89-4276-99c9-bd28e8d879f4", "indicator--654a9b9e-f60a-44a5-a82c-2c7657649014", "indicator--315ed0d7-d193-43bd-89c4-8f211fd1f210", "indicator--c76aa144-3868-4769-8483-5fd118db4d68", "indicator--ff52da7a-96ac-4963-8268-bada78881a02", "indicator--576e4591-c155-4439-ad67-0eadf4b65cef", "indicator--6fb4d144-4e27-4608-bbb9-132670c7e110", "indicator--f97b1f37-9491-4ca0-926b-d83a9ba897c7", "indicator--89011b7d-d375-4209-9b51-e4e95725a39d", "indicator--5826093d-fd82-41e3-9c36-f2a4df69dac2", "indicator--3880f422-2f05-4d63-ab2a-aec24e1c64e9", "indicator--566f589d-2bb5-44a2-b5d0-e1613e6340f4", "indicator--9b1e6210-0869-459c-8f39-3ff0dc8ddb02", "indicator--70d23375-3113-4694-bfd8-93b1f4c70aac", "indicator--a406fe2a-cc3a-4be4-9880-8a2f6f533b59", "indicator--627e44d5-513f-4a76-9bdf-63d9656cf91d", "indicator--3e0030d9-9011-47d0-9eac-61e95c7f4c74", "indicator--5cc9e1fb-7cde-4f12-a592-4ad5c9b532c8", "indicator--98d1252c-d8d0-4547-b6e5-51e292b9a2a8", "indicator--6d1d168d-809a-4101-9c19-f34b2029d2c4", "indicator--4801d9d8-e191-4c5f-b6d5-ab9582856abe", "indicator--3952e6f0-e53e-424c-8259-08b5eef60bdb", "indicator--ee238e28-bca2-4300-8522-c303a49cc402", "indicator--4de5d27f-c2a7-48b5-b3ec-f122bf7adf97", "indicator--3d84d51d-f445-44ba-9272-4f67eaf6b2c1", "indicator--31eec649-f22c-48d2-839c-76103a63cc1e", "indicator--5255e1fc-db93-4f82-9446-4afd31b34936", "indicator--7dd44254-5fa0-432d-aea7-840db110339b", "indicator--e8ebd597-41ea-4bab-9e1f-cb2e844d3564", "indicator--816d8e0a-23b4-44a5-bcd8-9fbfa3e17172", "indicator--9cc903e9-541d-4cd2-b47a-5209f20ec696", "indicator--3f85d0f0-7660-4d98-b0ef-b0ec76f2e629", "indicator--8518c2be-ee32-4221-b898-332202acdff8", "indicator--33795ee2-f0b9-40c7-8e66-6205c28ed5bb", "indicator--068ba544-61d3-4611-bf3c-27642fde6224", "indicator--66df7454-ac95-46d5-866c-5b4169a13b48", "indicator--3a42e56e-d88f-4c39-a0bc-af592ad1998d", "indicator--a5c2da5b-8c31-47c3-83d9-1b8274305717", "indicator--5293ac2e-942c-434a-a982-cd0e22a59a1c", "indicator--2b29b712-8cd7-4ee5-b947-4280f742a1b1", "indicator--d11ebc4e-f934-43ad-a8ec-77f197ffb65e", "indicator--0adac8ac-650b-4cfa-af8e-4872ccf1798d", "indicator--90346029-5877-495b-abb2-0b130dc5eff5", "indicator--d642499f-f12c-4a60-8514-e1347f46f4b8", "indicator--2e93ac3c-a710-4704-950b-46c22dad2be7", "indicator--16dcc150-430d-4353-b9f1-3482ee0d6143", "indicator--d8b3cafb-ca1d-4f38-960b-565d87435cbd", "indicator--1f88b314-f682-46ac-bdf3-e45409bc90ca", "indicator--54f7b1ab-6258-4245-a4f3-70d3d42f054e", "indicator--a30e8e7b-9443-4c2f-a61e-464870f81fef", "indicator--22423766-b54b-423b-ac61-54ed4356df77", "indicator--65698674-0b47-4bbb-a1e2-fb0b81cc19bc", "indicator--68635abb-9e32-400b-934c-9eefe9565269", "indicator--b5379caf-6109-4547-8af5-31277124cc61", "indicator--4a4c4163-0bb8-4342-9188-47bfd618b66e", "indicator--7832903e-703b-4b3b-82ff-f3ab2daaed1f", "indicator--0eeb50b3-7277-497f-8576-943673ccfbd8", "indicator--f710b318-9035-476b-8d27-12975a996c02", "indicator--41ff2284-3f6b-4c88-ad05-59ae5717ab38", "indicator--5b859c75-b232-4054-8b28-e86047604693", "indicator--fd4ac1a6-b2fb-41ca-b3db-687d378dfa4b", "indicator--c0eb0f8a-8ead-4345-b5f1-5be843b77529", "indicator--781f7f0d-ca15-4331-8cd0-81e04a55c5af", "indicator--73b1d531-1ced-4e68-aea0-987786905f29", "indicator--9cca3ada-6566-4940-b990-73a7984da0ee", "indicator--ec988d49-bd96-4a78-9b28-aaf6f0dc9f69", "indicator--c1a8130c-ef8f-48e3-81a9-4a81be76acc0", "indicator--1ec95b86-10fd-432c-a61d-71dbc71ef581", "indicator--6164a78d-70d7-4881-90a7-a9582f24ccff", "indicator--03a15713-df7a-4361-9a18-4e3bf821f0b5", "indicator--7ae47ba0-d488-43ac-8de7-64c3c2caf7cc", "indicator--268b1bb2-1c5c-4637-a056-8b098e0d492a", "indicator--386d5c3f-07cb-4c56-8069-889fa97eb968", "indicator--96e99f84-9da1-4dab-9369-8240d741cd36", "indicator--c51910a7-8a29-43ac-8247-d496b28ebdc2", "indicator--51563c70-fb2d-4b43-9eeb-d828a1aacf8f", "indicator--9a34ec32-b3e0-4413-899f-a632bf001985", "indicator--3718efa4-b590-4b46-b00c-bad5ab43ab49", "indicator--160f4054-7d53-4310-907a-89bddf18e29e", "indicator--97cb48c5-d1c6-4416-89ef-396d834d3b7b", "indicator--7ca77a68-0876-4818-a936-a1952566fdb3", "indicator--6f65bb97-5179-41e4-8ecc-541c840c4b5e", "indicator--8755ade0-b4d0-4b56-b915-8453458bab22", "indicator--4edbfc2b-a09e-4d2e-bf39-23aa76672d8c", "indicator--5d727457-88d7-49b1-ada5-9cc5351dc1c3", "indicator--92f39dde-056a-421d-9af1-383ac33dbd03", "indicator--eecc4b3e-e3f1-4836-9b32-ed3955a87b8e", "indicator--b87f47ab-0390-4af3-884a-bb4dde36df6f", "indicator--4c20fdf0-b250-4660-b54e-5068906b1c43", "indicator--48e9cc8b-43ec-49f4-a7b0-0b5366caa246", "indicator--101e4d41-bfdf-4d02-9943-a50f351d3e1e", "indicator--8696c8c3-ce61-4e7b-9008-2e2c1bf47d46", "indicator--a77e9741-988b-45a6-b83d-c19b3829a461", "indicator--645b3529-870d-400a-b0f0-892f52c8083f", "indicator--6df46db2-fbd0-4ec0-8f09-c453e742c91d", "indicator--9eb6f64b-ecdd-4ef6-8962-59cb1c7186d7", "indicator--7963d324-5cb4-429c-bbff-2ab340341b06", "indicator--7cdbd2b0-120f-45fe-8733-ce3655f83861", "indicator--f4b5a960-d8cb-4bda-8314-48f4a1a74357", "indicator--21eb60dc-d167-4611-85e4-a5b83e84d7ae", "indicator--89423054-ed49-4ace-aeec-971e0bd30f8d", "indicator--4bfdee94-21f7-46e3-a25f-d3acd7948012", "indicator--b4e6e66c-4f9f-4a1f-87e3-3484e3306e46", "indicator--4ab703b2-e5f4-4d3d-95ff-a0013a7513b8", "indicator--36e71909-8a9a-4d72-959b-f0cdbc74738d", "indicator--d4392770-38f8-432b-b7ea-2538b6321b1a", "indicator--f3058c13-11d6-4ba5-8c18-800d0c03c498", "indicator--44c84dc2-ca1c-4a45-8187-a9ed2475597b", "indicator--34c9fc02-fb93-4323-8a18-44030c114f33", "indicator--9eda10cd-8b45-4d65-943a-b7e928362c12", "indicator--d0baf4d7-6ab2-44b1-b6ae-619f7848b73f", "indicator--7888af2e-8c0c-41d1-9d10-2778c659a360", "indicator--d2cb444b-afae-4988-817d-e57db843049d", "indicator--72959436-45db-4cb9-9b65-2657fe240d8e", "indicator--4795bdd7-ca5d-42af-8374-ba735635f000", "indicator--4a4dd31f-1a20-4799-a7df-210961e6c1de", "indicator--e50429bb-f5e4-4d09-8f6f-ddcb31fd7683", "indicator--d63c0327-90b8-41aa-a5e9-7ed9ec7a8ea3", "indicator--08107ce8-4bf4-4178-9cea-f841ffc064ea", "indicator--b9fc44b1-7929-4100-b2c3-41c4824d91bb", "indicator--3d5d052f-70f1-42d1-bab6-329003ceb6e7", "indicator--0d2af70d-4435-4a29-b113-8da83738497b", "indicator--63db718e-8414-41eb-99ee-996cbc4a0f18", "indicator--0b749be6-fe49-4f94-a290-df537c572c43", "indicator--028436c2-6621-474e-b876-8dddd32e2463", "indicator--d48f8e24-aaa2-4a26-a303-38be984f9e72", "indicator--1ee6cbc9-cbe0-4caa-b224-3805d5b29c9c", "indicator--87d3f610-e642-4938-8afb-06d7385093a3", "indicator--e89a8536-64ec-4ce4-ace5-4dcdf601ff2c", "indicator--d187d26d-2d27-41e3-bbf5-fedbf9bf4f0e", "indicator--2f18fba2-36e8-4293-b8cc-275cca970c74", "indicator--1c0b7aef-37a5-476d-a529-9c724a42e110", "indicator--b7b4166e-a08b-4357-a470-7150af33bb46", "indicator--7e8f4fd1-fe42-45b1-ae15-9829566ed013", "indicator--f89b74e0-753a-4e3e-a5c1-6ade55e836c0", "indicator--e2d23121-ae8f-400c-9a70-af0d14ad5806", "indicator--a1f0977b-43ae-44c8-b701-62b58bb720d3", "indicator--527f5e41-2da3-468d-ad77-9fba84a018cb", "indicator--4baf3a98-79d2-4f38-851c-d2a6734db232", "indicator--898c64bb-3f7e-431d-ac8e-fc902bf24f99", "indicator--979cbb2d-ad3c-4d91-ae84-b1957bfa6fc3", "indicator--5fc1370b-b304-4a9c-ab21-5d6b831ca6d3", "indicator--73b192d1-fa01-46ce-93a4-92c38e0e3e5f", "indicator--1e847218-158c-4254-948d-0e58c74424ac", "indicator--edf1a297-d8ba-4a3f-8038-530b499227ca", "indicator--ae1b13c4-dbb9-4e42-a3dc-e1ecf1d2b206", "indicator--0630905f-7e3d-4537-a89e-b904d05f7cd8", "indicator--057edd8c-f44d-444d-adf4-7c0c5b1957d2", "indicator--898e8492-fc59-4c91-9a37-491275a15140", "indicator--edfc7d61-4f3c-4679-9bd8-828c82175cfb", "indicator--a10b5a8b-6367-44c4-8c45-0fea72530f60", "indicator--edd1263b-aeae-44a0-beba-fd94a877f985", "indicator--1dfa5a40-95c0-4de8-b2c5-d079b59593ba", "indicator--20a6ff4b-51d9-4658-a5f7-a9d31592dcdb", "indicator--45efe5d4-d56b-4009-8c77-2f4642eca44e", "indicator--a426be61-93bf-409a-a66f-7253067b2d8b", "indicator--a76f88cf-b7fc-4d16-9f27-41486a90f78a", "indicator--1ca38742-01eb-44e1-95aa-ec550349eb41", "indicator--b8043629-8956-466f-9164-60aed9963ae3", "indicator--199aa79b-9180-4c9a-97bb-fe455ca37fe6", "indicator--a7f3395a-b7bc-4845-a4ad-16b48b2a03b8", "indicator--2d4605bf-e90c-4119-a72f-d7db5aeb5a60", "indicator--01152e22-dfbf-4eda-ab9b-0c8b0bac06ba", "indicator--91dfeda5-7046-4ac3-98e7-66c10d86703b", "indicator--dfd77c9f-4675-4de0-a2c6-67ae7d873869", "indicator--1a4de4f1-70b2-47b7-816b-a9d4b67cf07d", "indicator--3faa483f-9a43-4a21-bf42-2ecc5320ba0e", "indicator--6f1bcc90-3e0a-4cf9-88da-fb9ee4bcd9ae", "indicator--9429699e-f922-4468-9b4f-7e8155b0dd10", "indicator--c3f05bc4-bb43-4834-8e76-d56c5d3832a5", "indicator--f027f8dc-f2cd-4691-9191-2cf2e70c1e41", "indicator--350dcfcb-f165-4095-ae14-f10f38d935dd", "indicator--3e67e42f-1168-4e43-a425-72cb21b6c118", "indicator--220a6c29-88d2-4a68-ae14-972a3cd8d8a1", "indicator--c04b1186-461f-4cae-b5e8-2930d90e7553", "indicator--93a3c145-8a68-4035-ab4b-463b7f3bc335", "indicator--14c0212a-cada-4d3e-8a99-5a6fa391400f", "indicator--a16bd22e-f0c8-4aba-90e8-8d262c9fe818", "indicator--4eb90b90-4cf0-4dfc-af44-01b449d75936", "indicator--d12915e9-271a-4764-b82e-f18f6c643a64", "indicator--2fff918f-99f8-470b-88b0-dde7b7a96017", "indicator--0218365c-425c-4052-8955-011b105d36ad", "indicator--2cf4a05b-50e7-44b4-b6de-f5293f53aa87", "indicator--9fc892f2-0213-4f5c-8b25-e1de22516864", "indicator--8ec12109-1871-4428-a8ec-962a224a3595", "indicator--9e4d4176-6661-4a23-b25e-53a353b4cede", "indicator--7b6effce-ab4f-425d-9665-57004d94f7cc", "indicator--c35406be-cd95-4afd-96ce-c67ee31178a7", "indicator--0e5c420a-250d-4eec-972f-b440f39c7287", "indicator--53d21f1a-00ee-492b-9c1e-900835f5cdb3", "indicator--45492764-ed21-4cc6-b48f-f2125f2698f1", "indicator--24964cf8-04b8-45b4-895f-2ec49d584c94", "indicator--2d07a1e3-17a5-4ca1-9467-060391018a10", "indicator--a8ab4a4d-d1ab-4051-bd58-9f8308bc15d0", "indicator--61cd8a16-32cd-4595-880e-30cd66715bb1", "indicator--7ba6b392-1be2-4bd0-b438-3ad2c6a13c43", "indicator--8f1975ca-9691-4595-8bcc-90a7ddbb210c", "indicator--3736d40d-03dc-41b1-a867-8966173a978e", "indicator--8b79a45f-3327-4e3b-a5b8-c4e8c4c20afa", "indicator--07c9ff66-6bb3-4d1e-ae00-ace5ad985abe", "indicator--d109f1a4-24aa-44f4-a699-e403645ae392", "indicator--1124af37-c07a-45a7-bbb5-65ed4f9d6391", "indicator--ec019998-ea60-4a84-9bdc-c06faf9aace4", "indicator--6109e170-02a7-469f-b067-276d521db88b", "indicator--d91a77f8-63cd-41bd-b4d7-7515b3efafd3", "indicator--a015ba82-fb5c-4601-83ac-1c165d516dca", "indicator--75ad1a7e-5eb6-4892-a88d-60ea6bc0ba45", "indicator--22d38a9f-599f-477d-8904-a083d5019615", "indicator--14bdf833-a727-4ea3-9810-a35d9951b258", "indicator--bca8b58e-8454-48c2-bb20-6d1ddc9ef1fe", "indicator--31a5ad13-e0c6-4558-8a9f-cd5f01346870", "indicator--5d818c0a-cb04-4fbe-9cce-f11d00effb24", "indicator--deedc375-dad0-43fe-8045-c4a916e67667", "indicator--8edfa9ef-72eb-405b-af22-6c79427dffca", "indicator--f9a3852e-0dd8-4282-b18a-0c6dacbc4986", "indicator--607f63a8-82e1-4007-b084-e089414efc13", "indicator--f337fccc-c5d9-405f-9401-741d3133709e", "indicator--2205db52-eaaa-49f8-98c7-d715cec3a6d1", "indicator--9c11031b-8214-4490-a666-eb10713d0ccf", "indicator--668de1da-5ffe-467c-b7ce-f21d657fa5f0", "indicator--a8261412-d97d-4b50-9345-92851b80e164", "indicator--0b86a7da-1ab6-4fb5-9c73-68296b04f4f1", "indicator--6ccaaa9d-b16e-4bd4-bb98-8599b764f24b", "indicator--4fd29a3d-02de-48a9-bf4a-3c6953377367", "indicator--3a390c48-8508-4971-92f8-b6f18cb809e9", "indicator--2d866e8c-4885-4dba-906e-d32d694b6e61", "indicator--6a6a3394-6738-4e8e-af36-b563f62f4b08", "indicator--58d7404a-7ee7-4c99-840f-ab4a3d065374", "indicator--c9d5977a-9e1d-4322-af43-ae43e155677f", "indicator--14d2169c-9d0d-4134-be09-b7ab1d4fd48f", "indicator--29596d4a-005f-4581-831b-a0a360839cf2", "indicator--3beb600d-8a6f-4df9-928f-d7f356ee15ae", "indicator--c09cce6d-7b7c-425a-9be0-79e1ec3e3235", "indicator--02fce291-e802-45ce-9438-63e0fa1ac194", "indicator--991fae47-7c87-451d-af3c-5545c5b4ff52", "indicator--fedc7063-249a-4dff-922f-db7e078beb20", "indicator--dd45a46a-57d0-4848-8ff8-fa02650ef5c6", "indicator--d6a8934e-b054-4179-be5e-4e55a1938af6", "indicator--7fdb8f15-f8f0-41cc-a93c-1b98dd3f1c20", "indicator--25e749ca-2e34-439a-a64b-63d5b3bd1335", "indicator--d4ac4c53-b261-4bf1-86b7-9f214de081aa", "indicator--c87ff7f8-da65-4800-baaa-e236d287144f", "indicator--fe552985-4f36-4761-a3a6-98627fc7f42b", "indicator--9ce72cef-b845-4baf-a8da-286de450cd17", "indicator--d3bdaab3-d18d-4d72-9dbb-b8c5e06ad2c6", "indicator--3f623cd1-6cb3-44d6-8904-dfb3a777e6fe", "indicator--40a0150e-4ef7-47e8-a788-4763ba8a3b81", "indicator--4814aecd-8fb0-43f0-9d9c-bde8cbe5b4b9", "indicator--955f335e-5fec-4b96-868d-3bbde1997603", "indicator--d599acc1-81c0-4078-8c5d-b6eee95dc2a4", "indicator--df688e69-471d-41a3-9e0d-e991012bc63a", "indicator--e946dcd9-f9f6-44a3-863b-95b73a45bbd5", "indicator--1255c976-61ce-450f-9866-f8fc7724d201", "indicator--35b57193-1e9e-4e0e-8906-fe311b3084b6", "indicator--3f55aef7-fd23-4d0e-957b-95a9d1a217e4", "indicator--7db394d0-2087-43e3-835e-7156003cba3c", "indicator--eefb4404-de9a-41ca-82a4-aa0dca5c54ca", "indicator--d6aa8bf6-2f0b-4448-a768-a8e543350b8d", "indicator--ed9f819c-80a3-4a1e-8116-386b6a79d4bb", "indicator--e20eef13-ad2a-4eaa-9e43-6865c2d5367b", "indicator--6268eeb8-0dbd-499b-a7ad-5434b2435842", "indicator--219a7081-266d-41be-b5d1-4b823a17eea2", "indicator--c2489116-066a-41fe-a6f0-76e14f71d8d6", "indicator--f7f9281e-c57a-4c80-9d04-79545719b5d9", "indicator--4efc3c8c-a19a-4ad6-835c-a17e72a391f7", "indicator--7a29af23-7db7-4e47-ae47-e70772278cdd", "indicator--8d101fd8-b1ee-40e2-9e2b-8743523cc15c", "indicator--3dd284fe-7d43-48f9-978a-0eab9ffce512", "indicator--ebd7c301-c14a-4cff-82a8-95283b5ff020", "indicator--fa92b30b-1dd4-4d89-a39d-395f30f7c787", "indicator--284a6b1a-658a-495e-ab1a-1a2e22191c93", "indicator--fe2763a2-f1f9-4dd4-a9e8-5a193fc5f61b", "indicator--551d92af-ad9d-4ec5-866c-dec345840768", "indicator--07304afe-642b-4b0d-b8ce-3b1665cb9204", "indicator--e37512f9-bc2d-4d1b-8a73-9355ba90e414", "indicator--eb822cc9-2aad-4ee3-b8f9-d0cd4fcbcd37", "indicator--94658a1b-baf1-446e-8d20-e548b0e0f86c", "indicator--ce21e2d3-3fd3-40ee-92bd-c5bc9282f148", "indicator--fe2074d5-073f-40b6-9f41-daaabc333268", "indicator--ccd5c470-6626-4fa8-af66-b17c8ef5d9f1", "indicator--4c413f95-455c-4e9d-bbf7-106d0ecad7c5", "indicator--a773b9d5-0259-4510-9c0f-ff125c472f8c", "indicator--4258d290-7ac3-4583-8011-33c6dd3399c2", "indicator--9b4ab2d5-c8aa-4801-bee1-cf88c93c21b1", "indicator--9dd4729b-b59e-4bfc-ab6f-5b9aae370e4f", "indicator--28302a8c-f639-49f7-8ebe-51cd0b142299", "indicator--0eeadbb6-0a41-4080-9476-9ab969460caf", "indicator--09512715-27da-433f-889e-3a66a9721d88", "indicator--47e7d310-64f8-4919-9990-153aebdc3599", "indicator--1a59e91b-0231-4ea5-81ac-1a15349ee4f0", "indicator--a85ef495-53d3-434c-bb3b-c766d558c7e6", "indicator--9da018d4-e97c-4e8c-a8a6-b4f0e5ae7921", "indicator--42000a03-853e-4fcb-948d-13c050f5721e", "indicator--3bb86d5b-bacb-4042-938c-6f3d9731a5b2", "indicator--25ebc105-aaeb-4f4b-b5be-8d9daf634364", "indicator--3ca16d9a-7a5e-4ce1-b2aa-1ab0f285fad0", "indicator--b8249125-ac09-483a-a467-d0ba05fb95c3", "indicator--87bba952-ef50-48e2-82ad-148d59b650e8", "indicator--ca2c04c5-5589-453c-b1d8-ca086605f70d", "indicator--8d351f85-e4c8-4837-a987-5f1d11c6a45e", "indicator--0f95dbc7-cd0d-4617-8721-c55a8cd5c739", "indicator--b201a455-b18c-4db7-8814-9488b296e109", "indicator--0b62b0df-9e10-455a-a6ae-2036675502d3", "indicator--0805ad65-7a26-405f-9364-409217352834", "indicator--f83195c2-b46b-439e-96fe-cc88966c0d08", "indicator--bef811b2-3af8-4562-8090-c9a24c530af4", "indicator--948442f3-f416-43a6-8d6a-3f126f21646b", "indicator--c3bc5eb2-707e-446e-bf2a-9b8fbdd03995", "indicator--ddf851c1-9ec4-4c3b-a795-f60ab95792c3", "indicator--182457c9-37c0-4b52-8b42-825e0c3fdcf9", "indicator--e0cf3fc9-6b9f-4aa4-ace5-533dc7c4975c", "indicator--064e0e77-fe4d-4372-b6f7-4fc1d4b4b094", "indicator--2c11eff3-b81b-4ea3-a712-00819ad6f425", "indicator--b89b4853-601e-4cb3-9249-5acd5acf527f", "indicator--ae23a426-bb3a-4420-a2c9-fbeba21c7399", "indicator--53435a48-35fa-4aee-adc9-a66fbb9a6ae2", "indicator--2494a34e-1c7d-40e5-9310-f3adbf015ab0", "indicator--1996f16a-163e-4a71-acb2-24738522db0c", "indicator--cfb13276-159f-42ad-8628-90c2d5f5064d", "indicator--db70202d-2563-487a-b57d-4e0b07617d62", "indicator--d722ac72-e827-472c-9f31-f3657875686c", "indicator--5b906e1e-f001-4db1-8bb8-a7d9a001736b", "indicator--8df81ddf-c540-42cc-9b19-ee1ee2982890", "indicator--7042a7d8-a6b6-4025-9acb-8e919c565b6e", "indicator--154ec506-372e-4bc3-bb06-7eb6f8f3ded6", "indicator--f3f42f44-02c1-499e-be66-77297eaaccb0", "indicator--5455bc56-d120-4181-9c94-2e1d504ddd9f", "indicator--7c26c5a4-8e7e-4ba1-ad6a-c14c86cb4092", "indicator--02f3f812-6c79-4f07-922f-bfab6391617e", "indicator--39fb2343-fdf5-49a8-84eb-9b78f8fc92ef", "indicator--641785c8-6c83-477d-a604-b633c3e58d3c", "indicator--aa9c7e97-8099-4354-894f-7a9279d9658b", "indicator--bc0a6edc-90d2-467d-a6fa-39c5b068d774", "indicator--8ecdaa23-4713-4805-83ad-18d051fac117", "indicator--a1e3bfab-3c91-4c12-9bae-997e987ceaa0", "indicator--9a423d09-60e6-48e3-933e-6ce1d02a4554", "indicator--b82ce228-2b27-47f9-adc3-37dbd493b46f", "indicator--5ce5b20d-2e20-4de9-a7b2-7c12656ac2b6", "indicator--feb41d4a-0582-44ee-97aa-e022c0599980", "indicator--42e229f6-b577-47a2-84a7-e33dee8f7937", "indicator--1879dff4-0f39-4d9f-90eb-8df392b35173", "indicator--2e2c3aaf-04ad-48a2-a3b0-aad7696d5158", "indicator--09561b28-abc7-4142-92ec-6e3066efa0aa", "indicator--126ec006-59d2-49b9-98b0-ad0658d96ffe", "indicator--41ba7bcb-3bc6-4d87-98c7-5e6ffb22cc97", "indicator--47ea9322-fadf-4df9-9679-071030c9b97e", "indicator--ed499e19-b575-424e-9675-b2346fccbab5", "indicator--e425626c-9cef-4d28-ae15-ca8f0bf9beef", "indicator--b1417114-d1d2-42f1-a808-f110180b47cd", "indicator--50bb90a3-e2d4-4b49-99ab-5186540f7701", "indicator--24994ba3-9ab1-476e-bc5c-9ac1cd686e9d", "indicator--1529f612-6d98-4048-a6d0-50191506b051", "indicator--b3559754-4799-4dff-9d5c-3488aaeb6069", "indicator--33baaa0f-b85a-40d3-bcdd-5a3c0839acf5", "indicator--1c64e731-b7c2-492b-a623-b28f6bd10f01", "indicator--eac4f1a6-1921-4569-ba21-9cc06ec79fbb", "indicator--b6281673-8aaa-4153-aadd-2eff3edbb026", "indicator--0be54208-1469-4e01-b95e-615e92fc5cf5", "indicator--5202939b-a625-4e2f-8f3d-ad4d5f75461c", "indicator--ae137b9c-886b-4fe8-bf4e-5ac9d1490521", "indicator--2839c4ea-1c95-4b4d-98a2-a61bf22dd2d3", "indicator--91972281-6e8a-49d5-8202-d1eaa3dd7bf9", "indicator--43c2ac12-b221-4ea8-829a-94b26f041a3d", "indicator--f24fd485-832f-42f7-b82f-865c313d975c", "indicator--8db123c2-63ec-49eb-9607-d68d5ec3f001", "indicator--04b6835f-ac92-4751-b190-ba25bdff4ce5", "indicator--7ab19b2d-b2fe-472a-9515-8024a5a56b33", "indicator--e66c2016-2615-4181-9a65-9dffb6345e2b", "indicator--738185b1-fe7a-49f7-8c92-2933ffd41b59", "indicator--b5d94d95-7bdf-4d6f-b216-186a8d95aaaf", "indicator--f822dfcd-523e-41b4-b20f-0d4b67e18bf1", "indicator--d5e1f0dd-9445-44ad-a490-cc2d497c81b3", "indicator--fdf45c4c-d1cd-4fc6-a01f-2abda3e4ca30", "indicator--649195e6-bd6d-494c-8472-e304007fa0d7", "indicator--22279797-ed55-468f-961c-f1944abd31e9", "indicator--ac69a973-f4fc-48d6-80a2-b4d8a8699e54", "indicator--1f3a20aa-2ac5-418f-b2a4-ab0001b0a224", "indicator--5e824dc5-50a4-4764-a858-3153d777fc3b", "indicator--2acc0762-c2fd-4bf1-a18f-b4c8ae7c5533", "indicator--8aaf4633-23a1-41ad-b602-beb21bc11fc8", "indicator--ac279ff7-ba08-4f7d-be5b-e68409206ec4", "indicator--a08b6927-5300-467e-951c-8de62c4f366b", "indicator--a921100a-aeb1-4c4b-bcf8-b85394be13f4", "indicator--0874e1d0-b63a-4d19-afa1-5b48c4de0462", "indicator--82e62747-61c6-4288-a0d2-6bcf9455eb6a", "indicator--6321d3ad-adba-4108-99af-9d6a7a9d550a", "indicator--306f718b-a8f6-47be-a92c-0fd7fb53d2cd", "indicator--e1df5529-f2db-4f66-bf85-6ef9d6505cdf", "indicator--3a4714cc-7054-4352-ae56-0c1ecb9be470", "indicator--ca02838d-a5be-4152-9882-128c3823fd02", "indicator--36ebfeea-52b5-44e7-8763-8cde1f97bbed", "indicator--4190d319-bd45-4501-979e-17e56a20272a", "indicator--581fb7cf-041c-47f1-8b04-f5d5c4cb3cdc", "indicator--32d75bdf-d88c-44a0-87b6-855906a08ffe", "indicator--f0138362-6e5d-43c4-bed2-f90ff5c1b6eb", "indicator--3092acfb-b437-4149-849d-3b2c9193677d", "indicator--9863d10a-a1c6-4cf6-8324-78c3b0a7b9be", "indicator--2635e67c-211c-45d9-a12a-bf36ba33a0f8", "indicator--5e88f4a9-4dad-48f5-a14f-c942f0ec6d17", "indicator--0ff1a28f-a955-4754-a4dc-284c613b73fd", "indicator--867e6188-52a7-4e12-851c-1f152765bc3d", "indicator--5b2752e0-e767-42f4-b05c-e1df6a692572", "indicator--d3fceed4-d85f-4620-8e93-a2f2a538799f", "indicator--1f3d1dd7-a28c-4b30-96e8-ffb253f98698", "indicator--a70c170b-a1fc-43c7-825b-23636e09810d", "indicator--28480345-c3c9-48d2-b656-ad7c2976c6b0", "indicator--b56bf771-1141-4eb2-ae1e-0bbd04aba3ad", "indicator--92ea82c1-4f3e-4db7-9b96-b3c821d7dc7c", "indicator--f93d84c0-0f36-48f4-ac54-249df6845050", "indicator--f3c14e33-f7d8-4aa6-98c9-49fc4c3df9a8", "indicator--bac15567-2211-4c65-88ad-e8bbd1862baf", "indicator--78f55a2a-6f59-4109-873a-d31e8ff268f8", "indicator--ae7b9100-ff2f-49b8-8ba9-8bf6704fc4c7", "indicator--e9a60b6a-ec7f-471b-9be2-67d064b3d85b", "indicator--e5cba40f-c264-4285-a5d2-2eb45639323a", "indicator--87a6edf0-6fbb-4f09-b389-176d212425b1", "indicator--5e78b260-57e0-45a9-9f4b-09215e29c33a", "indicator--f607eba8-de1b-462c-929a-118169d2ba28", "indicator--827ed814-b471-49f0-a81b-23bb9f27d76f", "indicator--ff89b95b-ff80-474f-aa96-2a68f146141b", "indicator--4af681ea-11b0-4d47-a499-49120d4059eb", "indicator--75b55e25-41e2-4ad9-b760-f40674955141", "indicator--3128c2e3-c925-40b1-a58c-48e67d2114e9", "indicator--e8ccfff4-755b-4dfb-abb7-f2864fb8db2b", "indicator--60059a28-e128-4375-8835-db2f1778d8fc", "indicator--8d399837-c687-4e4e-88cc-fb58259aad62", "indicator--56ded0a1-bf62-41c3-8cf0-4fb8b80d5ac2", "indicator--cb94245f-3a54-492b-8e8a-8fcbcc9f04cf", "indicator--5a46051c-1e81-4e47-9ade-f3fad281fe5a", "indicator--897d961f-670f-40f4-82c2-922b634318d3", "indicator--ff813751-7821-4086-8493-a5f3bda8ec17", "indicator--c2a28d23-910c-4dfa-ad6b-d1c8b483af05", "indicator--ddb6be61-6066-4168-bf00-df73bc2dc7c7", "indicator--ed9b149a-5c1f-4eb2-9586-8a173de63877", "indicator--b4deb774-61da-423d-9f12-3949ac9578e8", "indicator--cd147187-5721-479e-bafe-24ba06480dd5", "indicator--09858eaf-05e9-47fb-8ea4-f51b335102a9", "indicator--0a78bca2-1623-4756-bd88-bd636426c462", "indicator--98e39889-01e2-40f3-b956-14b9cc60afe7", "indicator--b2ee5171-daa2-4136-b05e-2d18739ba08c", "indicator--c8f66f8e-cd0a-4a88-9583-25854d4b26c8", "indicator--bce90e37-09f8-4f9b-bcd7-6401a5c61fc0", "indicator--819e0349-ab2c-4239-85d8-a6cd493c56a5", "indicator--3faf5892-60e2-4fd4-bc28-46b9461a8757", "indicator--db578036-dbbf-4e9d-b5b7-63fc18756368", "indicator--5e07e458-bcdb-4b54-803f-65a415a429bb", "indicator--4585e5bb-01fa-4e02-83ee-888f2b44dc89", "indicator--9afbe2c5-bda8-4e5b-8599-362623610aea", "indicator--63710083-b197-46be-b49f-986cb243cab1", "indicator--44391888-92ff-45b6-88ad-df33aa5e906f", "indicator--e05430c7-8218-42e1-b089-d99313d4758c", "indicator--4feb84c5-26ee-40b8-8472-00c933eb9a70", "indicator--135eccb4-fe4b-4c55-9f2d-f1f3a6e714a8", "indicator--102c0d67-309c-4aff-be79-50d46bd374d8", "indicator--e8b7f976-e7f5-4f71-a05d-fd15fd506cec", "indicator--8a62c52b-26e9-491f-b289-d4b058b964aa", "indicator--1f9c180a-7f3f-4d00-a04a-152b8f1b3918", "indicator--454fd822-bd24-482a-a2a9-8fce42c140ee", "indicator--39a6ea18-bfae-440e-becf-56e6e85726b2", "indicator--70f9b7ad-9476-4428-a22b-1cc626fcb52d", "indicator--12f77253-08c3-4499-8d53-772267e6b5fe", "indicator--6e8a9090-0612-4488-ab1a-596f466b8fe6", "indicator--95c611a4-c3da-4d52-be2c-d5d1e07a6ccb", "indicator--2ea03890-7bfa-4a8c-a9f3-8b0cea370bde", "indicator--cd977512-57c9-46e4-9a99-d52f04bad4aa", "indicator--32278da3-0d1c-44a0-8c08-84b3a104da1a", "indicator--efe7bb0e-dfb2-4632-8693-c73025d03a51", "indicator--dfbe8dfb-3e54-4af3-b0a1-a2cb594e8a78", "indicator--826d23bd-2d7a-42cf-a296-fee3173d7a96", "indicator--91af0b0c-26b8-4f24-9e7e-c29405fc8d50", "indicator--7d5538eb-f33d-4fb4-b38e-1d66583e281f", "indicator--9b71d16d-0fb9-4213-86cd-c70e6d725901", "indicator--9383bab2-855d-49ba-b578-52c5f3b0102e", "indicator--f2e5fb70-03ab-494e-93ad-7fb67ff32b5f", "indicator--06db0e2c-c4e2-4ad0-a811-a065452c2294", "indicator--49ceee6b-cb7f-4f6f-b0fe-325d1fe14c5e", "indicator--a8bc0441-9f10-4f1b-8608-a6fcbb8a2cf4", "indicator--b852ee89-865e-48bb-9635-38e3800184e8", "indicator--e459213f-57d2-403c-925d-a3f29b84914a", "indicator--2febff98-2fee-48e1-8718-569ed096cbf2", "indicator--ef03761a-bee6-4682-89a4-11b18480fe95", "indicator--1948dcb3-0333-4204-bbcf-566dcea71ff4", "indicator--cc3f3d15-f37c-4a5c-9144-16803d5ff78d", "indicator--d9c47b7f-60d5-4516-be17-cd47b8733701", "indicator--1640f056-d44e-43e6-bb7c-ba093c1c11ae", "indicator--c065f8cb-13da-4a49-aa60-3c90a3c1a9c5", "indicator--e084fcdf-1966-48b2-8ac1-d36906749369", "indicator--eb8f6ba3-2437-4d20-a6c8-9381ca2ff95b", "indicator--72c5bcb2-e1c9-4484-b8ae-851c3a151e9f", "indicator--f54f8ed5-b978-4eb8-97bd-0d2e6d066c57", "indicator--1610b554-de94-43c7-a796-9fd881f1c9c9", "indicator--2846d258-3072-4414-bc8c-7eb750eacd61", "indicator--e06141e5-049a-456c-8248-ce115d679078", "indicator--3e64906a-cdad-4e0e-b398-dcce62686025", "indicator--7669ea52-3c31-4180-b19d-1e3ead9d43ce", "indicator--fb47089a-308f-467b-807f-0638678aadef", "indicator--bb834bb6-6170-415a-ae86-c6b6da6997a6", "indicator--e3791b66-8cce-405a-8734-1620a909f6ee", "indicator--a40fd170-1e02-4a31-b644-13eecdeb99f3", "indicator--8963ac0d-9f99-4729-8522-7cca8b62fb40", "indicator--73154f8d-47f1-4357-820c-bdc475c31621", "indicator--6e7ccc18-9fad-46ee-9db4-43be1abead9d", "indicator--bfe91f05-d68d-48c2-9b34-d783ee914b4e", "indicator--0c3e351a-d627-4460-a646-b1c2ebdf9a53", "indicator--cf1a1b5e-a918-42d2-b862-17159e41d162", "indicator--f82f806f-6d93-4617-9ab9-6e566eed34d3", "indicator--a8b807ef-05ae-4bbf-9410-ddeea5aecf87", "indicator--086baf6e-9e23-44ad-b931-12a4a0399d1b", "indicator--3a3f0ac4-6379-40f0-8f3e-026d7d3016e8", "indicator--b0c82dbe-bb38-4132-af35-e9c25d9a2c36", "indicator--23a49dfd-ff35-4cda-b81c-2089c98e5fa7", "indicator--24b2ca59-95f3-4847-b117-d7aba37d995d", "indicator--1a5e9fb2-124b-4590-b0e9-73e45aa2fb17", "indicator--1413c596-48d8-46c8-ae7e-1bfef5b4a816", "indicator--6665246f-6466-43dc-acf7-bdabd64b80d8", "indicator--29f96496-09b3-468e-98ea-e1dd9f0e22cc", "indicator--9ffcbbde-4175-44e6-930d-3deeb9baeb2f", "indicator--c7850e2b-575a-4f2f-a673-1f978ccea79f", "indicator--3e0a7c4e-2317-498b-8f38-45c4a2d8cbdf", "indicator--d863edbb-1b5b-49f3-ade1-863f271ad776", "indicator--f9f85bb1-7cae-4f26-bb1c-97865d391b25", "indicator--d69414e9-155d-4ad8-8bca-a8adcfcb3c54", "indicator--3ba2b92a-fa13-480b-96e3-b7406ee4688d", "indicator--1cc531ff-1a40-494f-93cd-22770a34ce36", "indicator--0ddb8cf7-d301-464c-acb0-1c2cbef4cf11", "indicator--df5ef943-20af-4ac2-9dc1-4053e6f95126", "indicator--dcac787f-5f5d-4065-b56d-fff8d5828d6e", "indicator--89344730-97af-4365-9a7a-59830d97a3a2", "indicator--889db226-2e22-4b46-9ed5-0e1586022240", "indicator--4d5ad2fd-3d9f-4ef1-830e-520ee60e355b", "indicator--b03db292-967d-42bd-9d60-e84c8664abe1", "indicator--d737c5c4-44a7-4cb4-aa6a-ea7e6e00fcf6", "indicator--ff1ecebd-f8ef-4b24-8c22-152b2038ee0a", "indicator--fc13c639-d4bb-4f1e-880e-4552de261c5b", "indicator--469cf5d6-68b8-46a1-a91f-4b05ef39a9ae", "indicator--bfef0194-73c0-4f88-9ad6-2b0dea496f19", "indicator--eef4e0a3-cf57-4520-9211-84c9308c6994", "indicator--67e7f6fe-9b5d-4bd5-bd7f-742f4476be20", "indicator--a0da58e8-c2a8-496c-9242-9bf30ebff30f", "indicator--c8f9aa5c-87d6-4727-847b-155225f0d359", "indicator--9ddbcf52-abc8-486f-84ed-5e854f5d3c9b", "indicator--dc48b6f6-10e9-4036-9e5b-aa1adbbc910b", "indicator--8deff629-3a10-4d41-80b7-8911f95b03cb", "indicator--ae518dd4-4970-482e-9118-f48a5b4c6ea5", "indicator--8bf7e9c5-2253-4b61-a9d8-81b28b7a858f", "indicator--246ca7a0-4484-4ada-95a9-69b8f7592fec", "indicator--668dfbc0-df8d-4fc5-956a-d5bea6d34b91", "indicator--615640b8-2415-4f04-b8d2-f822d4c2ffee", "indicator--f51dab40-869d-4d06-84f3-bd9e7e97d6ac", "indicator--e34d340a-74fb-4c6b-8300-845aac19479c", "indicator--49a7d76c-0c5c-4ea1-a543-777b6b7115a1", "indicator--d9358bf7-d67e-4f0c-b171-5ec572e5bfa5", "indicator--146b566e-df42-4a6d-ae89-23eaf9ebe1cc", "indicator--3cbb0bde-0f4a-4a7b-bea9-e358b93c00e9", "indicator--2fc6b087-7e6f-460d-856b-55243a71d646", "indicator--93a37ea0-2d40-4d70-b753-3dc1af01f8c1", "indicator--9bca2315-0989-471c-aa2a-7f88f83561ad", "indicator--dd4000d8-3fac-4339-8460-f6e9280280f7", "indicator--6dca3060-ec3f-4fdf-a85e-2f37f2eac8dd", "indicator--4aa0f565-8e8d-44bf-bc04-d0b9179bb16d", "indicator--bcc0b345-186d-4e17-addb-f2dd316366e2", "indicator--ee59dbd9-261c-4eec-88dd-2d07464af363", "indicator--c5ccb254-16be-45ca-89c1-c6303e7a2f00", "indicator--38587196-1a43-4f01-82cb-31e81f8c630e", "indicator--19544e59-473d-4853-abd6-ba9e35ff5a8c", "indicator--7ec9905f-b2d1-41e7-8a48-bdfbec186983", "indicator--728b6c57-f4f7-4522-9e7d-612b039a2a57", "indicator--4d825fb2-fde0-4001-819d-99231cdc6407", "indicator--e274e7bc-bf2d-4638-a623-fe093de43fb4", "indicator--a25bbf2a-2dc8-4807-b821-921019e05629", "indicator--817c80c7-5dbc-41ba-afaa-e0fc1ef3d69c", "indicator--33329a2e-77ea-4dff-8c9d-e049d727c7b7", "indicator--35cf1da7-c61a-4172-bc31-2cc837d06698", "indicator--cc230e7e-d7a1-4fa7-87eb-498c60f7031d", "indicator--53cdc302-b086-4ff1-bc74-1e22d194d940", "indicator--027723dc-6e00-4413-b2ec-658444626f20", "indicator--b7ff8094-8d2c-414d-b1aa-ce3c2f1e0c36", "indicator--a25eda89-ee4e-49ac-8a3e-d46ba1d85af3", "indicator--910ba0a4-7fd9-488b-b361-ea0acc578cf7", "indicator--a1fae24c-a148-4b23-a141-8e424c85e4dc", "indicator--f738cd06-fe90-40ff-aaa0-febf0b3e68a5", "indicator--924b2892-3120-4712-b63d-ed87f239a494", "indicator--1d4aee0b-5a54-4d7e-823f-3dca2743f370", "indicator--48e7828a-32dc-41ba-82f2-1766a35b0cf5", "indicator--7e7275e1-2209-4ef0-b094-39f5edae850e", "indicator--51b53702-d051-4d3c-a66c-8a3118d0fe00", "indicator--16acc251-6970-417e-a123-0f0ccbcb08b2", "indicator--db46087e-ca68-4dce-b802-61755247af33", "indicator--9c67f2dc-cfbf-4f11-882b-2901122eeca4", "indicator--6cd5942c-3338-4af4-9a1f-4314ff6ad25d", "indicator--018efac0-92c3-492a-87eb-face68618fcf", "indicator--b373014c-3afb-49f5-a096-5972e5883023", "indicator--1098c0a9-cd40-4829-beab-a395933af603", "indicator--1081f555-3803-4399-970a-e6d0747b0c83", "indicator--4ac5ab49-56dc-4423-98c6-22b26ea9c43f", "indicator--199ae3e0-a45a-43ab-ad35-bb9d432eb694", "indicator--b1e020ce-7a1a-4d28-8e0a-4dcacfdd219d", "indicator--d9c15061-5e5c-4424-8f38-1a621aa5f42e", "indicator--cc921da1-4633-4098-b1e1-84aa27536a06", "indicator--498e73ac-3d95-4f39-8b05-b323ade7a983", "indicator--aa3b0e93-a6e3-4d6d-af5c-ec6e8d6a23e3", "indicator--e213387b-ca02-439d-a7e7-25e1d1483ed8", "indicator--cd313520-446b-4264-b413-6a00cbd4bd39", "indicator--d761d1b0-ca42-429a-aef5-97fe1432f88d", "indicator--10d8cbc3-8796-45c7-83a2-707caf5164d1", "indicator--aa11aff5-332a-453b-8d62-b1402d59dc08", "indicator--cdb4c1dc-c284-4e60-a4f1-2ce794903ac7", "indicator--2789270c-e5b1-4d65-a62c-b51f10954e99", "indicator--21366356-4691-4c89-b038-dec1e4484400", "indicator--2aa050f6-eda6-458a-bc35-633d6aa9f4bc", "indicator--93260fe5-5ad0-49b8-baeb-bdcea5b975d0", "indicator--ebf0f424-c60c-4e46-8a21-da47e7389f89", "indicator--888ec14d-f162-4eb3-8377-8dfbf6c50414", "indicator--9daf3e78-fcf7-4bfe-aa7a-c47c7622978a", "indicator--c84c870a-5428-4df3-8d64-72a860c15771", "indicator--15cd23a1-464c-4c3b-912b-a136f564b8ee", "indicator--361415f1-1387-4901-a011-15a70f17d097", "indicator--582f15f8-9849-414a-895f-7a262507d316", "indicator--ae96c190-79df-4638-91f2-291655f8845a", "indicator--2f01d4c2-7a22-471d-ab75-d2b9d380c979", "indicator--19644bee-130a-47f8-ac89-c1c3ce83a8cd", "indicator--66d685fc-99e0-49a5-857b-81df077f5786", "indicator--10cf5946-5dae-40e6-a5bd-d5230fc5cb95", "indicator--513464f8-54aa-4527-a3cb-e8ca9f250f0f", "indicator--70c77893-19b0-4135-8eeb-d8b57eacecf7", "indicator--83f8c7cf-8f3e-487d-93d6-ba770e604d71", "indicator--12313751-40d5-4c19-ac32-5a07d93d8876", "indicator--f3a8bd4f-4187-46ae-8811-3df55a7ccb8f", "indicator--3e467e90-2ad5-4689-8c0c-4c981906136b", "indicator--e9ba024f-883e-4e88-8657-b8d1efa8da96", "indicator--c08dc5a1-0379-412d-9e55-c638923c7e52", "indicator--ef34473f-9604-4a02-beb5-1831b84c2a11", "indicator--c58f0970-a408-4879-8b93-2b06ce57608c", "indicator--840cad0c-2f48-4b03-b7db-2605afe3cca1", "indicator--2e5de1b0-5c09-40a2-9a35-5ad4ee0242a1", "indicator--43bcd9f3-8bef-44d4-8954-abee5efc4259", "indicator--9de41d9f-89fe-4d76-89a7-92f52391f541", "indicator--b2115099-5de9-466e-84b4-4e95d3bc0e91", "indicator--691f0fd6-87c8-456d-a133-fd931ab603b6", "indicator--fdbb4ec7-ddb5-4ab8-abcd-54a9f7e757e6", "indicator--4a28c543-0ac0-47f1-876e-dd0ecee4a360", "indicator--cad3cf9b-ecb2-44ed-851c-133ea77ad18d", "indicator--738c4609-26f1-41d9-8e09-52e991d6eb75", "indicator--c088bb7d-f923-4b62-b0d2-331f3680ba70", "indicator--877fe050-9cd8-48ec-a7b3-aa6df1aa4b28", "indicator--ddef4301-4b28-4b0f-a7aa-fd02b670312c", "indicator--6a3caab3-8e94-4870-8858-ce95deb98cf2", "indicator--40e35de5-0ff0-4977-89bd-16eda12c33fe", "indicator--0bac9277-228f-42c4-9960-d18128c7c76b", "indicator--79bd23ba-9b84-4244-af62-22e3f77b5ac3", "indicator--6cc99e12-99cf-4599-ab0e-d0dd7b31aa24", "indicator--48604410-9088-4d16-aa15-2f728d87a770", "indicator--03f29100-f6fb-4b76-991d-59556ac48450", "indicator--aec50ad1-f252-403d-b903-42b3e3be402f", "indicator--7a82f0ab-16c0-4ae3-b1ff-24e07711ea3d", "indicator--ae46c5a1-f9ab-4fab-8b14-4e9083201c2c", "indicator--81759039-2d86-406b-892a-9ab290e4039c", "indicator--b7e76dbf-8bf6-4685-821b-c6807e25ee43", "indicator--e0d31b1c-b44b-4fc1-8b59-ce37216c4817", "indicator--5a987d17-bdcc-483d-a51f-dc9a5182d761", "indicator--9a1c9bed-d726-45bf-a634-211f2fa07acb", "indicator--d7ccfa89-8a73-42dd-83ca-e50a227769fa", "indicator--a6c9c01c-1d37-4c21-8e31-48f8d3baa802", "indicator--722e7d2d-8a36-4b6a-ae17-6b7613e5e8d2", "indicator--bac79272-6b1d-42ed-8b8b-8b2e781eece9", "indicator--e32ae431-f379-48d2-8c43-b46f398f8415", "indicator--f6de56cb-43e8-4174-9479-81c8b664827e", "indicator--da368c37-da6e-4d2c-b799-ff2c18b9641f", "indicator--df9d44a1-540f-4727-90c2-4a3b28f264b9", "indicator--83f10c77-cf44-4ae0-b09c-5ea79f5ab361", "indicator--d5ebaa8e-c97e-4c19-88e9-14a235f965b2", "indicator--298b3dbf-2073-4e8d-ac49-ab43a0de56fb", "indicator--24415bb7-2ffb-4b9e-8903-c3a20d2baaf2", "indicator--573be75a-e081-4e1a-b894-e94232a2bbde", "indicator--2585680c-ec89-43ba-8760-06aec297c0bd", "indicator--70074ac1-e235-4394-818a-ec6140bb7442", "indicator--d228935f-644e-4618-889c-ea18ba3f7e8a", "indicator--5c24fbae-b48e-49e6-8329-15973cfe8c21", "indicator--05c4454f-0e8e-4876-8606-3fe417e71f69", "indicator--624d3f20-7fb0-43ec-98ce-788aa8801baa", "indicator--39897aad-4416-4a65-811c-b6d1807f1e83", "indicator--bd81b95d-e242-4004-9a65-35e35ac80aea", "indicator--dcb6a8c5-a0a0-4280-93a0-9ae31d92e9c6", "indicator--0b2ed5f9-48ed-4923-a082-6c1d5b936dcb", "indicator--ccabddb4-5221-43db-8aa6-4b0010749f1b", "indicator--efa47f84-ec3f-401b-a5c7-8c04e67aba7a", "indicator--62a7b12d-b075-4f12-b16f-de701b104b08", "indicator--c6bda57e-7575-429a-9341-c1c967ab75f5", "indicator--608c4890-5b5c-4dbf-95a8-9141fd37aae2", "indicator--2083e9f2-b07f-4a5e-afca-3c1e0f6f91b4", "indicator--f6479bb0-95be-49b7-b875-3fdac2d07a59", "indicator--07c8a6b9-2b34-470e-836c-837195addf7b", "indicator--629eea8c-6220-4f9e-9f5a-0ab0f1bd0e95", "indicator--9d7f58cd-f89e-495b-8c4a-8d91b1a03855", "indicator--ab11fbe9-0c82-4429-8f40-814b0c5a9983", "indicator--fb88316a-7024-4771-a29d-2fe94d62cc46", "indicator--382aea56-a74c-47ea-8d9c-9f498a55ce37", "indicator--3c82fed4-9b73-4ef6-bffb-0daf16c194b8", "indicator--5f549327-a385-4589-a883-df7225254454", "indicator--9d95d562-6da0-4c1a-b2bf-c8fb064a6bf6", "indicator--e2d55260-0e2b-4b2f-90fd-0292ab1ba459", "indicator--2252cc49-c03d-44dd-8da2-13aa29134b16", "indicator--b2ffa75f-d534-4ade-a32f-c7c2cf7d48ee", "indicator--378d4e2d-4942-4bb2-9de6-e30215484dd3", "indicator--6cdd4894-c599-4a89-b238-4ad1d8d136b2", "indicator--1b116fc5-b655-419d-8afc-810635a00f40", "indicator--76e342c4-7511-4cc0-ba59-d87e78fc8139", "indicator--37aa113d-6133-4643-8545-451e46daaf42", "indicator--e8b951ad-1422-4873-b958-0e323e8a33e2", "indicator--ed73544f-00e9-48c4-b548-4e45e78b7b6d", "indicator--3824f264-e085-4590-a051-348e52e693df", "indicator--99404905-ac8a-4832-bfe5-0261cb2a7308", "indicator--0afe7960-7bcf-4e2f-99a6-a1f6a005ec4c", "indicator--86eaf724-c6c5-4351-ac46-1a96b0a889e3", "indicator--ec6c5ce9-b932-4aa0-bde5-d2426e8a03d0", "indicator--a44492d7-b0a2-4536-8a49-f73780cfbf79", "indicator--396e92d5-82cc-4d93-ba63-f814f8988a54", "indicator--1dbe3cf6-b2e3-45b8-8231-51bd5e3fcb9f", "indicator--d0dba83a-045c-4497-b6d7-62f784dba5fd", "indicator--5bca4acf-09f3-44a4-bff2-5649409279dd", "indicator--eaa6a1e6-344a-4d60-97de-851621c02c77", "indicator--eb23c828-91e2-41a7-ba00-677caffc253c", "indicator--b352b9cb-ab4c-464f-b013-f334bd056129", "indicator--305c1ff2-6eed-4b65-9ad3-111f700e7633", "indicator--1fa5278f-ada2-4dab-9893-06078b28ba94", "indicator--3fb146a5-f80a-4ae8-b1b7-63c6880771e0", "indicator--fb0d10bc-ce7a-44e7-b7e8-79fa0068961c", "indicator--f12ad63b-3a26-4843-8eb0-a9cf104db13f", "indicator--33720e73-2ef8-4495-911c-a81a7f7971f5", "indicator--cebd9a4e-22b3-4339-8087-dcd6804e5a68", "indicator--f4c346bb-3e22-4c48-a405-9aaa0b085b9a", "indicator--ded7475b-f0e0-4416-a8ad-353341434910", "indicator--bd71a3e3-c843-49b4-9d2c-3c97ee7cc9ed", "indicator--90ee4e10-b4e0-4535-b5ed-84e7e122fe0d", "indicator--c909d665-4efa-4107-a9d1-717ce375df77", "indicator--81c7d18d-177b-4fd7-83f6-b68676de4c53", "indicator--7ab65c24-abbe-4312-9c88-51cd5e524aef", "indicator--c7a49176-bf7d-4d09-9e2b-720cfadf99b1", "indicator--cb057e91-ae87-4187-9712-f748bf483cf5", "indicator--35b752f6-6b15-4679-8f8a-9c366b2b9d66", "indicator--3b302f01-f1d3-4089-8a5e-f71a70c9394a", "indicator--5b188243-a8cc-4217-bfad-1a8f73b7d838", "indicator--91506750-23cf-4d42-84d6-54b91f830474", "indicator--3a7452d4-5015-4069-aa99-748c697835ca", "indicator--a01999f0-9b59-417d-8c04-a3fc77ffb109", "indicator--79356e27-7774-4d04-8c10-c52c2b9a85ae", "indicator--ec43a038-d4ac-45e0-906c-332df46749bd", "indicator--f57656f0-60dc-4fd2-8d5a-65e5aa47d9b1", "indicator--2af17e57-fac9-460c-8519-cdaeac43cac0", "indicator--10df6b7c-c32b-46e7-a6c7-d6b4b3aeaa0a", "indicator--c7b597be-bd27-420b-ad6e-f62f3d33836e", "indicator--b3d04ca5-1ed9-443e-a162-9a6794c5d0b9", "indicator--2cd9b61c-01fd-4eea-8bb4-4034654db886", "indicator--81301aaf-860c-4741-990d-a595b3f93d85", "indicator--cb3ca342-f05e-4e8c-a647-da1c596dab2a", "indicator--d288d090-aae9-43ae-96ea-fd4626f658e9", "indicator--bf05e975-8d55-4fa9-ab5d-6f521adfe55b", "indicator--abf55ad7-1a1a-474e-a512-a0bff7448fdd", "indicator--84e84feb-400d-4911-ae63-6c4c64a3ab34", "indicator--48e8ab56-1ed5-4af3-83ec-ed2f1ca710ec", "indicator--070b35e7-df9b-4076-9487-3c3b4f507d51", "indicator--200c1e92-4e61-4a58-a8d7-42c863e6f4f6", "indicator--9ad4f243-b70e-49c9-bd8e-2b160f0712ad", "indicator--e3b49051-2074-44c0-a94f-0677a76b4ad5", "indicator--0fd91730-ec58-41ce-8e1b-e0e1e9730148", "indicator--d1b19758-0e97-40fb-8611-f1149e5730f5", "indicator--acab22ff-b83d-4e9f-8588-497f89ce377a", "indicator--98066458-eea1-4b40-be48-047cf818fbf4", "indicator--6e875d8c-3dfb-457a-a8ce-a6f386d76e5f", "indicator--c1cf82be-e2cc-4785-b30c-82ee8d30dcaf", "indicator--f565c360-116e-48b3-83ce-ee66b5a6f158", "indicator--1330f3e3-2820-4f5c-8426-debf3fe2d687", "indicator--e081104f-047d-469b-8148-f451fcba95d5", "indicator--4bd010d7-5d18-4638-9111-862e3e7b9f43", "indicator--47edb3a9-b1fe-4038-a5dc-4b0d9a310430", "indicator--27e3c51f-8046-4c78-bb78-aa135d3485eb", "indicator--3a5be0b0-97c4-49cb-9982-23dc2b3d0567", "indicator--81d48018-ca3b-4c61-8c34-af72984b56be", "indicator--fdc7b778-b2ae-4365-a38f-a492721dcbca", "indicator--cb2ac44e-fe22-44a8-bc3f-99259835b366", "indicator--3e9d8698-0675-458c-9cb5-e17085258eee", "indicator--e58dec60-1d0c-4108-b7eb-5f949f08f568", "indicator--2e4927de-32e5-43f6-b7a1-051012d86580", "indicator--4014dfdd-bdba-4b82-b559-82503942395c", "indicator--d0d6bc73-aff9-4c6d-b287-1f3fea803657", "indicator--ba3d6aeb-32e4-4463-928c-f80dcc8c0564", "indicator--69a71bce-fd80-42fb-932f-20089264dc69", "indicator--31c146d4-285c-419d-bfd2-e01f1d7fa67a", "indicator--cbf45ca9-82d2-403c-8001-8d9c9b85787b", "indicator--ba9beea4-955c-4beb-ad65-e8b4e151735f", "indicator--abdb59fd-3bf7-4b04-857c-85d83d6fdc75", "indicator--0a7653dc-7f60-4949-a9e7-786a0bef8b6a", "indicator--ba65e137-7965-4d2c-83d8-3c691c352cb3", "indicator--3212ed63-e983-4507-a245-dd63f48c3f0a", "indicator--76b4543e-05d1-4cd2-8ac8-5e52ac8acbf4", "indicator--b6878922-4f17-47ae-b2d8-0e1f0619e12c", "indicator--95d5dfdf-d6a9-43c9-bbcb-3287875e724e", "indicator--b43529d0-10f0-405a-b8c0-eee32d21c8f2", "indicator--9b55af98-97fb-4fd4-99c9-7889ebf5aaf3", "indicator--ecc83cc3-6379-4b3b-909c-986074bb9a7f", "indicator--4141be16-8a22-4dc6-b1eb-529c7755d89d", "indicator--29a3125b-b4dc-4f72-b08b-b1c85e1b9ba3", "indicator--452e6fc1-d3bd-49f6-819f-3455987d6196", "indicator--219a2bfe-5f02-4528-a51a-073c5d4d3492", "indicator--fe78b1ac-ac1a-4a43-869c-7499c5ac656f", "indicator--3bef35c9-ce2c-4155-a8bc-da2173ccbbec", "indicator--2e43ca8e-5344-44e5-97b3-28fc1d46520f", "indicator--0281fb10-e298-4f80-a7ac-9d8c5d743c46", "indicator--01ed3334-5d33-4cc3-98f4-6d16cb745ee2", "indicator--9fef02d8-3d0b-4e3e-b69d-9464cdd276e2", "indicator--7ee18b69-5a46-4df5-99f6-8b6c68f1cfea", "indicator--ebfc4ad4-20aa-418e-bd71-05e711e41334", "indicator--65dacc33-2ea8-4b2a-b0be-b22352c12569", "indicator--c5ff0261-677e-4be2-8236-8bfef91c4088", "indicator--9273d898-cccb-4aa7-b424-d0de3c7fefad", "indicator--36b33716-e066-43f1-9a2d-49dfbc304f3f", "indicator--c726605b-13cd-47fc-acac-69b2b92e592a", "indicator--e80f912d-8251-417d-9925-ae0a32a2fe3e", "indicator--d48523cf-0417-4901-8e40-1dd2c1871de2", "indicator--768a37e8-3fa5-4a79-9a52-4ffab680c510", "indicator--f06f0cbe-9364-4386-8313-910627713a9d", "indicator--2b70cf53-9588-4246-bccb-228d3009bc11", "indicator--ff157cf0-c2db-410d-873e-d1ac264b6f03", "indicator--c144a67e-2e71-49e6-9f60-a1fa046814d1", "indicator--cd776014-b909-45cb-bc3c-a2c4ed0f4996", "indicator--fb46451b-fd29-4840-8055-10ee63ff4ee0", "indicator--d19fa223-7a78-49b9-8c58-d154c50bb9c4", "indicator--21d0a02e-048f-4410-ae8f-0b51223ae636", "indicator--e893c6a4-9924-4caf-a179-6d8bddc083f8", "indicator--3afc5076-a5c7-4c07-90a9-5bbe79a29f38", "indicator--be1ea56d-d860-453a-938a-abb0a7d691c3", "indicator--731de61d-4ede-4cde-b1ba-3f43d3f8d8d4", "indicator--df18fddf-c746-42e2-901e-8bef5e1871cb", "indicator--842f09db-cd66-42c3-b77e-7ef0da3c2c88", "indicator--47c0ac73-5fde-4271-9d7f-6534dccb064b", "indicator--0c92de2b-9108-434a-88bc-a5c035be35e2", "indicator--8f0376d6-f794-48d9-9369-e18bda086fb4", "indicator--d8f6d2a5-b364-4304-99ce-77450908620c", "indicator--97427e86-eb41-4059-9081-508b7b111e89", "indicator--840c408e-ef9c-489c-af20-5012b8256963", "indicator--9439110e-c824-4200-bbb6-ee85e012fbd7", "indicator--116e6764-e08a-48be-9c06-08aaaa797ee2", "indicator--516a515a-a2c3-4d1a-a307-5b75698d3159", "indicator--21114096-72ee-4145-a4af-377c5cbfac08", "indicator--75512653-91c9-47a4-8d84-949daf9575cf", "indicator--515918d2-b933-4fde-9d68-420c7c992a1a", "indicator--88cc505a-2087-4699-9d03-b6f1d6e5e3c8", "indicator--67e476ac-9798-4981-b05d-583e5e2beb6c", "indicator--d78d4eb0-f1b4-4252-a978-bb6b37a33f86", "indicator--0bb7d9c3-8ff2-47cb-bfdd-76dbb36c9daa", "indicator--4b9ae5d2-aaa2-43f9-ae78-bd3bc4951fe1", "indicator--b1d76228-83dd-41ec-b088-5809086247f3", "indicator--4cacae24-339b-4715-ae40-3a36195f8e24", "indicator--99b91104-d26b-4d6d-8a5b-d06fa40f91eb", "indicator--43fa07ed-2e89-4674-a84f-500f1395314a", "indicator--1f79fd5d-a2df-4c36-98c6-638c4c722725", "indicator--51825874-851f-46d6-a041-1d6c448710e2", "indicator--29d9e654-08f9-4224-bffa-94cd0895cfd7", "indicator--8d60cd19-ac2d-4259-9324-5427dba47ce1", "indicator--9bf1129f-3913-4055-9e1d-aa60a204f36c", "indicator--75c9a6bf-a8db-4418-8564-020a746c4422", "indicator--be7f2a94-a399-4d71-9ad1-19487def75ff", "indicator--3ee171ea-b9bc-4f41-b87d-fb97964d164a", "indicator--f4178d44-7511-46ad-84e9-597ee03eab88", "indicator--960bb83c-9f2b-4632-af6a-0cbd3a6e30fa", "indicator--5d8828b6-d78d-44cf-bf58-8bd30b80384c", "indicator--7324fc1e-02f9-4cd8-908d-4871df267637", "indicator--7efb633c-c120-4a56-b3c0-c112cd6fcb49", "indicator--8ff9f465-5ea3-4908-8c12-356505c86825", "indicator--591e7262-6cc0-4582-b0a4-b4291a8b8a26", "indicator--5ea5f492-e38a-49b5-9597-2bb9c0c4147f", "indicator--6e4f6e67-089b-4a8a-9565-3d6e146cfaac", "indicator--8dfc959d-8f1d-4e89-8f1e-2f3fd66ac3e7", "indicator--9d25b93b-4642-4bd3-9b8b-bb57afc07fc0", "indicator--6126bb46-1fa1-4624-a3ef-166449a95355", "indicator--46e975ad-2bdb-424b-bb2e-cb70ff3949a1", "indicator--7bdc82a6-2833-4fd7-9640-79f6a55ee784", "indicator--22a6eaae-0724-4708-aaef-ce7d772bfbb7", "indicator--8806ad96-5d4e-498a-a2ca-87d3bafde1ba", "indicator--af3abfd4-7ffc-4ef2-99e4-7e88df36eefe", "indicator--b00fdcce-878d-434c-9c6e-b8ae9e7d7e19", "indicator--fe788cd0-835d-4788-b643-17e9729fe4a4", "indicator--784a73f2-ead6-4ad4-b96b-b91af8a2f988", "indicator--bcc82b8c-73ab-4a35-a3db-b4684d86f62d", "indicator--dbba81d1-29c6-480c-9e7c-87dffcc1576c", "indicator--87f5cc1f-92b0-45ce-9b73-d91cd7ba3dd2", "indicator--38db616c-014f-4bf4-a7fb-0160de6760e0", "indicator--ab4ecf59-1625-4a49-a86d-8465b6771d00", "indicator--87327689-2513-45cf-90ea-6abf4309a65b", "indicator--278e88e9-318a-4ace-a3a8-811b555d59fe", "indicator--f32b54ef-68b5-43f4-ada4-c566990e70f1", "indicator--b18ded55-18e2-4cae-b618-a3ad849497d8", "indicator--d232c5be-ca0c-4a99-bfab-7f6cd024b7a8", "indicator--3cdcf08f-f4e2-4221-8511-88a72097a504", "indicator--a3fbab1a-3498-4314-ab27-6e7d0736c7c3", "indicator--e746304e-bf32-45f5-909d-022d31dd5fca", "indicator--d42b4d0c-35aa-4523-aece-4241cfe97527", "indicator--57e61cee-6116-4737-9beb-6cc267e2d705", "indicator--11f46f3b-2f3a-4c65-b7a7-4eaac3e1ea85", "indicator--0014b5e2-2d8a-4d86-8b27-c4fa09ec31ea", "indicator--fad7ae1b-5669-4723-a6ad-d2a653aac43f", "indicator--54da7c51-fd14-4165-aebd-36a7dee6a9ce", "indicator--5ff9cb9f-2f04-456d-98f4-9a9143eae94c", "indicator--7fcedc50-3cf5-4a48-8da3-3df19741cc52", "indicator--4b022163-21d0-44cc-8890-7057e4d74551", "indicator--18e45e66-8033-4acb-b9e0-0506157729c8", "indicator--bc7b61b0-42c7-48d1-8172-119d669bcfca", "indicator--ac28b00c-619a-4fbc-a58f-36520e281dd8", "indicator--9428595c-19ae-4608-a151-ef0b2d1b2f36", "indicator--f31056da-3ffd-4f66-aa76-b74c7e22cc8a", "indicator--fd3fcdd6-7d76-4f37-a732-df83f0b24242", "indicator--4753e2b3-c569-40ad-9a8d-278f833cbfc5", "indicator--9d68f870-8bd7-4bda-9061-b303797d4597", "indicator--afb18a60-163f-4261-9992-e22d105a1cf8", "indicator--2cb24b5e-6b07-401c-9b03-49468799c95a", "indicator--bf86d476-20f4-489e-9d49-4d95729f18b5", "indicator--d9c4cc5b-a5e2-4a22-bafd-5f4a1963501a", "indicator--6c09c5ae-12a5-4686-bd81-8f7e9684e6d2", "indicator--6e8f9f7f-da45-46c8-bd67-0e40d4b47bb3", "indicator--14ef35bb-50eb-4703-a8af-5d2464966295", "indicator--4eb32be1-9524-4ed4-9795-7a425c532c3c", "indicator--6b48c5f3-4491-40b7-8b7c-450d93534e55", "indicator--fbc269a0-71c7-49d2-bebe-7c3a68aa4f76", "indicator--9434ecf5-83a3-4b81-9480-c5171bff2da8", "indicator--8f95bf2f-f038-4b8b-ae23-b286ebb7bfbc", "indicator--d8ec6852-c8a1-473f-9d39-4358234e5918", "indicator--ae3852c9-bfec-4646-a706-876672a290f8", "indicator--ccff63d2-99bb-4647-8220-29e51685de56", "indicator--2a34b5a4-b36a-4aa6-8ee1-b819678bf074", "indicator--57b2c835-86d1-47b4-97a3-8026028d62e1", "indicator--41e4bc40-ab67-4811-8157-41bce90f892a", "indicator--6be1fa44-fd61-4d87-ab2b-779ff55bd963", "indicator--6ceffa4e-6e8f-4f67-ae6f-3c909d69ac01", "indicator--751ed333-29cf-4f2f-a5eb-477565054ec8", "indicator--e595fd8b-68b3-45f0-92bc-6a9d50183859", "indicator--547caca2-56d8-479f-b514-d3ad4ec86300", "indicator--b533b15e-8a38-4b3b-b716-fe38b5e41340", "indicator--eaa95a03-b8aa-4e9a-91ef-95dc4c89102c", "indicator--2f6aafee-dca9-4a4a-b8fe-4e881f1254b3", "indicator--4dbfcc11-5471-4f25-afeb-b79106431851", "indicator--c8454a28-5f6f-4bf0-9b93-c52fffcdd691", "indicator--d05eec5a-a1ba-4041-b8f4-f945a7e94077", "indicator--3ec7dff0-51ef-42fb-bde3-9e512d9b38c2", "indicator--4c70374e-0e09-43e9-ae1b-efe85bd28a82", "indicator--1b2ad2a9-b6df-414f-9761-3904158e92d7", "indicator--90236513-0113-4295-89e8-ab76686449f0", "indicator--6fd6ed45-400d-4a43-91ec-39d6d050fba9", "indicator--e5d663ad-b627-47c6-a00e-7a759e60d976", "indicator--689e2723-c162-45ae-8a9e-ce7542c20040", "indicator--1483a692-b659-4344-8dfc-218b4d616a19", "indicator--005b11dd-4025-4a3b-a10a-a7423b947333", "indicator--e7848944-f4fc-4ab0-b6c2-3d094b688842", "indicator--b6f69892-956b-4bc4-84c0-af799ed54051", "indicator--3ed3bcd1-fa48-4f0e-805d-4c9a2312c746", "indicator--c6fa04ee-3320-49b4-8683-3472d043c40d", "indicator--e197a101-605c-45f1-92d6-886e53c26dc9", "indicator--7de688b0-6e23-410d-8458-e9d4561eeb33", "indicator--99694b20-ee38-4d0d-b8ec-5c255cd27da5", "indicator--85d39fd5-c53d-4f3d-b834-b9be5b91bbf5", "indicator--bea5aa20-9dea-48ed-aa26-87b55ac98bec", "indicator--31a51cb5-f0bd-4c39-bb70-a4a914921460", "indicator--91cc911a-2056-40c6-8c9c-a669fc8fa3c4", "indicator--41d76346-33d6-463c-9f40-a2ea67a7f327", "indicator--d404572e-afc6-4885-8b48-0eebcce0462c", "indicator--1c3bb515-bad9-4ff2-888d-449bde26b87f", "indicator--44195f69-768e-41c3-b1cd-ea4ef9ac80f2", "indicator--680f4c7b-fe2b-439e-823a-906329189a4b", "indicator--eecb0ca3-e835-4fa6-88b9-adc1aa4d3018", "indicator--5d14fd39-1f88-492d-8cdd-08da4cb2a1ca", "indicator--fd3b0b94-2ba7-40fa-92d2-785210759ddd", "indicator--4774e8c8-6c31-4f9a-a264-0e2c93970d7d", "indicator--17146eee-c6cb-4222-b737-12de3ff38e45", "indicator--26541407-c018-47b6-ac3c-f998b4eb8416", "indicator--71d34340-166d-4580-951a-a9b0b4272b16", "indicator--8ccad40b-539c-4a4d-9ad9-acb8557172a1", "indicator--86aa7aa9-a277-434b-a5fb-0329c08d482b", "indicator--5ef7f951-9ca9-45f1-9f76-45b55f10a3e2", "indicator--5593e1ba-0334-4e84-8c30-9033e140a538", "indicator--1087e771-ad97-414d-be24-07440b604de0", "indicator--20a70b9a-0a8a-48f4-9b56-f15aa18ce314", "indicator--f4056866-45ad-4601-94f4-966a54a67e81", "indicator--bd21cffd-f81d-43da-a7a2-5d04f5d6a290", "indicator--55d9cddf-5f11-4b54-a8e3-b6a20bdaf541", "indicator--b62cdab0-8d71-4b47-a8a7-b351df5e68e7", "indicator--06ff633e-1f85-4d46-a3bb-8589d0b34d69", "indicator--775e3b52-b662-44c4-94a1-7bdf9c377ddf", "indicator--7ce185fb-3854-461e-8dea-3fa5d79765c3", "indicator--689b13e9-925f-40bd-b052-fdc4e77f93f3", "indicator--bb54256e-71e3-4263-98a5-0743c47e35f4", "indicator--ec57eac6-6ec1-42ba-83f5-dd2451cfd99d", "indicator--c6e56ea5-3f1f-49a9-9456-320b1b0229ca", "indicator--3fc27d21-daeb-432b-b456-c50379124f43", "indicator--811f2556-a331-4b98-982b-f747ee5acb5f", "indicator--f2333f8f-36ef-47f2-9d99-8c38e91ef2bd", "indicator--a93ebab8-b7c3-42b5-9fdd-0eab959b209f", "indicator--7290bda9-3e51-4139-90ee-ead7566e121e", "indicator--eee1e400-6676-4acf-be16-72ba576377e7", "indicator--c447d516-9673-416b-bd24-35de596585ff", "indicator--681ba948-353a-463d-95a1-eff8f4199ac1", "indicator--41f0a357-518b-4d36-bc3b-e05a5ecbd695", "indicator--6fbe0ab9-f250-42a1-b7eb-294b8cda0b7b", "indicator--2bedff25-0e0d-4517-83c0-866246290def", "indicator--ce35812a-d454-48aa-8d4d-97c95549ca10", "indicator--ecf40010-5038-49f1-b8f7-36d79f8493ac", "indicator--65ddc6eb-1318-49dc-ba0a-fbfaf59add98", "indicator--162904c8-d0ba-46d8-8a02-7b9dc18d54ae", "indicator--87e8e70d-7e8f-458b-86d0-40fab0046fb6", "indicator--0ebd89d5-e06d-4177-88ea-c72a32347362", "indicator--c5f5a9e2-c873-4227-bb46-a6f29bb8c01d", "indicator--df299341-da77-4102-870d-4fd3a0fa540d", "indicator--db67d3dc-f2c0-4074-ac5f-fbfaa5edca77", "indicator--8c42edfd-2ce7-4ec4-bed1-944606b389be", "indicator--f4df4a35-a19c-4ec6-b0ca-496b41e282b8", "indicator--89215621-bc48-441e-969f-1219ec719d1f", "indicator--14ed12ae-9481-4a35-8599-db2a8d3ae649", "indicator--bf6a5b99-8284-4d9e-ab57-04f74d65512f", "indicator--fd1e3c44-18cc-48c3-a4a5-47f16a44012f", "indicator--8c8a4b27-ca31-46a5-aa35-cb774706ba07", "indicator--dc8d6259-b5e4-4795-82b9-c6e4cd97e974", "indicator--6a7a4706-0ac2-4e98-9226-41ad2cbc782c", "indicator--523a0007-4f1e-434a-aedc-6d82d10cb5c4", "indicator--68450722-0c61-4f15-bd9e-4860ec91623e", "indicator--dcee73c1-11db-4172-b140-af383c740840", "indicator--2bbe3bc7-dff7-42a8-b90e-ed697a370c74", "indicator--aba52a62-4d29-46e4-af3b-467edbd004bc", "indicator--ba64b5ca-e2c0-46c4-a734-6e7cf8e005ff", "indicator--fb621e3f-4491-47f3-9e04-94ad1be64757", "indicator--27f5fd89-14d6-4a10-9e85-f51aee4b5417", "indicator--ed2a243b-fafa-42bd-8065-4d962f58f44b", "indicator--c6fcc884-031f-4b64-9015-ab0365c3d619", "indicator--504ac72c-1003-4750-9596-9dc5dd068d9f", "indicator--0799b7f1-6b2f-4af1-8a33-33fed3e6ee32", "indicator--8b5119a4-cd20-4168-b85b-e1a5336cd83b", "indicator--3dbadac5-d0ab-4a77-9e36-c62de8affb4f", "indicator--59db964d-eca5-4d97-814b-d30abf2de172", "indicator--75af84e3-3ff9-45bc-b8c9-f1dbee720587", "indicator--86030e37-e6de-488a-9852-3a053e766176", "indicator--98249b0f-beea-4de9-8af9-13d4cfcc8a06", "indicator--2dd24af8-413b-454f-9abd-d2974d6e5afa", "indicator--3d84e313-8d69-4a77-bfb7-23dea19033ad", "indicator--b94057ec-6bec-4cd3-af9a-cf20adff0c3d", "indicator--4583ffb1-c46e-4dd5-aad6-7e09bf06faff", "indicator--833cde93-8400-443b-b437-1c78e73ba1c4", "indicator--ee089865-11d2-43c9-9241-319ec1876395", "indicator--9ba56340-5718-4b1b-a014-bd3be46d56b5", "indicator--d1139ac2-d05c-4f6b-8399-3fc06cd6673f", "indicator--ce9197e2-2526-4d67-8f23-fb3ba45bd352", "indicator--5bbd4014-34b4-4ea7-b1eb-d33bc397de75", "indicator--52f4bc89-73a7-40c4-8341-b8f90dd4a581", "indicator--c8934dc3-c7a1-4544-baf8-c966d3531aa7", "indicator--ea95e803-9c60-4028-944e-711adee42106", "indicator--0aaa8c1f-62f4-48ca-8663-6923a0b39526", "indicator--54850e25-c0cf-40b2-84ff-a01fe6cac220", "indicator--6db9258b-aa1e-43c2-acdc-2c2a73d109dc", "indicator--6753938f-0354-45fc-8362-aa145e818377", "indicator--dcf34970-23b9-435b-af4c-389c037c8b3c", "indicator--de944d66-a1b5-4327-b079-9d596318560c", "indicator--bacd1ed1-1d35-4996-b774-b8d8343c8a3f", "indicator--c7b2e8bd-8e49-43ea-b9ed-7a77e5baca09", "indicator--48c1bc0c-ce73-4dcf-b687-1745a84e44ab", "indicator--d65ff320-10ac-4f52-a96b-65dda011f75b", "indicator--23ecc690-d7da-4c19-9e73-332d575b0283", "indicator--fc804cdc-4c17-4a7d-a3b7-5225d250d640", "indicator--f83f71c7-2115-4d2c-b53b-f9428bcb54ce", "indicator--01e42a17-ddcc-48e1-b61a-d0a325deb93b", "indicator--2ff221b0-ffc5-4cd7-9fd7-94d910ec6468", "indicator--260200ac-7fab-47bb-b516-6ed99a7e018f", "indicator--c62ff6dd-a0cb-4901-b9b7-8545956cb813", "indicator--c0a6889a-76bb-4c5d-b900-f8a8470f283a", "indicator--9f18ddfa-6871-4331-a6ef-05445eafb7f2", "indicator--7cd88f39-06e4-4b98-a4ff-60505fb1b824", "indicator--5f25640f-929b-4d69-ab0a-5642372b27a6", "indicator--99080b62-f067-454d-bce4-cd4174dbb1c3", "indicator--1b3b10d3-bc30-48fe-8ab7-f659069fd2d2", "indicator--46eacb70-5fa0-4179-9b5f-8be98e9e4841", "indicator--84e1a157-871b-44c4-88e7-b9f502978d50", "indicator--f837479d-0b8b-4ff4-a3cd-9549c2f457f8", "indicator--541cc70e-8931-473c-8ad5-f0df25e3cf96", "indicator--2155556c-277f-4180-9520-dcebd1acdb80", "indicator--c9b02c5a-d723-4c73-9b81-9e6e87945fe3", "indicator--e9860967-725f-48b9-9706-32bf3870f475", "indicator--b4e36b92-ce75-4144-ba01-905e568cb0f7", "indicator--3030f744-d652-4ecf-b151-7bffc4ea1f0f", "indicator--5f013ed7-4706-4da7-a2ae-1dd616cc45f2", "indicator--ddbdcf96-8aa7-4440-96eb-413cacd59de2", "indicator--8761ea95-f787-4c7f-a2b1-e07c7b6a2e28", "indicator--386a498d-ff72-4207-b361-3311983a8550", "indicator--bba84898-1ce6-4721-9d12-7579d7dac7a2", "indicator--e57886bf-4bbf-4858-bd29-e0c828fd0114", "indicator--dc6f7a40-0a63-48cb-9cde-3a028ba760f3", "indicator--5dd5b098-259c-4775-92bc-dce4f40fe643", "indicator--3b0910a4-3ffc-4f74-a7a6-842a985ce554", "indicator--ebe18ef4-11a6-4bb9-9a92-de7b39f6bb61", "indicator--6d9f7860-ff10-4925-a073-a6ebb6b4a5b9", "indicator--166effec-ee10-4a42-a0f6-d12d4fa89202", "indicator--12479beb-3519-41eb-9a2b-a3e69303c513", "indicator--3bb456ec-766c-40cf-871d-ccd64f932004", "indicator--2de53a36-5ef3-4c90-949e-fc38044b69ef", "indicator--ecf1694c-2618-4496-9d56-14c15b2df92b", "indicator--61df1831-8af8-4a55-8bae-f9b3f80699e7", "indicator--ab14890a-91aa-4fee-b6c3-26b7bf813de1", "indicator--2c551d09-d8cd-4d12-85ae-0abf7200ed32", "indicator--49667341-0b3b-44d3-99cd-4a5dd5fccc07", "indicator--3ac13ba8-8914-4123-b2da-17fd011b85cc", "indicator--343e7ca8-34c0-4d3e-b6e5-5a3e6ae6b95a", "indicator--c3f61ffd-b6bd-4013-aa90-a51391af1d53", "indicator--705d7e27-1e2c-4f99-963a-5bb5e8bc41fd", "indicator--b7ce05ec-9712-4df5-9bd6-177e75dd8e37", "indicator--6e062889-a50a-4d75-b64d-e647ea4dc733", "indicator--8d06040f-62b0-43d6-8d0f-e5731fc5d065", "indicator--11cf660b-2772-485b-8b1a-8eb557a72b4f", "indicator--4e128246-e091-4527-8877-81266531c0df", "indicator--b4308567-3758-4e25-85e6-59f7760fc466", "indicator--838bec62-6755-4021-abec-4534597b58ed", "indicator--857461f7-730c-4661-b8d3-84d540f7022b", "indicator--d4b4bc61-4832-43f6-92c8-6c51a6c1a394", "indicator--536c76c4-180b-43c3-b3da-4c1bcb11cd31", "indicator--0656cdc3-c185-4388-944d-b59bf6be5ea1", "indicator--8e87559e-e59a-4174-8fb6-2c00ca6af551", "indicator--f07df6b3-9d0f-4e1b-8fe1-05a0cbcbb81d", "indicator--2b339159-0f5c-4760-91df-980d25b9fd7a", "indicator--c0a89918-fc07-48b7-963e-59a70d2d5e27", "indicator--5965bc64-3854-4f18-9bd3-aee114393c25", "indicator--67ef88d6-6ce3-451f-8df3-ee5657614a35", "indicator--37adb057-045d-4355-83d6-0558dc19f11e", "indicator--ced889ee-3b7a-4b02-938d-d9c66cd217d8", "indicator--c7f51d8e-77f9-4c94-8c79-13b119d344be", "indicator--6767b5aa-3469-4cf9-9fed-db3d3b5d083b", "indicator--efbbf155-2526-4a9e-bef5-1cc92175bfda", "indicator--c2e76fef-f7bc-431d-9545-114246376c8d", "indicator--67019cec-6d4b-4efa-8ff5-0cf001c14f33", "indicator--c407cc61-fb68-4c7c-b052-abf90138bb40", "indicator--55e6683c-e5eb-42f2-af40-d3be200d6f73", "indicator--953b7a2e-9f22-435c-af2c-79df705ed7d2", "indicator--4e3ab42e-ac6c-44fa-a053-48fd67358b75", "indicator--65e35e91-ccc0-473c-9104-ca96f26eddef", "indicator--936d3ddc-2f63-4fe2-a5ff-a5a0fc1b71a1", "indicator--d7f7c7cf-acf4-48fa-b80d-3429f67e1adb", "indicator--95519dbb-9a4d-4bb5-98e2-cc8a7a026472", "indicator--04571616-9aa5-4888-8877-6570c717a135", "indicator--19a6ad67-5ad3-4588-b063-f66a05ac25e2", "indicator--6447d9cb-8a80-4ac2-9d2d-c7b685fb0218", "indicator--5916ffd0-5cea-40f9-8180-d91dc5c944db", "indicator--5bb9f216-7c0b-44b5-ab68-ef1979db8fb0", "indicator--6421dae1-49f3-4750-9f50-426b2a813e4c", "indicator--54cf643e-ecef-49d5-a7fc-e0d7d6af7fee", "indicator--3c0216f5-116e-4893-9457-d89e98bdd628", "indicator--b9f30cc0-c9ef-44bb-8c05-38ce7af3ff33", "indicator--64025007-d07f-4ab1-8aa1-3fcebdf45c8f", "indicator--a4343f37-f601-431e-8d45-2da981503e68", "indicator--f7646e5d-de85-4abd-8052-7409b9cd45ae", "indicator--6fb646d7-1c5a-4145-81c2-8680bdc5043e", "indicator--d574b406-be38-4df7-83e0-4eb2f20b91de", "indicator--07f5d948-c2ec-44e5-9202-3fee11c4dd5a", "indicator--1887e318-7643-4ea5-8c9a-4405879219c6", "indicator--4fd2ee5f-88ba-4cd6-b13d-5adda6c21ddc", "indicator--43f26b5b-bdbf-4db1-a6ab-4b97d54e94fe", "indicator--f5b1bd34-bef9-4931-8d37-f3818b586631", "indicator--8e2ac632-e495-4280-a7f5-fbfa5df98c69", "indicator--5e480845-c7b9-4762-b837-885ce66f4596", "indicator--f1cfcc7d-06c7-4019-a67f-33cc19d2269a", "indicator--2571d626-5e2b-436f-b239-e845120bb814", "indicator--87028556-7204-4f15-b71f-500ff149ec89", "indicator--a17a5b0b-eedc-4a32-864f-65ccfb06bad0", "indicator--a1650809-0daa-450c-9f1e-04eafc162825", "indicator--6caba5c2-8de9-4628-be40-23938e0ba4cb", "indicator--7e678c07-9a91-4589-af30-77f52a4b4d86", "indicator--fc256b92-18df-4e8b-97c0-719eee424140", "indicator--4208f88c-60cc-43da-87c4-83bda8a9579b", "indicator--fdd4cfd2-62bf-4071-94ec-1e6552743211", "indicator--5f66d13f-56d8-4f63-b62d-26327983e979", "indicator--a63b829d-a12d-4576-9cc6-8363b08a5351", "indicator--49013efe-e99d-46fb-801e-e5bd6df54a96", "indicator--51f7b270-d65c-4482-8ef2-1faedd6c2db7", "indicator--fa3347c4-cdb4-4bab-819e-b33a3d151fca", "indicator--5992ca28-ea93-4037-9292-df8317a99845", "indicator--7102983d-928e-4be1-8379-c9b6fb1d4c01", "indicator--006f7b50-b117-470e-9196-2bdce1d14c75", "indicator--50a35aa0-be5f-4210-8b31-5e927b328d02", "indicator--8b6bce2f-07cd-4408-9242-075b08f7fa25", "indicator--7f8a6144-4f33-4ac1-b089-5360debd8a11", "indicator--76af443a-8155-4f71-bd74-030bd4d018d6", "indicator--525ec2b1-8d34-4e2d-b3ef-b6d829615684", "indicator--d5c99bc7-d8e0-4992-91ec-b411e967eee3", "indicator--3e3ebeb0-dd36-4b47-bbb0-70341a3dcc27", "indicator--d72e7b28-a249-4f1e-8bfc-80fdafe3eeb3", "indicator--dfffbc45-4753-49c2-92f0-5926f5f46391", "indicator--e1ffa2ad-9dbc-491a-bcaa-6f5458e0916a", "indicator--65db3db6-1238-4064-bd30-22138511716a", "indicator--235922d3-56ef-4382-9d4b-b53796fa3d09", "indicator--27b2d648-4caf-4759-a751-169faeae36d2", "indicator--2945e0fb-6398-41b5-a84f-8644ee76b6c2", "indicator--f1cd73ca-12de-4e66-90f7-9b72ad5d9bb8", "indicator--cb446eb6-2018-494e-af60-882af40f163d", "indicator--c12ccd90-d654-45a4-9c87-d7b30826e914", "indicator--5913d02a-7872-455b-8cbc-9530b90c955e", "indicator--b5176c28-d5af-4ed9-9a86-b4f6544a2038", "indicator--229eca3a-8a9d-43f7-acd5-3247063581ad", "indicator--7b7f027e-c0ac-4af5-9f36-466604670564", "indicator--0492464c-b82e-482e-aa79-b6475a15bc78", "indicator--2347c81b-0d97-4344-9f2f-367d3c8cec16", "indicator--87007012-84fb-4166-b9a9-684021179696", "indicator--14f46dcc-245d-476a-bf6b-2c3b25164241", "indicator--4bcaa787-635d-4ad2-96c5-e74465e1412b", "indicator--999a0336-6455-4dfa-9bed-8b4447707b06", "indicator--72081744-6d66-4867-aa0e-7c7063d61a03", "indicator--66ed015a-0764-4b42-bacf-c1c47cb5d56e", "indicator--68f5c0d7-f53f-44de-8bf1-e8fa370b9863", "indicator--6a9a2f27-437a-47e2-ae50-a2601f8f6093", "indicator--89c010f5-9646-4a6b-8fed-cbaf2b2dd0f9", "indicator--d0fe7c17-05e4-4ee4-888e-be764a39b87d", "indicator--c598fa37-fca3-4abe-a017-b7cc1bc03a6b", "indicator--e426b0f3-6d48-48b4-81f5-af749a636d67", "indicator--dd9c832a-83f0-484a-8e13-d8b116ff9dc6", "indicator--131d79aa-6fe6-4762-b347-91eb7a46c3a8", "indicator--ae7983bd-94d0-4e6a-a7a5-b527ce0cde41", "indicator--95123cd0-2cbe-4288-943f-87c49d26a651", "indicator--18b3edde-27df-4aab-a018-b8e748a78271", "indicator--c7b0f716-e2a4-4b5a-81ac-ff6fe2a31f56", "indicator--ff7c7f71-6419-4fd9-8e5d-4c758cc127dc", "indicator--da043379-aecc-4fd8-9b02-4d726a88ec6f", "indicator--bcfbcb2b-af2e-4eb5-a74e-b5e1d1707801", "indicator--1d68a8b2-e66a-471d-bfbd-6c6e4da40e70", "indicator--0ba15f65-aa0a-4c93-9b4e-32cd5f30e2e0", "indicator--8c999152-5ecd-4dbf-bb08-b3f847328e28", "indicator--ff4e99e4-38a0-4a60-aa38-e1cb57903f3e", "indicator--ecfd212f-29c3-4179-abaa-147bfab927cb", "indicator--772e39a7-a210-47fa-b8c1-1a1dfe87e73a", "indicator--19c7f69b-6db8-4d4d-af69-b4cb62573bb5", "indicator--d6e4a22a-c48f-4db9-afc8-23a1735fe2a8", "indicator--83b88b48-091f-4631-94c4-119ad5078acb", "indicator--bca60d42-c600-45fe-bcde-38c0ed6bd048", "indicator--097e655b-b3e6-4907-b2cd-7db41edbe71a", "indicator--7efd3ed9-cb36-4c9f-8024-625b1ecc5518", "indicator--5d5c415a-0a9e-4c6e-a89b-9d8c2b482b29", "indicator--dc99a221-1f73-4129-8667-812672239e4b", "indicator--874734ff-be0e-4fad-89c1-81d846a413f5", "indicator--dc793f48-cbca-4410-931c-17b5fbf8695a", "indicator--e50563d1-6e43-47ba-ad42-7b435e88fbc7", "indicator--e6cbe2d6-cdf8-4f4d-895a-b0d65ef3d083", "indicator--0589ec27-5587-4713-8e97-e29ce426dfb3", "indicator--d811b08f-0a69-4e37-ba27-4d3b4345c902", "indicator--bd6f16bd-e86b-41d8-a38e-a14291504bd2", "indicator--1a85bfe3-9be0-4c11-ae03-e84ce1e80ab8", "indicator--79f2c595-38d5-42b9-90fd-f7623a2446d2", "indicator--1a9e0169-42b8-40c6-b78e-498efe107a66", "indicator--6fbe90cc-c572-4f8e-9a4d-9f79349555ae", "indicator--37f752a7-2ea1-430e-b3d4-9788e3fd7fad", "indicator--400f3aac-74d2-4d09-b0cf-f8bcc2c372ce", "indicator--35aca94f-bf38-4d57-8f66-a4d735c81859", "indicator--d1662388-200e-4bce-b1e1-3760a59da886", "indicator--ac3829db-550f-4e30-90e3-854771b88e29", "indicator--6f5053fc-80c8-45ac-bdce-73034eb52988", "indicator--94591650-83c3-4b3d-9895-f7c33f5afa98", "indicator--d02bc5b6-60f1-466b-8214-7ab2affc7551", "indicator--8c2a8762-eae4-4712-b13c-4f4e1f1d7dd5", "indicator--02cd308f-2b28-4c19-8c8c-444abaa19b20", "indicator--75b44086-786a-46ba-989c-d0e4ada73f5e", "indicator--90b3dfd2-8f2b-42cc-9896-940eb8f0ac44", "indicator--d8286d9f-5426-46b6-8ccf-dd7baba80472", "indicator--2c7740de-6e0c-42be-966c-58d8bdb712f0", "indicator--c7961ef7-188d-492c-80d9-d75b42c33b6f", "indicator--351a7018-8202-408b-8771-857ae002583f", "indicator--6c0eb6c9-992b-47e7-9483-3b41f434140c", "indicator--8450a61c-9547-44fa-88b5-a4b8e7a620e3", "indicator--8430354c-f142-431c-8c2e-6ca6574f32c0", "indicator--be7d2c69-18e4-4be7-863b-2f30eaf024bd", "indicator--ddf1abf7-24d3-4e54-bc62-2377230aa5ff", "indicator--3fe739d9-0c53-48ba-81bd-c2e65580faec", "indicator--56d597cd-5b93-4532-97c1-84c69aec5096", "indicator--03fc3979-bbf8-4839-86f6-399485989948", "indicator--f53c88db-1575-423e-bccf-d1f364e7cd48", "indicator--ae2e6d6d-cfde-414a-b186-f2b27cad05ee", "indicator--007b33aa-19b4-4f8a-b1e6-16180340d55d", "indicator--007997cb-fd2d-4f83-95aa-e2e6c6abaff3", "indicator--7bd39c8e-1aa1-4755-ade5-0bf3ee65f74d", "indicator--8fc22efc-e11c-436b-8e25-af9b77c1f572", "indicator--11665916-3e0a-4fa2-bcef-179b939b6c2c", "indicator--390c253e-d0e4-46e6-abae-42c6eac073a4", "indicator--72d8ff82-aeb3-41e3-a957-c362256ffa32", "indicator--a8e0c360-4f06-430f-8bce-a6d75c1d15dc", "indicator--7bc18aa9-6068-4528-ab42-33b69df03190", "indicator--040d4cd5-c63f-4509-95b6-21445fa194c9", "indicator--43d08176-39b5-4952-b265-783131759f48", "indicator--b4fd4cd9-4840-4d73-a905-f3ea60569034", "indicator--8a734f44-e279-409d-a7de-352dd0cd3955", "indicator--249cd282-a7a1-4e05-92ca-a84b22063de0", "indicator--b49e315b-8971-4494-80aa-88d877158c13", "indicator--5a6e593d-378c-47fe-8d3b-d69532c3b97c", "indicator--26f6ce43-05f9-4176-801d-d56c20c73352", "indicator--ec13a13d-1a93-465d-973e-c4bdc83d417a", "indicator--102c36f9-e9a1-41f7-a61e-e60cfacd5350", "indicator--a1324e3e-aaab-4fa8-8a64-f5a96f24f65c", "indicator--7007a03d-1563-423a-abe2-74be4c1738d1", "indicator--360f0078-15ff-4c7b-8db3-c682903a61d4", "indicator--e243820c-ba89-414e-ba13-40e5a395d93d", "indicator--bac68e8e-a5e2-40e2-83e7-df7afc4533a2", "indicator--951fd36f-c741-4733-934d-677a75c6cd21", "indicator--23318af4-0c6a-450b-aa84-eff4a2917ab4", "indicator--fbf1e65b-bf0c-43a7-9ded-1bb2411fe7ee", "indicator--4d4f88c1-2ab4-4656-9431-8ed9c48d1dcc", "indicator--de9805dc-afe8-45b6-b3ce-9226aa7d6a27", "indicator--4f84617c-302d-44c2-8d7b-02b839070604", "indicator--3f4d6604-78fb-4463-b084-c848c5e721e7", "indicator--cc5c9d20-dae3-46de-aefb-8a6e1d384603", "indicator--4549ec7f-40ac-4679-b22e-eeb1dc71be13", "indicator--b778abbc-28df-482c-a278-bfbbf90e2f5d", "indicator--d8048a0c-8550-4a26-b021-e469c9dd9eb5", "indicator--7496b5a9-26cb-4e88-a393-9f6bf4511921", "indicator--87d9348b-6135-4afd-b462-3a0077427cc6", "indicator--606a787f-bb54-412d-b4ad-c13644327574", "indicator--64fb3405-27fd-408f-970b-e4fefda76774", "indicator--b9fcb69d-9996-42ec-8690-b5a6f28cb75c", "indicator--1cb8ad24-fbfd-4a6e-b074-67056b2734d3", "indicator--4e45d60e-b115-4cfe-8f1c-ceb44de4266c", "indicator--99601f98-1fa6-4d68-911e-f94fc68f1c21", "indicator--7abae39d-370b-498a-9277-28dd3a91f749", "indicator--870bc9f7-64e8-4a9c-88b1-c89a13b437a3", "indicator--220e1c82-204d-4caa-a556-a2d0d7e0abc0", "indicator--e8b9b599-7c77-488f-b8e6-cf929397fd20", "indicator--79510d62-a423-44f8-8c52-fda9851f5504", "indicator--decde7c7-d817-4d18-bf40-ab0a032e5fc4", "indicator--4130c58a-8aa9-457d-890e-275f66b579cd", "indicator--5aa86afa-d12d-40f1-8218-d51daf00fc61", "indicator--3f834225-9e35-493c-88bd-5e964e7535f0", "indicator--ffcf1ccd-73e2-4964-9e38-973149bd6340", "indicator--086313ac-1811-47e2-afb1-ee043b928afc", "indicator--3713982e-c001-4d33-af90-8e257c974bf3", "indicator--fe9aaaaf-120b-46b6-a472-42945c70728d", "indicator--9d1890cc-0bb7-44a7-91df-0db7271da418", "indicator--8c148b1a-acad-4b0c-8bb8-c78f8aa5f070", "indicator--3947007c-0b9f-4fc4-ad16-1d4df761034a", "indicator--cc90863b-be7f-4bbc-9973-100276ad65c6", "indicator--5d1638cc-6645-47d7-8dea-b39ad1bc22ef", "indicator--8944d419-47ab-40e4-b251-fbe5fce0d6e6", "indicator--b90d1b4e-d09c-40cb-8187-bbf395cb809a", "indicator--4c8c9ada-e499-43c3-932d-04dbd7d30d48", "indicator--c6f3c699-c1e3-4392-9efe-4e710036810f", "indicator--5754d9c1-c756-4880-9109-e1f564797232", "indicator--41ecfdc1-65a5-4bbe-ba46-51690153611f", "indicator--4a192f69-52fd-49f5-bad4-2cc780aa30bd", "indicator--fc222927-8200-4e60-8b44-2d8859ce1259", "indicator--bf0f60b0-a08d-4519-9e2d-0b3e93ab7a60", "indicator--3df65736-40f0-4c1f-9ff3-662c93c21174", "indicator--fd2869c0-58ca-45d0-b541-f59670680b78", "indicator--dd2ecc06-1e84-4803-8a77-5097604fe9a7", "indicator--5a45e4eb-8219-4018-9abc-2cc75547151f", "indicator--dcbe3fae-b0d4-40c0-a57d-88c806f93878", "indicator--d7c26848-2846-457d-8637-656ba09db024", "indicator--e282b15b-11c9-4da5-9229-7aadb46f4609", "indicator--398cb59c-be18-409c-a3cb-9875baebeac2", "indicator--34153a66-d819-48e7-9baf-99629a50ff4b", "indicator--d97b8eab-511f-4ffa-9e66-37f2f196d879", "indicator--e8856dfb-cb28-4f9a-affd-8137284c67af", "indicator--f922dc80-3728-4e6f-876f-bbf2eb3c7d08", "indicator--6f1ef736-35f4-4dcc-b807-7e5e468d6bf1", "indicator--4521e8fc-0391-4b95-936d-26edab3ff497", "indicator--8637acfa-6e49-4879-8920-297c2c0f413a", "indicator--e7ee4ff6-23a5-43f8-97c6-ddbcac1cc19c", "indicator--d3e17787-e77f-475c-9e31-478e75975516", "indicator--f73419e6-9178-43cc-98d2-ceabfb38482e", "indicator--794f7863-2a4a-4112-aba9-8bb2928b44bb", "indicator--2025b242-60a4-4abb-ab45-618c8339df9c", "indicator--ad1c9136-d2d6-4de1-82c9-25cf16457709", "indicator--12a3d72d-0374-4737-a126-0f3f62e189cf", "indicator--74e4aebf-6252-4469-96f7-db5b0a5f32f9", "indicator--e25d21da-e5c5-491b-9b89-30c51cb9aa73", "indicator--5bbeff46-0fbd-444c-882b-40e6efed2fd1", "indicator--97009fa4-cfb5-40e0-9e14-c4d5f1830031", "indicator--248419aa-44b0-4696-a40e-e2a4f4ff5dd0", "indicator--e9739198-e35b-4088-aa13-75526dd5af80", "indicator--be8c0f0f-c2e5-45f3-94a0-8a183f221d5c", "indicator--d6f1d661-86ab-45f2-9402-ecc36ebce714", "indicator--bec2e8a4-a3c9-4c0e-b18b-640c2bc462cd", "indicator--ea1df516-4e5d-4a97-88b8-e19ceb614a37", "indicator--eef8cd2a-2a6b-4c72-91ff-100b7917f8e1", "indicator--b181f225-3935-4306-b16b-f612a1ebe4e7", "indicator--9489e647-07c5-4d04-9736-ac68ccc71759", "indicator--932f584e-ca4b-4bda-ba43-682840a682ff", "indicator--77bb6dc6-2b07-43d0-a33f-5d482571597e", "indicator--095953b9-d42d-4e29-879c-a3747449f5b9", "indicator--d8091c6d-cd09-4f30-b8e7-486115d63100", "indicator--d3afcc22-3beb-42e6-8eb5-c511c63ee641", "indicator--ed3c6dca-84f0-4c13-a7af-887d80e49d6d", "indicator--32cb0564-08c5-40bb-92d1-be868ed6384b", "indicator--bebab45a-2552-4a3c-a754-3b6fd306f48f", "indicator--56b74f28-dcb4-4c1a-81da-d08ec14ddac1", "indicator--b002515b-9b0e-4616-a2c5-30507256eac4", "indicator--6768908c-d737-458d-9a79-cea43fc93c8f", "indicator--73e599e0-76e7-42f1-9b85-048ec46e7bb0", "indicator--aa4b884e-8169-4dec-b2da-1bd68197350c", "indicator--9d983afd-93a9-4ff1-88ee-675435dbcaf8", "indicator--95b0016f-d7cc-4c77-b9f0-54b1e79569f7", "indicator--d723b7d2-b8c8-43e1-88b5-465fcba8b575", "indicator--43627e41-a38d-4735-bfd9-f840fdfb81df", "indicator--71b48a8a-c190-4424-aa0e-0ba3b3820869", "indicator--ded78c0f-3528-48b0-9308-97f57a72ac5c", "indicator--cb43cd62-b1a8-4346-b306-18f27662a849", "indicator--69d4a005-f0e0-4e08-8309-797b7e3fe8c8", "indicator--31ae37d5-d164-4672-8394-12300a7b3b9a", "indicator--cbc3a704-230d-4207-99ae-9e7086e97a99", "indicator--1b74a661-04fc-48d1-bf2e-0988a54808de", "indicator--6685e0a4-a73b-4b9a-8603-24536e1f4fe7", "indicator--36760809-445a-4177-a5a8-e24f3a9d781d", "indicator--a1a8327a-67e4-4eb0-9c33-8e3390082fb6", "indicator--205738da-efe3-4f05-bfe8-104d04881287", "indicator--a926f7c5-926d-47d7-a6d0-9b906463c8ed", "indicator--09c44471-fd6a-4958-95b5-5e71d3f29918", "indicator--7e0ec43f-9783-4968-b853-166836e57ce2", "indicator--a7064b31-00c8-4d0b-af89-e3f92e5b7c93", "indicator--151713be-a092-4935-bb6f-c9364233f521", "indicator--216476d9-9403-4083-ae65-a77000ed7a75", "indicator--35ff98b4-ed45-4eeb-b918-871d1acfa26a", "indicator--d8baf9ad-2e99-4ce0-8e24-cd358679f4d7", "indicator--062f7d7d-ea98-465c-a422-ef65c8075e74", "indicator--8f7e4bf8-c6a9-4060-b6c2-bd38e7f7dd40", "indicator--16eb6cf5-e6ca-403f-97d7-b42a832473bd", "indicator--3f64f582-37a5-4641-a0fe-6618cf4aff41", "indicator--88da2701-559a-4ffc-bc73-69c9506619ce", "indicator--81e6c6b9-8d26-4b13-84b9-fe1872eeafcf", "indicator--cb91a031-4f43-474f-9640-092a2633a83e", "indicator--30078f6c-ff29-4fde-b373-cebff2c07412", "indicator--be8d7b70-708c-4684-9170-91dcda38737f", "indicator--0f1f1c92-8e05-4ac9-8edf-2d34a99b31f9", "indicator--eb6317ca-4938-41a3-96d9-3598e41db1d0", "indicator--97db3cb6-e21b-463e-8e0d-003c3abe963b", "indicator--f112074a-84a0-47f8-9392-b06b0315118c", "indicator--2cfe1b1c-83f1-432b-b4ab-45443a294ee6", "indicator--dcf94da8-cd0b-45b8-ae29-992d05d57420", "indicator--26e1b551-4584-40c2-bc2f-d95161845b92", "indicator--2d7631e5-a189-4f3f-83e0-b5df909c7ee1", "indicator--1d251cd9-1a41-4791-8632-b7451e6d1fdf", "indicator--14df80cb-2cea-4c23-9885-e30713b3529f", "indicator--be6d1203-9421-4a6c-9ef3-92c04bc82837", "indicator--6cda6e31-f3ce-42c2-af74-7d41da68a7fa", "indicator--f69dc7a6-41fd-4ef2-987d-5042361355a8", "indicator--156af834-d2bd-466f-8fcd-59a8ea44f732", "indicator--41a6036d-0f5d-4a35-96be-dd89326df9cc", "indicator--61da4e88-1d7e-4a2d-a67c-8e0eeb128f37", "indicator--79ebaa79-7819-4800-a850-14cc39d3f8fb", "indicator--207ed22f-bb1c-4343-9f6e-a453234cd447", "indicator--7832201e-784c-43de-be93-e076adbc82ba", "indicator--9758031c-0c3c-414b-8c42-443c0949dac6", "indicator--5900797f-c31a-4a9d-bb36-27fee1e98f29", "indicator--038d8fed-d7df-4561-91cb-3eef77d389d0", "indicator--b2165e61-8fbe-4fe3-9b01-4073977dfe55", "indicator--d2b36efb-8755-44d9-8e40-eb091e873299", "indicator--08a172fb-61a1-4672-b474-15378bfe12cd", "indicator--801dee8d-e6d8-4710-8313-7cc0d9551c0f", "indicator--d9a63db2-a342-4e7f-a865-5e251c062e31", "indicator--6a5639d9-9609-4c24-ae11-fe934b4220cd", "indicator--bd6a6fd2-0287-4181-b9b2-f77160c2273e", "indicator--2f7c4666-b65b-42c3-bac1-66e070ec9af8", "indicator--4d4db625-6011-47af-9495-eb69ca848e8a", "indicator--01e4477f-4978-4013-96bf-74fde7b316d5", "indicator--ebf061fb-9f8a-41ac-b5eb-c63d34286723", "indicator--96d8130f-2d25-4b2c-8316-7e35fd90c2da", "indicator--b71faa7d-c4ba-4202-a89b-52d08fb7e784", "indicator--04654d1e-2790-4131-8f24-29b3855b22e4", "indicator--3e7bf2b3-20da-4387-80d0-158d069f03f1", "indicator--fb57d623-4e12-498e-9f9f-dda4ca33a1f5", "indicator--5ebe7c90-bd4e-417d-a7d1-751772bcee52", "indicator--76699206-1b84-4a41-ad47-40bae6c9f140", "indicator--a8c4c371-1f91-491e-908f-bf74951b33ca", "indicator--de12d700-5d72-4e3c-8260-44e686539f6e", "indicator--25ec81a1-c93a-48dd-91cb-541cb14297bb", "indicator--2cda02ec-bd05-4afe-a28e-272531d76a39", "indicator--640916f3-fa5d-4036-864a-7c07689b9769", "indicator--07e106ac-01a8-49de-9106-920fd6689241", "indicator--b2e571ca-9c2c-4027-88f2-4caf90bf64e0", "indicator--d9769ea7-07b3-4ff5-a8c9-6829dea72b75", "indicator--2584ff66-a959-475a-8dfb-1ff7510a2cef", "indicator--49550aa5-98cc-4703-bac4-ff20f959c46a", "indicator--f9fa860e-69d4-4775-9bcf-a2c96939ea15", "indicator--e08f69b2-23a7-4169-a200-f2ad7cb61712", "indicator--1af17599-b1f1-47ed-aad5-4078dbd0c7ec", "indicator--f96a7689-7c11-4c3e-94e5-43c6a72e0d09", "indicator--89a1f9a0-b2f4-42c4-8950-cb4d6217bf16", "indicator--030468d3-37d3-416c-9a6f-87201e7b1f7b", "indicator--981ceda1-2b43-41d6-8a5b-4631b9324ed0", "indicator--586f88d4-b44d-4cdf-b8af-dd598a6b05d6", "indicator--7d8fe49e-4596-4444-bbf2-6c03db5fa943", "indicator--291375c4-6ff0-4fad-801a-67e391060aff", "indicator--15bcc341-bf01-47d4-ab89-500a8c262c18", "indicator--353c32bb-5a63-4e02-aec5-c55777539bbd", "indicator--03887d09-efea-49ec-aec0-01bcfaf65a5e", "indicator--1b125e72-cb86-4aca-8d4b-e53e55466fc8", "indicator--bd9c53dc-ff29-4155-ba74-d63de94164e5", "indicator--4a22046f-a666-4606-8a1b-2f10b2507ab4", "indicator--60aa8518-d529-4c6b-a5f0-325552d88149", "indicator--f1490c74-183b-4a2b-b062-22d9436bae19", "indicator--c8232ba1-9090-4544-82e5-edc333a898cc", "indicator--b49ee06c-d3c1-488f-99f2-0015f7f18a9a", "indicator--80fd61bb-f2bf-417a-bfaf-49c586d0c459", "indicator--702b8054-eec2-4155-a80b-2ebfb3ef70c7", "indicator--5308ef80-3805-4875-8731-b7acf0f8a984", "indicator--5e32aae0-6bc7-4bc4-848f-5e1712cbe5d4", "indicator--84570181-6513-42dc-8106-6a9e0c7134be", "indicator--8a844c4f-2a5f-4b6b-b6e2-4d2be4112804", "indicator--b3d3b61c-a2ac-4237-a36d-11c998f5891a", "indicator--e01205e9-843c-42ba-a7d7-73f2ce7bb578", "indicator--e69f00c6-6aad-4872-81c9-2e37f28d3be6", "indicator--6df6d1c0-09f1-47e5-bf8f-1eeaa9eabd2c", "indicator--1550e899-3e94-4ba7-8270-802baa254df3", "indicator--65484b15-32ad-4daa-bb3d-2a56a092827d", "indicator--0af00627-7474-42df-be72-3ae9c5de3f76", "indicator--1e811501-3948-4473-a67f-f754b88a0b18", "indicator--19252725-a203-4dee-a7f7-98e83b8e5483", "indicator--63e1a4ad-b873-4856-a8ff-6a9d2f36c55e", "indicator--3dab7539-4fef-4898-b1e6-4161b8398891", "indicator--6f46d1b0-0e41-4589-86e5-b523e11ba65b", "indicator--fb66457f-e6f6-49c5-bee9-4b78c0b55011", "indicator--bdad1b41-d407-438a-8d8f-759ba4f9bdf7", "indicator--ee9b534e-93a7-4659-a8ed-6994913ffa64", "indicator--8401849a-4d4d-45f8-9f13-5776ef856b95", "indicator--13327961-5102-4d28-800e-07e5a64b1f4b", "indicator--23048f93-61c3-4d07-8fd5-500892c33989", "indicator--6e95ad26-5361-48e5-8590-599b3d403510", "indicator--6dff15e9-c91e-407b-a667-bb4a46f2dc45", "indicator--dab88924-5da5-440e-b993-aaa56485922b", "indicator--d824df66-43b0-40d1-b8f7-6f2ee7175906", "indicator--f1ac3e1a-46a2-497a-8872-0197eb46d942", "indicator--2f788a30-6c94-4555-a564-af83b3d9c466", "indicator--2aa1f074-0b5c-43e6-ac98-09dc8c12ed57", "indicator--ca22dc5e-5ace-4573-8ce0-e580b47fc251", "indicator--a9b2e566-08e0-4c29-ae33-a10b849fb4e2", "indicator--b37e922b-2d45-40b2-a974-440c54cdfa45", "indicator--da4ec919-a38d-4af4-a2b5-a621cef2e77b", "indicator--e82198c9-8cc3-48cc-9dec-618ae0fc5c83", "indicator--854a8012-dc87-4560-97a8-556783147b2f", "indicator--45b623d6-3a5c-454e-a931-f804205811bf", "indicator--bca01477-65a1-4070-86d6-8cd3af07a1e8", "indicator--365f656c-448e-42d4-b4e7-0d7cb4d8afd9", "indicator--b8d13e73-5b02-4a1d-bcd6-4ac56fb97f12", "indicator--ce5b77d8-bd84-476b-8555-a97b7dc0ead1", "indicator--b8e8e4df-2b60-4bdd-ae6b-322c234e11dc", "indicator--047705e8-ca02-4bee-b7e2-e27dadc5d9f5", "indicator--84b232db-ee1c-44a7-80ab-d8365a5a36e8", "indicator--bddb10de-3d0a-48ad-989b-fa2734c48d03", "indicator--e5de1fe2-34c2-44aa-b1a1-76ef3c8fb9c9", "indicator--f97e06ec-1d49-45f3-8b57-696b6bd2b049", "indicator--bf98ae43-4a87-4776-9468-228f90738889", "indicator--cf427eb0-a5f2-4188-9987-498a243fae0c", "indicator--eff4d1c9-8e27-4dd0-98a3-9987384bb410", "indicator--0ef1db4d-fdb2-4868-8c05-4046bc69b493", "indicator--2dee6cf9-873e-4320-8722-8d22ba0f9d8a", "indicator--0cccabb4-7632-4f8b-9326-1301f9c94450", "indicator--f66d6da6-01b7-4fdb-96eb-2af21d5dc52a", "indicator--b82aa962-e105-49a8-8196-ed765d8f33aa", "indicator--8a434263-4f96-403a-bdce-5745e2a25058", "indicator--9a99f53e-f620-496c-bc84-6cd4882d62ed", "indicator--9cd6ed26-10ba-40ce-be65-63010d531bb8", "indicator--3e13c96b-5d63-4d76-89b5-e76156e9f02a", "indicator--2498629a-628a-4aea-b9b0-9b14720fc24e", "indicator--31a29800-a31b-41ea-ae48-41d5055d7bb3", "indicator--7d1fdf2a-4fc7-4dd8-910f-eaebaec96405", "indicator--38d43099-1b59-49fa-875f-29958635f0cf", "indicator--041b5dda-85ea-495b-839e-a46628e53807", "indicator--83a0f043-a285-48ec-a463-1e1a05b35acf", "indicator--417058f6-7dec-4403-a690-04b0dc7b16df", "indicator--09c04908-41bd-48d6-b23d-8209ea74da27", "indicator--4238866c-0360-495c-a142-e1395ac29f4e", "indicator--f33d0e3f-de58-407c-9daa-7d2b181dcd9f", "indicator--aeeaf962-525c-4a5e-b720-58fcbcb8c318", "indicator--b545d042-b8f1-4e89-9298-797a1d128105", "indicator--5f3b12cd-bca4-45da-af8c-434c6100bb82", "indicator--ca7bbe02-6d4e-4b79-bb81-854d6a043384", "indicator--58418eca-6e7d-495d-9c7e-a3c93be9df66", "indicator--600c2b85-0069-40a1-923e-7ec637b0e5f4", "indicator--55f16f69-53b1-47b2-b273-5ebee575d31b", "indicator--98aa20ce-f72a-4c7e-a9ce-89f06f42571b", "indicator--5ad14ee1-49be-410e-bfcb-58c1c68ffad3", "indicator--5ed70ab6-f6d7-4331-9eb5-e18332d0a0cf", "indicator--10530540-1522-48c5-b1bb-94a38a063ff9", "indicator--a16799b6-1aa3-417c-b40f-d58e2a74415d", "indicator--3a40d99f-f93a-474f-9399-5346cdcc5ab8", "indicator--afc8f3f4-69e9-408e-9315-36d6492c1041", "indicator--3963f815-d4eb-44f9-857b-83bdbfc7b5d6", "indicator--5743a8d4-7e56-47fc-b813-e80f9d06d147", "indicator--3c1a2854-bdce-41f4-9f5a-160f806d0f6b", "indicator--899d906a-ed5d-475d-b762-fea6c56a00f2", "indicator--4b7f2cfe-8200-4244-b6ea-fc0afb1b09c2", "indicator--97b92f24-2f9c-41d0-aae6-a27f95245787", "indicator--49e1f86f-fbc2-4a0e-9a99-c2abb6d31ac1", "indicator--53cef2b3-4317-4400-b2a9-ac6bd1431bd2", "indicator--953bd971-2b07-4731-8e40-9c691b3ffb18", "indicator--7db75957-c7c6-48a2-a6b2-c3c941f69152", "indicator--e7f36778-971c-4505-9a98-7b675052e4b1", "indicator--070284f1-27a9-43fa-aadf-2049877adc70", "indicator--4b54ffc7-d29e-4e55-8c96-eadb3a9fb9fe", "indicator--41ba3d9c-1580-4dcd-9418-bd13a12cdf0a", "indicator--c7dd530f-3d63-4449-9d21-e348b06b5b8b", "indicator--17b1001f-c1f2-4607-a01b-71a9e670c598", "indicator--5d348654-8453-4a1d-ac7e-714fe6c0400d", "indicator--3f55e7fb-f034-4de0-84e6-5b05d0ffe19c", "indicator--88c1841b-a999-4c29-8100-b197ca913eb7", "indicator--7d1e19bf-4e17-457d-a679-89b8d535e27a", "indicator--81e9a2ae-c5ea-4fcc-b958-5a36e979a901", "indicator--7b8d2e99-7aba-4db1-bb0b-97626ec9db2c", "indicator--49fa878c-7f8b-4163-94d4-06d310d971c7", "indicator--a1c66209-a120-467e-9917-feee60c75c52", "indicator--d2398a5a-ded7-49db-aea5-267fb4ba885b", "indicator--53e21310-a72b-4011-b0c0-2882397edb9e", "indicator--cd0bce94-1932-46f3-8aac-37373f04c021", "indicator--c00a4934-cbe4-4a31-b701-325b91295dae", "indicator--754086ce-8b17-49e6-9add-bf1c5a830502", "indicator--0ce2c4e9-0d0e-40c6-9464-65d902038f5d", "indicator--61eb6e06-0870-4476-88b0-caf263b2beda", "indicator--bb8e1daa-f920-4382-99cd-c117090bd426", "indicator--fd2700a2-c384-4722-b95c-cfbdde6d3a21", "indicator--9fb104d6-b98e-4676-889c-404c0e64d9fe", "indicator--e0f550e8-5953-417c-84dc-f58b7185e5e1", "indicator--78a7900d-5d96-43cc-8b2b-4f233349c414", "indicator--2af611f0-4c0f-4e35-aaba-9f4548e92533", "indicator--2bef7f2c-03aa-41b3-bc79-dbc065d22b5c", "indicator--15afdbd4-0eee-4719-95b3-53b77da4433c", "indicator--c2e27c4a-46fb-4934-82ef-76ace9301187", "indicator--720b6600-8358-42d0-88e1-322995861220", "indicator--391eec40-9024-463c-a97e-54b4f9764e84", "indicator--6371821c-e8b2-4bd9-994d-c7afe36b2b50", "indicator--d53c146f-52c8-44b4-8790-d5ff642db98b", "indicator--0ea2bd0c-863d-47e8-b514-343c4c27af40", "indicator--75125007-8ae7-4d30-8603-e0c3ef8c5532", "indicator--68467620-0847-4717-84b9-99629c5d3269", "indicator--d462cc31-689a-48b5-ae2e-397eb2934c1b", "indicator--7883bc39-6f03-4222-9b83-a78e72d2e53f", "indicator--0d06f787-dc30-428b-a8d2-7424db0af7e5", "indicator--20db5818-3b18-4e5e-beea-8c817a581014", "indicator--eda84cfd-9cb6-4e66-a23b-4a9b9ab30c0f", "indicator--eda47000-108d-4c0a-a1a2-23981438fd3f", "indicator--41dcfa0c-0ba3-4f37-b981-8af438ac969a", "indicator--d2f5f9fc-e492-4114-a596-5ed86897ec51", "indicator--63f1611f-05f1-4098-bbf3-efb2a47781da", "indicator--9c84d273-87b4-4414-9e52-3ec8ddfcb220", "indicator--37e4916f-aaa0-4d62-89af-13f7a387864d", "indicator--dfc92c4b-9160-4886-9e51-eab0eaf91368", "indicator--97c06ede-01dd-41b4-8378-a04344058f80", "indicator--9cdd9864-918d-4d00-bd7d-3bca3da6137f", "indicator--ef2e6dd5-984c-4ab1-ba09-268844f6f2b9", "indicator--a9b1b3f9-b91d-4a08-ae8b-b8af529343aa", "indicator--0bb3e8a5-67c2-47fa-be2c-e1588f4e628f", "indicator--3ac23ea8-8c74-4171-a942-c87051517f3b", "indicator--aa693b33-7ab9-4ee5-be85-b5b33872eb52", "indicator--0ae7b00e-de9f-47f3-a5ac-0707bf14768a", "indicator--b053e206-eb40-4639-86f2-aaa6e36c9028", "indicator--5a2533af-7974-4c81-9cb3-25259a3e7be2", "indicator--da806583-7e8b-4dfb-94d9-dcc7036a8d30", "indicator--c81ee602-755e-47f0-889e-7c1801cce657", "indicator--9df7f212-ade9-4284-82c3-d09ba0bcc67a", "indicator--cda55f46-f4a5-4149-8a63-731a09235985", "indicator--12a5c1fd-3bc0-4c95-83f8-34fb0d305da8", "indicator--9a54348c-1590-4bf8-80c3-2538b6b00757", "indicator--13e9c589-c900-4b64-9dd3-a5168120f47c", "indicator--fb8b8a6c-0f0c-44a0-8407-36b7739722a3", "indicator--78ebcb57-ba9d-4343-97ff-a34a18959b61", "indicator--79d7748a-1470-463e-9503-39249f11798f", "indicator--993d7217-18aa-474e-8dcb-e3ac3bfa6ac2", "indicator--680a7fc4-bde7-46f3-8f7e-dafbe7ff39ce", "indicator--bdd245ca-ecdb-4212-b1ca-ebed97014bbc", "indicator--63a7e3d9-369d-4c62-bab2-a6f5acced1a9", "indicator--8adfb910-8ede-4190-9e66-f8c06b695e0c", "indicator--20dd233a-9ac5-41cc-9984-74239a019ff4", "indicator--5c527332-84d6-42e5-8b6a-3847ff2fc8f0", "indicator--bb336470-caba-4023-84f8-b85a6ee4f7f7", "indicator--367fe426-6f24-4f85-8d3e-aea7a16f6fee", "indicator--00679986-d595-4c96-af6b-2c93a4127f73", "indicator--90e6869b-f0ee-409d-b1f4-b57509c0ce46", "indicator--c90d0299-48b6-4564-924e-5b347390fa8b", "indicator--0249a96b-a127-4e49-8faf-23b467c6f292", "indicator--7f1a301e-700c-443e-ab80-330f9395b00e", "indicator--27d022a0-80ff-4d0f-82f3-2f31acd4d913", "indicator--27f6e509-fb42-4abd-8145-6f0564976ce0", "indicator--0f7c94e6-96dd-46f8-9ee5-96ec895a9659", "indicator--c63191a6-fb8a-46bd-baa8-87ef7ac83f66", "indicator--4e80c734-6481-40d2-9f3d-ed1ede6eca4b", "indicator--cef44fe7-b442-4c01-b676-00f392cc6a6b", "indicator--8386b249-971f-4f8d-b212-52f877a4521f", "indicator--103584c9-5084-403b-bfd8-77bc509887a8", "indicator--684a9fd0-8329-49d1-b6b9-4a4e5a2ea408", "indicator--34eb2fe6-1cc3-48ea-b524-2bdc02472379", "indicator--2120200a-3d5f-46ab-b7be-c1c462335cb2", "indicator--52213fca-70d7-4463-aadc-ab18c82b2827", "indicator--c758f000-c649-4b52-b60d-679c9f7efa25", "indicator--23a289e3-d190-4304-8609-dc1cf55a5513", "indicator--06c78e7a-9fd4-4565-b462-dc939e7ecd97", "indicator--93ebbe7a-94ff-4ffb-9975-4a445539979f", "indicator--a4089a30-57d7-43e1-949c-9111842e123b", "indicator--e7dabced-2a40-4c58-9446-d12293000890", "indicator--474d4511-f985-4ef1-a899-194077c5357a", "indicator--c4e97ebf-a5b1-4f0d-ae17-c77d3b31b9a3", "indicator--c5edbc20-47c4-459c-a240-687876746b09", "indicator--df05e863-cce1-4774-9c8f-59043d130429", "indicator--b3ace576-d2ae-4ddd-b36d-fbd95fb875db", "indicator--f903a182-0366-4e42-aa4f-0ee17a9ede0a", "indicator--98f31566-0253-4eb0-b475-89b5fe76dd65", "indicator--675b569d-70a5-4124-b8b5-abdc74dc3f65", "indicator--897ca03f-19cc-467c-8b5e-7fe9be150f0f", "indicator--1fd3fe0b-b3bf-451d-8618-66a57df454f7", "indicator--80180408-d922-43df-99cf-b7ed2f742027", "indicator--5952ab27-1f42-4699-ab28-0d9abe83bed0", "indicator--b84bea61-38b5-4215-be96-2a04f0afe34a", "indicator--a7a6b421-9aaf-419a-8ee7-0526d62f91fe", "indicator--1a2012c4-29bc-4f48-a38e-6327c66d53c7", "indicator--ca8fb1cb-3496-4128-8faf-13e32176ebfe", "indicator--ffbeaf90-500d-4b08-95db-ea1573b21a81", "indicator--9213a457-a0b3-4773-a7ec-5157fe1ed45d", "indicator--5ab52f70-a4de-4a4e-9b1e-fc5c09984f34", "indicator--6b1a56e6-b568-46f1-8296-76f7dfa33530", "indicator--3f7b254c-6292-4257-9209-1fd012a03daf", "indicator--6e1d7aa7-19f1-4459-af0e-8c391713f747", "indicator--48072948-df6d-4884-bb81-7a8ccf6f2a12", "indicator--03782015-df53-4f46-aa00-c9b4511d0ae9", "indicator--9f6f2deb-2a13-464d-8e8e-f6356090d02d", "indicator--15182441-b20b-47e4-9249-52a099e34d3d", "indicator--9b7fc9e4-8969-4bc8-a652-aae849c2101b", "indicator--e7250c78-abaa-4351-8682-54c54d8a1e46", "indicator--fe4c5ba3-ef97-4af1-8831-40d922243557", "indicator--c53f1fd3-4d2f-415b-b1d1-492a7c945d59", "indicator--acc45abe-1268-4a00-8867-cfe62a3b3e91", "indicator--57a32ff1-6c8c-4954-9b4c-635d9f4bb2d9", "indicator--6f3f7e39-bbed-4bbd-bab3-9caa233b7936", "indicator--112b5697-2139-4ab0-90f9-3a62bfeaa348", "indicator--814086eb-d4a9-4c45-908c-e90b08d61ca4", "indicator--9829a9fb-67a8-4859-a980-b93bb0fc5f12", "indicator--cd4de957-1357-472c-aa10-0768a7423fd1", "indicator--ecb8def2-927c-4a75-87a4-f55b217e79c0", "indicator--3035ee9c-4541-481a-ae35-92bd0a94fcfc", "indicator--d311b8c3-946c-451b-a3f4-ecb35f6df02c", "indicator--7db40f54-d25b-4d05-bb19-e33144dcc89c", "indicator--cffcb7fd-7e4d-4f45-96c7-210f401e9ec3", "indicator--b2d3fb79-de88-47fd-960d-82eff56bc972", "indicator--d6a7f3c2-3224-4175-b673-2833b31b940c", "indicator--bb2cf494-9fc4-4d25-915e-8dc23308c7fb", "indicator--8f1f6a03-82b5-460e-a684-e0ff4c750ffc", "indicator--11954115-eff8-4f2a-aa4b-939599531a7d", "indicator--0f2f6382-c19c-484d-bc79-b0427c325191", "indicator--5940e216-f4e1-4100-a8fd-eba2d2f20a5d", "indicator--98255432-f755-4966-9d66-6ba841d2e144", "indicator--339c362b-7adf-4182-aaae-9b48f2cd67cf", "indicator--396b90e0-9de9-4d47-bf69-c86bb80ac024", "indicator--86b83269-bfa2-41d8-9870-a7fff3474fbe", "indicator--2abcd60b-cdfc-49a8-851a-9eaa49c173aa", "indicator--e3db93d1-369c-4a72-9d80-6ee91e678f3e", "indicator--91d9ddb7-9ca5-443b-a2bf-80f7149091aa", "indicator--ecf2b3ff-c8ba-469d-bbe2-4ee9fe8542cb", "indicator--048cc7a5-9e03-458a-9361-1d048bfe0aac", "indicator--a1cb47f0-c2f1-4503-8b07-bf424c91a551", "indicator--fdf8cc32-0d7f-497b-b774-8d57ee192642", "indicator--0fb3bfe7-e032-4602-96ff-8ce5f63063d2", "indicator--b3ef29c8-8576-4a94-912d-cd17949c925a", "indicator--c39413c7-9919-4721-8f0d-c3f06fcda61f", "indicator--89885107-f561-4f08-b7a9-30493f6f7e01", "indicator--efbb2080-7cd3-436e-8b80-70a75b66ef58", "indicator--1ade3c62-01c9-4295-ba21-cf90ab25d9ac", "indicator--64f8a7c2-7daf-461b-9074-bb7219883f22", "indicator--a4bbaecb-626c-4049-b4f5-e53aee5eb526", "indicator--9eb8f221-d89e-4cc1-be8e-715953a78510", "indicator--dcffae58-4168-4faf-9333-069d6d81225c", "indicator--f7d02dca-0cf0-48d3-bb58-2382448e5ff2", "indicator--0037a2df-86cd-4ef4-b92d-212c058923f5", "indicator--6abe8889-2214-48a5-aa52-07e827eba063", "indicator--52993f63-a58d-44d8-8b98-049ce71b183e", "indicator--523864ef-1fb7-4158-93f7-2c1ea4019d2d", "indicator--9cee9347-725a-4f37-a365-8f40d13bfa1f", "indicator--e4c75a3e-5cf3-4389-9591-747e7ee8437c", "indicator--85202172-d94b-413b-87b9-d3672d970389", "indicator--31d01f08-29ca-4e2d-b460-ef316bfeb2c9", "indicator--d407c4bd-481c-4aaa-9c6d-96cde282590b", "indicator--1f243391-4c22-4e20-95ef-c7b0135e6252", "indicator--3a59d098-b003-4f61-8850-87c966fc1030", "indicator--cd5d390b-67a8-4a70-b0c2-9e8721e4fe70", "indicator--fbe736b5-1d74-44de-82a0-a642f19f3147", "indicator--eaa24cac-72bf-45f8-893b-5ca6a621303a", "indicator--84f9502a-35a8-4031-90a4-631541d36231", "indicator--28153b03-9281-4bb6-850c-faf16fa668f1", "indicator--b9c5a213-a7cd-46c6-a8f6-f0f53f0276d9", "indicator--8b0e9ccf-d8c5-4131-8674-867fb3b9ad87", "indicator--f3dcd013-5b88-4781-9cbf-25b058bfe298", "indicator--3f267eee-3aec-4145-a61b-6eecb8898991", "indicator--9619ddf9-83dd-45ec-b548-c46bd73efc77", "indicator--d38cd6e7-6ace-48d3-9a1a-2f3f390bcbfd", "indicator--bd4420a5-6a33-4fb6-a107-8ba2a3d70657", "indicator--66090978-f8de-41b4-942e-abf7104a1414", "indicator--dcfb6c32-2cb3-4ab5-a349-b40200cc64dd", "indicator--2d9438a6-6cd0-4445-8ae8-4d18dfb6d400", "indicator--1b6b1dc0-b762-4fea-81bd-b872a3ba0d39", "indicator--847690f0-daa9-40f3-976b-f0d2184b356b", "indicator--4f93ba64-df71-4180-8627-fbf9a48d050a", "indicator--848f2b19-1082-4ae1-93b8-d5aacf96e7d4", "indicator--6f0bd40e-32a0-4db0-be1b-feda4d36d834", "indicator--76abb91d-b1e8-4826-b012-b206b0cfecd3", "indicator--bd682faf-96c5-4ac8-8e60-e629f9c989d4", "indicator--ad4dc4b8-c1ca-4c88-a2ad-9289d6f8a2b8", "indicator--1cff1d85-54dd-4eb5-987f-fbaa74e4f9c4", "indicator--8e9cd686-1dad-42cf-8e9e-ac293c05c708", "indicator--7b8c1ad1-bb4e-4bd0-ae5d-1e6c8c49373c", "indicator--e578d29a-1646-49c9-b581-b5d2372e6d23", "indicator--67aa5080-d993-4302-9bdd-abd29330d9aa", "indicator--ae365a6b-bc32-4b70-8889-72aede9672c8", "indicator--55afd43f-80a2-464f-a336-4fac262dc25f", "indicator--924028cd-ffaa-4dd9-8564-568b90fa943f", "indicator--17542f3e-a975-479e-a8fd-ae11c3649c65", "indicator--5f57c41e-d8d4-44bc-848f-a0ba52ac540b", "indicator--dab15908-fb4f-4533-90bc-08119603bcb3", "indicator--c4184759-11e1-4443-b29c-c556c4685238", "indicator--c43e4d4b-3b77-4aa3-b80a-905ecd7de6f1", "indicator--12d95001-2639-4a96-add8-f83e7d601395", "indicator--4a968e40-48dd-493e-9e43-4597cb1bb2b7", "indicator--4006575f-5c90-49bf-a166-9aa2275984a9", "indicator--60b8e8c1-23aa-43b5-b2da-5ec9150e89d9", "indicator--fc890fc8-2293-407c-95da-9779eb3c0c91", "indicator--379bcc37-bb86-48cd-ad8d-9bcf9c6628c8", "indicator--9359b44e-b6cc-4e71-9682-a36404289636", "indicator--69371e63-2855-4811-ba74-4a7ff5bbbaee", "indicator--b3b32d6b-fdc7-48f0-8c83-8072256c911c", "indicator--9927265a-6490-4654-8d5f-3f61488387e0", "indicator--b261b2a9-0824-44c0-95df-55279add8128", "indicator--6300de39-dbae-408c-a84e-1d2f6ccd874e", "indicator--1ed91f27-e310-4300-a9c2-2b58309c1a2e", "indicator--e3cfb939-494a-4002-8a81-76ff29ac36e1", "indicator--1a051340-72cf-44d5-90af-bb7f3e180288", "indicator--defca8db-13f7-4295-a0da-f0feddac7e1c", "indicator--432dbc2c-205c-49c9-b7db-ebb3a273a822", "indicator--c90ec53e-7010-446e-b649-dec6fdb06fb6", "indicator--d39e81b4-9def-4df9-97bf-d37a40888726", "indicator--88549aa4-fd52-4f2a-a652-332caf4f7138", "indicator--4496a288-3f9f-42a6-9553-be5d1a9238e6", "indicator--3f5b79f4-9738-46ad-9688-f09e8779087e", "indicator--5ae47d87-cca4-4672-beed-3df8ebf257f5", "indicator--c3ce7bbe-344d-4b44-a2e0-2e2964f870c1", "indicator--f0f35998-d6a0-4922-8f58-c9936714d903", "indicator--4c83ff45-e1db-4961-80c5-37e2c07ebc94", "indicator--823e64e1-ac73-4643-a7b4-052a5fac7360", "indicator--3d019bd0-4eb7-4650-bf47-fb43cb16c75d", "indicator--b67a9198-2ad6-4ff6-a11f-a9c68f8e9c4e", "indicator--c7a981c0-02e2-4240-95b1-b88b992f7480", "indicator--456f6ceb-6dba-40a3-a0e6-12c023432f82", "indicator--69ccb62c-ae81-4dbf-b435-0bd8d655fc99", "indicator--9c6a93ce-ff8f-4dc9-b87d-39f781338029", "indicator--25415acb-7e8e-49e2-b6c2-2ba9877886de", "indicator--4386ce59-4001-47c6-8c4d-022a7712b168", "indicator--9f890b2e-3d27-4e9e-8c89-319601dfcf9e", "indicator--e1d0979c-8c3a-4cb0-a8d9-278fad532128", "indicator--711eb52f-b436-4631-88d3-223cdccb881f", "indicator--1b89a7ab-989b-4dbd-b64e-15d8006fe63f", "indicator--06766b1e-c118-4a52-91db-0cb44d7042d3", "indicator--1d89efbe-d53a-4a14-9046-ea4694a0d264", "indicator--3c66254e-6c6f-44b8-883e-c3f522401b3b", "indicator--3f4bdf77-0acc-46e9-981d-b42641fdfac4", "indicator--41d0c4e4-1ad7-4361-bb47-313555ea31ee", "indicator--673daec3-b9c2-4045-a528-dce138b07b07", "indicator--981f6c01-73f8-4786-85f7-20fbb85f8c16", "indicator--40389557-aabd-4656-8595-31449d704713", "indicator--30c83c6d-8f57-445b-bfc8-1007c0c8f5bf", "indicator--3341773e-0621-47a1-a8d6-bd1351ea2e00", "indicator--ec74b710-5f2f-477b-8914-99078b1daf85", "indicator--80413a87-8dfa-41a1-ad4d-aa935976bd97", "indicator--4a5d38fd-ef81-4a6b-b6dc-99987ee7e2a1", "indicator--fb066bf2-affc-4ad2-b810-3bc715c26ce8", "indicator--91cdd1cf-855c-4020-92e4-ae7133f19bbd", "indicator--412a6734-35be-422b-afd0-b2408bb8ec00", "indicator--91e3c69c-0035-4396-9c49-c6e359c962a6", "indicator--45da3197-790a-4e3f-a45d-4ec2658725fa", "indicator--69426caa-626c-4625-b156-6d15a8328b08", "indicator--0e6888d4-4a11-40d8-99e1-a588f0b3a54e", "indicator--7374985d-ec67-49d6-8330-6cb31a763ae4", "indicator--80259727-992f-4313-80b4-4d382ba1ba42", "indicator--bca33220-a9e7-4ca0-9b13-26c812c00a28", "indicator--ca73354a-ce2f-4b21-8c6f-c049441d25df", "indicator--9950cc52-d6ab-4d5f-8cbb-4080b4282718", "indicator--10f8af65-8bb2-460f-87be-9a165fd65608", "indicator--6af97c82-d1c0-4b17-b9f8-e6854963bab5", "indicator--523fe69d-19a2-4116-aa53-0191e316b097", "indicator--6467688b-5d84-4e31-8520-d5be80d7e6d8", "indicator--93af9467-2655-4903-8c0e-3daae1a59ede", "indicator--7f19f99b-ecc2-44fc-acc8-b50d45351ae0", "indicator--876bb9e8-3460-4b48-96cf-2c0e41082f9b", "indicator--839d45f0-8365-471b-849e-8c49c5ba84ab", "indicator--932ab3a5-d56e-4b10-83f7-c3c471e6f688", "indicator--cefe4bdd-9c2d-442c-8852-65cc7b59279b", "indicator--63ffdbec-5833-490b-b6a4-a2292f61b80b", "indicator--15bbeae6-0ee3-4751-9596-542cf53f4e3c", "indicator--060e052d-990b-4019-be20-e0ee881504ed", "indicator--d6a3dedb-2075-4a72-9e01-370e6dc5a594", "indicator--e9d5a99f-3fd2-448b-a206-d4cf291cb972", "indicator--960f9a21-6e87-4cbd-9c85-779425aa6e2a", "indicator--3b2e3cf8-aa54-489e-bbf5-f40f89afddbf", "indicator--3465ff76-aee8-4d16-bafb-d094cb436082", "indicator--8abff9c4-c050-4186-8519-be199f85b9d7", "indicator--41483fca-ef6a-48e1-a1fe-1c8c504d9251", "indicator--cedc45e6-962f-4535-a01c-943793400390", "indicator--496de5f3-8764-4c0b-95ea-4d54e3d76af2", "indicator--64b0373a-13f5-4b37-bb32-073f45af66ff", "indicator--dca3b063-7228-45eb-ac4f-cf9c86580c23", "indicator--5c97187d-1c10-4a6f-a1ee-79f6ca7954f5", "indicator--dc51e75b-e157-403f-b4e3-47d4b170164f", "indicator--1458af60-d475-4f84-a476-e46522d5db15", "indicator--51942c2c-4e88-4d8e-8830-b0993367232e", "indicator--e541a318-1408-4e6d-a62f-dd8211a0b914", "indicator--8240a273-20f5-4242-9242-eb5c12365d10", "indicator--89ef8cd8-2b0a-4c53-9428-e1d246f7a9da", "indicator--bd95d250-b4b9-4dc7-9f41-36939f3c6da9", "indicator--b03ee730-7d40-4057-8b92-23fa310d9dd7", "indicator--9576f491-849e-4aed-9427-de4d7fade7c0", "indicator--aeb519c7-7f2c-4eb4-a056-687d099edab6", "indicator--bb1ba92f-db4d-44aa-97dd-98b34c8a39a8", "indicator--6d2fbc60-96c1-4ce7-ad23-6dbdaec8aa06", "indicator--938e9bce-1a16-4be0-8134-fc7530124b58", "indicator--7a261c29-bcf8-43eb-a86f-a4dbef069f3f", "indicator--692d6c9b-0cb1-4029-892d-3ce15eca9a27", "indicator--649f8b95-3cfa-43fd-bfe3-4d08ba19fa26", "indicator--1c328c12-6c79-41f7-a443-5f706480d7ab", "indicator--e9e05875-d42d-418c-a36e-1a8afc83bd46", "indicator--884b45bd-e590-46df-80e0-a6525d594c87", "indicator--fbb3c0be-6ad9-478d-9348-82d731418f82", "indicator--6cde9d79-2a99-462b-82cf-5551b5a12577", "indicator--a7bb1938-830f-47a5-b7b4-ab9b5f92b8eb", "indicator--bcd3bcb7-cac1-4107-b830-6060288441e7", "indicator--07e5ff57-553f-46ea-8643-a665b04834e9", "indicator--2b8bcd11-42c0-4781-a282-41e4b110ba7f", "indicator--d98752c3-403f-427b-a4a6-7bb704f1e293", "indicator--99e4884a-6a63-4a2e-b54b-59ad32f54fce", "indicator--f011bef6-857d-41b8-8a73-3db5317ef15c", "indicator--5a7e3217-1b54-4cd4-ad8f-1919b0a1b5db", "indicator--18edf3ae-caa4-409c-9a14-6c420cb8f4cf", "indicator--b956b348-220c-4b7a-86c7-ed50dd861bc7", "indicator--8cfa37c0-483a-4e41-815c-1a67b7f4f575", "indicator--ffab28ad-54d7-4dc4-9a58-c6847d24df11", "indicator--650b0ed4-695f-4377-add8-b4cbcc38c749", "indicator--25e002d2-1e95-48d8-a386-85e0c11b90ea", "indicator--3d34ea86-5b3a-4fbf-8e77-60e06db2afe6", "indicator--bbe598ce-9d6e-4ad3-8211-592cd95532ec", "indicator--57e597f4-139b-4128-b598-cdf87fb1621d", "indicator--ab0ca4df-e8c6-4805-a4b4-5db01c212790", "indicator--1e5c2a78-822a-45f4-8b6c-896b0bf121d1", "indicator--e9a3e025-640e-4446-adbb-0bf308f03a26", "indicator--e7f5f9c2-68e5-43c3-a9fc-468924223c0c", "indicator--ab6a85ce-d432-4e25-a9cf-ebf1a635dd47", "indicator--e1f450c7-10f1-4712-85dd-36522a4f6b29", "indicator--7c08ace1-d154-4991-b4d7-6b95c3f6d890", "indicator--38450ead-f67a-4b91-bba5-21fb77571338", "indicator--78dcaf40-2600-46db-95ae-9c58264d993a", "indicator--feda25a4-1238-4710-a867-743096dad070", "indicator--8243b06a-39b9-43fc-9a05-7c78f60a2d75", "indicator--39c280cc-de49-44d3-866e-3a2df704a570", "indicator--9c859fe1-8ce7-4301-b49e-33f0eee2f55f", "indicator--3e5b6e91-1b4f-4a8d-9544-b784beaead7d", "indicator--d50750c9-0d05-48e1-8307-88a8f0dac513", "indicator--43266c77-5f35-455e-92e7-fc4596415343", "indicator--1e2755ad-80b6-4cbd-8aca-2b418504046e", "indicator--57251f68-833b-4852-9352-ed18caf3560b", "indicator--1da56770-98d0-405e-b071-ad5c9af7b65f", "indicator--1c6721ec-da71-48ba-b64e-95fe36be2bdb", "indicator--177aebe7-81f0-411c-8d01-97534a6a63a2", "indicator--a99c71dc-b112-4e04-b2b2-bae095e1c779", "indicator--d6707fc1-4cfa-40b6-a125-0b4c5de3dbb5", "indicator--18a7bad9-4de4-4fbd-a61d-a4e163bbbde3", "indicator--ff872951-d9a3-47eb-9522-3fb613196955", "indicator--6c648e5c-2434-4452-bd7c-86da6492b2c3", "indicator--90f74d9e-8480-468f-9e23-047928fe3ce9", "indicator--d9b62f7d-2ef6-4278-b223-fce54a2fc656", "indicator--46545196-8e77-4b50-aaae-890fd3f0b947", "indicator--c24c27df-3258-45c6-b48b-e2233ad6a7a0", "indicator--d3e184a0-5ce7-41b6-8a07-dfe65b957d22", "indicator--e024bd48-31af-47aa-ac41-f277044194f6", "indicator--d1855c6b-8514-4b07-a10d-01198bd969ef", "indicator--a925028e-0b3a-4c0f-a103-17cf155eb1a1", "indicator--7ab6fb1b-7612-4046-b9e5-16209dd82456", "indicator--194a5802-3eac-41c3-94ec-297443a51751", "indicator--a4472157-b91b-4c31-8bd9-f0551039e43b", "indicator--a54c5713-ef11-49ae-bdb5-4ff509e6c9b0", "indicator--a7eb2d44-01b0-4979-a828-f4e3fd4033b1", "indicator--0206941f-080e-438d-88cd-4b6bfc9f6dd5", "indicator--ed1293f8-e1cd-425a-a8f5-93a0cfc52833", "indicator--3db438b4-4300-45e3-9f34-45234fbfbdae", "indicator--544c01e2-0ff7-4e1f-b304-01ef52b3a339", "indicator--2ad7f4d5-a468-4713-973e-f14c8325d040", "indicator--e9da17c3-251e-41ee-9214-c0a839e65d14", "indicator--df055325-e7f8-4838-ad6b-785a83beb7bb", "indicator--937f0e32-66d5-4bf3-abb2-92218c07d5ff", "indicator--15302605-1e43-430d-81ca-ffc546386985", "indicator--504dab58-eaa5-4d8e-b769-68e039f5a635", "indicator--73842bc4-29bd-4a96-9483-b49e324ed07a", "indicator--80af51b8-3218-4dc6-bcf9-e45231670722", "indicator--971933ee-3c37-4080-9760-6b50a368ca44", "indicator--b5e4ec81-2e2c-4595-8545-c650d2fda99f", "indicator--bdaaefdd-da7a-4d19-9fc3-7332d4ff984b", "indicator--40fc9289-9e8e-4334-8fda-bf48262db1de", "indicator--986a9281-7d52-4c72-8ebc-8f1af21e7734", "indicator--21f17545-b254-4fe2-8ffd-f7fed0a6b89c", "indicator--c7b6c2d2-b484-432e-a452-58adac33a639", "indicator--dc91344d-88c1-4066-8581-67616287be76", "indicator--39335864-4746-4c17-b6f0-dd708fa53c3c", "indicator--59eb0e90-490a-45e1-aa8f-36f38d142601", "indicator--3b95eecc-8870-494b-b2fc-ae1166a56c27", "indicator--7f3074ee-e48e-4262-a979-dc783f707444", "indicator--23466a88-8e89-46cd-aa14-5aa329c610c3", "indicator--dedbae08-8048-4bc2-a8c2-5a304eabf13d", "indicator--55f6d481-8602-4d57-9dd8-3f3cb445da9d", "indicator--9433efb1-914f-4bc0-aa20-c4e88ebcc094", "indicator--697c1fa1-8b38-4809-b498-1c559ca93938", "indicator--8dcfcdc7-696d-4fa1-8118-c2db7bbee6e4", "indicator--382d506c-8db2-40b5-854d-6ea5332d45a2", "indicator--fbfc6412-3f71-446a-86ce-ce5a731d80bd", "indicator--b90fc18c-bfef-4c28-958a-b8c1aab69dd0", "indicator--f4cc46df-84c2-4187-b8ef-6dfc82f939fe", "indicator--dc676344-773a-4914-b3eb-1e43dddc70f3", "indicator--96cd6075-6e1b-46ab-b147-cb55157945c4", "indicator--4925975d-2ab3-416f-bc63-979e6c09d323", "indicator--1904a939-8ba2-46fd-a334-13ba136cefc6", "indicator--1f1f67d0-1091-4ebc-88ed-5d4795d89a79", "indicator--818a821c-0d99-4808-8d19-6c866223aabf", "indicator--7bb00e03-1ed8-4a04-b3b9-d65908d0c5f1", "indicator--55288624-fa04-48f8-b158-0cda460a7a6a", "indicator--9251d5f5-4cde-4fab-bdc7-8f738a73a8a2", "indicator--7c0f5c00-b716-4b0d-81c0-66a383d7acc0", "indicator--942485bb-f45b-494b-8d09-6a2d2fb77815", "indicator--4f4b180e-439c-4d63-9660-e8668d5ec496", "indicator--2771cff3-76ce-44fa-b1ae-9aa4d37f449c", "indicator--c4adce1f-95e5-4832-9121-4c551df3228d", "indicator--2f3f8dd9-48ba-46ec-88a5-c6c283ab75fa", "indicator--ff7192b0-7400-4ea9-bc6c-c9f17bd28131", "indicator--fe13fc84-65d2-4708-b2ba-a546a4e57e07", "indicator--43798e9d-de02-4130-94c9-2cebb3398cd1", "indicator--95a3bfae-af84-4209-815e-c92123495158", "indicator--7f35a869-2c9d-41e5-a8be-5a7aef19cb60", "indicator--09141d04-32fb-4272-8d32-d11d33fb0d53", "indicator--b83da3d3-26d3-4bc6-9312-6b56d9372623", "indicator--d3e91b3c-d8f0-44b1-96bc-51b2886b89ff", "indicator--f0d1bbda-d294-46c1-bb2f-c4f8619aacf5", "indicator--0f87a0ab-71a7-458f-8a60-0d15032e406f", "indicator--bf42a4d1-dd8c-48ec-9750-06b19fab1d60", "indicator--6661bba5-3184-40d5-ba11-41e22b669a21", "indicator--a27cbd54-d6ee-4460-8533-eb94f60401b2", "indicator--26751383-a4f7-4e58-8864-525e6d9d4584", "indicator--9b4bcfc7-9237-4346-9936-1681d6dcdb84", "indicator--7440d9d6-c980-4609-8135-e97de388051b", "indicator--c61b70ef-98e4-42d9-b7f8-0d4ad9b63298", "indicator--abea7340-c25b-49ed-be78-9e3174c8b4df", "indicator--149e9d51-d010-4a58-8398-55d15b50da44", "indicator--ee1db90a-0e12-4949-bcb0-0d0a04f93aaa", "indicator--45b75fcf-addf-4e71-88d2-e53651b3cb05", "indicator--6eed2478-0014-4727-811a-61eb98c12c17", "indicator--88bc4fe7-6a42-46c5-88c4-c307bac45fb4", "indicator--c8093254-d16e-4cb4-91a7-89f4f19e1308", "indicator--5f17b6c0-a674-4784-9614-3a58c4db0fcc", "indicator--3d97e02b-1d25-49be-844c-175b461767c0", "indicator--d2294710-8d30-4a68-b21c-1ec130472243", "indicator--5ca5fbef-a2ba-4747-b2c3-395ef692498c", "indicator--f4527716-1168-4964-af8e-8d635bf20957", "indicator--860e2037-e615-422b-bf99-ac31913f7b32", "indicator--0e55e9c4-8a8d-487d-af2c-95135c6dc666", "indicator--a13a4c82-9414-42ea-b2dc-d6798e5bc9c4", "indicator--83821ed9-2908-4424-9b5e-8ee9f55019ae", "indicator--55a85a5b-cba0-40e0-884d-82ab1942c721", "indicator--8e7d1eaa-3ba3-4c0e-b36e-e218151b1e41", "indicator--09c0f9c7-a29a-4ea6-8431-1913ac6c4519", "indicator--66376ae4-74d5-431d-90fb-e20f2d17ae6d", "indicator--8a002655-de8e-4b2d-96fb-00edcfcd5918", "indicator--f6561d04-39aa-47f0-b870-ae1da2de5249", "indicator--10e2801f-a8a2-49fb-ac21-36138db8cf48", "indicator--d2f582cc-ae77-419d-89e7-6414f5e40d39", "indicator--86e46d22-8c82-468a-9850-834607c8e0f6", "indicator--55c662d5-fda5-428d-9b93-d37e4f259c85", "indicator--b631363b-2ff6-42bd-9576-8ce6cae5f409", "indicator--1b059aec-303a-4b3e-a0cb-30ebb6dff978", "indicator--09297e5b-23d0-4e45-afd7-e77712f9a996", "indicator--7339588d-6277-41f6-85b3-b50bc097d492", "indicator--245393e1-2020-43d9-b8f3-0910bde08891", "indicator--446a0da5-fd39-47d1-8760-efcacd2e4820", "indicator--3094498c-bc7a-46b5-9fc2-9d08c3a4ce34", "indicator--7b20c50c-ec4e-41f9-8358-1a97b22c10d0", "indicator--d773fca2-89b7-444b-be26-8fed74f422c5", "indicator--ced621ad-4ede-4278-90c5-41d520165051", "indicator--0f80affb-1485-479c-8fba-1ec8c80084dd", "indicator--ad40349a-ff49-4154-b1ae-1a8ba8409ad4", "indicator--0c5fa8d2-9322-479f-9013-2710fe2fc855", "indicator--85031919-461d-4b56-9eeb-76ea92e58362", "indicator--1def97a7-d8de-4af2-bf3d-5909d15f3ee2", "indicator--83bcffc9-83e9-44d6-8866-2c9256f29386", "indicator--bfffa799-7ce6-4121-a9d1-ff42451b495e", "indicator--45d36b65-83b5-478c-9633-8b24c3e6d262", "indicator--af6ce416-f225-46e6-8181-bb1259785b22", "indicator--5f01dd52-965a-4a44-abae-8945db37875e", "indicator--b22cb1aa-e5c3-4e1f-bcc8-fee25a21a45d", "indicator--22df414e-ca57-4e22-a66f-feb1b0302e75", "indicator--7f83112d-3512-4e13-b108-ef5d60a1ba33", "indicator--e5d6112d-419c-48c0-b210-15a3aacc0583", "indicator--32b74b30-5e03-46ea-9170-60188aea61f5", "indicator--80982157-8293-44bb-a126-bd12fa3024ff", "indicator--4bc464eb-7174-4333-a16f-696a6d98d72d", "indicator--b144bc6c-a751-4021-a9da-02d6f4f51e1c", "indicator--775206b8-4c65-4703-b250-3a7e0d14c557", "indicator--a115c5e8-83b0-4db8-b09e-627c60954a12", "indicator--e3c9d70d-0f78-4b28-b58e-ef02051e58b2", "indicator--ae8c9c11-a748-427b-9629-3ecf505315d3", "indicator--49561527-2a1f-4610-bbe0-e0955ed24e65", "indicator--4763a769-f55a-4782-8f7f-24bf3ca8ee89", "indicator--6783d71a-60ed-4ac7-8e75-5538e3285a56", "indicator--69a20152-b45c-4e76-86d8-d1cb858f7929", "indicator--8c1680ed-e24a-4091-92d0-6e470a61f293", "indicator--4ce75c3a-e73b-4b7e-b0cd-272fd39deee1", "indicator--aab08a9b-2d1e-4122-8c60-c4c8c3b85801", "indicator--d6c92c85-04d3-4511-aeb1-6a4b603c0b5e", "indicator--4493f82a-1c91-46e3-961c-44a182ee3629", "indicator--43370031-5f83-48aa-9230-a531c8f861ec", "indicator--f5df4abc-877c-450e-a170-03367f077187", "indicator--67b5b407-dbd8-4295-8941-a632bbd3c41a", "indicator--9b8d67fb-be81-452c-93de-81cc8f0b7cf5", "indicator--3310ea9d-34a6-4a6e-a88c-364aeda6c8e0", "indicator--fdeec44a-1135-4fe4-971b-6857cf498aa6", "indicator--ce41e712-4ada-4cb9-9d77-f6412f34c091", "indicator--4aa35fd9-f7a6-4889-8694-d0d3edd0fd87", "indicator--53c40775-62d3-46b8-b91a-ecf864046b5c", "indicator--f2475fa0-2c94-49cd-9c86-4a8ad0c92116", "indicator--aead0468-39b9-4447-96f8-c42186035835", "indicator--69ca2c33-ef16-41fb-a557-011230ceaadd", "indicator--dfb8f6ee-24a9-418a-b94a-582ff7c78cf0", "indicator--f396b492-e4ef-4b97-a308-a6ccb9e238e4", "indicator--1e07fbdf-6996-499f-85fd-1db219c740f4", "indicator--3e1637b1-449b-413f-994f-e67002f83590", "indicator--424b2605-2030-42e9-a552-48c4f7d967ed", "indicator--dad07d25-6e0a-4cd8-ab2c-4fc82116833f", "indicator--8730a84e-aa97-422b-9f17-a200f307c530", "indicator--adc9bdd5-94f5-4bb8-a869-18735d253d6e", "indicator--9a93e29f-7c96-4513-a4f6-cf992ea4ba3a", "indicator--c4cbe6d3-353b-4a16-882a-3e89835154dd", "indicator--990d6971-7b38-41db-a804-bd5387a5a4a5", "indicator--72cfa388-80d2-437f-9c8b-8917ec498170", "indicator--eb5d07d7-18db-4244-b4b0-e7db99e943c5", "indicator--ca5bb05d-123b-411c-92c1-9cafc93154fe", "indicator--98a95ee6-2517-4024-b8aa-efde2cf88856", "indicator--a2989b67-3fe3-4b7b-9bbf-19f1f7c1320a", "indicator--9e0baa0e-8138-49c7-a8e6-b438bbe61102", "indicator--a729ab90-52e0-4318-ab56-a3d74fde84e4", "indicator--10aa2d87-21c0-4155-9de8-9c3894396446", "indicator--e902531e-93d4-478d-969d-edcc065feb4e", "indicator--55f4045e-a81d-47e7-aba9-118d13429574", "indicator--222ea30a-eb04-4efd-9c72-b1260b47282a", "indicator--2151f6ec-79a1-4a17-bbd9-6cb495d57e15", "indicator--f6f1576b-0ca2-4f43-8d85-49dc94661615", "indicator--ae2918a7-14a4-468d-a0dd-9f4900887ba6", "indicator--ed67bf3e-20e9-4450-813e-19d32ed1b791", "indicator--7dded9e6-63b8-454e-9707-9ea704782592", "indicator--5d8e94fc-5df0-4e7c-ad8d-64e492f55f2e", "indicator--dd86d95b-6f3c-4cdf-be21-404f229e8e9d", "indicator--cb9e2f5a-e4fb-4487-8092-a5f9d9f56fc7", "indicator--d7f4ed0d-7087-49a3-869e-2826dfe5d46a", "indicator--75dde060-0ea3-449e-bd8b-6fd7630688d2", "indicator--a265d02c-6131-4a4b-8e1b-17d3814c5126", "indicator--98960db2-34ed-4fc0-b271-dab0d6d6adf6", "indicator--270a43b9-b43c-4de7-8dee-08c53f6d77b2", "indicator--cee89816-ffcf-431f-87e5-cbd356de795d", "indicator--8590672a-646e-4eae-9b3d-a3ab9e79544a", "indicator--90f89473-aed8-459f-8297-f0b461162b99", "indicator--f28f9342-f590-42cd-b8cd-d2f61e46bd20", "indicator--74e28735-95fb-4f1c-a5f1-6ae308ef44e9", "indicator--fb137297-02ae-4e7e-9c9e-743f18e7c879", "indicator--b2a57a2a-40fa-4099-86b6-232cb609bf8b", "indicator--9dfadcfb-4ab3-487c-88d1-42640dd36bc8", "indicator--e689bbd4-7f87-469a-8611-427358df197c", "indicator--982e0281-4682-45c9-a651-680c9f121a3d", "indicator--56d131b4-f86e-440e-9c43-a90aafb2e745", "indicator--dd72c08f-9746-4201-bce5-99b56986c7f8", "indicator--290389ca-bbeb-4d06-980b-b5a0e406500e", "indicator--e1452da5-f874-48ae-8eba-e643b4c28c3d", "indicator--b673f43e-99eb-44bd-8f15-1e010a529176", "indicator--7144c46d-f2ce-440e-9fad-e0451db6541e", "indicator--53985d25-56c6-43ef-a99c-ad25e9c989df", "indicator--fa081e2d-d0e2-4028-be02-91db04ecd643", "indicator--7271c2a9-33d9-40f1-b471-b66c68f1d7ec", "indicator--0d473ba6-964a-44c7-a906-551786fb22d8", "indicator--931c8d16-ff78-4fc9-99fb-49243a01d4cf", "indicator--51eb4bfa-1112-4cb0-a883-c2dc7b4c01a0", "indicator--be155e65-7ad4-4b06-ab57-3cee78838679", "indicator--af9f554f-3a3f-4316-bc8f-eab84189a30a", "indicator--2a04e2a3-5847-4756-ac7b-a598474f36ac", "indicator--bebee377-4123-4813-a332-507ed2da67fe", "indicator--c9cb26de-e74b-48bf-8b4d-cbcf9832a30a", "indicator--5e3ab45a-433a-469a-82a0-121bcbd2cbd6", "indicator--f5e66285-842c-4f0c-bd8d-4fc7be743a47", "indicator--b7fe3ea7-f427-42ac-9b2b-4a55c31b4f0e", "indicator--09413566-58c7-40e1-b909-fb2cf5722ca1", "indicator--7c4cd7a1-53e6-4152-a764-c786d315173b", "indicator--4db54c0f-2a06-4075-8b80-a4834544e960", "indicator--659a7868-5bdd-498f-8f03-3d3519f33b24", "indicator--4d26118e-1144-4742-a9fd-9bf151f0a142", "indicator--6007546e-5d75-4d85-b0d2-c527dbdfb11b", "indicator--85bb128e-a57a-4537-ac95-fcbe451c669e", "indicator--01bdc053-9990-483a-a218-2324e79fe4ae", "indicator--9b6fc98f-ce63-45fa-8247-a70729d43fbb", "indicator--64932c43-f763-4350-b384-781d43d57f19", "indicator--b775c7f1-0ece-4a00-8d04-7488a42a04f0", "indicator--3e1c639d-186b-4cef-863d-0262f1de80ae", "indicator--3f3fef4c-fe17-46b9-8aa6-99c26858c4ef", "indicator--55445bfd-1f29-46fe-b340-232e9da78abd", "indicator--0bb37cfc-e60a-4ca8-8712-495c0009916d", "indicator--c5462740-c602-4d02-a2f5-3981641eec04", "indicator--29ee2b94-58a5-4c92-9217-41191429cc91", "indicator--137b7cd1-01c7-411d-8cf9-60f4d56cc6af", "indicator--f27f5fd7-5b7e-4c90-9159-41235368af4b", "indicator--aaa0a503-d73b-4d7a-a5e6-e140a9628960", "indicator--1d9fd77f-0356-4be4-8286-1083a96e35f9", "indicator--9f19f3ff-49df-4229-a2c5-cdf32ec80a83", "indicator--33383a70-5010-4e54-8fdf-147ddae1dec2", "indicator--c7ad5a62-57ab-4bc9-a710-f1a208a866ec", "indicator--e0ce30c0-4a78-42e9-bced-5af70a01d299", "indicator--b6cbb821-2e85-4ea0-9a34-6719998b678f", "indicator--4ed477c1-2cba-43b3-b679-fca46a48cb2f", "indicator--0dcc2e74-4986-4e0c-9928-b8b494e3961f", "indicator--f04605ca-7826-40f5-8518-852938658085", "indicator--b0029637-1602-4f6e-b77c-c77176b9bb8e", "indicator--2fbcfac0-8e2a-4e0b-a9f5-403f84445412", "indicator--4105ca2e-9266-4ffa-bf5e-fee6a5f33f21", "indicator--1a19f0bf-cc29-4ad8-a480-2baf94e4b3b3", "indicator--3953ba36-35b1-46a7-bdea-e5f0e1e240b7", "indicator--2f509593-51d5-4b6f-b4d5-4ce062d0ea0f", "indicator--1c37cd35-1e3c-4485-9c47-88d343a455f5", "indicator--029f614a-6820-46c6-8594-c9f593758831", "indicator--1b5f788b-9e3e-4c65-90de-0b2e7094a8dc", "indicator--5febf9fa-1503-4e4b-86c7-6e6006defa75", "indicator--23218eaf-80ea-4b02-9f9d-c42cfbeb45a8", "indicator--49d3b092-5e85-4f3c-8fb5-4745ae1990da", "indicator--687d4acc-0335-47d3-867c-77a415ff6c83", "indicator--7b55f711-1158-40a0-b092-60c80e97e05c", "indicator--30a3e00b-3290-458e-a889-deff26daca92", "indicator--d4ef15ba-274a-4887-a32e-470c93c92fad", "indicator--d0723517-805d-44f3-a5c4-aa6de8b1f0fe", "indicator--4732c6fe-a6a3-4d8b-8094-9797785abe22", "indicator--05b4803a-00de-44c9-b16e-a56650f3de73", "indicator--00265d6d-4ca5-401d-8027-830b84233df3", "indicator--5d434704-0405-4130-9beb-c0de6a5cc548", "indicator--5a34f549-4ecf-4739-b4b3-72b0103234ef", "indicator--b936a452-621d-43d0-905b-b2f06682b4f5", "indicator--50b9e8f6-da90-45c3-b3f6-ca7d5c821ff4", "indicator--4d90b56a-529a-45f7-a2d1-5079294c58ab", "indicator--dca097d2-95fb-4a88-aa20-ec246f9f609c", "indicator--9a0e566e-5e64-458d-9cca-8fcafda332c2", "indicator--a94ce510-c25c-49be-9adf-4abebc02b2ee", "indicator--b3c133c7-3797-4385-a3f7-fef629192a8d", "indicator--91f00395-a081-4ae2-acf2-32d422161693", "indicator--8e9f9b9c-01c3-4885-8961-1d5317624d00", "indicator--abe69c27-0854-43a7-9337-ff58553424b7", "indicator--e54fafdf-79b8-48af-8285-3394a16cbce7", "indicator--34a93264-7a79-464a-9f82-111122fced47", "indicator--5f5cf7d8-4e15-4ae7-a842-59c92ababfcd", "indicator--63103a9c-b957-46d5-9aa5-bed523b181e7", "indicator--0b49874b-59be-49d7-9af1-0d608edfcb55", "indicator--e0e54dd5-d180-400c-8bfd-6794fcbfc112", "indicator--596bd991-7cb8-4f4d-8850-739eaeb0ce0c", "indicator--af5eefbe-5e94-4f8c-8cac-90f7ec430d48", "indicator--74c4373a-58f0-4491-96ef-0fad3941aec4", "indicator--d9377312-7b1a-42b2-ac49-e9f2fd9f00cc", "indicator--a9245740-6bf7-46b2-a88f-b49f3c88ad1e", "indicator--e33c6e8e-cf76-4c0d-9fcb-b2958a83813d", "indicator--20393269-d87e-420c-ad69-df13ed3a0210", "indicator--3c95af14-70df-4518-bdbe-7f7dd801d49c", "indicator--8f7c4b27-7042-4b16-a772-3dd4c6edd346", "indicator--7bba7f65-cda9-4ac0-b946-a6a20c2336f1", "indicator--aa2b7d75-154d-4c6f-af76-79d3c0b20646", "indicator--8763638a-7ed1-4305-afcb-102d0c1f52ab", "indicator--bf796a76-de8c-4d3d-add6-bf689dbcdc45", "indicator--a3e6b7d3-2a23-4dd9-be4f-7dab99dd5310", "indicator--a3e5ab0c-00a8-440c-b436-c6e2da67b524", "indicator--b0d423f2-fcfb-49fc-af4b-04a0dcc13f0e", "indicator--4fe71778-56bd-40f8-88c7-69b3a057c55f", "indicator--f4a1b19d-a652-430c-ada9-4f4988ae9e59", "indicator--dc59c597-474e-4554-b871-d9d7e8308b68", "indicator--789ffe27-9a47-45af-8318-f670224df69e", "indicator--a0a80ed6-bbe5-4426-9df2-dc29be6a7771", "indicator--5980d073-7c20-4e96-a34f-bb4523e6282b", "indicator--d96342f0-a468-4bdb-a1c5-d154357b3078", "indicator--561e5d68-f096-4aa1-9fdf-fe85981767b9", "indicator--9ac25699-26ed-47be-aba2-31031d84c84b", "indicator--6ea8fe79-9fb8-40cc-9e63-4028c26d2e35", "indicator--078b9961-953a-4fd4-b62d-73ea0ce17db4", "indicator--679ae36d-5982-40c5-a7cc-fad3f3d4ee80", "indicator--63e5ce46-2e2c-46b1-beef-12978f4b177a", "indicator--e4b42f9f-bb2f-44e9-933a-2623a50d2f2e", "indicator--a36f8393-f1d8-4847-b14a-ef9e7e96d891", "indicator--d5cdb97a-d1da-4985-b5b3-abf7f171a2c0", "indicator--a36318fc-c555-4bdd-9bae-bf76630a9e31", "indicator--00ddb425-09b5-4520-b041-a99a4c693cce", "indicator--7f2260cb-6b3d-440e-9492-c9be6045443e", "indicator--777d5b3e-6db3-4b60-87ed-c83da8f144e7", "indicator--17ef155b-ba19-4ce5-9445-121554eaa3fd", "indicator--f2da8314-6540-44b2-8abb-06d03af7feeb", "indicator--6128f1d9-4a7a-438f-ab09-3d22d6199c11", "indicator--c4e093ec-e6e7-44c7-930a-bdea87e3daef", "indicator--92fce1ca-8b29-4489-a37f-bbacfe27dda9", "indicator--ba856e48-8c98-4186-99f6-6e1cd403dc09", "indicator--fabffb76-bb25-4e5f-b03d-194d1375ecb4", "indicator--3e0bbd05-c0bb-4ffd-af1c-b31aabd58702", "indicator--42a80bc4-c0cb-496b-b551-9ff317a931de", "indicator--ace84d29-28b9-448a-a3e3-88b709839d86", "indicator--138dcb0e-114a-43ab-b09a-8ad4294c03d3", "indicator--b98db8ed-bea5-48b4-9f41-e1be53d672a3", "indicator--9bcf65f2-50c4-4f97-aad5-ad612d2453f0", "indicator--cc497ebb-c7d7-4198-944b-f3bc99669b32", "indicator--65929aa9-f879-4152-86f3-3772a0a35720", "indicator--001ab31a-eb80-4a89-9720-f7b628c29e9b", "indicator--707e9f77-d3a3-4743-a62c-f5aeecdbdff9", "indicator--09c90535-7765-4d84-8baa-7f3cd2042727", "indicator--550ed43d-25d9-423c-baef-01f6af7bdbfd", "indicator--d0c93247-5ba4-4bf0-8330-ac82e3109b9a", "indicator--b546bbab-5cb4-4fc7-aea0-6e846aca4f7e", "indicator--3f8d09db-9dbd-4135-93d7-c9527e65b7a7", "indicator--62669554-7e1b-48d3-9ffb-91a0d91d0fe2", "indicator--cf4c8f96-ccc1-4f03-8f7c-a80453047521", "indicator--c88fdad0-cadd-421e-bba6-18668c027049", "indicator--efb3dbcc-7672-4142-a541-3b61c483a09f", "indicator--723055bc-2aaf-41a6-9de5-b651897d8da6", "indicator--cbb964fc-a32d-434b-8451-1bef01ce79a3", "indicator--99c642ba-bc18-4a55-8b91-d30485fec870", "indicator--d147a25b-5bef-4dd1-ac35-50bf52c71b01", "indicator--59704509-8665-4b71-be4a-7c9d691fbdb2", "indicator--1d38dac4-ce3b-4070-a01a-f8590ff7fbdf", "indicator--bb0b1e0d-f6a5-42f6-aa3a-7ceafe3b9644", "indicator--f9daf2b6-f180-4ed5-840a-5e5302810e86", "indicator--4f28a6c0-0f93-4078-b1ff-7bb4416a77d1", "indicator--31b6e232-2981-47ec-b7a1-cac6a3b64be5", "indicator--935fcbd9-8b50-4ebd-8912-0eaa310103e7", "indicator--7e38ddd3-8bac-45be-91c2-39a2ffdc0356", "indicator--19ddd54e-0718-4f06-a756-803b4cc50f23", "indicator--36f97cc6-080d-439c-93ad-5987544d55d9", "indicator--c705c1ff-d5f5-44e2-85de-445f4983f20e", "indicator--da93aac0-b817-4bb0-ad8e-a98c59a82243", "indicator--513a0957-2bb4-44ac-9d00-dedde4ffe6a0", "indicator--8103b57b-8bcf-40d8-853a-c86d384c4ac9", "indicator--d08fcc3e-f887-4c55-9127-63cef15b635d", "indicator--ef20979d-796f-456e-bc4b-eb4c219f7808", "indicator--28829de2-2b84-4959-92e4-e278f45aacf1", "indicator--0c957bb8-aee6-4d43-b8ef-448d47912600", "indicator--f473fac9-7554-420d-9756-849679ec2ea7", "indicator--79f36f3a-258f-4c25-ab3b-69a70adbbe87", "indicator--9b39ecd1-4795-4be2-84d3-3d2591f93965", "indicator--b10840de-553d-495f-84dd-a61868ad9550", "indicator--b2e6dfbe-d06e-4a3b-98fa-9309c9b89c66", "indicator--a4d1633d-a1bc-4fe2-9118-c01551841601", "indicator--8209a915-8c04-4d5c-a531-1455ae59b8ef", "indicator--c27694dd-bad7-4530-a694-acf44eaedf35", "indicator--907c4086-9b3a-4542-a916-ad20aa92f59f", "indicator--91c1a03f-6376-4680-b56d-c9e0cef0f4b9", "indicator--e2d21525-6a96-4dbd-87c6-31e76a8971a6", "indicator--e608564b-ddca-4ccb-8701-1b351ddd0547", "indicator--8d21425d-4403-4791-ad80-6a62f3df8369", "indicator--57ca2c10-66eb-4be4-b9df-b0352ac0c748", "indicator--c655f748-12cd-4375-9b7d-38d2fdffe52c", "indicator--32ecae25-6d9f-43d5-bbfa-53e6a429b3db", "indicator--412d597b-292f-4d52-a568-ae992bb6e217", "indicator--cd79b10d-3027-4178-9c42-b15cfc818954", "indicator--44b38055-a239-460e-9863-f87558b89b10", "indicator--c10c3f75-fd7e-45b9-a7cb-3fde889a182f", "indicator--9b3e8be2-c735-4fe9-a264-db8377c6d495", "indicator--efc16ec2-26d1-417f-bc86-f92d0e09206d", "indicator--0f976ec6-90d9-40c1-9fae-11d3edc65cd3", "indicator--789dd726-0d52-492e-9122-842f2f9866ea", "indicator--842291ae-0f80-42ae-9266-574ad5f8783c", "indicator--03e928e9-6c1d-4ac8-9f07-b3aa8f9063d5", "indicator--b855df9e-bbc4-4833-9372-b3661bdd323e", "indicator--5f885fdf-29ca-4567-9c23-86c12a47ad72", "indicator--2d5eb7d4-a47e-47b8-b9ba-8387ea380f85", "indicator--14b7c683-2c61-4451-81d6-3c0bccc1031a", "indicator--bd260e2b-0230-42cd-ab98-72a7877a3f5c", "indicator--8a058005-a4f9-4543-8fcc-fc1ea2bd47b3", "indicator--a1f15e72-4d5e-48e4-9382-22ef2826c283", "indicator--421de8f6-5c63-424d-bc4d-80a133da01dd", "indicator--828173b6-04a3-4797-803e-739269f8866c", "indicator--e53d1dbd-8935-4e8d-a721-490edab57dd0", "indicator--39fc58dd-7088-4cf8-b400-f562d1b57bb0", "indicator--443f9f4b-501a-46a4-bf64-71fab347176e", "indicator--f46eb14f-1e86-4191-b736-fe74bbd05569", "indicator--f06d3523-84b9-428d-a382-9c689b955d85", "indicator--1da94096-86d3-43fe-9b0c-3a6fbee6770d", "indicator--b18d31cd-dd30-4a2f-9fbb-7d51359895fb", "indicator--97e2d744-1fec-4812-918b-c4169f8a2293", "indicator--d2d93975-6bee-4b94-9fdc-4a4cb6379394", "indicator--44470451-6da6-403c-95ab-fa5cb3b4079b", "indicator--7dda9bb2-d255-4df1-87ae-ecc4e43aa46f", "indicator--1825b3b7-e635-4dfd-8ee8-95aa2bce3edf", "indicator--0eaf224d-639e-4d1e-a81d-3d50e9013b0b", "indicator--f296a961-bc0e-443a-ba39-c715c3fceac8", "indicator--4f045239-f066-4669-8690-742c4a5e7f9f", "indicator--39f3da33-407e-4581-bdaa-f89faae562ed", "indicator--79ab29dc-e404-481d-9b49-50ade81d004e", "indicator--45d07676-2509-47a3-a461-63cd23abffa3", "indicator--55fd93b6-1b3c-4272-9b0c-48a8f3797471", "indicator--2549074d-2165-4c57-98fc-b36d3b163377", "indicator--07e15ec2-15f2-4981-8d0f-1ee3781e89bb", "indicator--ec13b825-e9c5-4add-97ff-c46669bc6888", "indicator--f5087ba6-3864-49d8-8d2d-82b0a10184ec", "indicator--40b5b235-f68f-40d4-b347-2cbc0d762293", "indicator--02189742-da02-40a5-86fa-4d7b48afa3a1", "indicator--a899a0d1-95a3-46d3-b710-d8bebf6062ba", "indicator--53986067-771b-4490-8d65-e0e5b1d24431", "indicator--f971b314-b0c5-4b18-9b81-3af0ba3ca579", "indicator--ab5b661e-240b-421b-885b-9e8d58e10be8", "indicator--d306e43a-7bc8-4613-a5d3-88419614af74", "indicator--a854bc49-8072-4270-af01-fbb439666be0", "indicator--12d75026-43e4-44c6-8daf-ca85e07d158f", "indicator--697d34e0-bc02-4e7c-859b-8458a9405716", "indicator--99aacc9b-8525-4aab-ad19-26b6747b42a8", "indicator--a141f648-f703-4192-a7a5-7bb68fb5958f", "indicator--8d1700e9-3a9b-4a2c-87be-9c1cd14fcc44", "indicator--e3f1798d-91bd-4171-a893-a3b1d8a6b5f9", "indicator--a601f179-4329-472a-85a3-3ef17a4636c4", "indicator--a975f88b-3fb9-4270-adda-4c2eebb64f8f", "indicator--9f4614d0-597a-425c-a2b3-b7f21d7aa002", "indicator--38f4facd-b0e4-43d5-9239-da40c9e68bbc", "indicator--94900e79-08e7-4d27-937e-fb4f2ced911d", "indicator--f6772bee-2bff-462c-9b4f-4054f5a0b6bd", "indicator--a91b60c9-950c-471b-bdc9-1d9d22afda54", "indicator--ab8727c5-b3d3-4ce8-9462-e54cc951daec", "indicator--7359af28-65a3-4faa-80ea-fb7d032b153f", "indicator--d4ced0a7-1768-4617-b9c1-fb75e82f6312", "indicator--2c721cee-f565-4847-bbcd-7ff2885e10da", "indicator--12dbd7d6-dd78-4ec1-a3c4-0b11a1b85003", "indicator--3d556639-7665-4cef-b78e-8ee730c55363", "indicator--7c0c1daf-f2b7-4bb8-a501-ad8d2885fb33", "indicator--12850548-747c-43ef-b9ba-b4942def2e65", "indicator--4ef25666-dcad-4775-94bf-5aebb4f635ec", "indicator--d32bf48b-431c-46b5-849a-ec7695924ffd", "indicator--8c2b4523-e140-4686-badb-dc7d2c26240e", "indicator--1e3012a6-d829-4ada-a93e-79b70f465adc", "indicator--66ae9815-9708-405c-a37c-8929e3f169d6", "indicator--fa8a69bd-62a8-4bd0-9e67-4d4b768e571a", "indicator--f55bb2e9-ffc6-4653-9af1-f820ec7370b8", "indicator--f0898e6b-c10b-4829-bfed-2d3f91e1eb79", "indicator--f86d83a1-0728-4999-b009-d55532956c5c", "indicator--bc85fdc0-4854-4d10-aa96-6e4cf4807e62", "indicator--9ebc6a00-9940-4972-8630-4031e4a4d452", "indicator--f965ed89-13de-4ce1-af82-e49d52217d7d", "indicator--aed6e5d3-818b-4ab7-ade1-bb982615a284", "indicator--6bd7c158-3472-46d5-9c71-6644ebd5f933", "indicator--86fba8e1-6eef-4676-bf1b-0c27a4cce8df", "indicator--95c21558-4403-4f1b-8ebe-c814e07c4f70", "indicator--65fd6a43-1e1c-4fdd-a9f5-1d94be8a46c5", "indicator--f587663b-1b0e-4d0d-a642-92a988308ae9", "indicator--40467caf-f45a-45c2-93df-1c6598274188", "indicator--79a6f6c5-dfe1-4555-93ac-2cbd260fe36c", "indicator--2f333019-0f9c-4af5-8bcc-ba51e8150888", "indicator--8f86e47d-f0d3-4df4-8875-7250d8c63651", "indicator--ca18346e-e879-49d4-b5db-fda38c1243b7", "indicator--49b07ae2-d48b-4ff7-94cf-647e4dceaeb4", "indicator--33a8a50b-0926-4f62-abd5-e9fb9244d814", "indicator--546d922f-82e1-4b3c-bbc6-432a24237f60", "indicator--98ca614f-2540-4e24-a0e1-e6e06efaecd3", "indicator--33caeba4-97f9-4b01-8932-4a3455e1c7ba", "indicator--d5097946-9c76-4017-90df-f05fa1bff2e8", "indicator--6db2bca7-ce1c-480f-9033-fb3f793c9b64", "indicator--09af4567-68ca-42bb-b6ec-0748f4c9b206", "indicator--5d9e9859-c608-4315-8871-8da2c017ce06", "indicator--11e9f71a-bb03-4556-8cab-e66961e588c5", "indicator--78ccabb6-fd94-4f23-b233-f63c9c38d13b", "indicator--763a7432-2cf0-4d78-991d-eed0be9018b2", "indicator--160a3acf-892f-401e-b004-3b6ace9e87ec", "indicator--d885e02f-d6a4-4f28-8388-59ae46eeb8c6", "indicator--492481fe-a922-4794-b15a-919addc444ed", "indicator--c9842811-f9a1-4153-b56d-7fbbb79cd26a", "indicator--e3e1bb36-6dd0-42b6-937f-f6f4bf8d55e9", "indicator--bcc78611-e531-4c76-9742-292c453c891e", "indicator--75ab83c7-5481-4f2d-9f7b-9e13dd8b2c69", "indicator--b0182aaa-ca76-47f0-bd29-68dc0c15ea73", "indicator--62c6d2a4-f5b8-4538-bdb8-81010ea2af25", "indicator--68c95518-db5b-46f8-8bb5-39011274b0b7", "indicator--19ae143b-66d8-4a8c-991a-79b76ae4da13", "indicator--e15fc359-6023-4677-8108-47d83811018c", "indicator--113ff73b-a90e-4e1b-8ab8-25b17351c11f", "indicator--04fe61af-3f85-48a8-ad5d-cbcb86de7742", "indicator--d2a06aa4-a156-44bc-9dde-d8b3bb614d5c", "indicator--6d1d07f0-a6bb-4a02-b085-46d1cf6cb8c2", "indicator--d382e294-6876-4046-aacb-28cc85f68b1c", "indicator--cf16632f-5533-46ab-a6f8-c18a8ba44830", "indicator--5fd94616-4a65-48df-9693-63a1fc0959f8", "indicator--2ffa93bd-89fa-4d81-b6ae-28aa0315b419", "indicator--0e7e0ad5-00bf-4682-beb9-ebbe5fb3b946", "indicator--8c6a9ce5-6e0a-4332-9ecd-9b56072b6a41", "indicator--8eddba02-3a8e-47ab-a0f2-580a70ca3857", "indicator--5c2273e3-d34d-4f62-86f3-8d7e7e89240f", "indicator--91ad3968-21f7-4cf1-b6a0-6e060d778f8f", "indicator--ee14f34f-c344-4a1a-ab99-471e986c2b3c", "indicator--b7ab868a-caa7-4207-bab0-bb077de1841e", "indicator--03ee257c-ae31-4060-a4dc-a776286c46d8", "indicator--a3c2353c-e642-4509-b7cb-758dfd61f0cd", "indicator--66c014a5-4850-4347-b2a3-696aeb0e1fef", "indicator--325d838a-326f-4267-a032-b7f75a70655e", "indicator--a28d593f-f615-4e85-a54f-a80fba3fea47", "indicator--5a48b2a0-b40c-4cfc-bfc6-471fbaf949f5", "indicator--79689cbb-8ef7-4ddd-9b32-b7915a06c8ed", "indicator--b43a7b7c-7da6-4eff-99ff-057c335838ce", "indicator--004cd3c3-e76e-463b-89fc-fad3740bd675", "indicator--db23fbd6-1ca3-417d-9528-5ac766eafcdf", "indicator--bd838e5c-e948-44be-bb5e-f66352ca42b8", "indicator--c9db771b-b8d0-470d-99d7-bf27cd7426b1", "indicator--5ded0787-f716-4573-b343-cde074a0b995", "indicator--751ee908-3c13-43a7-a1dc-f504efc03bcd", "indicator--3d2d654d-21fb-40e4-8e69-b863b822ac2b", "indicator--3e12ac09-96d3-4f6a-84aa-c92ec21678f7", "indicator--6823c931-8a27-487c-9e27-c31224c890b5", "indicator--037ff037-a66e-45a2-b9eb-ded933ae0d16", "indicator--9f841cbd-1320-4822-a17d-c40d03f4f4cc", "indicator--335f79e8-7f58-42ed-8fa9-5c3f436db70e", "indicator--b5bdc6dd-c2ed-4587-bf2d-d9e07bf86183", "indicator--c3504677-bb8f-4ecd-812f-d5c7988b0e75", "indicator--4cf58090-5893-46de-ab48-32d74a4a96ee", "indicator--ea2c569f-b411-4182-905b-8fab1e86f954", "indicator--87b15a10-10e9-4565-a563-3d3f857e6679", "indicator--a4d8a57e-a2a6-46c4-93f7-179bdbd6a9cd", "indicator--7b58fca1-6d68-4c82-8225-94fe8f804fae", "indicator--54d5781e-0902-4e90-bce3-3e177f5c1396", "indicator--4f423b0d-4959-4b99-b82a-a1cd3f46d2db", "indicator--ddc9026b-4971-4505-ab66-272fc2b89613", "indicator--0f5c4533-bd19-45ae-867a-da4d9ec4e41b", "indicator--24199d92-901e-482d-b9a4-24948f3252b0", "indicator--cc85cf5d-989e-4b58-aa66-7c0843bc7469", "indicator--5e691338-6c05-44d3-bf29-de2cc7f85185", "indicator--447150e6-c0a8-461e-9336-8b5acc7c2240", "indicator--31a0e090-d8e0-4f7a-8fec-6ebf3d130901", "indicator--cf2a3b2e-3b13-4550-abae-dd0187c223ca", "indicator--78e8a903-e335-4e8f-baeb-0071caea04e3", "indicator--f897e2fb-be2c-40ee-8bf4-eff477b62794", "indicator--7205d0e0-4915-4443-ba94-9ba15653352f", "indicator--365b09a8-1d63-42f7-ab36-94d6436aeac1", "indicator--827c7e39-299a-46ec-af9c-a8cc0b0e942e", "indicator--07101d0a-55ab-4a71-9d15-9e8ea4e88f4c", "indicator--08fd957d-275b-4e14-9e43-3a283612fb23", "indicator--cd9d9cee-8dfb-4f66-9b6d-c558e91c4964", "indicator--6704c99c-4fe0-4007-bee6-d640a06f9f10", "indicator--e5a3e657-c771-4a60-8607-f587f1d7b5b2", "indicator--60940786-b07a-4e25-8dc8-89407a473d15", "indicator--61335a98-1e3d-4c13-a74b-aa9d317df577", "indicator--46f56111-748c-44d2-a24a-b289fb0e112e", "indicator--95cfa876-fda2-4398-a6d9-0ee101415b4d", "indicator--fec009b7-8582-4193-adaf-94460b5551f6", "indicator--99318348-671c-4952-8866-bf77b4d08493", "indicator--85345903-d451-4eff-a475-6b65ffff6f8f", "indicator--a3f3f40b-c026-4157-b41d-ff975b3354cc", "indicator--51d2c763-c6e9-4567-afa5-97d61f9df86a", "indicator--269dcf43-68ed-400a-b97c-78df4ad5d63b", "indicator--366559b9-13f2-45c9-aeb5-fbc7aac457b5", "indicator--82394aae-350d-4a39-94f6-d0ce2dda279d", "indicator--b05e6ed6-4ec7-4021-bae8-a1f2ab6da544", "indicator--f11ece6f-6b2d-4d92-94df-f108e2799bbd", "indicator--6c7158d4-f29e-4953-8317-57a1948f249c", "indicator--d8988727-7e5e-4bac-b3c8-19c1a6395aa2", "indicator--4b07f6e9-1fbf-44fd-9773-949be073df3f", "indicator--658b1e1c-63f0-4e8a-b03e-c3478ff98273", "indicator--e97bebe5-d807-4155-9d1f-ccc69e557ddc", "indicator--62428904-0cb5-4d5f-b272-f9c6d6d87911", "indicator--e112fe86-c956-4db4-bce2-dbaba41d1ffa", "indicator--e5bbad16-9e5e-4ad4-908d-0aa2a17f267e", "indicator--5c8438f8-f86d-4a1e-8fa2-872df196ba49", "indicator--c04dbcbd-7c78-4543-90c6-c0d0e79119bf", "indicator--f823eaf9-1b4a-4a29-abee-85912387f104", "indicator--d815d114-858c-4cbf-93e9-10547357bd23", "indicator--fd1a686d-157c-4f72-9410-cddb505de408", "indicator--59ddd0c8-4111-4fce-89ea-a8622cecdf92", "indicator--4cd8cf96-b792-40f4-b242-3d442d42204e", "indicator--71d018e4-7d62-4581-b5d6-e2ebf46a5c80", "indicator--14424dd2-efbd-4ba3-9a8d-ba964ca2137e", "indicator--4b40eb70-5326-4874-b57c-573389f42353", "indicator--582de6d9-49bc-4f2a-afcb-0cfb74419fc6", "indicator--3cc1834d-d2de-4e56-9489-8f1bdf865845", "indicator--c801d148-8eb4-4084-812d-0aed39cf028e", "indicator--66c7c9e1-8e77-4d7a-a586-ccf6acd54d81", "indicator--3aa6bd83-7140-4252-86e8-e79b73ad0ad6", "indicator--dc6f5ec5-db95-4210-be11-dcc20b670758", "indicator--3bad6e6d-ead1-4a48-96e6-54824af4edce", "indicator--062553ef-674a-4c07-9dbc-e164dc38baa8", "indicator--b51fb922-e065-4092-b2aa-3c3b636c411b", "indicator--c75a0f5f-6f06-49ee-be83-8180c6fab3c3", "indicator--6564091b-0007-47b1-95ea-03561303d43d", "indicator--51e55244-a277-4c96-abdb-5b9c335a2399", "indicator--c406c995-976b-4807-ba70-35b01b83571c", "indicator--14fdd42e-0e0b-4628-a5fb-ed95725a9fd1", "indicator--fa5ec3fa-4107-4f10-889c-d37900040363", "indicator--4e6d320a-7152-4522-876a-3857da8335a0", "indicator--188ee138-a561-454f-97a7-de2354c4ab77", "indicator--bf51ac7c-617e-4636-9e81-34fa4f1c6c81", "indicator--bfef4182-8093-4bd3-825f-8a606ecef666", "indicator--867b7ea1-0abc-4b1c-970e-d091ea7a7ee4", "indicator--4ff1bd69-6d3e-4fc0-b3a4-dc0bf4024cd1", "indicator--70a5d643-e2b7-4aca-b1df-afc8baa3bd19", "indicator--3d5bb5f6-9025-42ba-bf7d-62344a69c65a", "indicator--f58c75ef-036a-4dea-9129-57fa91c1e8e4", "indicator--5b165417-89b1-4fe0-9d70-76b4272b4402", "indicator--54495a38-38b3-41f7-ae7e-363d892058c0", "indicator--861c717a-f3b7-4990-909d-41f2e15d3ff9", "indicator--ede6f942-685c-4d1a-ac43-201359817845", "indicator--c6cde53f-9e16-45b9-821f-c9b8c9dae814", "indicator--5ce7e8cd-3788-4a32-9365-413ae574544c", "indicator--e6947a90-1236-4441-9bc4-28094695bc73", "indicator--70ea1544-4d14-4193-a581-83779aa62eef", "indicator--01c3c72b-b1f2-493f-a290-a18b986d1a70", "indicator--4c928011-bd29-46c4-a86a-fcface7bf84c", "indicator--fb3a4f35-bdcb-4fae-a7ab-8b58d7e18625", "indicator--8f57f09b-f4d8-4a07-b694-fc02915416cb", "indicator--6a1070f8-967d-469b-bb2a-4d27707661f4", "indicator--40f4a1a1-33df-4359-87bd-42e27f70201f", "indicator--0670321a-03fa-4bd8-923c-f37dbb9c78e4", "indicator--d5e3785f-fc65-46cb-9921-2d001b606090", "indicator--53386523-086e-403f-83d4-e0213b6075b7", "indicator--21166f04-06c7-48fc-a94f-7fad6bb678d1", "indicator--1d1b6d3d-c81e-422e-86b4-ddf4fae2c637", "indicator--1b934437-c799-4395-b6b3-03b247d46962", "indicator--a3bc7998-c066-4f7b-84d1-a04b5e32e5a3", "indicator--0f77328a-9f68-4e6e-929b-3c7fceaa00e0", "indicator--270d2385-afe7-45df-9a5b-fab61b42da81", "indicator--a968384d-0b31-4fd2-981e-e7fc144e5ee2", "indicator--dc628702-2aba-4a76-a631-2fa5b6489a75", "indicator--3a2b9a13-040e-4d4e-a2be-060341004eb4", "indicator--1cb17ccc-6a9f-4ea5-9f3d-f9b11b87145a", "indicator--9006487a-d417-4294-b3d6-f24cf998723f", "indicator--4a087380-ae24-4c9b-9d19-78d26b2b569d", "indicator--e2a9ec5f-5f3e-4b65-8628-8dd9d57c994f", "indicator--65f5ca94-3e0f-4458-af90-faab5be3b1a5", "indicator--005778e7-50a3-4829-9d46-e6fe8b5624ef", "indicator--32ac5b5b-dda8-4bce-afae-a54f31543b17", "indicator--4e5fe05e-ba2e-4e6f-b69e-c15072a78993", "indicator--6f31bf4e-b90f-417f-864f-e39b437ae573", "indicator--a4dcc749-2182-4046-88b4-942c11c2f5c1", "indicator--39cfd2da-f1ae-4421-a100-1f60fc7f5ab2", "indicator--5ce48558-4099-472c-895c-44ef3afdf440", "indicator--5534bbd5-af76-4434-bc57-4ad6aa7f837e", "indicator--fd032476-fc89-4212-a0cf-9ca9c2052a93", "indicator--465393b8-ab72-47de-9659-57eb7816009a", "indicator--d6eb00ac-2972-437d-9211-8f4ebf4b2034", "indicator--ba1c2c20-0566-4853-9071-9f0b3f652043", "indicator--d208d41f-e6d8-4da9-9cd6-018dfe77abed", "indicator--40e71553-ab47-4878-a5c8-585a2fec2bee", "indicator--9fb869df-9013-40fa-a71b-af9eed5303df", "indicator--3c617a02-f347-4478-95f2-ccad4f69c573", "indicator--52bf1d93-4b90-4eb0-a7ba-99079e3ea023", "indicator--9e166e8e-99d0-4be8-a5b2-dc5dfbb3f3cb", "indicator--3a658f78-953b-4809-93e2-006225816a98", "indicator--e8030bf3-201d-4254-88ed-5a16def37fb0", "indicator--7f98597d-7e00-4c95-a0d1-47978a825b48", "indicator--7849ab19-9cf8-4f3c-9e4a-f49cc61eff01", "indicator--d26514f3-2637-4f42-8568-67da013cfae6", "indicator--53eb319e-9027-44d5-84cf-22f9796f34cc", "indicator--6a72a1bc-f294-45ee-9365-eccf8f29b6a5", "indicator--8308df40-2453-4d50-b98d-78dd4f29afdc", "indicator--8375ae40-a96e-45b1-a5c5-11cb9e5764f4", "indicator--c80b3fc5-60db-4b67-a431-6c4549fe64b2", "indicator--cc533678-3a0d-41a5-9d0d-5fe77902c933", "indicator--d0d2bd3d-56f9-4a25-bb3d-8cd26982ce6a", "indicator--d63a4abc-3a13-47e5-bb12-0bf33f49a544", "indicator--3cd3e99d-32a1-4eba-a9d5-5eb57c0d7077", "indicator--18b9511e-9fa0-45b6-90d9-3503eeb4da3b", "indicator--d5e90a42-189e-476d-8625-cec1b5e09801", "indicator--45e378f9-e502-4026-8936-074c29780cae", "indicator--7a617740-33b5-4570-b065-bc5acc56f891", "indicator--6cc6eb37-928e-4b3a-b4ae-25fe3ea34812", "indicator--a09866f5-0b63-47fd-a843-5666fbb3383d", "indicator--cffdef05-ff76-4209-8962-07e7b1a27003", "indicator--46711b65-2829-482e-bd36-fe138d8b79c9", "indicator--81896173-5b57-40b8-9648-0d7727d952e6", "indicator--a96978b4-f313-4f9b-b58b-b5c3b2bbab94", "indicator--c1785017-f13e-4e6c-95df-ead960e07f9a", "indicator--92a82b09-1c18-42a0-acc1-03a09a307c99", "indicator--e5e716d3-db20-4038-9474-017c2a83a6ec", "indicator--906b57a9-e8b1-476f-8966-27b68874e0eb", "indicator--1b482ff0-a931-4b56-bb8c-871263056f0e", "indicator--30801545-9afd-4efd-b336-6b4106126ee5", "indicator--477a8a80-eb39-4219-b6fc-c6e1cfe56bc0", "indicator--96fc9dc2-35a2-434a-8948-a97c747a8d11", "indicator--18c66082-a045-4e92-a6ee-35ae12d2c667", "indicator--aa9e56e6-cd53-4f1a-ab23-2003a0a80cbe", "indicator--9ed76266-4a03-40aa-aad8-e3ce15df8190", "indicator--c8ee59d5-ed40-4afd-818f-1602efe8d575", "indicator--a4f98627-b40d-4cc3-a483-5a747927a935", "indicator--d3a1756c-7579-4f41-b3d1-28f6b79917d5", "indicator--2116d5b9-7948-4004-9177-26b69534da1e", "indicator--111cb1d1-4e61-4cb8-8ced-699428f5043c", "indicator--ab847c3f-5f18-4014-bbb1-0f4172bf0cca", "indicator--07edc788-7cc2-4861-b476-1b0428b24ac4", "indicator--4b75a646-534c-49f6-8c83-e72373192f80", "indicator--4e9ad13a-07fd-4512-8011-de154c22f9ac", "indicator--b61555e1-36e4-40e8-9806-d06efeb30b4b", "indicator--e78dcf30-9e27-4ac9-8456-3a1924ba44ec", "indicator--00c05f89-7ddb-4f73-9b1b-46fd2664e598", "indicator--194e27ec-3061-444b-8fb6-d18a6efb7f0c", "indicator--6ca0c40f-c5b5-475b-b0f5-082b9511e3a7", "indicator--7a254620-5602-4809-8bd0-d9f039ebd445", "indicator--fe74fe94-1a13-41cb-857c-7d472a43e64b", "indicator--36e1a8a4-f7a4-4bf8-baa8-576a4b43562f", "indicator--59773b44-9baa-4d61-a38b-89cb97f2ca19", "indicator--dae12de7-aab5-4b4f-89d6-2d4ddf9f1248", "indicator--f91d2172-909b-436d-832a-fd256cacf65a", "indicator--72527901-98e8-47aa-9251-370742ba776a", "indicator--fb2731fa-280e-49a9-9705-edb2f954a4f5", "indicator--76c3b851-f531-43c9-9f80-b0c5851078fe", "indicator--3932c6ad-0cae-4347-b7ea-5b7fb68b71aa", "indicator--5bb93d93-7122-4c64-b8b9-a5080eb760d3", "indicator--498d7a01-f95f-416d-a969-507b6687ff95", "indicator--b1e08308-5d48-417a-be92-81c238ddbe55", "indicator--9210f03b-6eea-44d4-9292-9ade2369e55b", "indicator--226f89f9-ffc9-4e64-a079-43bb541076ae", "indicator--09c184a8-24b2-40f8-894f-4b4857bd194b", "indicator--b68e118d-97b2-416f-b2b5-dbae4397b512", "indicator--77f474c2-9d98-4dc9-926b-8186296c4f68", "indicator--0d02aba7-904e-4679-95e4-d8fb27908357", "indicator--3942ccf6-8498-4d9b-88a5-96986ffdc398", "indicator--a1e3c772-a936-4db6-875e-3fd5819fcde7", "indicator--f6fb5d95-8fe8-4717-9878-b896647c66f1", "indicator--e25b0bcf-0bc0-446a-943d-ab5f4b3ee1e7", "indicator--a3984f7d-cf66-4d0f-9d15-a984d86fc726", "indicator--0b781abd-1bb9-4c66-96b1-c18eff1feaa8", "indicator--d9b08227-e1f9-4663-9b42-68a86ea85c56", "indicator--426e7fc5-38de-4f8f-a405-461a3b5d1fde", "indicator--4ecf6ff2-38e3-4a1a-90a1-d262f9f93d93", "indicator--352bb552-cedf-4f9c-bfd6-740a7388bb35", "indicator--5e199f20-8836-4383-bdf2-2a6009a12aac", "indicator--fcb55434-d8cc-4652-b538-82c2d3ec747b", "indicator--0e8b2299-131e-43f6-af84-d57b82514643", "indicator--c85628f9-0fb2-4456-a0ae-575130a2fb42", "indicator--fc6804e2-db59-410b-9afe-daf3635af887", "indicator--fa9256f2-cbcc-4c8f-a78b-d4137f8a2143", "indicator--735cf2e2-f05c-456f-a140-6010c05faac4", "indicator--323b3972-65b3-4403-8fc2-5ed8ad4c98eb", "indicator--04747f70-10ea-428d-abad-12825234ed9f", "indicator--6ca10fbf-b3d6-4e4e-a022-bc29ad646bf1", "indicator--0b4f1254-715d-48ee-9d0f-10cf0dd80ca0", "indicator--91c9332f-4ba5-4b39-a6a0-e2db8d087c10", "indicator--8b463f98-8663-4f19-bb3b-df7baf5c014d", "indicator--86758663-a20b-4ebd-93de-76ef171817b2", "indicator--6375bdbd-cd75-4bfd-97cf-c33288c46c89", "indicator--0216c366-f573-4430-9de8-5c9acf5ee305", "indicator--780d0209-0935-4f2d-99a1-fc177edd5566", "indicator--d6998986-e46b-4fc2-bfa7-c2c3457ce30e", "indicator--8c0caa5b-4f9c-47fd-8ca6-e1ae1224d5f1", "indicator--0cd5281f-d3de-4809-978a-7f24b86cbe93", "indicator--816efa2d-0eec-42cf-8f63-47bd98693f3a", "indicator--9fc2ff1d-b8ea-4f1f-8670-d9c2eb5dc03b", "indicator--ecce204b-16a7-4ae2-8a32-b875ad5bc83b", "indicator--74c6be84-64c8-4fe9-b952-243e86b032cc", "indicator--5c00de8a-03ee-406a-9559-63e9b1a923d1", "indicator--0bb13e3d-3022-4d94-aaa8-4465ea250539", "indicator--dd4f4175-aec7-4470-a2cc-f55648425bc0", "indicator--4cdb4275-6553-4ba3-ac0e-b5e832e843b9", "indicator--56691a37-cd84-4470-b3ad-9ed3b471cf33", "indicator--e533cca3-efc6-43f5-af76-1776e83299c3", "indicator--091f52f8-0605-410b-a0d7-4758b69e9325", "indicator--1e5af89a-6477-4a07-a18b-06abedf96c18", "indicator--91a248ac-a9e6-4b86-a40c-7b3b7115fdde", "indicator--fe9016b7-681b-4d3d-9f3d-3638585347e3", "indicator--57586743-5d68-40d0-80ad-f57c75380f83", "indicator--eb55e225-e331-4cca-9794-3e4be6a4261a", "indicator--99ac1475-6873-4a76-90b2-7e9cba7d01f4", "indicator--fd0ee192-027d-406d-9ef4-3292f10a47af", "indicator--71e6b968-ae0d-4212-aec2-c89ec6f5aba6", "indicator--3a78f96c-abb4-4996-9202-d60f9377eb2e", "indicator--087f69f7-469c-4573-9cce-4c39d3680bcf", "indicator--46cd43ad-fef0-4bbf-9cdc-39f66541cd93", "indicator--8eb63f56-bfef-41c3-87d1-5daafbf5be64", "indicator--aaa3fa9f-c915-4b2c-8f3b-399428689270", "indicator--be9bc803-e949-4238-bb56-10201ea4a763", "indicator--5661ddca-4de2-49c5-ace0-70742946e31e", "indicator--1d9bf73c-98d0-4252-8d5d-bcea1dce005f", "indicator--b050292b-4403-4642-aa9d-b59313b8cac4", "indicator--b83fef02-15bf-47aa-934c-85bff374c0ac", "indicator--9b4fdf7f-2a69-46e8-a51c-c49034384317", "indicator--270402ab-e25f-4510-bc41-607119782b29", "indicator--2bf2c446-6ff9-422b-9ff5-30bd41d12a4d", "indicator--17336ea4-4df8-429b-934d-913d69b4ef1a", "indicator--06d67690-3e51-4e11-966d-41b41971c1f9", "indicator--7dd94316-ba2b-4c0e-973d-55c316d4f48e", "indicator--2b0b4284-7b86-418a-bb2c-28288b522966", "indicator--42d7b3ca-83e5-4570-8a68-84485c4486c1", "indicator--606d26e6-5ab2-4ed0-be00-6feeec311148", "indicator--bc44b5b3-e6a5-4a0d-af45-87a68f6e0161", "indicator--a73ec7aa-c8c3-42f2-bcef-c8cf8fb5a699", "indicator--b77ee25c-8bfb-4e3a-b8e8-7f150b52c9de", "indicator--7a19e48d-4277-4299-8024-eccaf6963f5c", "indicator--0acefa81-35a7-4b6c-8c39-46ed82bfee50", "indicator--6e176ae8-cd06-4e07-ad60-2e78e79f1a6e", "indicator--4fef2652-5ff2-48c4-b98a-bf00212b8fbf", "indicator--5ee7cb80-b926-4ebf-88e6-b381ec42ed78", "indicator--7224c202-fcb8-4ba0-826a-049876deebfa", "indicator--826533ef-7608-41a8-8710-328b2a79062c", "indicator--50b272a2-8a60-4689-b992-df3873b32cf2", "indicator--a3b176bf-5553-46f3-a0a2-dc95819b2433", "indicator--5126f33f-bc20-44db-ac99-135a939a561a", "indicator--3d1cb591-48a5-4b29-8135-e96148ba8b59", "indicator--8b3b1b7c-c91a-4475-8608-794da61288b8", "indicator--d237715e-8e9e-4497-9a47-223c34ff7d63", "indicator--51460a74-bb67-435c-aa70-623bfdcb8be4", "indicator--74ea7c8a-2bc0-4457-8d8a-78ecd5b4c921", "indicator--5a29becd-bc2a-41d8-8cd4-c847cb81c942", "indicator--6ea80449-5663-41f8-93be-68b8f494678d", "indicator--ff1aefe8-1b8a-444e-930d-c043007a65da", "indicator--1e163f86-f91e-4bdf-8a93-c3a49b1d37b4", "indicator--f9578f3e-e48d-4d3d-bca8-e791186bd517", "indicator--1ec8cbcc-abf1-4918-9791-7c7b0a54e609", "indicator--06b2a28f-cdd2-4da1-8687-0b0aa4c8c6d5", "indicator--03d40118-dfe5-4474-8c13-924386c5f223", "indicator--92c21984-04b5-47fe-857a-82a0682656d8", "indicator--8e63c9d2-d574-4485-b434-6a3021b957eb", "indicator--14140e7f-cb5d-4bfd-8d07-e67b3bd0b55c", "indicator--74ad8deb-3ded-400c-a3cd-7a2e174d15cb", "indicator--22696864-c71c-4548-90c1-36f935f6332b", "indicator--bb592f83-bfa7-46b3-81a1-e20ac3edb98b", "indicator--e419835e-afc0-4b42-b306-120fd43940b5", "indicator--3739ffa4-60ca-49d9-b939-197c4863b5b0", "indicator--e85d2ace-0691-48ca-a384-2567e767b533", "indicator--cc1e2ac8-35b0-40a4-847f-e464320fa555", "indicator--891d1277-5342-43ec-a6ab-23ee7c91a2ed", "indicator--9f93d5e4-4943-46cf-8070-ba171c0c77cb", "indicator--308d962b-726e-4198-908c-1f471191a450", "indicator--7a703d5a-5a61-4a2d-9635-b6597517fc6d", "indicator--d0830d10-77ca-429e-abc3-91570d9aeb07", "indicator--458fe413-68e2-4bd7-8d9f-08c0e67e2a17", "indicator--93d61728-09af-4c6e-9998-5f41d1cdf70a", "indicator--f78d4303-5ce3-4d93-88d6-39dbfd557b68", "indicator--f41a8444-3a50-479d-90d8-2035af4c4b7d", "indicator--4c0c0d85-3c09-4141-a3b8-7ead853a267f", "indicator--c2f5a165-dbd0-4d88-b891-bcadbf57b2c4", "indicator--008f0d4f-51c1-41b5-ab09-0ec92c063ddc", "indicator--a3037298-3acd-41c1-ae25-f23bba63ec0f", "indicator--0e06a865-bd51-46f1-a834-952acb18e53f", "indicator--2fc968a1-8942-42b9-b158-ecea0f41e00d", "indicator--7da4ec6a-bf36-4daa-a63f-265784a46b2c", "indicator--5695ff47-95bb-44ec-b9b7-14878f0059f6", "indicator--1010b39d-cc92-4700-9032-c3326112046b", "indicator--8391a8a4-78cc-4b2c-9d6c-71beee176478", "indicator--03047de1-fdd8-4542-bec8-53a4a0aea292", "indicator--411850c8-4a32-44a5-8569-4679c6d4eef9", "indicator--0de0cb49-2595-477b-8440-e60817971a34", "indicator--74904cdd-15d4-4d88-96e4-7a0d9d2a45c9", "indicator--2daf269c-d8e3-42be-9d20-b1c1ea72cb77", "indicator--9486c4c8-d13f-4f88-a623-5aff5d5558fd", "indicator--5c4e96c2-f01d-4197-ac51-ccbb210afb27", "indicator--585d8342-c7ce-4954-91d7-b2d041656199", "indicator--abd35777-dc51-4615-a219-46e22b8c7910", "indicator--a936be35-1470-4bf5-97fd-6af508e4bc3a", "indicator--17accd78-4ede-49c2-a6da-5fb058176099", "indicator--c9fed027-0d4a-4313-b162-6174f454c85f", "indicator--a5d9ee9b-f335-4bdd-bad5-b06ce39e3813", "indicator--254a952c-99b0-4461-ba27-f11c480f1ed3", "indicator--d91339af-5fc9-443c-918f-f0860e87802d", "indicator--eabeb813-b399-43c5-84aa-ffe962f340f7", "indicator--199acfeb-442c-466e-b288-669192240dca", "indicator--cb3385b0-fc08-422d-99a3-5b8ecfb49e5b", "indicator--9bbb1bb1-5a17-45be-988e-9a47c5293966", "indicator--eda3dddd-9827-46ad-a77a-671666b47d5f", "indicator--17878aba-c689-4a72-b676-4a690c6531e3", "indicator--4a9430b0-3e6b-43ae-900f-16194955b7b9", "indicator--eca72bfb-85b7-424d-9d6c-c3ac858441f5", "indicator--8a5d1e90-e9b0-4b9b-8eb1-12399c19c2c1", "indicator--e9383373-24fc-4795-93ed-72720c704717", "indicator--9739472d-e6b3-46f2-b3fd-841b7c1cf557", "indicator--ef5c4710-646a-4131-a97f-150e6b662935", "indicator--958fda3c-88cb-4670-94b5-881c37bf526d", "indicator--3409fb35-fb44-44a1-a0a8-9bae293355be", "indicator--71ca9153-c77d-483a-b999-a3fc40cd11f5", "indicator--40ffbdbc-adab-45f3-afc7-49cb099158c8", "indicator--264075b0-0691-4172-b9d3-f40aa889ad2f", "indicator--1c2ddc92-27cb-485c-807e-673091475737", "indicator--971b6023-4d24-495a-b0a5-d24ef9888833", "indicator--309bb787-1c1c-42bb-a67f-9915ede0e120", "indicator--b12806cd-7f0f-4bc9-9d5f-6ae0dbd2d343", "indicator--5d340035-cf56-4666-9d2b-a91dc1a0975a", "indicator--412dc7cd-a362-47fa-b356-a2b13295a93b", "indicator--e5e0a426-aca9-495a-822c-0ec575072ca9", "indicator--7e4ccad6-d09f-41b4-b60e-78f3f00269cf", "indicator--1f3d2bca-79cc-41d6-bdc2-3f4f269e0259", "indicator--ee28ca50-37b2-418a-9401-a76e317bd18a", "indicator--052ffcd3-4517-4abb-80a7-521d70b57a14", "indicator--74651779-f978-4b04-acd3-a9705ea69e42", "indicator--3b4b114c-9015-42f6-9fcc-4fb9e3d4730f", "indicator--986c4263-5f64-474b-99ea-c062dfa42471", "indicator--2e6b206a-fbe7-4c16-ba2e-07609926d384", "indicator--852dcf9a-370b-4ecd-bddb-82807ea454af", "indicator--d3b33518-2cad-4b6b-b056-3841a1f534d0", "indicator--0d5428ca-14a0-453c-ab36-ce341ac4cad3", "indicator--7da03877-b0ee-4d81-8527-af65f2db475e", "indicator--433bddf1-55b5-44d9-9a3b-155d70b89e9f", "indicator--9e19c822-8451-4227-8f64-1d607d8f658c", "indicator--7df66b2d-1dad-4594-9e07-f25345db628f", "indicator--4f016a86-6893-4872-b7a7-d7c375687e6e", "indicator--163d4199-362e-4df5-970a-751d13711ec6", "indicator--aedfb1d0-9332-4dd0-9caf-8c470272a9db", "indicator--e130b46e-c84a-4ab1-8ab1-f4791872a5f5", "indicator--b10fe229-bb99-47a9-9e21-e089764b3811", "indicator--dc6e5b22-ad59-4964-9d7e-3047ff4aa4a6", "indicator--96ed2f84-b700-4c30-8b32-b7fa5c007ade", "indicator--b56f3d1b-2a6e-4aa3-9675-faf74bad0f34", "indicator--a0d83485-317c-48b6-8d71-d64c0b378be1", "indicator--b8dcadd3-47c2-44a6-80bc-29906d43be52", "indicator--dc4970fa-dbe5-4297-9597-a7eaf7af2296", "indicator--647f43a1-0886-4787-aa54-308622be67ba", "indicator--a59d09f3-8c81-4b22-92b3-69027357a535", "indicator--e66ca661-24b8-40bf-b39e-2a9b7bc646ed", "indicator--ba79de11-072a-4e1f-bcaa-ac48449fbcbd", "indicator--90419cf0-fe4c-47b4-a978-9f7299db3f53", "indicator--a5ad4245-0dfd-4e44-bfdc-07a2fc6721b5", "indicator--240fdb53-96fe-4b67-a622-7984c78ef443", "indicator--6ff46a77-119c-40bf-b9ca-26b53fa2143c", "indicator--44106234-e09a-4314-97a9-f72599e8a0d9", "indicator--ebd306df-83cb-489b-bc5a-2e475b0b7003", "indicator--04cea0e7-0105-485f-8a9d-c4f9035e8f1b", "indicator--7ddebef5-c8e3-4e85-8d4c-0c73244ec199", "indicator--cb155adb-3a55-44da-8258-125cf31094a3", "indicator--0d86b724-2415-4050-b646-541d1c781c31", "indicator--a79cfe13-bcb1-4af3-97d8-c7dd7c67c2f1", "indicator--e31728ed-2a91-4745-a341-968e746196c2", "indicator--663ee843-4aef-46e0-9437-e80462de2994", "indicator--ac64ded1-af2e-4aaf-9600-b96e2efa45fc", "indicator--5113e98d-3670-437a-a779-cb1be675aee9", "indicator--adfb04ba-baec-4789-ad8b-df6b7e9806b9", "indicator--bf01323a-d95b-49be-a9f8-e121aefcf22b", "indicator--68f29ebc-de66-47ea-bf35-6ed22f9fd81a", "indicator--8f0a4cb0-f8de-4d2b-b501-ab3c73cfb44f", "indicator--a1a058b7-2fe9-452e-b5c6-39de8333a229", "indicator--a63b0c6d-06fb-411b-8635-dd64a6b5551e", "indicator--079508d7-19db-4388-8822-d8bc47e5abd3", "indicator--0a5d13e4-1008-4a63-897b-80b01323f52b", "indicator--edad6a9a-a9bb-4061-b43f-db2db2f276f4", "indicator--f028b119-c052-4775-9a5f-f058cefad3fd", "indicator--7d24942e-aa8f-44a6-bf8b-f71efa5b9fc4", "indicator--c039ae10-2cae-4ba2-ada9-9acf96392f21", "indicator--82161551-3d4d-4893-8111-12976428ae7e", "indicator--7ee7a7e4-5078-4a26-9e8c-ee90bc507ae5", "indicator--6a553bac-7c4f-4416-bdcb-5cf06c62ce0a", "indicator--5b9422e3-907c-4796-ad68-96600b351ca3", "indicator--e2f7c04e-b543-4309-8f17-538c1d9ab4d3", "indicator--07b78745-0f2e-4572-b188-77dd4f71266e", "indicator--bbd0feff-29da-4652-80b2-453ac41f37b3", "indicator--cad7f5f5-47b7-4c0d-bfb5-4193e19dbfbc", "indicator--6496e6aa-dac3-4290-b25d-2eb2f212c890", "indicator--85f3acac-92da-4110-86a7-a9637f2054c9", "indicator--4b51f285-4614-41a4-9edd-a67b553dd74f", "indicator--f8c6bee6-d2f4-44e3-94f7-9e2f668e1137", "indicator--4ecb8d04-a5fc-4bdc-834e-8dfb76b82aa0", "indicator--7159c1e4-a0c4-4637-92ae-018828567a78", "indicator--aa4285f5-24dc-4302-9949-fae316591d8e", "indicator--38d70ef1-e1b3-43bf-b124-542566112e9e", "indicator--76037e59-866c-4336-be26-668dd73ebb6f", "indicator--075e9098-6831-468f-87da-0a6907bfcf52", "indicator--7596dd4e-9564-4ca7-88b6-93dfa08a34dc", "indicator--cfe68ac3-31ba-40c6-b495-64e10d3c06e4", "indicator--ee7c2028-bddb-494e-bd68-192612ea6a13", "indicator--d4068521-7513-4f4c-872b-3d0622437d91", "indicator--ad563462-2d7e-4550-a337-972b724a5b4a", "indicator--0f27ea85-fe9d-40e2-8932-032c3875daa0", "indicator--6e6925b4-513e-440f-bde0-24bc2e4b344f", "indicator--1a8d4f6e-2a4b-4238-bf52-28894362473a", "indicator--d92de883-0dcb-4257-851a-9d754c8473f2", "indicator--799b6d38-dcfa-456b-bc4a-5d6e546a3fe0", "indicator--fbb5a5ba-8c8f-407d-b979-cff7ce573239", "indicator--ad4ecffd-6ac0-4769-9075-d65491d53f07", "indicator--7f1cc7f8-0d23-4f6c-bc91-ef2a59b1351b", "indicator--09a1352d-b0f5-4e48-854b-e3d3b5acde9c", "indicator--864946b0-8e44-4d18-b6eb-2c5063ce76e7", "indicator--c17276e8-a38a-48bb-9678-ce5a451ace6b", "indicator--95fb7be6-2776-4d6d-af73-642491cd36fb", "indicator--86d025c9-a8ad-4028-b204-80ab1aac7c75", "indicator--aebd1c94-cdc6-4a24-a38d-fda819c25802", "indicator--1f4b5ee5-aaf1-49ab-b160-6e3c174b761f", "indicator--b570d0df-bc01-4711-a2f8-c8040bbb5f3a", "indicator--1b9ebabe-27fe-4af8-8578-a9654e80649f", "indicator--909844b1-70a6-4708-aee7-2cc693ac5083", "indicator--bec4ac6f-9169-4ab3-a937-e9ac4ca0f72f", "indicator--7aa0abce-a5c4-41f0-b887-991b22f6506c", "indicator--81889d5b-8fc4-41d4-98af-6d30f5d25c15", "indicator--3feda835-a701-4a83-aaca-c17e38fdfc3e", "indicator--b472560d-0082-42c4-99d9-6151a7e12208", "indicator--c783f526-4188-4e09-a082-e132aa40e589", "indicator--b5e46873-3934-48d3-9fd3-d693145aa007", "indicator--16bec1f7-db8d-4b27-83e0-28b883f7f0a5", "indicator--28fe5160-e130-44ba-8d1b-134fcdad756b", "indicator--1978ce86-806b-4989-97e7-a21179c25791", "indicator--2f56e191-ecfe-417b-801a-b8e9216ac29f", "indicator--2ebf3011-251b-431b-9080-2ca43510d7b8", "indicator--d89c0f87-2948-4262-803f-bfd69f3a9804", "indicator--c05718e6-ce2b-43de-9060-8a4d8e769e65", "indicator--c351cc21-06b1-4458-b44e-5ed4b7569d8b", "indicator--7281a72b-15a8-4b38-9d04-e1770841f416", "indicator--c979ced1-7c51-446f-8624-c749f090a24a", "indicator--f6d81673-b7fa-485c-9e14-a095794a06c1", "indicator--896f4caf-3407-4377-9eb5-9800744daec3", "indicator--05f0122d-77ba-4352-a4b8-d1e632b5c057", "indicator--8a845cab-eda3-43c1-b417-c94c2ac3290a", "indicator--046438d5-0696-4d48-9421-0222b3e83ff7", "indicator--8947cfb0-bc47-4978-bccb-4ec34cc8c971", "indicator--4915b228-4f21-4747-865e-8834ac7bfe59", "indicator--05c9cea7-c0e3-4c6d-8dd8-7e031c9bccfd", "indicator--d906b1fc-b0a8-4fd0-9104-480a9b882bdb", "indicator--a6b78467-56ec-4580-aa1f-da2212823ceb", "indicator--674b0316-aa81-47c1-bfa7-563cc27d2dad", "indicator--c83e6398-fd28-4782-bbfb-52b0980d3836", "indicator--51888d66-0daf-4aa5-8821-da42adee7e02", "indicator--e8a15a08-1d98-40ec-b8dc-800e6d6660cf", "indicator--a379c8c6-3f29-4e90-a85d-3ce7f9a82541", "indicator--b619bdb0-b541-4b80-9323-9cee17732302", "indicator--81f1ae21-5afe-4a58-a184-56c91884922a", "indicator--be25b26e-84f4-4d14-a8ee-6eb1e472350b", "indicator--a887325a-09e2-4f8f-921f-0b40c1c94d0f", "indicator--ca65dc32-7e05-43d9-b821-5cc6e3977230", "indicator--5331c2e2-c1f0-4152-a3ac-0adc99253e7b", "indicator--fffd0410-6390-4ccc-94af-d3079bc15ad9", "indicator--8089dc93-96c6-4c80-ac3d-b6c9bd7ee38b", "indicator--3235e5e8-85bb-4efe-82fe-671a40179df1", "indicator--4ad6afd8-f250-4bda-8c9d-5dfd2d4b4c72", "indicator--d3b5028a-4c8d-43e0-8d10-2694eb0c0411", "indicator--e0d9d78c-1d18-463b-bd10-ef3bf9fbbe4b", "indicator--a0d56a21-497a-4a39-9838-1434ddfd6297", "indicator--18e30aec-0e01-449c-9d76-1317fe508372", "indicator--005590f2-ace7-4ed0-8ff6-0e70bfb8921a", "indicator--195ecd46-cf02-4b17-94a0-fe991aec87f0", "indicator--c628e426-dca2-40c8-9fc8-10f9b84513fb", "indicator--2c548e45-365a-469e-9c49-f86f63d5c1d4", "indicator--f7b261c9-716a-4f7c-adf8-658df56d00cc", "indicator--5d1cae77-b18e-4e10-ab91-abc18a3632cd", "indicator--34baddfd-60c4-4832-976b-d5da52c867f0", "indicator--9a78b6ba-e4b7-47f3-bd0d-5503f3f6a97c", "indicator--780c1a4a-3e8f-4ca5-8d31-de419beea3c0", "indicator--b87fdfc4-b6e8-40a5-9a52-d1a866807868", "indicator--40353218-6535-422a-823a-892bc7694c5a", "indicator--110a28cc-7f75-4394-87a6-a5a25e68d7c2", "indicator--967516a3-a388-4060-afba-9309a4d9944f", "indicator--50b1ef5c-4873-427c-a213-775fccccb129", "indicator--fe2d8096-7829-4cc8-8a4f-d18c132eb73f", "indicator--57159280-d0d6-42e8-821b-d9a35dd58ad2", "indicator--e728b3b7-194a-46d1-82b6-0627229ae5ab", "indicator--d52feb48-c52f-45de-a400-8fd5043ed643", "indicator--51f32c04-0d5c-4a4c-81a6-9e4385038e85", "indicator--919fcbb2-744a-482c-942a-1bba5a34b8fa", "indicator--311b9348-8e85-4477-ad58-ddb7ea625e83", "indicator--06c963bd-4f59-4ef9-b407-431804dcbe9b", "indicator--ccc9817f-d91f-4f28-bdb9-2d15551ce02a", "indicator--0d9bd5f9-c15a-43bc-b782-603d5d2addb0", "indicator--909c18c2-f6a4-4f00-ae2f-c5be4e393235", "indicator--bf4a63e3-9c14-4305-9075-6181df3dfb26", "indicator--0b4e67ea-c22f-4221-aedd-1ad71a50dc9a", "indicator--8194ab2e-a602-4b0a-89df-ce9055de89c6", "indicator--aa550f3f-6037-43c9-adb1-c1ba46d80c8e", "indicator--bf6ffb60-67ad-4f21-af79-49e495ed3b1d", "indicator--07a96b15-1db5-4baa-949b-48c020f9ca11", "indicator--f908361c-3c3c-4052-943f-fe341c4bbb6b", "indicator--f705645c-305f-42db-be76-521f6ec4ced6", "indicator--34b941df-e7b5-4871-ba7c-b0d97303ecf8", "indicator--89b83fb6-258e-476e-b990-495d2452f987", "indicator--87bb5e94-9b52-4521-8778-59487353c06a", "indicator--79c0d80f-f4ea-4552-b630-43eb407b07df", "indicator--6a93072b-0c67-4133-9b40-381619a677af", "indicator--a9209896-ea97-4d3d-9439-358913d53638", "indicator--0a95a9ad-788c-4559-b3ad-824b4ec1fbd5", "indicator--be09e994-7858-4ca1-b8a8-6d90bbe7896d", "sighting--ae9105c5-3310-42bb-973d-570a99b3ed75", "sighting--2fbf32ea-46a8-4ed1-aa5e-ac538a2deed5", "sighting--bace810c-e893-4423-9e56-35eb41f3f372", "sighting--846fd4fa-3f01-4103-95cc-7205adf12d2d", "sighting--a5518d63-b634-4302-b985-8e7c4a623878", "sighting--7c7619a9-dddb-499b-bedf-e38e86dc5f46", "sighting--7ef65b54-dd65-45b4-9440-502d4c879d83", "sighting--155cbcf8-1724-4236-8da8-9fbf487dd36e", "sighting--0ed0c3c5-443b-4f45-976d-e830ed30fecf", "sighting--88d80dd7-a221-4991-a39f-76f1c792b67a", "sighting--b964a479-fc7f-49d3-b491-de8be53d60e9", "sighting--fa8ce3c5-68d0-44df-ab44-de45791cf02b", "sighting--cb99ec5b-096f-4d8f-bf84-4a1b9d062beb", "sighting--a21826c9-0c7e-4000-8cc0-7012b15274ba", "sighting--92120ae2-fe40-487c-a87f-394e6445cbbe", "sighting--1efc1ba5-3551-455a-b9d0-d63e6f925a13", "sighting--1a1ed604-8b71-4aec-89b6-a9e48da0bc7b", "sighting--3a6ae7b1-d061-4f08-8bcb-bb223c96c084", "sighting--bd60206d-9a4b-4ad8-bb1a-9efd6c87cdd2", "sighting--d2b30f08-811f-4c00-b752-43b9346d8dbf", "sighting--fd5778a1-c722-4eb6-80b9-c2b81ac66fe2", "sighting--fca07431-b486-466d-858a-a91e4048d08a", "sighting--a3a761a1-43a3-4adf-a498-e9a5a51a34da", "sighting--22e07147-9904-422b-8e51-18922cf04bc9", "sighting--0b6402ef-e6b8-4625-9471-ed4ae075d282", "sighting--f39377eb-a724-456e-bfb4-dcc035d2fe8d", "sighting--657c983a-8f03-43c2-b381-8107e0e722c6", "sighting--32c169d0-5a69-44c7-aabb-040a4270df7d", "sighting--6e25c233-53c2-4d34-9590-acbdf4066a63", "sighting--42bd4670-2544-482d-b831-da151b4a6408", "sighting--d44a6ef1-750d-49a2-a495-b097f16a4c03", "sighting--76453ac0-b3ed-421e-9dd2-198c8f76d81c", "sighting--c4719c30-dec6-4ed1-841e-cb7d1ad05d37", "sighting--a4b837e0-3feb-443c-969e-a04cb69dc7a4", "sighting--60cc703a-6673-40a7-8d44-e94950531869", "sighting--ec1038e3-ae80-479a-a263-fcd076b1b2f3", "sighting--8d4438b5-1342-4320-b93c-0fc6f58e981e", "sighting--8ed1926b-9a4e-4fa7-8afb-049b5cc765e9", "sighting--4cb2e299-2aa0-4e89-90fb-518d1491e463", "sighting--3dafd772-520c-4167-a42b-7eb0777ff5d5", "sighting--b6692535-1174-40a9-8c7f-ec373b682507", "sighting--a799d285-d117-4f09-a714-046faf45b431", "sighting--1d1f8f25-91c9-4ad8-868b-438c455dea93", "sighting--d9110875-ca4d-44f2-b68a-3c280befdcc8", "sighting--ae71ae89-ac15-48e1-9fed-d78323cca01b", "sighting--eea4f63f-2057-4f82-be5c-bd28e7a5a603", "sighting--4cded80a-fa92-459d-a675-ad07ce0cd8bf", "sighting--e3d3c61d-9cd5-4559-8015-653d1a29e131", "sighting--fb4bbbc4-a335-4ec9-aad4-d0b3efa6d03f", "sighting--f6d28153-73e3-4011-acb5-a7170fe6726e", "sighting--53fc5532-6c1a-48be-a70b-17a1609d1ac5", "sighting--5613d677-50b4-4cef-b9a1-1eae22c5c7a1", "sighting--200d4d21-fa9c-4186-8062-bcca768b6827", "sighting--32c461d6-3fea-4a4b-9d7e-d0af51683c9a", "sighting--f5f0dfe7-dfab-4fa6-aca0-2445a449d086", "sighting--069680a7-17a1-4718-aaa3-9e63125dce7f", "sighting--a7bf8008-203c-4f44-8eda-ae74c033f208", "sighting--c91eb5d1-6956-42c1-bd03-7f5ae49c439a", "sighting--b03d86c7-a851-48e4-97a6-2260dca2345e", "sighting--e6a5d852-2811-40d3-aad6-ff4c1bc5f164", "sighting--6359ea90-d202-42ed-a491-6ac032c735b8", "sighting--433dc628-efe6-44e1-8b1b-704ee52ff6f4", "sighting--133a90be-1734-4573-a239-ac4b74518586", "sighting--de326251-5385-44fe-b887-22892b279c8d", "sighting--0cab5f58-5f0d-4ec7-b59b-9a917e37ec41", "sighting--aa21202d-d6f7-4e0b-9920-49a88a89888b", "sighting--f8bea400-2dc1-4b9d-8f8e-9c448027257f", "sighting--21029f95-5df9-4d14-a65d-47b1bab44023", "sighting--32be510b-3db3-4aea-bf7c-19991797f02f", "sighting--5872aa3d-a10c-4080-a215-d392d49847be", "sighting--8e3ae8be-fcea-449f-bd29-1a33e4c99659", "sighting--bdf5c822-7300-419e-affa-97951ef85db0", "sighting--4af5363d-85c5-4bf2-8430-a88ba11a0fce", "sighting--fd195e20-1625-4591-982a-507c2f9a6e88", "sighting--4035b662-d3de-4764-af23-f2f6e765d571", "sighting--75119183-fde4-4a7a-be15-dd42922c4ea2", "sighting--c1b606b5-1d34-495f-8391-5e23eb8f9d53", "sighting--abdeb75e-df65-4c28-8086-1d5605a77090", "sighting--f710a5a6-4244-48e6-8a67-33a5cf5f8393", "sighting--a216fffb-4d79-4a84-bd5b-8cb1b2ba4011", "sighting--ae039246-f1d9-4c3c-96eb-05b233fe11bb", "sighting--cbefc94a-d849-4c7b-8078-10bec14265e4", "sighting--1f74cb55-40cb-4ce2-a3ed-162815a06570", "sighting--fe26baa8-6ba5-4744-81fe-9156bb6d2dfe", "sighting--417885a1-2645-400e-ad03-304020615058", "sighting--2118994e-09c3-472a-ba43-1c66e97ce93d", "sighting--4b681912-3a0b-4e98-a9fa-af324c640fec", "sighting--0430dfaa-8b69-4c4f-8749-d44d6790721c", "sighting--edbf95bc-029b-4e07-81ee-04e57881a5ae", "sighting--31e0bb04-50d3-4c71-94a1-d87809569f0b", "sighting--bd2bb273-257d-4a74-a381-4c0aa156da38", "sighting--8f8702d1-9a43-49e3-b704-505b46031684", "sighting--7e67018c-9a96-4ff3-b128-de760ceac068", "sighting--57ba9e96-d369-41dc-a607-af1530de7f41", "sighting--bf908634-7bf4-49b6-acf8-cad80f8e444a", "sighting--ad7ec801-7aff-4864-bcd7-5df43e27a92b", "sighting--c146cbb8-fba3-48ca-95a7-56cc2c5d6b56", "sighting--a56487e9-10b2-4311-8191-7c9f13b1a0fa", "sighting--4832ae57-3f9e-4105-9928-e04ae43cd054", "sighting--71b4627a-168d-463f-a3a1-172a02e34084", "sighting--9e1e6438-b0e0-4a6c-92aa-7b01be3c82e0", "sighting--1d9b4977-32db-4ee1-bddd-294f743f1579", "sighting--d0e8c589-20a1-42b5-86f5-12fb0b789d2f", "sighting--dbcbdd3c-e552-45b3-abbd-ea9d7582331d", "sighting--23c74232-f399-421c-baeb-b00e96fde18d", "sighting--fab78752-c1d9-4176-8225-3797906a7aba", "sighting--94a03c6e-1c22-47de-a700-9cfdf91a6df6", "sighting--87eaf8d9-5fe1-4604-988d-5ab6df4af2d3", "sighting--a46e65a7-ff40-4eb8-b675-8b3257eebb92", "sighting--282dea17-cd83-4637-9c29-4c3ccdf679f9", "sighting--04de8959-64c9-4bb0-aa01-07df5f94e192", "sighting--776c0f93-d77f-4882-9829-f3ccfcd72ee7", "sighting--46f73b9f-f1fb-4e93-9b2a-db8969d05a07", "sighting--b7636535-52c2-4fd3-8768-34514a317aa7", "sighting--f16cbd0c-eaf0-4a4d-8d9e-909062ad1ec7", "sighting--045ae133-5dad-4916-a13b-cf16b5a65b45", "sighting--ec98a9de-b23a-4aca-b4d9-63a9d8300903", "sighting--201cc719-c5e3-471e-87cd-73ef74f9df83", "sighting--e3c4bd19-7eed-48fa-b2fa-837e4650b9c3", "sighting--22842dae-b2ff-4c29-bcb1-5c7ad35e88d7", "sighting--255bd4f5-b7fb-4224-a2ae-930434573f61", "sighting--b691bc26-22f9-4b5d-b47c-80c9233adc84", "sighting--74cabe5b-44e4-4295-a92d-29c635610101", "sighting--34559762-3270-450d-8504-39f279de1b6c", "sighting--2ec8efe4-855b-4172-9afc-92948fc3c815", "sighting--9ab26927-8c3e-4ce5-872e-6007a354390e", "sighting--b70e3a8d-97e2-4142-8b1e-ddd159943ff9", "sighting--07e2a1da-883d-4ac9-89b3-397960565031", "sighting--21c332e9-493d-47e9-9f5a-0610da58fe6a", "sighting--905caefc-aacb-42ae-b85d-fbae2dd9e356", "sighting--ec63ca8b-0e39-45ab-9883-2c02fd49828e", "sighting--d8c6d6a5-e0d2-44fc-9884-5aac0b949fa4", "sighting--b01db1fb-63c1-4b3e-93da-2e5541ece8e5", "sighting--37731b1e-fa10-49cf-8b62-3bf86ab2140e", "sighting--9b700817-647b-4c8a-8933-0f95d010fbab", "sighting--3b4598b6-958e-4267-adf5-20f1832bb4ac", "sighting--d7e7ec1a-8986-45ee-ad25-9ce4d8f9d400", "sighting--cba0875a-6380-4a9d-a200-ef4bbc8e6a92", "sighting--ce837822-d55e-4022-9d45-af98e9250d1d", "sighting--85f367c9-3fd1-48e8-b1d6-fda041d11c2e", "sighting--649a05be-7f8e-4459-adea-b3a509957d04", "sighting--c2918b92-9aa3-429d-95ba-cafad793f4bf", "sighting--1955f131-5238-4474-8785-3f066a7a76c9", "sighting--21c607cb-6f8a-41bf-ae95-e144ee785228", "sighting--1e7c44f2-ab93-44d2-a577-f5e1e99ec995", "sighting--73c5fb88-6a10-4668-b587-c1e198902b7b", "sighting--f5ed90c9-4bcc-4a15-b9d2-76decf22387c", "sighting--ab0eac10-c99a-471d-9daf-9f6c7f6e8305", "sighting--2c938e32-324c-4f6c-8707-93761fd2fd43", "sighting--7537e6ed-c410-4909-be45-90ff726c0fe2", "sighting--85711232-ff02-41fe-b0cd-4e9164c1edd6", "sighting--b5630992-3931-44d1-816d-ee944f2a7f6d", "sighting--b5e35acf-4bd9-4f39-9715-1b2e3c32d392", "sighting--e423a1c9-e721-4603-8976-c2ee94a52a17", "sighting--8b67cc32-e735-4a15-8405-81c469a911c1", "sighting--ae08f799-7b6d-494e-9268-c115e4cc6232", "sighting--c04dd8e3-022d-4149-af1b-fa44f9e543cc", "sighting--5a674feb-ce02-4cc2-b735-a03e18ea97a1", "sighting--47c98e47-9af7-4a35-9c12-e954795fcb5c", "sighting--fd4165e5-c570-4cab-8268-9591c92c5f8e", "sighting--48ccd73a-2bcc-4bb7-af95-e703bdeb1274", "sighting--95a31a82-1f16-4084-90c9-96eedd652d76", "sighting--a449a975-67e6-439a-b41d-ea19f9d224dc", "sighting--58cb5f0a-9810-47eb-b2a9-0ea83e89f3e0", "sighting--d3e68d79-d638-453d-8208-4d81721fd7e9", "sighting--980fe57b-f46b-4e25-9170-b39a10823715", "sighting--0c1b52b2-d713-4694-9340-2b6a4bba5007", "sighting--92d2de2c-2de2-4dbc-a9c3-679654610b6a", "sighting--10c4265d-385b-4171-b86e-9cb2952704df", "sighting--9eeb8253-bbb6-4890-ab63-c3d30f180e37", "sighting--7637067d-9120-45e2-ab77-0b5f0e92f6b4", "sighting--cfdbba9f-86b4-4406-8568-7f0d78bfcec4", "sighting--4ad3b379-b4ff-4906-ab3d-dd0e274e40ad", "sighting--94f3c2f0-bcb7-42c3-ae05-7c2532db1744", "sighting--6acc78cc-19a7-4675-89c3-eefe37e5734f", "sighting--5ad97c8d-1678-4094-9297-5bb1b5dea382", "sighting--bbaf8a49-669a-4778-a595-b4965a41ec86", "sighting--4b66d1fa-8734-4b43-a164-798fd82852fa", "sighting--e6d04e59-35b3-4051-9f84-2a7337de1af2", "sighting--89049f8c-ab96-49cc-8bca-7f041111c35d", "sighting--9bf34e8e-11d8-4696-a517-318634b3df13", "sighting--68040138-aba5-4bb3-aa0d-d5e22d3c45b6", "sighting--36d2a0cf-a134-4da3-941f-ddd6d7ab31e3", "sighting--b911b1a8-6acf-47a6-80b4-d64a928adf04", "sighting--c0da8e1d-872b-4fef-81d6-c26015764f8d", "sighting--d5640ffe-c883-4f02-bc4e-1faaed66c937", "sighting--cfc8dc6a-4d7a-4a15-bec5-d79e54de7380", "sighting--e0e88964-07b4-44db-aa18-d5afec993790", "sighting--930b4d10-53e3-4e60-b035-f3ae737b6e6e", "sighting--0fdddab6-309b-40d8-9030-f6d4dc7a07da", "sighting--bdd05d38-6db8-4069-8016-e67bb40f2a37", "sighting--5f2940fd-440d-4cf1-ad2b-8af18641936a", "sighting--de492770-a193-47b4-87b0-cec3983f4373", "sighting--6e62a015-ff5c-4792-9ae8-86a8a91082e7", "sighting--d87fa074-1b49-4702-9eb2-457c08254275", "sighting--caa0bb41-aac5-4a53-98a2-551f829481ba", "sighting--c9b33302-0c48-4112-b046-ad1d34b59545", "sighting--7afd563f-1d3b-4ca4-aebf-3308f9b0748b", "sighting--0daa0622-4bfe-4008-97e8-b185da64f470", "sighting--9d65bceb-557f-40f0-9555-85e25eb30cb8", "sighting--371766e0-7c45-4434-bb39-ade77102a914", "sighting--e42f1e6b-7b8c-4929-9ae2-ed03a83c544c", "sighting--ae903f38-3e54-4020-8b20-a44aeb71a111", "sighting--e79441fd-f013-4729-ac78-488720b2f808", "sighting--9004ccd4-31ef-4f3b-bc4c-62856632f376", "sighting--48b13eaa-3406-4e2b-9e2c-740a720e550e", "sighting--f47c746d-5c14-4ff0-ab73-93d81adcbdf4", "sighting--ece44599-1c34-402f-817e-904ff56c3313", "sighting--69666cda-98cb-4194-a43c-34d59a846311", "sighting--d62a20d9-5d9b-4dab-9f37-5cd6e3278ad6", "sighting--4c631e5f-77aa-4b60-af81-de1f5430f31c", "sighting--a4eb8a3d-d334-4b2c-a6dd-dd68a76f9a1d", "sighting--b462268a-46ab-4f5a-8442-71598f0be5ff", "sighting--fbca413f-92e6-4f77-adcf-ea0f875fd9da", "sighting--0c91d478-004d-4dd8-9769-7a7d83e6decf", "sighting--ecb03abe-c385-4693-bc64-4a7e14fae2e3", "sighting--e243591e-cdf6-491c-abf4-6933c55e1cca", "sighting--e3cdbd0b-28a4-4c4a-ad12-f3cc6fed0306", "sighting--046eaa9b-6530-482e-92eb-b80ba679937b", "sighting--f1848bd7-b733-4c08-9c34-856398ecc069", "sighting--19300ad1-1d12-4fd9-b0e9-607010cc2e46", "sighting--a136a0c7-9afb-43d6-99a1-cbade63572e5", "sighting--af8c3784-bef6-4971-864d-7878c097ac98", "sighting--c5533fd7-c8c4-4fbc-ab77-068ebadb288e", "sighting--e3d63d73-a233-4327-8860-7f4c70468656", "sighting--696b59a2-627b-4b32-8fb5-e038461fee1a", "sighting--2a00ccc4-ec83-472c-954b-30c927a1f9cd", "sighting--091e398a-724d-4989-b6a9-f985041765c7", "sighting--444e9bbd-103b-48c8-a4e2-fad67dfe5fce", "sighting--536c3537-a2e6-45d3-bc2c-cb690934b13c", "sighting--cc7f1c27-08b6-49e2-abd0-2f02614660b2", "sighting--8ddad526-ce83-4591-8bbc-a6242f09e98a", "sighting--f8eb184d-3a68-4628-91fc-34b2afb8c435", "sighting--bcbff939-fd7f-4193-8281-c1561e5d153f", "sighting--fad3b1b0-292e-4b5f-8551-71533fa497e2", "sighting--7923cd4b-827e-44ac-aa22-3abceff4deb1", "sighting--8f90aae7-5d22-4914-9e94-32c0cca5416f", "sighting--a7044c14-76cc-4880-9d37-46ea930131be", "sighting--da4aeb56-1adb-4619-8639-26d71d5ec02a", "sighting--eb6547b6-3ff9-430e-991c-a138da034072", "sighting--f7192df5-a364-4216-88e3-5b96fe2278b3", "sighting--08ae4020-12fd-4083-a1a6-8d2d114dc971", "sighting--95f5cb51-72e2-4b6e-8c19-76bc03ac8076", "sighting--9926934e-1f1a-493d-95c8-fa765eb0fbd5", "sighting--3d788ef3-2002-423e-9d08-1a09c6fe43ad", "sighting--2ae2f671-c286-4d3a-8e5e-83298164cd53", "sighting--91a36854-1db9-4198-8aef-4a426526f3ee", "sighting--6c44f53e-2dd2-4091-9dd3-ced1f8962c88", "sighting--6aa42afe-1ac8-4c70-9cb6-f97d72c2e9a9", "sighting--da7f1280-3991-497a-8bb7-10f80a8d25e5", "sighting--16da09e7-9619-4420-a8f7-27a7736f0a8e", "sighting--42b8db5f-d849-4375-842f-6c2b0946ca8b", "sighting--5a356f7d-1166-443e-a95f-1e68d3e3a706", "sighting--a8a0a802-9b91-4c49-ac20-76a8193bd107", "sighting--1f069a2e-04d7-4c15-952e-37eccf463a76", "sighting--e6d9b2bf-f541-4e2c-9e2a-996a27aacdae", "sighting--d52da054-4dfb-4541-868e-3dd268f677c5", "sighting--3ba19367-016f-4ad5-99ad-5df20cabae8a", "sighting--afd760b5-51bc-47c8-b616-206c598984ee", "sighting--dc4ab54a-7f7b-41fe-9463-0cbeba9ac951", "sighting--d65e3514-10a0-4875-b2f4-dfaaff58b6ad", "sighting--4f14e92f-3d0c-4df4-a994-772158e4a9b8", "sighting--c2cf9dc0-ee80-41d4-9394-8d439367c705", "sighting--cccab34b-d608-4897-90ca-a1ed82a00448", "sighting--b4db1ce0-1b5b-470d-9804-d4a8c0322689", "sighting--b19fe233-6685-4ed4-8914-2874d20ef9b4", "sighting--15ec1d7b-4d58-4e30-8cf1-797f48e66358", "sighting--f9a3dd78-dda2-441d-9fce-e8283d7bdf3b", "sighting--a5e490c5-e197-446e-b97e-0367e4cf039f", "sighting--25e6c6a9-c86e-40e0-9d64-b90f5b99e361", "sighting--a6dc8229-bbb4-4f82-8d10-2efe2f5cba3f", "sighting--16a3e965-0180-4d0f-868f-07d946124001", "sighting--ca27c94b-2307-41d8-a06f-9f13b5267848", "sighting--7e9a5325-4b24-477e-88cc-9d92cf5a8a1a", "sighting--0a05e50a-f5e0-4964-b2ba-41853725b297", "sighting--f0615683-10c9-4d3e-b82c-e55989462642", "sighting--7bbfacf7-0d46-40ad-abd3-ff9dfc662bc1", "sighting--75038652-c21e-4e6d-9653-8d757867940b", "sighting--4766e76e-2cfb-4fac-b8fd-7dc1f31d3529", "sighting--13b51a26-c642-4eb3-a995-ebfe7255157d", "sighting--d0dd513c-761a-45f9-bb99-3a8404dad8f0", "sighting--bfccbda2-fbc2-4956-96a9-2f9edaca2763", "sighting--d326070c-5046-43cb-80c5-42ec42e84ab4", "sighting--d98c0763-2fe0-46b3-830f-30a75e22d0b6", "sighting--444c6446-9d6b-412b-ac79-d0057644a264", "sighting--a962d324-2756-454f-b4e9-db037809d8d6", "sighting--6735c455-463b-4366-ab1d-126f293877fc", "sighting--e20c295f-e350-4c09-a025-73ffcd4cd05b", "sighting--10a0bc38-1458-41e4-9840-779d8de2cb72", "sighting--db333797-5622-44da-b5f5-5dbbf0423809", "sighting--7261d656-1ee1-44d4-bff8-3fe3ec052784", "sighting--d37b9f15-8e28-41fb-88a7-34ec00755f93", "sighting--cfffb4f9-491a-4e01-bc03-a50df8c16267", "sighting--acff6575-60f5-4073-9998-4fbb207159b6", "sighting--55cd1c1e-3bfa-4dd1-be6f-e460aa606920", "sighting--3593fc3b-2d71-4c89-9779-b6f6436f3b6b", "sighting--67746e0a-2d3b-4076-9277-2a25f2eb6b8a", "sighting--e3846c06-1f74-45b0-a6ac-2c96e18db05a", "sighting--be74648c-1943-42ee-ba3f-57921903bea2", "sighting--92533f71-90f5-4a3b-9cba-437cbe6edbd0", "sighting--5ac02db7-cd0a-46fd-9e96-b3436678e672", "sighting--2d6b6966-6318-4b48-bad2-b4213b760590", "sighting--6fb4bd35-bb22-4a33-b1ef-7d77a84f7544", "sighting--df36b271-0c0b-4ff5-aa0e-30d8dadcd9e3", "sighting--711c0b03-30b9-4cce-8c7f-eb371b3f9c6a", "sighting--3739ab44-ceea-48d4-87d6-9fcdffba8143", "sighting--67026025-d12b-4772-8a2a-c1fcf29fb77b", "sighting--1da18a2b-fcdc-4aa5-bb3e-ccea8020f94f", "sighting--c97d9370-9926-4d38-8759-fb2a5d3f7e12", "sighting--aff2f39a-1dd4-4edb-a290-4b8b034209ef", "sighting--73cc608a-d01d-4be8-bd11-c53b6ceb22de", "sighting--586ecdd2-0e39-41c3-8868-57e44808ed4c", "sighting--773d4943-8174-4ada-90b3-055611eaf635", "sighting--d15d25a1-f2ff-4ad6-a5b4-3db0b7918588", "sighting--e500150a-b200-4f97-8df2-d329044d4e3e", "sighting--ba430fc8-50c7-4f53-89ed-ceadd38928e6", "sighting--2530b1c9-7789-46e5-a8e2-3b4d968c334f", "sighting--20a9310f-7072-41fe-a868-0165e929130a", "sighting--ecc592f3-4e68-4081-ad97-8c7ddee40bfe", "sighting--8b0464e2-8155-40c0-b538-cf1ee0cb6a0f", "sighting--66329d10-fca7-40fa-b753-3a579231363b", "sighting--33133409-7dd8-4425-904b-182a940aa276", "sighting--05e7444e-f5c3-419c-a0e0-f7c5c763d524", "sighting--c77df43d-f835-4ce8-b9fb-ae6379e0a97b", "sighting--f64fef03-d7b5-4a4c-b78d-8c0a246ac00a", "sighting--3f8fc33b-15e0-4aae-87ec-804dfad290d2", "sighting--3ce3fa1e-bd7f-4a6e-aabd-62784e2c58e6", "sighting--39eca978-39d7-4ea2-84cf-ca14f7d2a057", "sighting--371cdb85-c13b-4c94-b249-48c2fea7ea13", "sighting--3532a7a4-ce2c-42a3-b67b-8cc8fb906399", "sighting--e867a5be-a48f-4028-8715-54803e3c1b89", "sighting--85d8ea10-ab08-4425-a3f9-0d96645cc17e", "sighting--40c231f1-4a4e-4669-a45d-e4af6f602c91", "sighting--37d87a2a-9381-421b-a263-2a392d0f3943", "sighting--4b5ecc77-2b6a-41c3-b177-27c7b1181753", "sighting--5bcab893-f340-4f8b-9133-88705ef78455", "sighting--d276c360-530d-42d3-af63-e7d5d6e68653", "sighting--b26fd565-afc1-44f7-ab5f-5a3c33d27238", "sighting--477ce9d6-5c06-43d7-802c-e082a4523dab", "sighting--19c147eb-a6d3-47f1-956f-1861707c54fe", "sighting--cc283a7b-35f2-45fd-8a59-029807272a24", "sighting--fba1aa37-5678-44ce-ad26-a79031f6931f", "sighting--bce85813-a34c-4b07-bca2-f3a3ed815d68", "sighting--36390bcd-b46e-4cff-abf1-513c533b73a8", "sighting--45acb5fc-6714-4757-ad8d-6faf6b80c2ee", "sighting--5c8b4e84-655a-4d59-b1cb-378e1a61a82f", "sighting--14b7783c-2a60-4130-9f3e-a48738425f88", "sighting--13a85693-6bb3-4623-91e3-647bcc2da779", "sighting--9a7379b3-67a4-48ad-b2a6-ede38e48d9b0", "sighting--369fc860-4da7-467d-82ad-fc24b63d4631", "sighting--7aee3be2-4bb4-497e-bffa-174e126e3eac", "sighting--e7924f83-94cb-4f1a-8bd5-444016f38538", "sighting--8f1d69de-4a5a-45df-9531-e38fde89fa37", "sighting--69d153da-9e60-4e6a-a3dd-8f18d5d69400", "sighting--afa0df68-7949-4da1-9c86-bbc633716c39", "sighting--2d9b8b9c-daf7-40fb-8de6-9f271b78141b", "sighting--c3eef74b-36cb-4e6d-8e55-0ee469fd27d5", "sighting--6cddb1ab-d5fe-47ae-853b-1e52a7e39530", "sighting--dbbde244-0d89-4ad9-9469-084356c254eb", "sighting--91c004df-b0fc-4637-b55f-8b6a7cb9c1f5", "sighting--de8b403d-3a15-41c8-bda6-2968cb4492d0", "sighting--991dfa61-badb-4390-b60a-09c993a51dde", "sighting--762a6e37-b5fd-47fc-bb83-cbec34da07ce", "sighting--23dd9acf-2559-4e93-aba0-23564f696ce9", "sighting--67188e52-6259-46f7-ad96-3d39fb2da945", "sighting--ef515840-d921-45a9-8ef2-6dca81ecbec9", "sighting--0a020481-60cc-4510-b427-6372ac0df9cf", "sighting--9a214908-e1e7-48f4-adf6-eff14864d6aa", "sighting--a8b31ce2-84f8-4f67-a78b-9f608cfbdc82", "sighting--2eac7ff2-c8bf-485a-80bb-c540d009c4e6", "sighting--cd334f0f-6a77-416e-8083-884dc90d5720", "sighting--928bf0b0-1d66-441b-a0ca-47fab315b116", "sighting--22a0adea-eb71-455f-9ff3-e79fe85557f9", "sighting--2ead4dbd-9683-4186-8cb8-be57b3e46c20", "sighting--2bc4b934-d075-457a-a649-297bd40ab723", "sighting--8de6b9ad-dad5-475a-9588-03a92ebacef9", "sighting--35484a0e-1912-4949-816c-98d2368b23c1", "sighting--037b3943-7ef0-4b2e-b225-53e91ee0dd16", "sighting--9ad82ba9-3ab4-4a31-8bbc-57f07a75ad08", "sighting--38e53739-b261-4478-8683-8a64bd2c5efa", "sighting--b9b5dc82-ea52-49c1-b942-5b8ceb6cb890", "sighting--5bc566f0-8d6b-43b5-9eaa-0884c595e0d6", "sighting--04758697-1507-4a3a-8f06-286ae236c10a", "sighting--da5b9cb4-9bbd-4154-9f92-65abd1af996c", "sighting--f8fc1738-400c-422c-bef9-7c239ab3d967", "sighting--1933053c-b612-48b7-b67d-53a01c11ba5c", "sighting--462ccfdd-b102-4559-bfb3-7269191857de", "sighting--75f4e359-a571-4a96-9c4a-f5c7d95a1890", "sighting--35b14287-77ac-4373-bf46-5c4001fa23fb", "sighting--122ef98a-f003-4da4-b370-362cf4f6ff53", "sighting--ce7c519e-c9af-4a5e-8a94-96ad61c10d52", "sighting--928022c0-cf4e-40c6-9557-8aa4f977133e", "sighting--a9315a5f-b23a-47b3-b94c-5aefcec76826", "sighting--44ccfe37-db9b-4dd7-b565-3f3b25880fbf", "sighting--8a645394-c558-427e-a9f0-c63d518716ac", "sighting--32a8fb55-3360-4bb3-bada-0e0cfaaaafb2", "sighting--2f6a5764-1d68-4a77-a71b-5ca685c7c56c", "sighting--007b93f5-d6cc-4793-922d-298de1d0dee5", "sighting--6b9f1902-6633-4ebb-8ad2-80ffddbdc998", "sighting--db509cae-48fa-4d49-9b02-c5573069b842", "sighting--e6a3e8a5-e2a8-4068-a0f1-a61f0227be8d", "sighting--7985b462-d579-4cbe-9691-1843a4adb949", "sighting--5832d6e2-f846-4b9d-b58a-f5a2ea8851a9", "sighting--fdec2559-0db3-44fb-ade5-47520680ac19", "sighting--d219362b-dbea-4131-a71c-e133550520be", "sighting--1b39b08e-a2b7-45ac-a166-242176f1e7ed", "sighting--cf73dab6-db14-4187-a092-353650e7dd7f", "sighting--f4328129-16a3-4ece-af71-fbfe2c2a3d8b", "sighting--6906f0a3-1559-4714-ba31-c9eab5163c06", "sighting--95bcc4b1-8f27-4757-9ec3-1793d10c7f9d", "sighting--7a422474-f488-43e8-b980-cbb0370b9f9f", "sighting--05d1a22f-7db7-45ca-804c-4a61e4379e6c", "sighting--20049c83-fac4-41c6-9d29-151c0fcbda04", "sighting--b650d8e8-bf81-48a5-9ec8-ffb8d65698c4", "sighting--f9b8d165-39b1-4768-a876-9d84f784cb08", "sighting--e886835c-9256-47f7-ab10-6cf97a6da81e", "sighting--7527ce61-e298-4d65-bf59-12ee04811c68", "sighting--74a68ecd-da1f-4481-9c76-efa138ab9a50", "sighting--887e9ea2-8298-4de8-ba84-5bb519b96ab6", "sighting--27f50d72-166d-4cd7-96aa-65836f70e10e", "sighting--de8026c3-36b7-40ac-af81-dd71864adb36", "sighting--a3705cda-47fb-4437-957e-8b8a6ca39814", "sighting--6611f370-ea8f-47ac-b16e-8bcbaa24017e", "sighting--c3a0b9bc-b21c-403f-958a-36a114d70728", "sighting--49d8f5c7-88ff-477e-a864-09d01c274cea", "sighting--a79558ac-4c72-47fb-bfe0-927a0b403593", "sighting--2f545b48-197a-466e-ac0b-0b59fc7b0af9", "sighting--07e89877-030a-405e-852a-939e298805ab", "sighting--01aeb253-561a-4afb-b9c5-990b0ac76213", "sighting--f52e2cd6-6fe3-46d4-933f-13116c0091d4", "sighting--3fe35c26-df4a-40dd-bf9f-cc5fdbb1df24", "sighting--cb89bd8b-8323-4fc1-b69a-47fabd92971c", "sighting--557a0025-4789-4212-8713-81e1931f760e", "sighting--79ebad48-1393-430e-a12f-868ff3bfd72c", "sighting--79201dd7-d6dd-4e64-8760-6ce6b702d8ca", "sighting--559df5ac-9406-4a95-a086-bc4da096a645", "sighting--c1b2c296-adfe-455e-8583-01bf3eae8089", "sighting--e4a2c340-b305-4406-8461-5a38a673e859", "sighting--c0919d50-7e6c-4f64-9161-30b876fcd545", "sighting--b3f4ff91-e7a8-464d-969d-4b01a027fbc4", "sighting--eade5047-6f36-465d-8ac6-f5e02f576789", "sighting--064ea1dd-32a2-4b46-ad88-a4975b27cc13", "sighting--6b7e6e33-1990-4aec-b2c2-0be6dad169e4", "sighting--f0d803d7-4bb5-44e7-ad82-d59b80596a31", "sighting--051d769c-c686-4de9-8367-b071badc62d3", "sighting--b0dac233-41f8-4684-b2e7-1c7d44254ebe", "sighting--23110498-959e-4986-9323-237156b51580", "sighting--74fafb48-71f9-4029-9e1f-dda35281e60b", "sighting--df12580a-1598-4181-8ef4-1fc6aae1ab26", "sighting--c3fdb2ac-fad6-4e89-be5a-06394f0fb8e2", "sighting--0e1d35c4-2587-4425-9822-ed3b04d52b2f", "sighting--1ad4cb0c-0811-4e37-a6bb-49aea15d8b70", "sighting--6ef452e8-fb3e-42a7-ba4d-83e3081c98e0", "sighting--bf7bdd18-89a3-407a-8a7d-1d1327396b3f", "sighting--d5edc507-d5f0-443b-a5fa-02b1b501939f", "sighting--7e9b4691-94d4-485e-b2d7-b1969f0b2a08", "sighting--760fe870-a20a-4cb4-b7bb-cabfdc2e1dfd", "sighting--dc9c7b83-9974-4d8e-8ef0-e6853a1d4f42", "sighting--dcaa4a5c-ce39-4b3d-9171-f57cd407e9d9", "sighting--84b6281a-a844-42a0-b0f9-4a8e76190993", "sighting--92a8d3ce-4b11-4b9c-a684-3f3b3d76cd2c", "sighting--65919776-bdc6-4e4a-afb9-3541fb8643ae", "sighting--eccbdc90-5063-48a1-86e5-2c8f746d47f9", "sighting--3167805d-f53b-4224-9bef-03e767c5736b", "sighting--c456a509-202f-4b72-8855-411036232959", "sighting--3073076a-e0ff-4f25-ae3e-43d501a4bea7", "sighting--d667422e-2c61-49fe-8d06-5167d93a6da4", "sighting--5ac07f00-c9d7-4cfd-b8cf-6e31094bff74", "sighting--ca44ce4a-96ec-442e-8dd5-b0a25e19b2a9", "sighting--35930955-42ba-41ef-827e-af0df087bd94", "sighting--c8421b4f-fd41-47be-8a8b-b4dd1923f9a2", "sighting--c2f12357-83ec-4612-9477-f3d24a971517", "sighting--e77de118-4162-4e10-8e84-e1fa98f2d35f", "sighting--9e615ae4-707f-4055-9598-e8ef07bb820c", "sighting--75e93c50-8e54-41bb-a2bc-11a9cabc3355", "sighting--93ea4c4c-6cf8-47af-bfa4-585635ef1f89", "sighting--2648e937-caf9-4080-bf8e-43178548a998", "sighting--fdff4a29-4247-44f7-a8cc-ceb38df1a07a", "sighting--82f1cfa4-288e-4100-b4bb-ee66c9ce1a08", "sighting--21674ba3-dfea-4f8f-894c-31f52d744914", "sighting--90e699c5-5040-4c79-b0d4-e6644036df28", "sighting--8df04590-8fbb-4907-a728-4315aaace43b", "sighting--279a3252-5043-473c-b099-ef3b3e637f45", "sighting--172e7b41-03a9-4d74-a6a7-d04e9b398168", "sighting--4ca0d949-bc01-4ec0-ae79-4708035e75b2", "sighting--2cc6c52e-8d83-4abb-9cae-3aec47ab4b67", "sighting--50a17667-0c53-41cb-a5b0-f42b21f2c9fa", "sighting--093f61ef-0e03-4de0-9b66-337704535eb7", "sighting--2bf2e0b4-3962-45a1-b77e-8ebf5f736a35", "sighting--c938ad8b-3fbc-4224-bda6-f5715e89bc9a", "sighting--d711a8dd-59c9-405d-a1a4-b52367227558", "sighting--63c76f98-b591-4ef2-91d9-1d63d75fdf2e", "sighting--8e80d0c4-38e6-4351-af1d-59bf71025e82", "sighting--2ec6a7a4-be2f-416a-b413-8e679c2d2e30", "sighting--5ff10e25-4a74-404a-8efb-2de6054c1004", "sighting--18db0e3c-9ccc-444b-bab1-9359338024ba", "sighting--2c7ba20c-0f33-4d90-98d4-3fd1b443db63", "sighting--afddc89e-5a8f-4f60-a181-697d5a5e06c1", "sighting--35d5e28d-59e9-4cbb-8606-9902e9b0de75", "sighting--fe85637b-c882-4897-81b6-6c4ae80927d3", "sighting--153ef4ec-5e73-48a6-b725-096fc2843928", "sighting--b65bc790-d6c1-4d94-a0d3-34eb4c9eeee0", "sighting--a356646a-79eb-45d3-986d-ea5a5d6baf83", "sighting--e7c108f2-72d4-4b6f-b8fb-4aa7993b5c3e", "sighting--eca1e9d6-419e-46bb-9e96-5cc1fe5516a8", "sighting--e759f585-ebf4-4eb3-80fa-3975afd58396", "sighting--78d2023e-b81d-423c-a436-2482123ceeb8", "sighting--616fc553-8e12-4ce9-86df-6d91cbeb73cf", "sighting--a5afe9d4-13c1-4dcc-a91b-f5a1340777a4", "sighting--ddcd448d-e47a-46e1-b4a0-fab80970ded2", "sighting--23cf89e1-bbc2-4b77-8d1e-ce573f37caac", "sighting--e5bc8d4f-72d7-46ee-a0d6-29e845281ed0", "sighting--3c55b38d-6d51-49fd-8128-61578cec97f9", "sighting--d03f5f2a-883e-4041-9962-642dcf5f1ef0", "sighting--629daaa9-8a7b-47c0-a430-4aaed1fd13f8", "sighting--fb8f0192-ff2d-408a-abf0-e26bf8f0b1c2", "sighting--949c2992-f6bb-4c59-87a2-0f4831faed69", "sighting--32fa153e-42f9-48e6-a1ef-743209f245b1", "sighting--203062ca-0dcd-4cbb-9142-2bf75d28526b", "sighting--c3ae11cf-87c9-4cf9-9568-dc2bf352f861", "sighting--d68a4780-c29f-4344-860b-5f5e2a128a93", "sighting--f2350126-3417-4730-b914-359a98845320", "sighting--f7319e75-d195-4930-b3fb-fdac9bec6c37", "sighting--f8f0f6fe-0806-4284-85e6-d467c188704b", "sighting--78c321ab-3976-4b3b-86fa-7db37c0a385b", "sighting--e35bd0c3-3599-46c1-b707-6de7dea1f0fc", "sighting--30c797b5-39e9-4332-a4d5-244866a33ea5", "sighting--8220d24c-ffbe-4de1-a0ab-df29d3522866", "sighting--6fb9bf7a-0677-4ba3-9939-4f261932c82f", "sighting--b5be713a-5d2b-4156-af00-3b6c9753766e", "sighting--2f0e7c10-9ad1-47ed-8827-6007028b00f1", "sighting--0de101db-c782-442e-94b5-d76f476956df", "sighting--e4b6fb13-f084-48c9-8a31-3fc30f5845ce", "sighting--20924843-dff1-4bf7-b301-aef154dcaac0", "sighting--902a9edd-b6b1-43f1-acdd-467bd5a6e4d0", "sighting--1608af1e-f763-43cd-9130-fc64db4133ee", "sighting--19ef1ec0-4687-4d90-a88d-ccf7c04610a7", "sighting--24a8224d-622b-4acb-b363-8783a88d892f", "sighting--ca255a93-a59e-4f34-90f7-a4000a85b4b3", "sighting--ebc44204-c373-4a54-a7e7-b468371cc6a3", "sighting--c3799b07-9fdc-4803-a589-05b2ae2e5596", "sighting--9195294a-dbbb-4bbf-801e-9b2a1fb32620", "sighting--7e3c9221-fbd8-4a05-b8c1-1c0b0389c1c4", "sighting--719f9e69-9df2-4ef3-bc37-dfed82e382fb", "sighting--14ba5beb-da24-4894-a497-1d68e1f6a90a", "sighting--af1f13b1-942d-4a6f-9856-9e0779d900cb", "sighting--415eff5d-d336-48ea-80c1-8fea4d144658", "sighting--618d4f64-890e-43c4-8d70-05d0c0647142", "sighting--0026e9be-3e25-4f50-9ddb-1d4ed8538254", "sighting--94030202-00dd-4c65-92e2-5ac46f834eb0", "sighting--1c766f58-eed9-4875-8bfe-cf8f18a19cb4", "sighting--7af71df0-e04a-414e-9a2c-6f4c1ef089c1", "sighting--f1ba0e09-8a3a-4f69-8327-1a45444c1f10", "sighting--35962bd7-b9d9-44c6-abf1-62f0a9c51d80", "sighting--ad95a192-9b0b-45db-9303-76b5c1e03efa", "sighting--738ee5bb-8714-4929-bb5a-b27132fd68a6", "sighting--7beafb50-c9b1-4dd7-831c-e9e7d99d9c47", "sighting--5b8b4c6f-f3b2-4712-a2e9-65d107d2f439", "sighting--b02f7f95-6f93-43d9-8ad9-4d8a4faee3a9", "sighting--498eefe2-1c1d-46d9-910c-d8d5a53247e5", "sighting--4d7e591f-a8cd-4681-ba0c-de95e3aa9284", "sighting--2f617b36-7e2f-4e09-8205-28a85e7abaed", "sighting--ee2fa8e5-40f8-454c-9100-f43a549f9426", "sighting--f8cbb4cf-2acd-47fc-af6b-edc06e9103b1", "sighting--8397d6d7-09ea-4bbd-8930-798377ebecd6", "sighting--037172ea-d739-47d1-82f9-e44887314271", "sighting--1052858b-34a6-4f6f-b047-275100d3b2a4", "sighting--498a43fc-4fbe-4b45-9067-a68c650647d8", "sighting--c92052c5-aaa4-42b5-8f5f-d73da2558063", "sighting--9005b90a-c1c7-4421-90d4-a5ded31a9ef0", "sighting--1f39dd3c-2ab5-4f74-9783-d43cdc6f1ee2", "sighting--48289534-4b2a-4383-9712-99b788e98cdd", "sighting--be604c32-d158-44a2-bf7e-3a35c04686c6", "sighting--3297e099-040a-40de-a2e2-4bba301c07b1", "sighting--291c2d50-7d5b-4d7c-b325-fbb3ea48d950", "sighting--ae2e290a-8275-4d88-8902-e088d76a0f5a", "sighting--dfd04579-4506-4996-9842-415671a2e00b", "sighting--26b80d5e-1ea9-4d19-8cb6-70921187ebcf", "sighting--9d615688-5534-49a5-9ea6-effe8d7a1330", "sighting--0b204241-f487-41d2-abde-55dcc884c107", "sighting--d92c57a8-50a6-43b0-a2c5-7f3e7af08dcf", "sighting--c71b14d4-5fc9-457e-a7c0-6029a3591f3f", "sighting--b98bd432-a12f-4131-96e2-fe59017ec259", "sighting--c513fafe-73e9-418d-9b55-fbe0b2b07a04", "sighting--8ff985f9-ad0e-4e9e-9276-dce774ce844e", "sighting--121bd70e-50fb-40fa-a3b3-8196be4a69ec", "sighting--6fb67310-4afa-43e5-9c34-c30247cc86d2", "sighting--3a5b0f73-0a7f-4838-aaf3-2fce7cc48da0", "sighting--a197261e-0853-4b8a-aca4-945aac622b3d", "sighting--a904c3af-cd47-4d13-bb85-6f2d2b4bcad2", "sighting--b65b1add-df6e-46a2-8261-eac8e782e2f1", "sighting--d1a30c3a-515b-41c5-9063-3afdf18d4fde", "sighting--7cc2600f-2ce4-4ee5-a659-bf7eccc90996", "sighting--0abe137a-c246-4490-9774-d81b976ddcb6", "sighting--08566897-4234-49f1-956a-9c63b5d08e60", "sighting--72eb5a28-a8f3-473c-813b-b59e37697319", "sighting--c8d2a107-dbd3-4bbd-b5d5-6f7e320a4379", "sighting--e3d6e76d-fab2-497f-b425-f4557c4e5f82", "sighting--fc524bfb-1520-4fde-a79f-f80b7065c3e8", "sighting--95e409c1-b8dc-4680-b7a1-f2e730803c73", "sighting--df29a7f0-859f-4be5-beff-4ce8ecf9b033", "sighting--6e6d9c4d-eb3c-4c3d-ba00-cffb7ead9b1a", "sighting--c8d93e14-b52b-443a-ae91-9699de9f40bd", "sighting--5a35a860-1b06-49b1-aa52-a521377f6c6b", "sighting--4cdf0158-c9e9-407d-9635-752e1cab1b69", "sighting--bc26d859-b419-4bfe-9975-9fec2aa70ce3", "sighting--73d1975d-94cc-48c3-b2ac-720618658aa1", "sighting--590a9710-f8d3-46e0-b97d-078cc22c1c82", "sighting--0c5f57c3-c501-4bee-be9e-e35546823ca6", "sighting--27ff8152-44b5-4870-80ba-2d5014553b96", "sighting--1a38d21d-570e-4a94-a45e-d3c014684360", "sighting--7d384b3c-9c02-4e06-8c2f-22f4a434a01c", "sighting--4778c9f7-6a23-4aa0-a3e3-f663b7263620", "sighting--a66ce736-31fb-4c9d-9cd6-eccdf36874cf", "sighting--109556ad-1b86-4622-8ecf-cb175c83ac44", "sighting--96a73904-c138-47c5-b135-b15185e8a7fb", "sighting--b6f0f39e-53c1-4ec5-906c-602c33d97a8e", "sighting--6f8cb3c5-87b1-4171-b36e-20b9eddd08d4", "sighting--df7936d0-f157-490a-8031-24be06620ecf", "sighting--b08271f5-0a7c-45ef-95dc-fce33fc25a54", "sighting--83c12a32-95f9-4f1d-8f63-d4701207fbe3", "sighting--7cb66031-d74f-4312-9dcd-082e309e826d", "sighting--34c50413-9d56-4ab3-93f4-847991f1499b", "sighting--7cc24faf-b81d-4440-a0ab-34c18eef14a6", "sighting--1dd8952a-24f4-43e3-a1ef-1a1b8ab3b015", "sighting--4ef385e6-f7f6-4696-954a-98c67592d36f", "sighting--1ae7eb5e-3d6a-4cbe-92e9-e43b922bc4d7", "sighting--99fff163-08ca-419e-a2ba-121719723432", "sighting--ccaa4bd6-5eb1-4027-aa86-c57cd5e8f39b", "sighting--3c5b7876-2aef-422f-a7f7-0f210e67c95c", "sighting--1de5e794-df1d-45e4-9996-b20cd2cc269c", "sighting--549b9ab4-ccd2-438b-9966-b8e3923e4144", "sighting--cde3a70a-fb64-4a27-8377-1e89249e267b", "sighting--c7dc018e-13d3-496d-9b82-cb556ee8dda9", "sighting--e41301ba-ded9-4f8b-8e44-dd272bea1946", "sighting--82b812ca-0f64-42a9-8aab-a7c5f2631f8b", "sighting--af21413b-39eb-473e-8d28-5fdabcf9033c", "sighting--f10853ea-f24e-4bb7-a820-7af7eb6af091", "sighting--53836b45-29d0-4b1d-9ac9-fd5c0f614771", "sighting--465124da-906e-480b-ad47-57576250d1cf", "sighting--ccc7caaa-9c70-427d-aaa8-a19fa3ae30b1", "sighting--ebbf5191-8384-4c6b-a4f2-9197ad475383", "sighting--ed8a6392-ebc1-4728-8ed9-afbffba2fe69", "sighting--d567c20c-8096-4808-90c3-fb1ff374fc6a", "sighting--920d25c9-82df-4fb7-b174-6eaccce4dad0", "sighting--19dac79a-4718-4ba6-b6f3-c83cd4dd60aa", "sighting--29b10755-4680-4528-953d-7e3a0a647cb5", "sighting--3f5e2f34-5dc8-4f0b-9bb1-50093bd46f80", "sighting--3fcb8672-8c47-4d37-bb4d-dae70bbd67d9", "sighting--75fbac81-843e-4070-9680-116632373eb9", "sighting--fe55b04e-3885-4deb-87ef-c9fefd13361f", "sighting--853572fe-1ce3-4a3d-ae85-4ff6dee333b1", "sighting--756f11e8-7247-41b5-9c95-a10fde115c65", "sighting--5ac6cbee-1dec-4c5f-bf07-e078f023fbbd", "sighting--24e796bd-43ca-441b-a998-41582d977fbd", "sighting--0254c4fa-8d8f-4fe4-b645-e88d3e7f00ae", "sighting--3ec03b75-2899-4434-b154-4d81153376e3", "sighting--21d35f60-bf28-4b41-a535-71fa12dbdc20", "sighting--d40ef264-ee48-430b-858c-49a5ea39239a", "sighting--f0ed3d9a-80f0-421c-b572-b2584fb2bb2e", "sighting--92a9677a-6896-4ee1-af36-ab94ec132b3e", "sighting--4fa1a654-cc0d-4ab9-97ff-8128513ae387", "sighting--12eb59c2-f8d2-4d64-9bf2-ba4a34f1cd53", "sighting--c1121ec1-5d2c-4164-bd80-be36435c17f0", "sighting--d99030f8-631b-4b31-a504-3f1081339533", "sighting--4f987cfc-83bb-4879-9891-d2afafb8b24c", "sighting--199dcad8-429d-4a4b-abd4-f1cddefed9f3", "sighting--5102e126-4b0e-4189-bd77-2aab1931ed0d", "sighting--15525550-e757-499c-b7bf-078c887f7bb1", "sighting--b2b5889f-e92a-42b3-9c37-1f72d6adbb38", "sighting--127d1aaf-e46f-450a-bbc5-4901e9cbe08c", "sighting--eab85bbd-b456-4ff9-b820-8e4ba0bf6b68", "sighting--1107ec0a-9dc2-4c13-a9b1-63eefb50c076", "sighting--2025fc20-ce7d-4bc5-8663-c1ea694b10a4", "sighting--8e544f6a-07f3-4c35-a8f4-ecd2de5b1205", "sighting--9ba69e7d-e5bf-43bf-9663-d821c90b3d54", "sighting--2caa1d0b-826a-4797-8eeb-90fd467096b8", "sighting--c7a2522f-8aaf-4db6-91c9-38fcb05a5fcd", "sighting--3baa1a56-0db9-4fa4-b759-a28c0dc017ad", "sighting--ee5a7a5c-b15a-4ed5-84dd-fa96726982b9", "sighting--26d9e727-114a-4b7b-bf40-f99d5fc1c9f7", "sighting--f1f7457a-1ce6-41c9-9eec-4cbddd15734d", "sighting--dfd36b4e-34c9-47cd-8a45-4abaa2af16bc", "sighting--239e467b-e9f2-4cf0-a4df-d67883e99929", "sighting--d139dc05-bb94-4c58-ab30-8a1e09a7e7c2", "sighting--3cf67d1c-4f23-40a3-ad0a-ab084da55383", "sighting--7e7765ae-6cc7-4abe-9e59-c40b5561fae9", "sighting--e2a947fa-7db1-4ac8-80cc-f2403a33655a", "sighting--4c969988-3c9e-4c19-a8b6-d520f57f9200", "sighting--b3407311-8e75-4bb5-8319-566877835aa9", "sighting--29bb9931-bf29-4413-b42e-af7fd87765f5", "sighting--653e6486-1d12-4cb5-beef-94e4cbb76622", "sighting--52f6e4e8-5475-4d55-babf-b88c10ee163f", "sighting--8ff82153-2376-406c-810f-79675ead6f2d", "sighting--c5881708-35d8-4a21-b576-4502290e874f", "sighting--01b3b0be-ab7b-4b9b-bfd2-addfc44e335f", "sighting--f27d2f49-39d0-4d9a-b43b-fd48f3a08cc6", "sighting--ab3d8969-58e2-4b57-80d2-977ddabbf7b2", "sighting--ec870ccc-8229-4d15-9f26-6153b3a476e1", "sighting--2edd7f74-76eb-495f-9f8d-7c2ebd333da5", "sighting--0060e435-7ab9-4e7b-9546-2713be75a258", "sighting--6f3e6a9d-206e-451d-97b2-93cfd2fb3163", "sighting--bb555f1e-038e-419b-92d0-2812be4c5446", "sighting--805e89be-92ef-40f7-92e6-aff574eeb974", "sighting--ecccd930-875b-43ac-8c59-bc90b9d93982", "sighting--c61cc11c-4ea8-4dd7-b315-f13faba4c829", "sighting--b6e8cbd1-b4a5-436d-a6fb-0b823ec8f271", "sighting--336e8046-ae4c-45f0-966e-38114cd70a12", "sighting--a7968ae8-6d96-49c4-b36f-9b4b996ce6ac", "sighting--c6fca516-3525-45a8-9c21-efd383e91d11", "sighting--a7e2e9c8-b520-47ad-9b88-4894ed7b1268", "sighting--31774fca-cc59-4add-9b1c-b08c414a95b8", "sighting--c289bd84-2ea6-4f88-ae5c-aa52bff87304", "sighting--1b234fbf-4be2-4b1a-ae9a-8ed85c6441e9", "sighting--0253eb6f-d62b-4399-bb17-e58f345c92a6", "sighting--44ea4122-4d6a-4de8-9af6-f9cf999ba190", "sighting--08af3d80-44f5-4014-a822-49f5fac8e013", "sighting--6f6523cd-fef7-49e0-b582-19fee4befb49", "sighting--0ff93968-7f37-4a62-b9ae-1f6ffb7c15ec", "sighting--869121f4-4c6b-4cd8-bb85-b8ff46727fa9", "sighting--8359e032-d201-469b-bc18-b219707a7ec3", "sighting--5f4317d5-9d94-48a1-b5d6-3bdc70e1b383", "sighting--787519a1-ce94-4ac3-804a-fa1425b256ca", "sighting--e51d2066-1c31-40c4-b0a4-44812165b07d", "sighting--b1b1316a-f008-4f22-b632-44b08c31818d", "sighting--11d34357-4b03-4ffd-ade8-c42525c5f16e", "sighting--15ffa378-8143-4ed2-8b55-11743d2c9879", "sighting--b0c60b62-aa03-452f-a384-0c13b7faf33b", "sighting--a1530c02-206f-4f18-935f-a8b370bd41e8", "sighting--1855b612-3ec0-47cf-afef-3b28242e0d64", "sighting--207a141a-b3c2-4ad7-9e46-3f55a7c2de2e", "sighting--b62238a4-2af0-481a-827b-e553c156ad12", "sighting--c5d60cc5-bcbe-4e87-bf6b-3574a350b528", "sighting--9329e1ac-41c8-4e61-8e78-7c5c8f19b756", "sighting--5f1323ae-bd1d-4255-9c8c-c8d05f88d4c3", "sighting--ba6cdc85-9e50-440e-af63-34fbb72c6d96", "sighting--f50d89ea-5cde-4c32-93f5-0f0ad37a6268", "sighting--f8e7c82b-ca2a-48af-806e-fa52ac771a56", "sighting--6ca2676a-d814-4483-8f74-c44dfa597066", "sighting--941d9805-4c1b-4c20-9082-ca9ca13cd8fe", "sighting--ea33e0d3-2a66-4197-899a-7362f735ed2d", "sighting--c34d8663-85f8-4b23-b354-7e465f8a44e3", "sighting--2c3b5398-dafd-406d-9323-e228cad7af16", "sighting--a66618f9-71e2-4878-a626-78249100ba99", "sighting--57e87eb6-5f62-4859-aae0-bbe6be85ff4d", "sighting--b8124a32-e4bf-487e-b2f6-fcf78dac72bf", "sighting--49de9893-19a9-47aa-978e-cdd44212a1bb", "sighting--c5f94937-a293-408d-8ff4-b826f6b28b62", "sighting--d45da5cc-26eb-4da0-a559-5dd23f03c095", "sighting--49a952fb-8863-4a79-8672-c13a5352aa01", "sighting--98f099bb-2170-41d9-ae3e-a06e05a96ab2", "sighting--9b3c286f-a352-40e9-bbbb-2bd7b169e80d", "sighting--a697f7b7-3281-4d96-8650-429e59d07995", "sighting--d9dfdd41-55b1-4ad5-9bb8-05014a295e5c", "sighting--7a9c6d64-5d0f-47f9-90e2-78b266a348c6", "sighting--64c547d0-531e-4167-93f8-44cb9f81ee12", "sighting--0c778cd2-8d6d-4a87-ba02-98ede342ffaa", "sighting--0d94ad1f-7e97-42e9-9609-4dfb204c8378", "sighting--fff83751-22de-4f9d-a1b8-8ee9f96ce07f", "sighting--7c4395f7-426b-4f41-8585-c880a8c09826", "sighting--52d5bdd5-fbd1-4000-82c7-bd5992d66b68", "sighting--64732bd7-0f44-4797-822e-0f4798722b08", "sighting--57626bd2-2813-4dd0-b6be-31818c4132f7", "sighting--96b2a6de-6ab8-4379-927b-568b20959f92", "sighting--7eb230c7-5a8f-4967-b47b-8c7cad1283ec", "sighting--1c7d0c6d-5edb-435a-9060-e1ee6aba0c14", "sighting--6b94073c-f873-4f8b-b394-d0abbdf5596a", "sighting--777fa971-1835-44d1-a6d7-b0016c790fdb", "sighting--9a0e9efd-6019-4022-a6f7-336f05866b11", "sighting--3511e1de-167b-452a-aeda-b02e74ac53e7", "sighting--8c56d0f1-e3b7-4d4d-a158-b14408aa1d34", "sighting--80867e45-d93a-427e-acb2-12c2b985b32a", "sighting--4b91e517-e376-4b9a-b581-b078ea915a07", "sighting--737f3832-805b-466c-bc97-d8cf48b9c208", "sighting--221d0b7d-3509-42a6-9043-a1cf3676dbfb", "sighting--c73d256d-fe48-4264-a72f-0e676c4daeb8", "sighting--5d2f7c53-f8c2-4eed-8141-3a98085235a2", "sighting--660f2a82-b4d5-44a4-8331-52e8a48430fe", "sighting--5245d926-b929-4050-b59f-c4fa48615b2c", "sighting--3483ae87-40b7-4dc2-98fb-c8f3d84bca2e", "sighting--0e515993-552d-4e31-a38f-87473e580e57", "sighting--09ee1829-a07e-4950-8df0-cb26b377832f", "sighting--dcf60ccc-b65c-4c51-ab0c-41cd127de42f", "sighting--7bc91646-f4df-4446-a30f-679a85bbfe26", "sighting--5b055dd1-e2c3-49c1-b722-52947428c9d1", "sighting--4eec21fc-12b9-41e1-a0c7-49c52cc10e5e", "sighting--0666de34-671d-4171-951e-e8be0c241f74", "sighting--e5f5de81-03f4-44d5-aa43-482c1ad7c11d", "sighting--f229e8b8-8848-42e8-9b99-e22732714790", "sighting--98fe3ccd-0b9e-470e-8a23-255b933dc91c", "sighting--8dd8923c-a116-4876-85de-969fd2057050", "sighting--af97e5b7-0ca3-42c8-9e36-2958ad05e8ea", "sighting--8a7833e6-591c-4f24-b847-d1e7ee9b2f76", "sighting--2e248422-bb7f-4965-b439-311a031b2d07", "sighting--b121f54e-6928-4e24-b744-74dab7373305", "sighting--3d766107-4acd-4731-8a0b-88e20c4a13e0", "sighting--462a2138-c222-4623-8991-e2a467bd3f4b", "sighting--8cc76a0c-de79-42a3-b01c-80a34761058a", "sighting--86fab5e3-8d50-44be-8bc3-3f3cf87f5ba7", "sighting--7bacbf1c-634e-43d3-9431-90eac08a6b35", "sighting--18c574ac-0405-42ba-bd5d-07acbbdceea0", "sighting--1455bd87-8894-4153-ab4c-0b4e85ed67b3", "sighting--f2417383-616e-44fe-be6e-be1d8b5d8476", "sighting--811c0d14-57e0-4ff9-801a-aeffe139fec6", "sighting--9a70dff2-907a-436a-b7f6-88958089ba1c", "sighting--1f4c4a23-de77-4c4c-ba15-5877f008fbca", "sighting--6cc3c59a-c1b8-43c0-b671-9627e280de44", "sighting--4949cf95-d687-4ab4-a75a-f0cc565baab1", "sighting--b9ae3073-3f7f-4b67-b6fb-04b7aafce631", "sighting--d8002619-48e9-4f65-8559-c2da9ecb03af", "sighting--7e2c7c24-8604-46ae-a7a6-c3602f94a8f6", "sighting--a8c86bcd-55c1-4f91-bfe7-5fe14f33e3c1", "sighting--ca8872d2-4aff-4d53-8b8c-7db14abd94e6", "sighting--545f1aea-60a2-4d76-ae9e-50d850b7578c", "sighting--fc98fab5-9f73-4f93-a40a-c38a67c7a47e", "sighting--0aab6447-6406-4d9b-b880-a720ed4835c2", "sighting--fc372954-dad6-4e1f-8cff-04beb6baf6a4", "sighting--8dd29062-2a3c-413e-92c8-501c16876fd1", "sighting--0e8aac5d-2789-4968-ae32-dbfd8380517e", "sighting--1bbd62e9-a446-48eb-83ff-6b63455fa7a0", "sighting--655ef0cc-337f-4af3-87f0-09b78e3a24fe", "sighting--720c780d-f984-4333-915a-0b902efa610f", "sighting--63bd51d1-4783-442d-8970-a5e27c444330", "sighting--a422d27e-b706-469c-9248-465d5ceb2fd3", "sighting--4aa89bbd-1e49-4d45-bc5c-79ffc5a3ad1e", "sighting--60d7edb8-1e15-4887-acf8-721cba51c778", "sighting--da76dfa5-125b-47a0-ba05-39bd33f6ba71", "sighting--ce850633-e86c-4fd1-b37a-5d0476721b4d", "sighting--e5329b3d-98c7-4d6e-893f-d11b4732da3e", "sighting--3f2e01ff-9f09-4baf-92da-0af0e38f8551", "sighting--77f3f355-ed05-43d4-8890-2951a26ddea1", "sighting--07dd7195-8095-44ff-909b-ca2e49a4f3e2", "sighting--aa676d40-57a5-4c35-ae4b-83438cbbd575", "sighting--882d6040-09ac-4c3e-a9f3-87cbf34c04a4", "sighting--c2310f18-e7be-40b2-b3c7-7d6b55eeb934", "sighting--98d3a440-992f-497a-ba35-d80d3443e1d5", "sighting--277663d2-b939-4bf3-b618-b2f8f7ca9b82", "sighting--2adcb10f-bb92-4a9c-8aa3-82959b4b15ed", "sighting--dc57e305-0165-4e1a-af8c-3770fd61cf06", "sighting--b9ce96b3-9297-4857-a768-48d111cc8458", "sighting--85c7af61-41c1-4f2e-8777-439e22c36c66", "sighting--aa45d8ed-eeb6-4da0-8231-fa7f7ba7c75c", "sighting--0690f9a5-6037-4118-8010-14a59e74f5f2", "sighting--35f4214a-44a3-4e3e-a6e8-c5fcd9461cdf", "sighting--b569492e-5135-4ffa-b1bd-aaffa671c54f", "sighting--176c77c9-cec3-4bac-8dec-81d236a39e4a", "sighting--8a9e2f56-883a-46b8-9924-a19eba34f780", "sighting--88c2defb-090c-443b-a3f7-cb4b828235a3", "sighting--3ef5c6a2-947b-4cb4-b063-328cfdea01f5", "sighting--c2629a7c-3da8-4e13-9691-3bf071f8c5c4", "sighting--fa4ea7af-6743-4dc6-9a71-9e901af5f38b", "sighting--5b63e118-c384-4cd1-be72-457d388775e2", "sighting--b2c7fbea-206b-4392-bb9f-fe04f7d3749e", "sighting--a55f3a2b-4ed9-4049-89da-5078a1445991", "sighting--a3a12944-d7e8-4e5c-a8ae-e76de1086f6d", "sighting--d226ad0a-242d-4bb1-a99d-d443a8012754", "sighting--d8039845-925b-45f8-9015-15c210fe6454", "sighting--7a715d66-0333-4bee-9382-8eca232b4025", "sighting--41293aa1-8385-492d-aeab-b2735ec5c173", "sighting--c687b707-2383-4c18-9b59-e1ac55b11e44", "sighting--7a1814cd-18c5-43af-89e1-62f32e3a2c0c", "sighting--98026b98-af5c-4b39-8b69-102698ed8d28", "sighting--4cd9e764-f9fe-438c-b31b-5fbd7116e403", "sighting--d8df5255-dcb2-4332-ab93-8302a9804c72", "sighting--dd6b17f6-fafd-499d-b18a-6c6fce4cd6c9", "sighting--d143d99f-e1bc-4d60-8349-061285b9bd85", "sighting--c8f1eaf2-441e-4698-a933-119220a1eedc", "sighting--bd803119-4976-492e-ae5c-96a5ee8a2613", "sighting--1a016405-34f6-4a76-80bb-18e4e2f0e359", "sighting--1a7a9794-f117-4fc1-b1ba-dbd780393715", "sighting--cd446a01-8b86-4370-b9e7-2f4e1c0a4ee4", "sighting--552b9672-3d06-48c9-a494-214ad62f77c8", "sighting--2ca83103-8d37-437c-8005-0fafb8da65e4", "sighting--d5b5d241-a48e-46a9-bbd5-e2b5457b22ed", "sighting--2266f92a-43da-4696-a144-03750060c47e", "sighting--fec53c6c-aa72-46a5-8bcc-9c330487f8d1", "sighting--b3507893-1863-4dc4-b59b-11b982100a41", "sighting--f4e7750a-d479-4890-bc84-bb3ded1cebc3", "sighting--04e35322-561b-44e1-9e83-ebe2fe1338db", "sighting--029fc188-8796-4617-bf1d-fa57645dbd75", "sighting--ac86186c-83bd-4f0b-8f61-68b2e20dd0c8", "sighting--4841cf47-1d16-4d8d-9f85-e32735e6b8cc", "sighting--a714d80d-5844-4ad5-bc0b-d486153703ec", "sighting--995e0cdb-ab3c-4c91-ad10-182bb61831c4", "sighting--c8c1f460-08c8-49f5-869e-57376637a6df", "sighting--c909e0b0-6380-4764-9969-9d13eb707abb", "sighting--7d15c28c-6da4-4e9a-97bc-3da2f960e73d", "sighting--4e0915b2-b7c7-44ed-b6df-4aec858d2544", "sighting--bff25601-79c1-48d3-ae8e-12a6b0274ee0", "sighting--351b4f43-7edb-483d-bfaa-1dd46549d89c", "sighting--b280a152-cbfa-4197-9b5f-2d15e413c499", "sighting--d3e5c423-6071-4e9f-a8c0-dd2bd11276b0", "sighting--9255eb98-78b3-4118-af9c-952738c5742a", "sighting--a5da4061-59f0-4757-99ed-a3aba111e863", "sighting--4007b78e-40ae-4ce9-a3dc-c20730726967", "sighting--5d69fbd5-b18a-4d7b-932b-96f0ff21774b", "sighting--2930560a-ebe9-4162-b3ed-abec104d490e", "sighting--33a0755f-50e0-43ef-8b2d-33568284a31b", "sighting--beb7894b-fda6-451b-bf0f-d706866f0743", "sighting--2f900fc3-25f4-4129-a812-a62dbb7bcf21", "sighting--180f0250-600d-4fde-a4c6-ea30ff3dd19a", "sighting--245a363d-88e1-4462-b847-e88d2cc44250", "sighting--61bd1b79-064c-4c50-a4b5-cdac80e597a7", "sighting--3da2a9a5-d573-45e9-845a-bf520c83c352", "sighting--fce58299-08fd-49f4-aba0-6b659352658b", "sighting--50be4b8f-3709-4649-9d97-5242cdf2370b", "sighting--2562bc6a-8fca-4aaf-9647-8125f130d78a", "sighting--3b4f540d-9e63-4f84-9043-b71d86fb4c06", "sighting--00df37ed-438e-4cc3-ab08-c3093998f360", "sighting--3ae31db8-2069-400a-bcd0-2d061ecc50f4", "sighting--48546cd3-d719-44c9-b6aa-da8329ce3020", "sighting--ad5e3fb5-3b85-403d-882a-c7be6076dbeb", "sighting--08540936-1e57-4b78-8527-98b7267efd5c", "sighting--e64265a2-2e16-4dfd-9ace-7dd6b9f2c561", "sighting--fed1858f-6c1e-4e28-ad33-d04a38d02c4b", "sighting--07564dba-dbc2-4c74-8010-826319f079e2", "sighting--00b4927a-ab3b-42c8-9e5d-78e73a42a1cd", "sighting--dbbc4619-7409-4e7e-9f87-b2f9f6fcc45c", "sighting--080d7791-cd9a-417d-a7ea-32dd6e157c3a", "sighting--ddf5bc38-b66e-4049-bc82-3c84f895544a", "sighting--5c3faa94-ff4c-46ee-b7c4-20fee16e4769", "sighting--f5891b75-8292-42c7-b8c8-b6043bcb9768", "sighting--101f7ecd-c63b-4334-adfc-951ac172c6fd", "sighting--f84509f7-d57e-420f-9c23-ab35b90b2182", "sighting--67f1951d-ce3b-4189-bfc9-5d7a609fbbc4", "sighting--fe6c2f8f-04c6-4e61-9653-a97fbcadccd1", "sighting--eb58340f-f8e9-450b-8f01-84b47e40a004", "sighting--95e2c5d7-9986-41e9-87d1-ba71dc39bb52", "sighting--b636423c-3e28-480b-8fec-56248799ef44", "sighting--cf616c0f-f8a0-406f-8f3f-82ce9c151a19", "sighting--dc5e3fcd-e6cf-4927-a3cc-4185577dc93d", "sighting--40356350-571d-4e24-a375-f5c63904bf43", "sighting--2e084442-93a4-4a8f-b046-07f9d40634e5", "sighting--120b9899-b644-4e99-bd50-89ec0dfd1634", "sighting--93b68ae2-008d-40fc-90dd-8f31f11fa422", "sighting--6fb78297-5631-4bce-8282-7a5fed145166", "sighting--4641b910-8215-4ee0-93b4-b3715eaa9f9f", "sighting--5fcd7b13-e219-46ef-abf6-40a16bad1e57", "sighting--04ef3680-438f-4012-a293-6cd17c312df0", "sighting--a7108aa4-6531-46ac-9377-24565b9c0971", "sighting--88ce09c7-a2af-4b0d-be5a-a96879205f3d", "sighting--829f2f5b-5ddb-4ca9-b553-f639c26c0197", "sighting--c7c006fc-055a-45e0-9cc1-d377aeab1f02", "sighting--dd0a8c58-6d5a-405c-9dd1-ab65b6dab5b9", "sighting--c502804d-b458-4220-8ba0-c5801fd52c08", "sighting--f7db2f61-3550-4ce9-a746-fae930141860", "sighting--3aede5d5-6bc6-4f07-a155-8bd3481e39a4", "sighting--7c67b152-e433-47e8-9fc8-35e07097d9bd", "sighting--c8e5de9a-e05a-4faa-9989-43fdb601ad92", "sighting--5e5b8937-86dd-4153-9889-330fcab2463b", "sighting--f5e26f9b-24b0-4047-a1db-04fe183531a6", "sighting--335100df-8dd6-4c27-9389-edd372f81d44", "sighting--9b2daa5e-0ebc-4d54-892e-53df2fe5ce34", "sighting--fd329336-3b6e-4362-a6cf-40e7d0c168eb", "sighting--d1bbaa1b-d5cb-46e2-b32b-e5efc79dfede", "sighting--110197c4-a178-4e56-872d-43fed90d4adf", "sighting--3d879e21-5c71-4500-8341-2da44d9e1a22", "sighting--d8d1ed1f-51f4-4b53-9c7a-a3983fc0c3d8", "sighting--a4a7fc6f-d14d-4f3b-8533-bce285c0dc18", "sighting--93f6bd67-503e-4085-a471-5c478ae7aad9", "sighting--d665e2d5-2bb8-4ab6-a2d4-fc9578f4097b", "sighting--c1561a60-8908-430f-bada-850df3c779c7", "sighting--29bcb919-25b0-4eb5-91a9-3d4410cbb62f", "sighting--992753b5-ff2c-4e6a-a694-d439ceb9bf74", "sighting--cc6903c7-ea68-4c45-9ad7-600085b849f5", "sighting--9e7e3579-7494-46f8-84bd-0704aaf58f7e", "sighting--d7343ddc-813f-4fcb-a17f-430f76a83879", "sighting--099784ef-b56e-461f-a3c6-ece84f298848", "sighting--fe75869d-29a5-41e4-a7c9-336497fa5276", "sighting--ab595363-3e5d-4b9f-bd6f-07d6e71d4602", "sighting--8fac4bf8-4132-4c55-b778-c0b595efe58d", "sighting--1b7c8bc2-b1ca-47a1-ae0d-73bec4cb4b3e", "sighting--2d944b40-99f2-4093-be3e-71c85449b841", "sighting--5761014d-5aa5-4758-b39d-b2db27ef768b", "sighting--51c14456-7b20-4c51-a451-f2dc9318e2a9", "sighting--73c89d0d-63b3-4033-84a8-46ad52e112fa", "sighting--31f4edd9-b6b3-4992-9600-f00633686b80", "sighting--573306e8-09ff-4173-be4b-20096d06f008", "sighting--78bb7b5a-ce87-4bc9-b672-4699a5aeb257", "sighting--1b1d2ff5-a2e8-49dd-bbbe-b5518bcf5a63", "sighting--778c946b-ae85-46d8-bc58-ad53672c8850", "sighting--8fd84218-b4b3-4478-bf14-6cdbf80e309f", "sighting--8f278084-6aae-4838-8c24-909172df9ba3", "sighting--b7de47a9-6d6c-44ec-aa5f-f9a9cba5e860", "sighting--ea0b618b-0ed7-4750-b870-96d9d4e69feb", "sighting--4025a75a-04fd-4106-9fde-ae874d6c2fd2", "sighting--bbdb1d2f-a5e0-4436-a687-3d02dca2d989", "sighting--548e4099-28f7-4911-94aa-803df78fdfd7", "sighting--95644dd5-85da-4856-87fe-79fe16bf525a", "sighting--231c3b17-16c5-4e02-9a9e-df9f9006c582", "sighting--131cdaf8-50b0-4f6e-afd4-86c8bcb877fb", "sighting--a9df0cf1-3cc2-4c84-9b29-2bbe8c83e0f2", "sighting--6777094b-5d91-4b53-96a0-16038da1ea13", "sighting--e5750776-8c98-4891-9e53-d522e624399c", "sighting--35236f7d-f768-4fec-b81c-092e604125f9", "sighting--5c252a8c-e0ab-4c10-86d5-44cc751d3bd7", "sighting--a13c6fe7-6ef0-411e-affb-dbf75927db3c", "sighting--192c431b-ad4f-4594-95c1-28f0cdf314d2", "sighting--e3f1dc16-958f-41b4-9525-7980a591e3d0", "sighting--77de9083-9dc3-49db-82c3-c585d0779dc4", "sighting--41dac9f7-5463-4d0f-8edd-760e4044e5b5", "sighting--06d22034-d250-4158-ac40-7f22a73580bd", "sighting--399d1844-a395-475e-8f65-38936b4c7cb2", "sighting--56f6c8d1-9841-407f-a05e-51ee32b814a3", "sighting--d34dd0d4-dafb-4b65-98fc-1692b65066e9", "sighting--46d6bc12-9123-440a-9811-f77cc65dd0d3", "sighting--cc6c8268-0aea-4373-ae0c-379375307ea1", "sighting--aa1851e1-c70a-4608-8c1c-a8e44904353a", "sighting--367aec7c-ec35-49f2-84af-e670614da888", "sighting--ad4a9d63-7354-4d98-9859-808809c8808d", "sighting--c0298582-11ea-44cf-acaf-cc8933d9e73e", "sighting--98b537d3-04f3-48d3-96f9-f5902bb349cf", "sighting--1eb59b7c-6ff7-46ff-a6cf-f309bc374dec", "sighting--b3cf021f-a563-4fb6-ac53-07b4dbdb657e", "sighting--36b539f8-8002-4b00-9053-1cc133aae429", "sighting--0a902bd6-a281-435c-85a9-9eb3f1a66bb5", "sighting--e69c675f-0a39-4273-b87e-e4d0bd51170e", "sighting--ef6d49e3-c5a0-4bbb-bf5e-d571cf8dad1a", "sighting--5e46ff87-28ea-497b-b0ee-fb41437c0404", "sighting--47ffe726-07b3-4586-895b-b44672989730", "sighting--02bbe716-4344-4a27-9781-507e73a17aa8", "sighting--c9fa49f6-910b-4089-8b1b-16f6bf51f7a3", "sighting--f1654de9-ec9a-4be2-a894-3c3f02f70704", "sighting--34999cee-05d6-41f4-ba1b-08bdfac6c52e", "sighting--e0b379c7-5259-4e4b-aa42-867084de5c15", "sighting--91f9c64c-5eb3-47cd-923a-f53ab82a07b1", "sighting--4b979d70-de82-4688-9040-7820f0907fca", "sighting--3391ed89-199f-4020-a602-9059f36e11ea", "sighting--9fdf1251-5966-407a-aa7b-c27cbea5d649", "sighting--dccb86ca-de86-4f13-b84a-95badc3a18bf", "sighting--b91d1c83-fe1a-4e8f-949a-1f193668d6c7", "sighting--3bc0677f-6c0d-4fc3-922b-b762e5521c49", "sighting--dd1660fa-623a-408d-b4fa-d4d00eff184d", "sighting--62596e51-4e3c-4a18-9ce4-fd2b1d460513", "sighting--dc5094ba-7591-47b7-95ab-c5f35d2b4ee8", "sighting--0035e9fc-d118-4c0f-b879-d1a530949c7a", "sighting--4f5396be-958e-4d76-96b9-969fbf745bcd", "sighting--4985baed-9c70-45f5-9e0e-8912a5229e3d", "sighting--35758c71-94ff-42e5-9bfd-87b07bf5ab8f", "sighting--d63e7122-b86b-4be0-addf-dc1cc7cbfc59", "sighting--96eac649-d13b-40c0-b8f0-cbae9dcb55b1", "sighting--919d3ed9-57f3-439d-90d9-826c80a17e70", "sighting--fe9f693c-1bf8-4e1b-91d4-995023db4145", "sighting--420550c3-0cfd-4d9d-939d-6fa4e61bc0ea", "sighting--1dba0c63-7573-4fa9-b96f-0a9729f67e1f", "sighting--ed22fac5-de31-4dea-a705-4509c53f48e8", "sighting--d35f1e65-cf86-4760-8ac7-38c454172da9", "sighting--047c5217-f6dd-4a6c-a401-08105f8d7b92", "sighting--ccd147bd-c4dc-453b-a30f-14a82922cb28", "sighting--aba2ce24-d250-4ddf-878d-013c030474bc", "sighting--0528f84d-e67b-4ba5-a54c-dbd494dab386", "sighting--0e21f559-160d-4b80-ae62-cd9eda4f2714", "sighting--59b9b923-0aee-4c92-8f1d-8b86f98f02f5", "sighting--c5b77ba7-56c6-41ab-948d-74f1db971a77", "sighting--8ad4d615-d633-4493-ada4-dbf60dbb80db", "sighting--41b95d7d-7f68-4ab4-951d-3effad7f1eda", "sighting--e5595205-56fa-4028-9ba0-c4b1682deef7", "sighting--86b08bdf-e423-4152-9e95-dbe65a8e582f", "sighting--e6488b13-9926-4dab-84c5-10a69a15bf8c", "sighting--edb20752-d6e5-465a-991f-88214c51a654", "sighting--0da0a31f-68ee-41b3-b55b-974edefcbd5d", "sighting--f9778951-6adb-4f68-9842-86c23b7cf48d", "sighting--b4aef927-9b5f-4f18-83c9-9866735f5241", "sighting--6b5a4615-119f-483a-9f7a-41e3c90e9f71", "sighting--2192e893-b555-4ae7-a267-914087feb179", "sighting--d84795dc-47f8-40a1-af0d-53df26766d61", "sighting--e83d5155-c10d-4acc-81cd-46c010427836", "sighting--9e21efd4-bb1d-4cbd-83bf-8d94782739b4", "sighting--0d8d3abe-5e62-4c00-9292-d04f65374f3f", "sighting--a6fe2f85-efe7-4e78-8eec-ace92bff5d89", "sighting--52b3b60e-8e3e-48fe-b55c-b9a989c2bc2d", "sighting--fb999d28-7128-42b6-b8a4-fc40fc6f98fb", "sighting--a5b151ce-0ef1-41e3-980f-0923ecb7a21f", "sighting--96975e82-6f42-4a28-a5b7-4bca29d860c2", "sighting--37ee6ec8-14b2-44fa-8faf-015a0a2eee35", "sighting--a02a26f1-22d8-4554-847e-93a55c6589c2", "sighting--b90d15d5-247d-4653-a17f-9c1271a6ec26", "sighting--cb11f255-9700-41df-ad4b-13f9c8bd2f95", "sighting--ae593c46-e057-4e62-8532-f57753abbc97", "sighting--55f74628-0a22-4600-bb64-6dcaafe8882f", "sighting--64106449-91df-4221-9fad-afc2c1db2bdb", "sighting--b2f7ab4c-d221-47e1-9cc2-eb9c4100c932", "sighting--3a6f5c21-8564-40a8-9100-de1565f8b5b1", "sighting--99f2663f-e313-41a6-8c06-1fcb27db46ca", "sighting--921a643a-e371-4f55-85b7-17b0faed85e5", "sighting--6e9ea8a9-4ad6-447e-8cef-2b1b8b8aaa49", "sighting--22b783e5-6fcd-43cf-9abf-5edf3794f1d8", "sighting--4208cd97-13fe-462f-8485-9f57f7a0677d", "sighting--84f49751-2b26-4cc8-a528-30cbc5a9ae6e", "sighting--f0beac9e-3c58-439f-8d0f-98e40feb96b8", "sighting--39148466-7405-4169-b46a-6f78bc233ff8", "sighting--55fbc5b9-2b9f-4b4b-93f2-5ace2c3cea51", "sighting--a9c27d7d-a20e-4dca-82d7-7ec3d9fb5dc3", "sighting--452f807b-d55d-4e9b-9347-a4a803704270", "sighting--1b58bf6a-7b94-4400-9be1-4a5d9f77d956", "sighting--95861900-fe84-4547-820e-b5b81af58231", "sighting--3269df2b-e4fa-41e8-9f1c-3921ad91fb25", "sighting--28756dc3-b2f4-4fd9-acae-e1ca475edafd", "sighting--22adc150-9c20-4e61-8987-09f032572ec8", "sighting--2a6a95da-2644-4004-b615-d905ff376a3d", "sighting--b08d9509-cfc4-4633-b4b0-66bc289e530f", "sighting--3e3c7135-9273-4cc9-8d9e-7dabfa64ee48", "sighting--63b23088-891f-4d5c-8668-fd5edc2c1e8d", "sighting--4fc0fef1-b750-4348-8053-e2b23fe9cc2f", "sighting--381377fd-2b1d-4fab-9bec-37aaf230d726", "sighting--405bde8d-8fdf-4fb1-8451-92b8d7e73740", "sighting--9aa575c1-e737-4afe-87b6-36ce4193d3c0", "sighting--52172961-dd8c-402e-86c5-3e0bd20e13ab", "sighting--72ae7566-2c0b-4f74-89a3-afbac6ef4002", "sighting--e504d06c-d193-4e4b-9c42-0cf65b60384a", "sighting--4826f137-201f-4a9f-8b9c-441c1b9f297f", "sighting--4745d5f0-115e-4c2e-ab4c-b5ec8d023a9a", "sighting--1750029d-c9a6-4265-b938-1456be0880a9", "sighting--01243237-bf2c-4fb0-845a-84449b95cdf7", "sighting--e362605e-1a37-487c-9394-99902de833b0", "sighting--15b235b8-bd61-43e6-8600-407b4b1300bf", "sighting--d75be2ca-1963-43b5-b9cc-daffdd40d827", "sighting--8a257ebd-fa49-41d5-bcb3-f67060038a5a", "sighting--1d81c186-f23b-4562-b089-4b8c122317f9", "sighting--f96625da-fb6a-4734-b9cc-24f761cd48d2", "sighting--6023739a-4c83-46f7-9bf8-6c7510cf3df7", "sighting--a4f5b286-c317-4a50-853d-b0da0a7f78f9", "sighting--b11b1b71-3bae-41e5-a960-0651d20ba26e", "sighting--624f4755-da37-4438-af6a-aeceddcb298d", "sighting--b456e5fd-9108-4e61-b4f6-98d5d7624141", "sighting--a13e95a1-7818-4639-a285-626b1264d253", "sighting--6423304f-cc99-48cb-991d-75e41385838a", "sighting--f5c8f54f-b9ca-44b6-8434-d25fc8fbb7ca", "sighting--3ed4a46c-4d2b-49c8-af08-ff52d9755d38", "sighting--267002b0-11ba-49cb-a701-b7f64d1920e9", "sighting--a65c02e6-474b-4815-92ee-ce24c88a66e1", "sighting--bf479eeb-0aec-4932-a22a-29d256010826", "sighting--d21fcb3c-76f6-4fd6-892e-f0650c542ea8", "sighting--ba87cbea-d820-4f8a-99f9-8db88f6f9555", "sighting--bf80e14e-ce4a-4707-b594-769787157418", "sighting--531e8e77-0052-4f71-92a0-5b4a7cbbff4d", "sighting--64fe18f3-948a-48d7-8079-1f3726cabfb6", "sighting--9f7b70ff-8f75-49d1-a122-b3f02b3cea2f", "sighting--21fadb01-9cbe-4e77-94cf-06fd877cb599", "sighting--0b50fc41-6625-4760-9e00-75464b5e1964", "sighting--a01a16cb-2b80-4fa8-aa0a-316cbafd8101", "sighting--72c4ce8d-5016-4ec6-92d8-ca72dab2be3b", "sighting--3a4128b7-3443-4720-a52e-045508c3d684", "sighting--4c803103-0e00-4110-b713-f990ee1dfa5f", "sighting--ab33745c-4be6-4c16-9868-feac4a0149e8", "sighting--623b293c-53d5-4f83-b882-3020a78dc9bc", "sighting--4898f908-20ef-4712-9c2d-3863a6dfbef2", "sighting--24f7b4c6-9d43-4518-99c2-be5247c7410a", "sighting--e751250f-8a31-40fb-a966-157ea9692897", "sighting--3a733cff-fef0-4a5f-ab41-19b549331f96", "sighting--5dc4f6a1-2a3e-4c4e-a533-97b1e10c9f42", "sighting--4b824287-74a4-45d9-af78-4b8a97bd5c82", "sighting--3fab93c7-1b2b-4085-85a2-dd32db013102", "sighting--4917d8a8-68f3-4dc7-b46a-8a8c9a2c0661", "sighting--2393a53d-781b-4570-bb41-2cffc8e94902", "sighting--1cb535e8-7a82-47e6-ade6-541bb193c595", "sighting--a348500f-d257-4994-bc75-fa84fc712d00", "sighting--041b660e-c379-40d3-8e9f-07c571b437ae", "sighting--9a07f2c3-eeac-4328-9240-b353b5f4a036", "sighting--4c834a1f-ff98-4a9a-9a85-75026b90ae98", "sighting--395d30f9-d1d1-4cd0-ade4-9d787ff1a131", "sighting--51485075-99ee-4789-802e-9586e65baffb", "sighting--08ec7d1a-9dfb-4be9-b2cd-d2b0d522f10f", "sighting--909c2485-988d-4539-99bd-a36c18a3004e", "sighting--44c9b0b3-de45-40ab-8112-280b52f387da", "sighting--1c00d829-46ad-4734-8927-136f5c04c208", "sighting--429bd547-cde8-4305-a117-0fa6ca672d30", "sighting--607ed24c-39f7-43bc-854d-a61df41b094e", "sighting--f32065ed-ac1e-4b61-a3f8-b31c65d6c462", "sighting--5ac415b3-9689-44ab-91fc-742298d4702e", "sighting--91b8dd0f-2185-4057-8df0-5a64419062ac", "sighting--3ba6b47f-de1a-4c71-bbf9-8910c9c785e4", "sighting--76bf1b11-c9be-4eae-931c-6fa766975b31", "sighting--e2e012ab-d5db-468a-a675-dde615d5e0e3", "sighting--d1cb6db5-b71c-4d30-90e0-c4940509e1fb", "sighting--44851d23-6b3b-41b0-ae7e-bee948ac25fa", "sighting--d3deb4cb-be44-4757-9bf0-2f0831ddb373", "sighting--e74506c4-25f5-422a-88c5-2002026f8f7b", "sighting--12103070-f32d-4c5d-a9f0-ff5666dd407a", "sighting--3fa29bc2-2aa5-47ee-b9bb-fbc0c8b1124e", "sighting--8eee2a74-02e2-4ae2-9867-791712baa7e2", "sighting--7847b804-00b2-4dda-a5ec-7d052d1bfccb", "sighting--e7314c5c-96a5-4019-b415-d94e0f90ee16", "sighting--abcba9f7-60e1-470f-9294-6d76b95f2828", "sighting--0f3d0147-2f8b-439c-92da-54468a6d2e0a", "sighting--b15b5699-a417-418e-90d4-10ae9dae9a9a", "sighting--bc211bdc-c972-4c22-a3ec-e9d8a82f7f0e", "sighting--fadaa0d2-d674-45a1-843b-9e8fa2c3fe05", "sighting--8d82ce74-73d5-44ec-8d9c-f60b1791cce8", "sighting--c0257bff-edcb-4056-81bf-e9ffbccff692", "sighting--a030e5ae-1823-4664-aee5-21cdca7f5013", "sighting--da56f4f1-6247-4a5b-b98a-82ce59622f93", "sighting--72ccfb57-701a-4763-8941-e5e870388d7f", "sighting--38fcd263-2866-4b7e-858d-e93443ed5690", "sighting--258cb510-5359-4dac-9f5a-4bdcca14d9fc", "sighting--fd252aac-2c5c-47fd-af3e-8996057ffeaf", "sighting--755906cd-6d5c-48db-b230-cabc55312de8", "sighting--c5702025-a39a-472c-9b01-b1812ecabe0e", "sighting--6d8b9965-feda-4437-9d8a-080b88db67f2", "sighting--109df48a-48de-4807-858c-8b262d6f981b", "sighting--b5efd4a7-e271-4063-b69a-4d2bc11f95a1", "sighting--468ad5fe-c500-41fb-877b-3ce2b9a8ca5a", "sighting--366f006b-1a19-4357-8f84-29f9402a3f2d", "sighting--ac9ab3a0-387e-4b8c-8829-f32aaa04876d", "sighting--79cd5e9a-acde-4713-8fc5-21290349edbd", "sighting--86a0ffd0-1a79-44cb-9eda-b80af0f7e57f", "sighting--1d95aea4-c41a-4b1d-a3da-f8b3367c7513", "sighting--aa96b695-55d7-4731-a857-50aca8c1767f", "sighting--8dac5aee-d1d0-4923-a33d-ea8a1cfd0f55", "sighting--2fbb8ac4-d0ff-49b9-bd5f-0a005362e658", "sighting--f4aa8bbd-401a-4c74-bcb1-a51aaa2f56c8", "sighting--b59bed59-c0dd-4a42-b52b-0fe243f34306", "sighting--aa537fc5-fbd4-41fc-b070-e957e09e1ed8", "sighting--a533492a-1051-4e58-a2da-7d0a7981bdc4", "sighting--653cce0e-6739-448d-9620-9fc5f17514d9", "sighting--c8069c91-d082-49de-a947-e6762f161c2f", "sighting--6d9530ef-9afa-4b7c-afc6-e5b63aea9e81", "sighting--7dc34fff-61d3-466c-83b4-e6682a3a1ba0", "sighting--4bbfa366-9ecf-4e39-9153-32ff7f049461", "sighting--11ccc4d2-2ed2-44b6-a3dc-29d844505e1e", "sighting--976d1713-9889-41cb-ad54-fb04c72262c4", "sighting--ccbeb4fa-b6f5-42df-a4b8-ccf1520980d5", "sighting--2084b542-90c4-4d14-ad2f-3e90bca61d0d", "sighting--8699cf28-0d77-46ec-87e6-a381b3c6429a", "sighting--c3950039-3834-4ad7-bb87-07d2fdeda4e7", "sighting--8c7b5b79-9509-48b9-bd14-c232aeca23f7", "sighting--26c5aa8f-9a99-4d8c-88d4-d30a27d3fa71", "sighting--62cdcc47-2bd2-44cb-bb62-c0d68ca7f40d", "sighting--97c52667-2b9c-4501-b272-5ac4aae785b5", "sighting--35cb4d14-f400-4849-b97a-fea7fd7550c8", "sighting--e7229c25-13cd-4cf4-917f-caa66a3cdd89", "sighting--9457dc99-9bb4-4cc5-ab4f-e2dff18155c0", "sighting--b630099c-24dc-49e8-bf89-bdda28a19ee1", "sighting--b31f1ab2-1bd8-431e-8ebd-ea7c8f299344", "sighting--38d2bc2c-4661-4307-ad0c-76907c7ae3a1", "sighting--dbeb565c-c7d9-421b-9e15-f0866bf1cbbe", "sighting--66db8600-5c0b-4e2d-99bc-3ff27a238ef4", "sighting--dcc26eca-da06-4af2-aa57-4df38e25efd7", "sighting--20a88242-28f9-4862-9902-ed0466042a7f", "sighting--e29beffb-eb5f-4fef-816f-7fb779be37cc", "sighting--82230d35-dd36-4e8a-802f-94229addcd58", "sighting--c2c46ee2-11e4-4639-a01d-70241b1e36b1", "sighting--83128683-bc1c-4684-98a1-8e853a87dabb", "sighting--1283adfc-4945-4579-abb3-1e2e4ffe5313", "sighting--3bfd3430-4ae6-45e4-a186-eab96ba02164", "sighting--35aec4cb-905f-4960-82a4-474a9a780733", "sighting--692af9fc-c409-41c7-95e1-40cced5c2fa2", "sighting--1640447e-e48c-4ae8-81fc-8433dd1bfb4d", "sighting--a13bb2a3-532b-4696-b8d7-2ab3a525f000", "sighting--41237f65-1f49-4686-ba7c-1fdda038dddd", "sighting--577d5130-f591-4e77-9449-27e0193d1219", "sighting--fdb73605-88fa-4862-892d-94f149bf2b23", "sighting--eaa06a95-5ac9-4c11-b3ca-c9a94e43ec61", "sighting--3b6c206e-d755-4d20-9ad3-13fd7cb203b7", "sighting--6328b0b6-0d1f-4f18-83f6-e673c167be08", "sighting--81e78d58-94b2-4541-a32a-d1b2b2e6cb3b", "sighting--9f6498c1-a8b8-41e4-a243-0bd60601c87e", "sighting--afdd3ca9-ad42-4771-9cb3-7e924f75c076", "sighting--ac637f31-52cd-4bef-bf22-e03d321ac7dc", "sighting--89b8bdbe-5892-48e8-8e69-d310fd16fc85", "sighting--c6c1a720-2f96-428b-a3b1-654b4d449791", "sighting--e1e58c0c-bcf2-4a73-8e65-bceaec1f6cbd", "sighting--55c40f5b-fae1-4aaf-8bb0-12b363556839", "sighting--c2a7721f-df7b-4696-bd9d-d0083d1dd5e5", "sighting--b7571c62-6cd7-4197-917e-105efe7b4f9e", "sighting--3ffb4d0e-c8fd-46a4-9b9b-883400ce4b23", "sighting--b7795ec2-0274-49fb-b4ba-b12a91ae5114", "sighting--c5cbb941-a8f2-4366-bde6-a4431fbf30aa", "sighting--29378811-babd-4523-840a-c6a896a35eea", "sighting--e13493d4-a662-474a-b0d1-f5826b4578d0", "sighting--35cfc70b-5452-466d-98fb-48f771eb75bf", "sighting--cc3fd2de-6f5d-412f-8f57-0656506eb9b5", "sighting--0c3879f0-30b2-47de-a2fb-d07ae676264b", "sighting--570ee082-8391-4b2a-8575-6892998f2764", "sighting--1a0ea918-7e34-4870-bfb5-497b2d89bec9", "sighting--47698243-670c-430f-99a2-49313bee62fd", "sighting--68449425-b73e-4b1e-8a2d-1646e0500ed7", "sighting--3c2b0ad3-2bad-4caa-af5b-59624230acee", "sighting--bd30641d-0bcc-45a7-bbd1-675914be9636", "sighting--377bb469-a825-4252-86ec-251e975bb3fe", "sighting--1b497106-db0a-494d-80a0-2df412070bf7", "sighting--11a30b39-79ad-4d96-985c-556baff299e5", "sighting--ae6b4f5e-b888-47c9-9d75-d8c98e59520f", "sighting--d32b6f3a-da71-41b1-8ff2-cd46d5b1a54f", "sighting--915c57be-c626-4fcb-a87c-7808188f89a8", "sighting--147c79a5-3386-4c57-8e74-4a4c5e269dd6", "sighting--e10ef04c-bdc6-464c-aaf8-def7af66a58e", "sighting--55c5f8d8-2047-4f00-b294-9a534a434328", "sighting--9cbbb816-b5fa-4ca8-bf09-571b7dcfe8e5", "sighting--b3b2467c-cfac-48fa-b603-e5996dd7d616", "sighting--db458755-b97e-4d0c-a95c-e5be118bf9b0", "sighting--d61406a8-b8f4-4bff-bf49-532ea9c8ff05", "sighting--48ee6f1a-4ce9-457d-80ea-27313444876b", "sighting--8a8f8dcb-b331-402e-b1fe-ad3a4fd053ab", "sighting--00aa4041-2c72-4add-9ed0-bbcb8ab989e7", "sighting--0b834ccc-bd33-4050-ad3e-5593bce63710", "sighting--a5fcb144-f09b-4954-a20b-1f3b3763ed7c", "sighting--0831365e-cc8e-4532-b597-1c7f8a1262bd", "sighting--6f2a7b07-f643-4b4c-b738-f25f997778c9", "sighting--e677abd2-5d96-42d8-baf1-85a7d1800c92", "sighting--ca9b9f02-fb80-4656-ac7c-53bfbe32f3bc", "sighting--47ec64bf-4267-44db-b01a-539375f87a27", "sighting--f5fe7d5c-60fa-4078-a136-8d6737e3b765", "sighting--46a713ce-9259-4bec-9633-c2a11aee272c", "sighting--1ce1c202-12d6-4392-962d-d824aff150e5", "sighting--e515a9f9-a92a-4cb1-b6ac-0dc5d5670279", "sighting--882285c5-3c92-46b1-9e39-7c61237a413f", "sighting--d0d8c819-9cc6-4c89-84fe-5a4a21d15e69", "sighting--b427260d-806c-4745-9732-11a4915766d5", "sighting--affb7b41-7c7e-485d-abe2-53fbde750cd6", "sighting--3de76338-51b0-4eca-8a20-859e99d4a3ff", "sighting--085d2232-9943-4fce-8bc3-97f2aaecec85", "sighting--545e73b1-91c7-4eff-ad4f-5ba89e8dda71", "sighting--330c5708-62a3-4cfd-aca6-1949a94793b1", "sighting--0e082029-5eb2-4561-81ce-64d55409e263", "sighting--9b4c41e5-5cc7-4791-a217-1dc855a1e571", "sighting--a5c1cd49-a97c-4e1b-9e4d-94dcb44683cb", "sighting--24e5920c-830f-4bc8-9abd-61fdc1125dce", "sighting--fac31d23-9361-433e-bd04-d3d7a4bed1a2", "sighting--8e37bc7d-63cd-4d4e-ba4d-299a4b71a9ac", "sighting--1c9ec752-de87-462f-998b-33f4d667ffaf", "sighting--d36eba06-fa99-4add-98b0-562092e6ce99", "sighting--eb955fa1-eb34-4ec5-9796-9c7ae2b88089", "sighting--bf9c21b2-c89d-49ec-a2b5-20a79d8ea5dd", "sighting--cc9666a4-1051-4b4b-9361-05c372e24002", "sighting--4b5e3f8e-885c-4712-bf7d-2829b773b5ec", "sighting--dbd4dc98-b5ce-49de-a388-0c7fbddb1077", "sighting--2f3f76fd-8f06-4322-b8a4-a3135cd117fa", "sighting--890edfbb-953b-4fa9-9f3a-c9713a119105", "sighting--01d463c2-2433-4b10-a4c8-0efb1062fd5f", "sighting--38eee2b4-5b28-4e32-b329-6af59e75e831", "sighting--5330d2dd-063b-4e79-bda6-27607650dfca", "sighting--781a0d7d-57c6-4506-bcf9-57a5926f92b0", "sighting--b48a3f34-f433-4762-be51-b9d5d32c657d", "sighting--46fa03af-5f0f-4df9-b3c5-65d2e4d3d587", "sighting--dae52102-76d6-49b9-9f2d-3517154f3c9a", "sighting--9ce2ac1c-5cda-4be7-8ee7-190a6b89dbdc", "sighting--5957f7de-ecf2-4fc4-b0b0-47bf6d644bcd", "sighting--e565fc66-21e8-4ff8-b0a5-5a1b08935f18", "sighting--4eeba72b-ee4b-4670-9c5b-25423f5cd833", "sighting--f57df14b-b2b5-45d5-b355-6268f7fe45f1", "sighting--3bd4f371-9a3d-4967-9a74-a267e46eb82e", "sighting--5a1c172b-3b08-4ae2-a74f-659e77f06083", "sighting--3437c9c7-d64e-4f0d-8c6b-7a54a715b45f", "sighting--b93ff305-0127-4a32-9735-95e1b964b0d8", "sighting--8d362c69-7f32-4061-9e4d-5122daf07e85", "sighting--73224ef5-74b0-400d-886e-0150f096b922", "sighting--27e820ef-2bef-43a3-81d0-f11171ada1a9", "sighting--d43b7522-524f-483f-b5ea-d4771640c1c1", "sighting--bca37f7d-0f13-44cd-86a7-b6b8660fcaaf", "sighting--97642902-7a63-48cd-928f-b2ea6aa9445e", "sighting--ba647c4a-3821-4dbf-8a45-57c47a00cde1", "sighting--e8d82030-5a93-4b82-a39e-db0b142d083d", "sighting--ad0953ce-997a-45de-befe-d5317d20eb22", "sighting--c3f15066-3d07-4fb7-a134-f97fc05c8b5b", "sighting--18d12925-e857-42ec-825a-afaf3b516c5e", "sighting--df74d419-6334-48d1-8c37-4e7788d8c073", "sighting--71b72aae-03b7-4e10-94da-0d91d9dcd64a", "sighting--9b6af836-86a3-4620-a289-dad84b2693a4", "sighting--f49659a2-3996-48f5-88a4-b5d7976b10ae", "sighting--68d7e904-d77d-40b1-beeb-9a252d52cbf8", "sighting--8d122e3e-2b9f-471a-b2ab-d26b1859c094", "sighting--20efe4a0-084f-48d1-888d-418d4ef7113b", "sighting--bba9475c-237b-4af9-80bd-ac3bd4f841ef", "sighting--2caa622d-e622-4071-bf4b-6366eff80725", "sighting--e7e5cff9-12c7-49a9-a020-987986eda57f", "sighting--f5c5b4fd-0c4c-4576-a294-49aa96341b55", "sighting--131a8949-6929-4b84-b991-daa0eb0a153e", "sighting--f77927ba-8b24-4fed-a0bb-4c3f37ecadbd", "sighting--cc0e9c8b-5332-4fd7-ba2d-84ca0daaaa27", "sighting--67cf7fd6-d7c3-4542-a349-d7833f07eef0", "sighting--5e58cc35-748d-42ac-9654-e51f6ceadb1a", "sighting--6c890291-f85d-4695-a145-15a464cabbc9", "sighting--fc9d0ff3-b733-4d33-b678-985bc6e4ab03", "sighting--e54295b0-7488-4de9-bf50-9c2bb947e59a", "sighting--0b6254b6-8d8b-42ba-aabf-1d7cd57bb98c", "sighting--3a9c118f-eee2-419e-aa38-0cc7c5e82b04", "sighting--eb9f236f-fe66-4e63-990b-e0201bdbe7bd", "sighting--718097ea-0a87-4496-aa81-e5b0b3007c57", "sighting--3ca60922-e5a8-4aaf-92ae-9d150004e2f8", "sighting--97ddd146-ef86-4765-a231-d4d049586d13", "sighting--6f6be8af-3153-4878-9a2d-6d004b92f27a", "sighting--a5e7fc39-1c6a-4753-82e4-a44f8cd2f8ce", "sighting--f272ae38-e354-4a2a-ba58-545fd23fa4e8", "sighting--82a1b29a-86a0-43e8-b1aa-9506aab3cbef", "sighting--6dd54f6f-e64c-4ecc-b6e3-b5889ac1d3bb", "sighting--95e6ac47-d396-4e1a-96eb-1354311bae4e", "sighting--685c208c-c0da-429b-8b52-2abdd5e0d566", "sighting--be5fa670-9add-4838-8ac4-228950de20c5", "sighting--77f71371-7156-48b5-aaa2-ddfca9820d87", "sighting--39ff4f75-4f1c-409f-823a-9314ff802f63", "sighting--56ca50c5-d453-4b7f-b149-c585e152691b", "sighting--7766afda-1c1f-4a43-bee5-a8625a307673", "sighting--f4aac86b-8766-4936-9ac2-ef2336a02a72", "sighting--a416537c-b245-4ebe-a518-99d89301a5e9", "sighting--2bc7f895-ae21-44a4-8129-7421841e6c8d", "sighting--1e55943a-db72-4dc0-91dd-3641298e907a", "sighting--78ac10fe-3858-4b0a-a1c0-dc164a8b2bde", "sighting--b4f5b6f4-9d7c-49ad-984c-4023e2c2d61f", "sighting--f92e612d-033f-44d9-a119-0a62cd5bf3c9", "sighting--477f7991-d305-4a3b-a75f-02bf2c24da5e", "sighting--97ea1430-a54f-43ea-9c12-005cc491364e", "sighting--8ea37ab9-b433-431c-89da-e7b9d41777ce", "sighting--b129d5c7-2385-429a-b435-b2ccbdbe5b3b", "sighting--a958e12e-e6c6-45a4-9861-a00a0569d924", "sighting--c3a97332-c0a6-4dcb-935c-7f5d0b615b8d", "sighting--b2f03182-e430-43f5-891b-4deda7f2ab8f", "sighting--9d3260e8-8fb1-493c-aa8d-ce7a3aa4f60c", "sighting--5037f587-9753-4d2b-b2cd-26b3be10c068", "sighting--558f86a0-a160-4ef8-b748-488c2356161d", "sighting--c6025905-b660-4a42-b373-4964beb0b111", "sighting--6740e301-668d-4b0d-9409-6f45c685b049", "sighting--6eac3cf4-1000-4502-a703-51dbf43b1dce", "sighting--087ca8b2-3eb0-4a64-bfa8-30450ba5ec6e", "sighting--4b8517bc-5d70-4a08-a8e7-72e643de0dce", "sighting--3aa41d39-c9f7-44c2-9f27-9431e3d37bd3", "sighting--0287d84d-79d8-421b-8cc8-ee36d318d4e8", "sighting--1b34b442-231c-4eaf-8df9-bdd54324ce57", "sighting--fa05a30a-58a3-400b-a907-88d9642f723c", "sighting--cf26e816-973a-48cd-b074-90c5d52b10e4", "sighting--f169c9bf-c776-4aa3-827d-acc5ffc76a4c", "sighting--6e706e48-4be5-44ea-bbf7-3ee5efecdde9", "sighting--170c7171-b6f2-4550-b750-0505e644f518", "sighting--355dea01-62ac-4962-b5cb-339808f7c479", "sighting--3b5a99bf-bfb6-41c3-92b8-9ec809cba25e", "sighting--fa921e17-f263-4a0b-a7fe-057ed8f666b7", "sighting--683b390f-3d63-4991-abf2-37b723ac3f2b", "sighting--17b45b38-f4e5-4dd4-b6a9-242e7bc357bb", "sighting--e98ce2ca-b6d6-4164-9019-6f96b685b8b7", "sighting--dc4d0ac6-e249-4a0a-ab72-2d8bd2186cbd", "sighting--597b631e-bb14-4c4d-8db1-72a54e670823", "sighting--d34874da-1210-4bc1-9fd5-4f82cfbb2823", "sighting--f598dbcf-e082-4452-bd71-1710142226d2", "sighting--9f10543a-2d80-41b4-a095-7d14c0f8ad7c", "sighting--335c2e44-fd6e-49ed-9b18-c5c1932471fc", "sighting--0973a954-ad5a-4e70-93a1-39d0b7e6c4ac", "sighting--3e7daf46-cd5a-49c7-a872-b3ebae4c5531", "sighting--7accaf84-1f95-4721-8776-a06af205be17", "sighting--10a0948a-2529-402c-b5a9-de854644b5c0", "sighting--b1d78f49-b59f-4fed-b43b-5924b6e66d15", "sighting--461f9bfc-d1ab-4262-8e8b-a6c1c5d4ba79", "sighting--7759d530-0965-49bb-a36d-d66369f953ae", "sighting--0dac8403-4c35-4ac9-a51a-c3f6690ff500", "sighting--281171f7-456a-4c67-8f87-359c4a5d4195", "sighting--f2737a5d-1795-42ad-822a-a7a5ba0e85ca", "sighting--10515e24-1da1-42ae-b6fd-5d5332bd7353", "sighting--3e7a3e91-ce95-4348-8039-e4e7a6539f8a", "sighting--ff909cd9-1c43-4911-8d2a-ca5c70095312", "sighting--5c4f74b0-c8ea-467c-8ede-7d1b6e919665", "sighting--f4885915-796e-47ef-afa1-6096065965e7", "sighting--d660dae6-5791-49f9-ba84-85100e2d7c0c", "sighting--d009ff72-a03f-4775-ac42-da6785dfb4fb", "sighting--acb9d52a-7800-4080-aaba-25460a9c629d", "sighting--d2cf1aaa-32c0-4959-8ba9-ed8fc2b321df", "sighting--e60df89c-4689-41b2-9380-69d7447f90ca", "sighting--47fa1b85-bac6-4ad4-805f-a0e749fc1add", "sighting--32299d05-c293-4021-8483-3a74b7853c3d", "sighting--63b8978e-2426-4f6c-89d8-5fb60d6918d3", "sighting--b642f613-8cb9-4bdf-b73f-f5bca66ceac2", "sighting--04ada46d-0e69-4624-92d7-20c5e90f9873", "sighting--68762719-135b-4db0-9fd6-2c89ed4754d8", "sighting--457530c4-b84f-4b71-b127-a7222244a124", "sighting--1fc9cf94-75d2-4b0d-a52a-868a26469655", "sighting--3e6e3f67-5471-4b4d-80f1-9bc94eadcbed", "sighting--933e8640-6148-4ed5-a4b5-e5631d45bcec", "sighting--dbc3f73a-7899-4a12-8460-5fd5c5c7bd7e", "sighting--c2b41932-3cd3-48b6-87c1-3e453ecf48bf", "sighting--21853f7d-9217-486f-8900-1b8a95903ed6", "sighting--22aa910d-c34f-41c5-890c-dcf8764ed7db", "sighting--35c2f5c0-01f2-4566-8d29-76a0357539f4", "sighting--37b2658a-961e-4d6e-8770-78b1e75c5b97", "sighting--e6d43b78-d2ca-48fb-87a2-5c273d881523", "sighting--1c3cd839-644e-48bc-9d7c-7a5725345ac4", "sighting--2b25d425-774c-404b-bb4e-1be1d88c5b91", "sighting--ea833dfd-689a-48fe-a518-85d923cb4390", "sighting--8e449765-afa6-4ac6-86cd-edfa023760f1", "sighting--bbb146c3-5670-4867-b5d0-49f3c6d67f90", "sighting--847191ba-2c30-400c-9014-1b03107fd26c", "sighting--02fe1bbf-8604-4a81-a154-ccbd6889214a", "sighting--d138445e-ff1e-4c82-9e7b-b81a89e1b905", "sighting--4eaf8bf9-d123-4bfa-b8aa-ea101154b528", "sighting--ec1d0762-31f0-4ec4-a019-8f3c800585c5", "sighting--7a70cf0d-e2a4-4010-a3f7-16bc7e260b21", "sighting--bdfbb93f-2559-487e-8a19-6047a9e1b46f", "sighting--545d40b3-fabb-4f13-a545-1ea1f5b47fb7", "sighting--b2bf4071-6cbc-4450-91d9-956cae93d22a", "sighting--8a6fe26b-a894-4038-87c0-e37027ca3324", "sighting--761c61b0-5898-4d9b-b111-872d619dd4af", "sighting--6cadd219-d418-4beb-b4cc-4f2a6b72bfa1", "sighting--c71d4f26-677f-4e5d-9c96-e64fd90e29b2", "sighting--d6ee6933-7579-4f5f-b364-bc876ef798e1", "sighting--05cd5c1b-30c3-4600-81a8-8af814f5f538", "sighting--d8a6aa33-6318-46d7-8697-51bb7d827c4e", "sighting--6ff8fe02-3014-4be0-957c-f2a82652f9f5", "sighting--7adf9b55-7a7c-4f41-9f8a-58aefdf34e5b", "sighting--4a02469f-276d-423b-b899-3d989f7e8475", "sighting--da5f2eba-cb06-4749-8ac1-3d3a4266ff89", "sighting--feaf5237-f5db-44b0-a713-dfa0872add47", "sighting--71f97202-60aa-4b2f-bc4d-d8dd0a7a8191", "sighting--e4d40416-e43a-41f5-b9e7-14073184ee60", "sighting--3f0b7cee-9f40-469b-b9c9-e3808dfca8d2", "sighting--a2d16678-c535-4352-8482-a69e4d498c34", "sighting--1e41a687-e13a-4658-a843-e358ae79d249", "sighting--0d86947b-bbbc-48ab-8586-fb1cc4c1ab0f", "sighting--4cf3fd03-a872-4c22-8ef8-1ee89609ff64", "sighting--8b9d0921-66dc-4949-a52f-ba0cd690ddf3", "sighting--a81c183a-cfd4-48db-b16f-ed70064e5bc4", "sighting--fa006584-f609-485a-96f6-85be06cb283f", "sighting--a69ed5da-9764-40df-b9ff-bc427e623ca1", "sighting--18934f78-929c-491e-b668-f79e7da25cfa", "sighting--b1699a44-923b-4141-8fcd-64ae770b4de5", "sighting--23240c08-1c02-4359-8831-e69bd62156e1", "sighting--c3663e1e-a63d-45eb-b8d8-f99ed0248fa7", "sighting--ab64d9d3-cc8b-4ca2-b135-677328cedef5", "sighting--2ef19c51-1440-44fa-b40f-f2f1b942751c", "sighting--7cbba843-dbe0-4ac5-be53-df45ef5674cd", "sighting--7b0cee12-8eda-4f5f-a3d1-11b73b2b5c88", "sighting--39ab4111-761c-44f2-9377-e1a36a5d5a2f", "sighting--570c684d-a50d-455e-8fd0-af1b10c720ed", "sighting--8d9806b9-29c8-40ab-ba8a-32ced2c06376", "sighting--76e13e45-00bb-4016-a732-ef8046c08139", "sighting--7694bc26-3d99-4e69-b6f0-bb583bea05e5", "sighting--a9b60404-a0d2-4866-87e3-21fdbee82483", "sighting--bf4788d1-8987-4443-a904-057b752af031", "sighting--7288478d-e9e9-4d5b-afec-4d1ecb089ca0", "sighting--627935b7-e2c0-40ed-8cd3-0659d9d2c457", "sighting--e309d9d0-5bb4-45ad-a391-c7f872e33ff5", "sighting--606471a4-8e91-4552-81ce-48b25fa50245", "sighting--4c9bacd1-ff33-4875-82d3-cae46b53b2a0", "sighting--a26c3bc1-ca71-439a-948b-bcf4761e35fd", "sighting--c78ce961-67ba-49d4-a873-1b0bf26422b2", "sighting--24a4f4df-34d9-4246-889d-f0fc8f36db33", "sighting--e19d3cde-daca-40f1-9d8b-86c9df2477cc", "sighting--2e9d9027-2ff3-4dfe-a315-5997de8feea6", "sighting--3da139b1-5d65-444a-94b7-18659756f836", "sighting--d8dfa213-6c2f-48b3-866d-d37db7a2dae5", "sighting--204b9f9f-1610-4b21-8f7a-256db6b93129", "sighting--9651cc3b-13fe-475a-9ae6-48b56a2bfa0a", "sighting--88293fab-32c3-4758-a4c0-2a6fb5860776", "sighting--698dbd6a-6a10-4817-a411-226889422cd6", "sighting--f1116a46-cebf-4df5-bb3b-888db4bd2677", "sighting--c3fbbd51-6828-4236-8935-49e4714bc423", "sighting--04763827-c15c-4c80-87ad-fa1383ed753e", "sighting--1e0f567f-2774-43c1-855d-9096ae665a0d", "sighting--ba2c04de-2858-4816-83b7-e56a8bb0fbac", "sighting--c0ba072a-ac6d-485f-8517-3d4db40daeaf", "sighting--48e81433-2b97-4f04-8e91-74d580539f6b", "sighting--2c5e740a-af67-4529-8b41-befbefcc9508", "sighting--39f51ce6-f0c1-4250-a0f9-cedb44742b1b", "sighting--249e123c-b0d2-4194-8d62-a5752a659489", "sighting--b2c5c395-706d-413b-bcb3-4256bdce8afc", "sighting--a0e1b589-5b86-4c6e-a6f8-705e2090da16", "sighting--5b1a3076-a46b-40cb-9de4-d1583a581c83", "sighting--c0d64d2f-043d-4b1f-8a97-aa216b05e20d", "sighting--aec12b90-c2df-4bb2-828a-c3e3610e3d5e", "sighting--94a92f21-ae0f-4b16-bfa0-1ad3cb293fd7", "sighting--b30660b9-6d21-41e2-aa2f-c22297c7a55f", "sighting--263c72ad-1f4c-4263-a373-f9eca08299ba", "sighting--98ca699f-1652-40ec-9d57-2a1961b27546", "sighting--b6272507-d5ac-4d05-b1b0-f51794dafd9e", "sighting--fcdf9f45-821a-4df7-87e5-bebae54efa78", "sighting--6fcee38b-a900-4ea1-85f1-351bfe1e4717", "sighting--4faef614-3f6a-4b3e-ae0e-ad5b38a97c80", "sighting--cf59b5d9-3edd-4e3f-9237-56e7690700ef", "sighting--fae652d0-4518-46f3-af60-03fd48b3c179", "sighting--a75adfc9-c2ef-40a6-8ab0-321ec12bc3f7", "sighting--058d4fbc-fe07-4811-9e33-48b0d175ee89", "sighting--1f300a87-fe00-412d-a363-c308acdefa73", "sighting--57eb5b19-1a89-41e8-bd58-b0701eddd3a0", "sighting--1b1a9887-e3e5-4e1e-a832-6dfa1f048495", "sighting--60969b7b-e56f-407c-8123-fa399af61cb7", "sighting--349430f1-2b65-4089-ab4f-f9bd9d71bdcb", "sighting--7520df58-e1a9-42ab-bc3f-07e21caae1c6", "sighting--0bbe15c0-acdc-4c34-9038-feeeceb16481", "sighting--0fab3301-516c-4166-a94e-4b5a8b29ace2", "sighting--f4872e9d-40e2-46b9-9857-11f2ff5cbb26", "sighting--f89cf30f-704f-4620-868c-aca0b9e6fe06", "sighting--e3270feb-7579-40b2-b516-a1c2f64f9ab0", "sighting--791ad950-49d0-4279-8a77-25877599e9b2", "sighting--35586dbc-1502-4446-bea8-ac79839967ea", "sighting--34a2f6a2-8728-43cd-9fd2-42241a21963f", "sighting--e7765aab-3240-414c-a3bd-d122514b4341", "sighting--f0aec21c-02a3-449d-899e-82c21541e736", "sighting--22bb4308-fd41-490f-a708-3a1626f096ba", "sighting--becf2548-1768-4b47-8be6-8c47e76581cb", "sighting--39371d28-0701-43e1-b03e-9ce651396793", "sighting--b46ee78c-90af-4630-aa63-3084f23c534d", "sighting--4a3f18f4-b1f4-482a-8b1d-5a5d3e7065d5", "sighting--13b1345a-3cb7-4b91-9e5f-f7f00b2e7918", "sighting--3b39d040-f9f0-4d38-9935-04c92900eec2", "sighting--51c0d945-10d1-49df-ab23-17a124038b01", "sighting--78fea775-9bc4-446c-afa7-1f9ce2883d4f", "sighting--65a32ddc-9245-42b5-a5a4-bca7dd4e4946", "sighting--9fe0787c-89a0-48e0-987c-8fdc976196ea", "sighting--5be7ef7b-b601-4101-b667-64bcbaa51c5b", "sighting--1ad410fd-27e3-487d-87d8-6d977dad04da", "sighting--1309bd57-63df-4276-a3ed-a9d7607d0d49", "sighting--df41f594-6dc7-4aac-a6d8-c96989327511", "sighting--6fced5eb-8d11-4205-a40a-dd525b04aa0a", "sighting--d40f51af-b411-4bae-9517-030c7435688b", "sighting--cd8aa9b8-6c71-4280-aca9-56133f4fb09d", "sighting--02a9132e-e9bf-458c-a452-560aa280d342", "sighting--c7f4b566-6850-461a-9ef6-2b13cf1bfb2e", "sighting--5970cdf6-0e8a-4668-b049-b4e244eb04a0", "sighting--a4a2f50f-37ac-4ff2-9fe4-704bd725e719", "sighting--6057bcb1-3a65-4543-a3a0-1c89d255841d", "sighting--9ad86895-ccc8-4df8-8863-21fbbb812a01", "sighting--94cc9bba-941c-4aa7-9632-32748684fba3", "sighting--6e36d747-480b-4166-878f-72572f7c27c6", "sighting--536750ee-2d4b-45c7-ae79-1bca3a2f9caf", "sighting--c9970f46-bb33-4edb-8f51-a82a9d136e4a", "sighting--5c027b0a-fbee-483c-b9ec-24fbef034d71", "sighting--8ce7ee8c-89da-408b-a38b-fa4ddbeee9c1", "sighting--b8af6109-d61d-4b1d-8042-6c13197500f3", "sighting--02972242-7cd4-4375-a787-b8e407d77905", "sighting--8792d658-86af-4dea-8ad8-da65c4416d13", "sighting--26b797c3-d73a-4801-ab00-043879f77b1e", "sighting--c5b82006-4fa9-4038-abef-1f5cd9978949", "sighting--356f401d-de23-49e8-b646-02546b645571", "sighting--d15c1cc2-99a2-4eaf-a662-c3f138c26ba6", "sighting--ae142323-c65f-4479-9083-ca62989c24d9", "sighting--0272afcf-7258-476c-b091-12099a8510bc", "sighting--b6b66126-f840-42ba-8a49-c846942d2514", "sighting--ebf9cc52-63ca-4bbc-b5fc-26c43e896454", "sighting--2e5223e8-8e7e-4b03-a104-c6fa18aba428", "sighting--4efbd044-88e3-49a9-8eb7-eca1eec99ab4", "sighting--bb7db94a-6124-40ee-86ac-017ecdf84740", "sighting--0565e65c-d429-42fd-978c-8532c868841e", "sighting--46070ee2-371a-48a3-a1e7-0adef5957fd7", "sighting--cb60d515-47cf-400b-8ef4-34d9070487c2", "sighting--c7d67a55-94a9-4172-b18d-e78cb3b15216", "sighting--ac58ace3-2e93-4327-b19d-af4f54c7fd70", "sighting--ba585e3b-4e8e-4b05-8dd5-56f940e06065", "sighting--0cd9845e-3839-4e80-9ee4-66e0d76531bd", "sighting--b48c376d-f15c-423e-9bc7-790f0c04a60b", "sighting--f4198573-c104-485f-b1b7-343349827833", "sighting--44044e77-6e1c-4b33-bed7-8ed8154c84a8", "sighting--b0c88a95-78e1-467a-98cd-b83b2abe4ff7", "sighting--6eb254ec-228b-4eea-b613-9aa2201e85b5", "sighting--fb733f2d-cb7d-4e19-954a-50e17444883c", "sighting--e1dd8177-e743-40f7-9cca-096d5e9b199a", "sighting--be2a0855-82a3-4f45-8990-81b2f047f67f", "sighting--8ec5f5ee-8645-43eb-8b4f-ecd8aff3839a", "sighting--a37d99b2-10c3-44f7-953a-4ed20a13f506", "sighting--f6d6ab47-2bd8-4600-8168-98b9a1603eef", "sighting--1c3b15dc-d45a-473a-8d33-b8347c328dd6", "sighting--d8d34acb-b4ce-4a52-b97c-72bf783280db", "sighting--51c5e686-b6d4-4416-a1ca-1e837c91c849", "sighting--36f0c2e6-237e-462d-9e24-ae202365794f", "sighting--323d556e-6c56-42c1-929c-92668bdf8a89", "sighting--c021f03c-e102-40ef-94fc-21a2ef037440", "sighting--e347b412-568c-49b5-8710-aff20e404d78", "sighting--48540ae5-c02a-4764-b157-654587139d1c", "sighting--dec2eab0-fa6f-4893-8540-44f9dccb5961", "sighting--ea3eda75-4e29-4ec6-bed8-6ee9ea47fecb", "sighting--3324b7e6-cf48-42e6-9d17-20ea336fe98d", "sighting--9e81b4b9-81b4-4056-b064-764ffaabe17b", "sighting--30a24e23-2ca6-4ac4-907d-93847b620339", "sighting--86041d83-d877-4fc9-8424-92315fcb82fc", "sighting--82ea67ca-7939-476f-abdf-41d25ebd4a89", "sighting--bfb44fa4-a2a5-4667-ab3b-27c0bcc8cef9", "sighting--049db47d-4c9e-4510-a976-c481e1c51328", "sighting--f6363f73-0482-404c-b4bb-3c4cb7d0fbf5", "sighting--ce9b0d24-1128-4047-b201-d9a53e14b9c0", "sighting--5aa4d188-0ce2-4e7c-a283-aa65ca80b7ca", "sighting--3963e4e2-b6ab-41cf-b677-4fe546070b1f", "sighting--1868ee61-1eee-429f-8439-fea0405f0c4e", "sighting--2245dd88-28ed-4f49-85e9-66574ebaea95", "sighting--b43fd9ca-a11c-47f2-85c1-731e36db47b1", "sighting--0d251ca1-e843-4b11-9e30-1aec504f9e7e", "sighting--fe65b146-4ce9-472f-9e21-1c4ffb4d2eed", "sighting--bcb65d6b-d1b6-4135-aa8c-7692bb992df5", "sighting--7d02f5e7-1ba8-4120-872f-59be2ae28112", "sighting--e6c0f7d5-746a-405b-a12c-e827ec4dcf3c", "sighting--83295597-b837-4b79-82b2-6361865bc150", "sighting--0af1e157-f60d-4582-ad8a-bdebf578850c", "sighting--614e8bbf-e93f-4325-b7be-8756e80fc3e9", "sighting--ec24a172-40ab-4926-9a49-f337840cc6a7", "sighting--9efe6b73-bc82-40cb-96d7-97b8ce175732", "sighting--5e1d2d7b-6939-4d9e-88cf-8235e3a0ac3b", "sighting--1f90b4c0-9f2a-44af-ac10-bc54d81dfd80", "sighting--1a87e502-8e9d-4bf0-b4a2-a0bf985086f4", "sighting--3b860580-b750-489c-9a34-c6aabcefb5b4", "sighting--25a08b93-b05e-4219-a650-771ec999eb99", "sighting--d8e19cbf-2e0e-471d-b677-97601c9a4cb0", "sighting--a3b0760a-86be-4d09-a00f-974ee187733b", "sighting--b304083b-43b9-443d-9062-8ab0c7cf30fc", "sighting--a36fdb35-4bf2-450e-bb3a-fa526786e84b", "sighting--d0f9dd47-5c8e-419c-a3d3-38a591bf969c", "sighting--f78283d9-1bbc-4d4f-b3ef-95d05c3db4e2", "sighting--d737e61b-a751-4f97-aacb-2068d3355ccb", "sighting--ac62fcfa-b6eb-408a-84de-9d957cb3a4d6", "sighting--178f32ae-bca0-4c52-97bd-012dd727319c", "sighting--93941136-5b42-46d9-8240-4a62dbe23118", "sighting--4f255de5-72a9-4b81-a25f-f19d10f49134", "sighting--a743ee6e-bece-4b01-ab2f-49d125e29f4e", "sighting--d14aab28-b6d1-483d-a9a0-a1b9048cb5a4", "sighting--695e32c3-a803-4514-b745-e8703a28fc9c", "sighting--cc615aad-3b0c-46a2-bfbf-f220769af17e", "sighting--5bff7f75-fbf2-48ed-942c-4ac06c64ce43", "sighting--04cd4b23-8b80-4106-9954-d8088fe02ece", "sighting--d651331a-abed-49bb-afc4-510d4b029898", "sighting--a9aa20fc-4d48-4b85-bc2b-26e30757df47", "sighting--dc858cc0-ddab-4e34-8563-3c6e01bf9b05", "sighting--e23a3375-bb01-49f9-9a2f-05a7b872d560", "sighting--82629c70-a7bd-447c-ba67-d3e172a53ffa", "sighting--f24a8618-1066-4657-84e9-5663fd61936e", "sighting--760b9438-1716-410f-b6b4-1d6af8329225", "sighting--c5e898fd-6ffc-46f5-b990-0741f0e88c15", "sighting--9e6f38ef-050a-4bbd-92f4-7593dc50beb7", "sighting--83e3315f-b1f5-4c64-9849-72e8d3cebae8", "sighting--e0dce8b6-8531-4b5a-b48d-4f1ca741406c", "sighting--c18e3eb5-1907-4942-b9b8-b6281ee738d7", "sighting--70d4a21c-a5fc-44aa-a575-7986885da2c5", "sighting--163294bf-64a7-4295-a159-a88f194b4cb4", "sighting--093ffd3a-708e-4e04-aff9-1cf2986e5fdd", "sighting--5b2e1c5d-8941-456e-8ba3-ac90ea381abb", "sighting--e3a30d0e-d6d0-46b5-b8eb-9f32d7d32b23", "sighting--0435ff56-c1ec-40de-a22c-ea17c152a3bd", "sighting--41052969-1186-4371-92bf-dec5aa54c8ed", "sighting--a4859e56-601a-4843-8818-374a2c78c8d0", "sighting--c7a17f3b-da89-4c92-9919-d27a42b302b3", "sighting--2c55f43d-4def-43d7-826a-e5e12cb25c12", "sighting--958c291a-5f5a-4679-876b-8ba3be8611d7", "sighting--fbdee9bb-87ad-4b11-ac79-86cf6715faa9", "sighting--3f6fee67-3154-4079-98dc-829f0ef7c28c", "sighting--e02b4422-cc1d-4184-9e63-45f62aecd80a", "sighting--5f3b2a0e-7e53-4797-928a-5b05b1ab67fb", "sighting--2eb3d3b9-ffe3-42bf-9bc4-f86d34055e9a", "sighting--01e17aa8-1e09-41cf-b38f-0ac2e57d5d95", "sighting--a8a8d7ad-9018-43c3-a9b2-0f2ae589bf8f", "sighting--e90bb99f-fa42-4531-aac1-a230ac86bfba", "sighting--a0e76ae0-d787-4258-8663-347c26ba64c9", "sighting--d7d29065-46eb-47cb-a366-c499435eaeb3", "sighting--4e8b7302-f2ea-421f-8aea-69d6846a5665", "sighting--dae47cd2-4d34-45d1-a53c-6dfad7db9f4c", "sighting--09bf0f90-cf9c-462c-af20-4800909845c1", "sighting--59bdeb6c-1cdc-45b0-a548-d3da2dc33457", "sighting--2d814655-b3c6-4685-8d75-4e5e66196c30", "sighting--4c0b6873-a718-4f38-a3f0-03cb0074e391", "sighting--848f5fcf-909a-47e2-bda0-532d6afd25c9", "sighting--9752bb1c-1741-43c6-ad6a-972ebc9ae7c3", "sighting--bf6d1b79-2246-4bd5-9422-96c455a11d7a", "sighting--ac010294-bc33-4917-bda9-468657d25acf", "sighting--dd664b46-9489-44f9-a7f2-04c749e36051", "sighting--1d18d49b-af5f-4ca9-bbe4-a65de1bf51b6", "sighting--b13a6a8f-c113-4c4c-91b5-bbe81ac25299", "sighting--0e2fbc5c-789e-4ffe-835d-207916724958", "sighting--606fe5d4-bff6-4fe9-891a-566d3709e9f8", "sighting--4295afe7-999c-4b46-b478-f68b04c16260", "sighting--beb269fe-89f2-4e30-a6dc-35d750e63acb", "sighting--12a4f99a-bdb4-4225-b132-d1f59e8b407f", "sighting--eaa37289-f6fc-4b4e-a633-ba59e617566a", "sighting--38bf878a-c2e7-401d-bc40-faba1e7e47b2", "sighting--442f245d-79ae-4815-a7b1-ddbd86350166", "sighting--ca16b412-5b9b-433b-bc85-69d7ba3cefcd", "sighting--6be151e7-704c-4da4-a3e5-c6a9ccb708b2", "sighting--af8af6d2-3fa3-4549-9006-98e2c63a8889", "sighting--a38825a5-5836-4c55-9d83-d1523f8e0f05", "sighting--dac64d98-3031-4a8a-8adf-5ef525c5f78e", "sighting--7fdd4c5a-85a1-4392-9d90-88c33163a3fa", "sighting--0558d00f-fa59-43db-993a-d3c34aa70c07", "sighting--2a481f5a-1d5e-49d3-8eba-e20ebb2107ce", "sighting--48e9ed37-8e59-400e-a8ab-f28657678171", "sighting--6fe7b4bd-6127-47f6-9d94-e408e3325ec6", "sighting--7be51de7-57f5-4c44-ac0d-4e6ecb0c5e9a", "sighting--8fb465f1-a163-43c9-b643-be05049428b5", "sighting--ca886c8e-d60c-41af-8983-728b01ea03e6", "sighting--e60015e7-f820-46a7-a1ee-6fd0773cd06a", "sighting--e62c6c37-b8de-4752-b983-8a23fd591ca6", "sighting--36519cfc-8e6b-4f9a-b264-c64839944346", "sighting--e7b3f3d0-be07-4c87-8bb9-a0440f2c1b81", "sighting--b72a4871-9ee6-4c6a-952f-08992d154fcb", "sighting--e1cd3246-dcae-4f66-814f-1ba91e1c7ab9", "sighting--fe524164-59d7-41f6-b1f1-8e537d2fdef5", "sighting--fd5c81fc-2c68-4b6c-96d9-d1f329e4da3b", "sighting--b9f2e0f5-fffa-45d3-a0f5-8f385cdb545c", "sighting--6cbdea9d-5581-45fe-a7b7-6cc18a982fd6", "sighting--77c84214-3d20-421b-953f-3da2912fc691", "sighting--5a5ffb23-85c0-428f-9fda-5177c6ba9dbf", "sighting--c74539ea-ee73-441b-90bd-331509764ed6", "sighting--f7e3ec82-c31f-430c-88b8-48c8a4db1765", "sighting--af6091c4-6610-4173-a459-6c44bfb59a41", "sighting--c9c040d5-3dcb-40ad-88cd-679beb6ab9ee", "sighting--75fa1855-6fcb-48b2-974c-0563bbd4d524", "sighting--e2572dc7-cf56-4d77-b24c-2ff4a5a915d6", "sighting--6f126e97-c2fd-4eeb-9b2f-83d0d8582dfb", "sighting--caf52a96-958e-4d23-9468-8d4f942b2457", "sighting--bec9a36b-ae16-4d7d-9512-7aae13a4ec32", "sighting--e696a307-8b7b-4c82-8989-9b94f2df1d9f", "sighting--67bca870-9252-4951-b1f1-f31e67f39d1e", "sighting--b005c090-08f6-4f97-94a4-815bfe958b42", "sighting--fafe9b55-2106-43b3-95e6-036f16e6aa51", "sighting--9bfb43d7-ee7e-4389-afa3-3b3571b4165c", "sighting--89e92c39-a322-4e7a-a1df-e488a5c01e2a", "sighting--adc6793e-fb45-4e3a-a830-b13fa9804cc5", "sighting--8d984fbc-6a64-461e-8e95-2fdee184471d", "sighting--d1880f25-6606-4335-b415-811b1218550b", "sighting--27e50261-38c4-4bcb-b382-8f1dce969fd9", "sighting--88497398-b483-4d3b-b41e-0c036e881a04", "sighting--ef8962de-8b69-43a6-bdf0-c86024a23f13", "sighting--9ea78b11-5123-4ecf-a614-df95017c9ccd", "sighting--85344d8d-ff91-457e-9309-97aba52114c3", "sighting--6a66dcf3-406f-478e-94c6-81ef4c0ae2de", "sighting--91276f00-bb80-49db-9561-fd32b3c12dd7", "sighting--7268a4a6-bc57-407e-bc33-520c6e61234f", "sighting--e8651798-81bd-4bb1-aaa2-fd2ff78a5ec2", "sighting--e4b78602-3780-4358-8724-507cea53db16", "sighting--7c2824ba-f7ad-4ad4-8e43-f9872b3e1c7f", "sighting--fef02d9e-1152-4174-b8f0-26bdf741a57f", "sighting--3c455211-7443-43de-9e06-30c1255ee8e2", "sighting--0a6c1e78-e105-4f4d-ad92-084fc9a689af", "sighting--e66fb695-6d4d-4cfb-96fe-facae0748cf6", "sighting--f44ac09d-0157-48d3-acd8-1ef141b8a1d2", "sighting--9eb406ce-494a-4fa6-ac38-75ee09bad50a", "sighting--70ee80ab-e136-4e56-8e0f-e934a7d065c7", "sighting--7f617342-a5b3-43df-b8e7-f164ecdd946e", "sighting--8da0af8a-c051-4787-8590-7ef27b598699", "sighting--30418098-0847-4d6c-bf40-5bcdcb20a282", "sighting--76c15742-6e01-435d-a49a-78143668d496", "sighting--ce022d75-47b7-435b-9f57-56e488077070", "sighting--21ea6555-338a-4739-9760-7102cbc1aa73", "sighting--2e918fc5-3308-40dd-bff1-4cb6fa7952be", "sighting--a5a36ffc-efea-43e5-ac91-72ff145bbc02", "sighting--2727806f-3e5e-4057-9d12-4520b954a386", "sighting--135dc4e3-6fb9-4aba-a416-75a44dd3e6cc", "sighting--255f429c-7a01-4a11-9f45-38f71d4f576c", "sighting--317bf2f4-3eac-4f19-a326-bde627ec4d33", "sighting--03ced80a-828f-4f18-a346-64227fe78422", "sighting--19fd9c02-e3a1-4836-93be-fabbeab54b89", "sighting--b36c14b9-a97b-411c-a8b4-402db8ac6b11", "sighting--2a74a45e-7be9-4c3e-b6bb-73ebfa97820c", "sighting--ed22bc26-ee5c-419b-968a-cd9524147b94", "sighting--58841a09-9f3d-4b17-8bca-ca5a9e96eb00", "sighting--8fafa5c7-74b5-4a16-954f-c338ce50025e", "sighting--9468e1e3-5a2e-4667-9317-e843fade5670", "sighting--751d2a16-7117-4ea3-9f10-40d8ec90e674", "sighting--ca75dc72-1399-4fda-801d-cb3a1243d755", "sighting--3d41b519-8868-4d6d-be36-df8eff7083a3", "sighting--c0a09ffc-4e5a-439c-9666-739c0514835e", "sighting--32575dc3-48fa-4ae4-ac2d-991c14ba8735", "sighting--b3b6e04f-900b-4dc9-9feb-26f9b0437ded", "sighting--edcdfecf-0fc8-4d79-b571-1955814584da", "sighting--7866bf0c-041f-4296-9ba2-61f19035c32c", "sighting--b9f30c37-aa56-4818-b0f0-78b4bfac8fc3", "sighting--abf4688b-2f19-4c0e-a12e-6db71a874b07", "sighting--105a7cd4-369c-4c43-b8b6-407f238fdd91", "sighting--70ed1315-1b6d-4d43-9b9e-258baa4c00ef", "sighting--d7d2e58b-d7c8-429e-bf26-0ad65b8b09b5", "sighting--5488024f-6bb5-4e67-a3cc-a807f629ee9a", "sighting--8d39a54d-4771-4e5b-a5d4-642e79d8f8db", "sighting--8c5f1fe9-b2e7-44fb-a937-3eca7d9075fb", "sighting--eed5baba-12fd-4dc5-97d0-fd5e29c5dad3", "sighting--1347a1b2-8cee-4fcc-920f-47124b12b6ac", "sighting--bcbe070b-9a75-4628-97c4-5ba9ce78295a", "sighting--38efb598-bc7a-4402-895d-6429b80212a7", "sighting--87d470b8-8a31-4047-beab-c21e99d4b395", "sighting--3163d221-6cf9-4e7c-b864-78aea9db636a", "sighting--98b26318-7435-470f-85a3-8dc6057dd1dd", "sighting--735fb883-cf71-4516-b875-ec01842c8c8f", "sighting--6d2151c7-3802-436d-a221-61889f1a36d6", "sighting--5c74a528-e72e-488a-b4e1-5c60ea60867f", "sighting--46f48caf-21e2-485c-aeb3-9aeb20669602", "sighting--31d2ccdd-0c4c-4bf1-959c-be40d8b54a5c", "sighting--81dcb7ae-90fa-4fd2-a952-7ffd541b445d", "sighting--6bf95431-1539-4452-a45d-2c9a5533aad4", "sighting--e6a36327-1081-4754-a4d3-c8871fe70255", "sighting--e1a325fd-4ae0-4aa9-84ce-7efb38c165c0", "sighting--a632edf2-7ccf-4496-8632-768a4acc1fa7", "sighting--470b1339-f258-4a3b-95a9-96ca17fce0ab", "sighting--ad4624fe-f486-4751-a1b5-d10ee1ed4597", "sighting--c59eff0e-2940-4c2c-806c-1db8d4db742c", "sighting--e191de48-fcd8-4ebd-99ba-d8acf66dc80c", "sighting--eed0eb23-5d1f-4746-80aa-87df82974fde", "sighting--b262b885-351c-42dd-95b6-a06caf01aef8", "sighting--2fa10dc8-9866-4d58-9a55-2f508fee95f5", "sighting--f0dcd390-98c7-4bba-af3a-7265890967d4", "sighting--06347b66-aa58-4e8d-bf4e-ab0957bf32e8", "sighting--9c978947-3dc8-4eba-a2d5-c5f468090842", "sighting--689995d7-e086-4ac7-8cc2-ed785a308fb5", "sighting--05716ccb-839e-4c23-89a0-1fa623c6e31c", "sighting--327f6118-9fda-458b-a9e1-98d9e160630d", "sighting--9590b965-d24c-47aa-a6a5-397a4ab50bad", "sighting--9dc14d5b-6977-4676-be91-faa4574cd47b", "sighting--165362a8-98fe-496e-8ef5-8482ab65f5f4", "sighting--e413992b-1d5d-4ed9-add2-1eb13063216f", "sighting--77647dd4-ad81-4d8a-b7fe-dc11cc7962f6", "sighting--f2cdc499-383f-4f68-97df-0d3f11cd0078", "sighting--f7147697-a06e-4d8f-a785-643a873e5af3", "sighting--76cff12e-6c03-473c-8eda-168194addd68", "sighting--5c179ea6-4dfc-4d6b-b899-35c903b23ef6", "sighting--56ced8d4-cd14-45e2-a28e-d76d8229aec3", "sighting--14e21550-14e9-431e-a5cc-19d788e161cb", "sighting--f849912d-a592-4be8-8182-361c0ec65bc7", "sighting--58fbea70-a04d-4c7e-b9aa-f9da3194cd82", "sighting--344a58f8-7f4d-45a1-bf05-7f3d3ce2aac7", "sighting--2f762edd-7d6b-4883-97dd-ebaefde17c4b", "sighting--b64c700b-b262-4919-8e88-80fc48c599bf", "sighting--4c3aa364-20a4-413b-8cf7-e3ac15daef6a", "sighting--3dcdd110-a028-4119-9c0a-4e2082e5f18c", "sighting--96c39ac6-d43d-4033-a226-cbc5d1dcce19", "sighting--ded434e1-f167-4462-99a8-36cf70c1465c", "sighting--ebaa6fae-7b92-4094-b594-88a2c181b845", "sighting--eb7d6449-3ade-49fa-9788-e0cfdf5df94c", "sighting--13d5a560-603c-4be4-821c-29f1bd205b34", "sighting--66239051-a4b4-456a-9e67-e716fa295c8f", "sighting--568c6350-df12-441b-b02a-77dd665d6e97", "sighting--06f49ba0-5dd2-4d8f-b694-4a010604ae9f", "sighting--b997b154-cf0e-42a3-9d60-52ffacf47d63", "sighting--f6430d9a-57c8-4e37-bcfc-fa705972d4e1", "sighting--ff7e60eb-f946-425b-9d5e-64fb6a8bac3c", "sighting--23b4ca0c-2028-4270-beb5-af1efc682629", "sighting--a9b4b510-c632-4224-8624-a927c670e1fd", "sighting--09f35a6a-6fbc-4dab-92fd-2327be4e1775", "sighting--c48fbfbb-3b3a-4c7d-8f42-018d9a4e212c", "sighting--8622d1be-23c8-47d0-a882-6a9b384e5bf3", "sighting--6c0f9a71-a4c6-4764-afc9-334f4e5749e4", "sighting--1db1b7a7-ec68-4936-94e6-07bd4847425b", "sighting--17eada98-5d6a-48c2-9715-088323753bad", "sighting--db4bec23-b325-4327-afcc-f150766e7a16", "sighting--2e523143-d133-4117-adda-6adaf0279cf2", "sighting--443ec56e-40d9-4b57-b385-24078ef66aed", "sighting--501a21a9-01a2-42ed-b712-a6aeef7003ff", "sighting--8fb28cce-fbfb-4dd9-8d8a-dd1d5226f424", "sighting--6396924a-7a63-4049-96b1-fdcd3066c452", "sighting--1d9e508b-3ac8-4090-887b-2373528cf5ec", "sighting--56d3a4be-3cec-4ef5-ae45-24023323bf59", "sighting--c82b0430-5bf6-4853-9ab7-d1cfc824ccfe", "sighting--09739e1b-fe20-4232-82f8-17e9e3ad4d9d", "sighting--94815db7-cee4-4324-9ce3-c9724539c8a1", "sighting--87fa1f5e-600e-410a-b1e9-21c7671f2326", "sighting--27d366ed-d134-49b8-bdea-6c85c33ffa50", "sighting--96cd8ca7-472e-4faa-a95f-9982a2e34859", "sighting--10ccc185-046e-4ce0-afd4-4c8ecbe05f94", "sighting--36a39e18-35a6-4e02-a360-13cd4422cf28", "sighting--9f2e53a4-f101-4d88-951f-478dd273af94", "sighting--fd82ea5d-e4da-4ff8-9300-b50f285b31e2", "sighting--e144aaa9-bf76-4b9c-9c2b-a29c2c451a61", "sighting--9e24b413-5fe4-42c8-a41c-507ba3611feb", "sighting--8579c866-fcf5-42a1-ab70-49fa4ae52224", "sighting--5b49c44a-a266-414c-8ef8-66c3b240bcf6", "sighting--00dd2cf3-50b8-4de9-b216-38d5fb38746a", "sighting--80bf1cc3-74b6-412d-b5a0-102db0d556ef", "sighting--7758bf6f-6f63-4d49-bb6d-e104dd1234a9", "sighting--fa56e221-6569-406a-8808-6dbf95706fab", "sighting--200e9ef8-3942-435c-81d3-7a137461d0c8", "sighting--2f249c88-8789-417a-a46c-ed59187bd32b", "sighting--daf78963-27e0-4d39-9317-12699058337b", "sighting--39579d82-205f-4414-9f70-95173a3f49f4", "sighting--f46f77e0-1244-45cb-912e-4de0f869b035", "sighting--980c776d-580a-423e-9d19-4a4ad0d1d5cf", "sighting--0d2b2c5a-34f3-4ba9-8fed-2d707d48119b", "sighting--2fdd3211-2ef6-49fb-9e90-e3c66cd7d7d4", "sighting--00ee7154-548b-4679-ae54-7337297a806f", "sighting--f0f05ffa-fb95-484e-a58b-a7d45353a6a8", "sighting--6cab6fc8-dac1-4767-8eae-f02f4792309d", "sighting--8b3d058b-9d80-4c6f-9023-83cb12339934", "sighting--dd949d6b-2f1c-4537-89af-382f3a9d89da", "sighting--8a699e9c-2856-47b5-a2bf-b238f01eb549", "sighting--344f60e8-47e9-43a8-bf42-082567e2cba4", "sighting--37d6b899-7ab1-4fb6-9061-7dd0d8f0c7af", "sighting--04acae7d-2710-405a-a423-96ae0ecc6a81", "sighting--e4341bcc-299f-4fad-81b1-576766a696f4", "sighting--e0ee15b5-be90-450e-a8ce-3eb1ea1a76e1", "sighting--a5f84586-c169-4a40-a1e3-254597aa350d", "sighting--daafbc4f-72ce-454e-a969-38c3f2afbff5", "sighting--41d9ef43-4f60-4894-a4f8-d60a45cf97f7", "sighting--1a3d7e27-7276-4b44-914d-92a5b60fce00", "sighting--a83e9e69-7685-467b-b6fd-228993f3e626", "sighting--8ff8901c-2751-4156-b7a3-bb4387e06201", "sighting--8421e4c2-1fa6-499e-a3f5-fc49ca18ae38", "sighting--522be397-2775-4702-aa0b-342781c3a551", "sighting--cbeaecfc-7270-4b89-8166-6b77bd838eb0", "sighting--7aca9748-16da-49b6-8fab-817375f7cbce", "sighting--7b3e0ffa-709f-49ec-b611-f7de589bb983", "sighting--1b0706fe-359c-474a-bb00-19b872ca2cf3", "sighting--78dc5c9f-f0e4-4419-a8bd-2dd7f64f9bd3", "sighting--34564b90-aaa1-4571-a141-704c89f8111d", "sighting--e3c12d2a-3e03-4bfa-8685-f80cb4090cba", "sighting--1c2bc08a-270c-47d6-9f31-04e41e74298c", "sighting--dd78cac8-5a81-4e0c-9543-2aaebd5ebd48", "sighting--824c982b-f118-420d-929e-6e08ed00b3a8", "sighting--9b2e891c-e561-4226-b1e0-036d7c9ba827", "sighting--0ff0cf6a-0ebc-4576-b4aa-74e373f0b9e6", "sighting--17a7ef6b-8aa1-4766-a5ee-d50c0f32f00a", "sighting--bbe4f9bd-1bc7-4856-b0e8-6fdccaecd402", "sighting--740c341a-b937-4c98-a75e-55c97ef2865b", "sighting--3f00d38d-2145-4f3b-ab78-aa27fb34f483", "sighting--fca7e888-b3d2-4c04-b82b-e0af0828edda", "sighting--febeafc6-3330-43f9-81d0-be60120c73d8", "sighting--46cdb27e-8314-4f88-8b08-d17215daafeb", "sighting--aa0151ec-751f-4285-b3c4-4e172799f733", "sighting--986f1db1-6c86-48d5-bf22-37a5f4cd695d", "sighting--407c9030-beb2-48ed-b5bc-73776fb1268d", "sighting--01060afc-d2ea-4c65-9510-b487ddaf1e4b", "sighting--489b53d0-987e-4881-91df-0741c47fbdce", "sighting--f53b4c67-e31f-4e74-a929-4c3a4cfcc0a7", "sighting--bb776a85-1790-4ba7-9fa4-3539324be12a", "sighting--c3f5dc52-d33b-4869-94a5-5e3364e91500", "sighting--d8db1ee2-8bb7-4dfe-8c2a-7407380eed74", "sighting--80cc9fad-4598-4154-ab80-dee925b1267e", "sighting--de749cad-57c0-4315-a8b0-2ca6357a209f", "sighting--467b0d14-a3a6-44b0-bb42-7af32871506d", "sighting--4e253626-86ad-471f-89e5-7d8228fc1502", "sighting--c217c183-f583-4d73-a3ca-6770f9971d00", "sighting--bdbcaa8e-86f7-4202-89f8-d5bc23a474f2", "sighting--090e511b-3be4-4bf2-b6b6-38020dc55824", "sighting--d1da80d6-eab3-4352-84b5-b6eb4d32b5ef", "sighting--47e5351b-4147-4bec-b959-ae6fe81795b6", "sighting--1851b9bc-b117-456d-b698-36f995966fd9", "sighting--2d56a049-c0fd-4988-950e-6ee7308b21b7", "sighting--0d968cfc-67e7-4af9-9183-668e4f701c79", "sighting--39f5e25f-64c6-49be-afe7-133f15233be7", "sighting--d28085a0-fc12-482b-a3b6-69b442ad5c41", "sighting--fcfeff56-f675-47da-9b4b-ffec19756993", "sighting--f7c0651e-6f39-4b23-acb5-47f3df147037", "sighting--a4107f7f-189d-4059-b598-55a5a76e101c", "sighting--c9457718-283e-4cb8-91c3-d763e89728e0", "sighting--24ffc0d8-8fe0-4d1d-a97a-73ae74876206", "sighting--f5d31b9a-25eb-4322-8ff8-fa82297d9b00", "sighting--ab53e265-55eb-4124-b2d3-e92a5080c377", "sighting--9418ad38-5239-4b3e-a0d0-0aedfdaad8ea", "sighting--31e11462-15b3-4af6-9258-5d591409750a", "sighting--e438510c-a5a4-4416-86ee-f697bb2437b2", "sighting--ffc174e4-a0c6-406e-a343-2a7dd756bcc8", "sighting--43fdf502-066a-4c49-99f5-f08359bc373d", "sighting--177ecb18-55f8-4fb9-a82e-5db7872cd2f2", "sighting--2525606a-2c81-49d0-9739-4582c6c46109", "sighting--5252d283-3a3e-4f26-9a4c-00477852ca22", "sighting--bf4715b6-e6cd-4082-b89f-ded129dec673", "sighting--8f8db9ff-bdc4-4767-a7b7-5e18ab83b4d3", "sighting--7880c8a5-25da-46c6-9c45-08060a8a8932", "sighting--4d11c30b-fab7-4a2d-b618-ed994d9c8cee", "sighting--5cc5ffdb-1211-4611-a5f2-61f8394b0f56", "sighting--723f1c8a-900d-4da8-a230-dc3e150477a2", "sighting--a9072374-78cf-4297-abef-609106a7638a", "sighting--6e427fe9-b5d1-4a9a-a996-78ada4acfd86", "sighting--401daa53-9d76-4332-8450-708deea4f539", "sighting--6074881c-dfab-4ce4-bcf5-21c112961af7", "sighting--354c02e7-c2d0-4f5a-811f-e21fe9bb2efb", "sighting--74b92274-0512-4237-bd01-f8f0b968554e", "sighting--76266dee-7f40-4f80-bc76-fdf8d74c282a", "sighting--89e9083e-e389-4989-b18e-d2ee7acc4b66", "sighting--40f3e5cf-5982-4d55-b571-ca722339d0a2", "sighting--855bad1f-27b9-4448-b5dd-22fe0d9382ab", "sighting--e145dfdb-9aa0-431f-8a6a-2a0e6c7c22cd", "sighting--d63b0aa3-c5c2-4eb5-9f32-469ffda1bbd6", "sighting--61c78261-6ce6-45c2-b1ea-6bf21000f477", "sighting--9bb399ab-a374-4458-a72f-3413b2796078", "sighting--a93a2ac7-e881-4448-9005-2270479fb7e7", "sighting--fb9ddd5e-d264-40cb-9741-0074e971480b", "sighting--a79bbafd-5444-49a5-bd13-42cdcae732d0", "sighting--8228b872-6a79-45ef-862e-4b08a61c62ab", "sighting--5d9a9a68-55cf-4cb0-b6f2-f83009d37636", "sighting--2dab5db2-c96c-4d10-9c9c-ddd515e9b574", "sighting--cbb0d9ea-4095-48d2-a324-538ffd8791fa", "sighting--32a8ab73-9e3f-48d1-bdb8-6efb7ab03c5f", "sighting--06c72fea-31d0-4e29-8fc6-98a7a7d9a8ca", "sighting--77ee5824-5c22-436b-9ad5-9c4f89ff20ae", "sighting--51a21d31-4bda-4efa-8e97-8d4a89615c75", "sighting--4823f396-ef89-4c56-ba47-12f06bdc0ae0", "sighting--c5fa5b12-be81-4e77-8ff3-7d0a6fe21378", "sighting--e4eb9cbc-7715-4df2-aa0c-686caf886ef7", "sighting--ae715203-dbb0-41f1-a685-4bcb72e2df6e", "sighting--2ac94259-7390-422f-bda1-7d4d148004c2", "sighting--2b76ac88-6b90-47e8-a3d8-c07150d1f950", "sighting--c2a8a019-eb4b-406f-a674-ad1c70bcdcec", "sighting--df44659f-93e1-4a8e-a140-c00ddea9112d", "sighting--b3040e0d-ade1-4221-9863-845a6491afdf", "sighting--8ccbdd22-e073-4985-91a7-108ad887d48d", "sighting--be374a9c-d570-4cd9-bef6-d759d5159e3e", "sighting--6c9e698a-2b5b-42dc-9c3f-8f5ce0356705", "sighting--51fead8b-0ff7-4132-b58c-ca41dabd3517", "sighting--83250502-4329-4201-9681-1949f3ad0521", "sighting--5cd32d11-9eb1-41e6-9011-cabf3a5a0352", "sighting--81b74a53-fb75-4c93-9a79-69d584a3a22b", "sighting--dec17bb9-dc47-42c9-abcc-3c74cc7b7aef", "sighting--bf7a70b6-17ce-4ab8-b171-fd45437df5b8", "sighting--6452ccaf-41ce-49f4-a93a-63733acd78c3", "sighting--58ecb522-9510-4a31-88ac-2cb34e837410", "sighting--e26f2f58-9d7d-4585-9cfd-abf39e0274a8", "sighting--dbfc5da8-dfd9-48b1-9a5c-05fe35ba6f17", "sighting--17ae1547-ceb7-49e3-a86e-75526e5816e6", "sighting--c18a7d81-2a4b-4e64-98e6-7c89992a95ce", "sighting--b958cf80-0246-4c4c-9df9-6cc292bb62f6", "sighting--0b600ab9-4eab-4011-b8a4-4591f1948fcd", "sighting--ec07c90a-b5b3-4521-bd95-31316667dd09", "sighting--ae5ff7d7-8e8f-47b4-9645-e5b936b31f6b", "sighting--c9a3e55a-b97f-4f48-b696-ffc220f4d86f", "sighting--e44aefce-6312-40d9-b38c-0a42d55c82ed", "sighting--11cd0cd2-1eb8-4bb1-a11a-69a8f09b35a8", "sighting--62621677-957d-4a0d-96a3-862815003ec9", "sighting--5b176e7a-50f6-4a2d-bcad-beb7795cec43", "sighting--91372680-4ed1-476e-8e61-71e95fda001d", "sighting--274ece8c-e9c6-4bf3-80d6-559c90f82eb7", "sighting--e834a1cc-1233-44ee-89a5-c55ef528bde7", "sighting--b06d8861-394e-4a30-937a-01a6d5a95f40", "sighting--f48dea5f-0942-40e4-a9db-478bbfd96b3f", "sighting--7fdfec94-8fbb-4be7-8645-aa830a089079", "sighting--3ad45b36-b4a2-4d26-93f9-a7cbb4065ba4", "sighting--5f69220f-87fe-4373-ae44-dadb41ee819d", "sighting--b8453bc3-2e00-41ce-8ed7-d258448fe27f", "sighting--673608a2-e83c-4573-8683-16adc77303b7", "sighting--8b83b9b3-728e-4326-8777-e58d52a2c1cb", "sighting--f2fbe43a-48c4-43d0-8ef3-806d6e4dfc5d", "sighting--f7c4c16a-e762-48de-afeb-a9213a47e788", "sighting--b8f84eef-23a6-4dca-8fe3-c52e6e236f58", "sighting--6f0fc8b3-5778-4c22-bd13-e71921352cfb", "sighting--ded93e1a-dca4-4ec2-b09c-d06b25a777f4", "sighting--f47b7267-5caf-4792-b63f-ee3db81e1479", "sighting--2b241f00-e9d0-48dc-abc9-956f1e18cb53", "sighting--1146a123-8fbc-4433-a848-5e3431981bf7", "sighting--35539098-eb80-4a49-9d4b-792b38c90199", "sighting--8031cb82-f3e7-488d-ab59-7cd34778824f", "sighting--c6fedd1b-3053-4ed9-ac5a-73d3a34467d1", "sighting--27d674c6-802a-437d-8ba1-544666882936", "sighting--06da3e12-c59c-42d3-b26b-0aa2e351e63b", "sighting--fff7175e-8490-4a3a-8978-f4697e7dcde5", "sighting--8e6f87dd-dacf-4e57-a234-d13fe9bc1312", "sighting--bda781c3-1de6-467a-a599-838150a241e9", "sighting--e951b80b-1863-403b-bac9-d44c308eae8c", "sighting--936dd001-de97-4f22-b5ac-e9e8eb9d4bcd", "sighting--ba138349-8287-4798-8700-4c5f833e4773", "sighting--3c1c42d4-b245-4608-ab70-f54abfde74ed", "sighting--76817a65-6ac7-4f11-9eeb-f15b8e6ff5f3", "sighting--1e0e7b89-7525-46ef-914d-c8f500b5845f", "sighting--600edd90-1285-4cf7-8e3b-400426952dfd", "sighting--1b9e3766-f4f3-4f31-9ffb-6375abf8797d", "sighting--75e3e7df-fe75-421d-9b09-f2e24d18f7dd", "sighting--c24fc84f-784b-4578-9381-e9d1407dc8c8", "sighting--6070682c-3c9d-4999-beea-fe83b2d346f6", "sighting--b49a1e5e-0168-4fba-8810-3d15a75419db", "sighting--c01894fd-e31d-471b-b6d9-3f5ad0e05a24", "sighting--165142c0-f24f-4352-a52d-4e4b7ae966ca", "sighting--9d100ded-f135-484a-9cd1-b51f11d0b94b", "sighting--65ff7673-9cac-425a-8ce2-7181ea7e4cc8", "sighting--a06a62cf-e6d2-4a50-bb3a-0585598ef6c4", "sighting--cbc9ef7a-d882-4107-a0bc-c33d96460a7f", "sighting--72507618-826c-412d-98ab-26abeeae455e", "sighting--cbb6db80-033c-4e44-b3a5-44e9230110c0", "sighting--fca2156b-a87d-4f73-8590-5c8d3047cb39", "sighting--d3212f82-d941-44fa-96f6-e691b1a7525a", "sighting--61c23df2-219f-4146-9af1-ffdba8b706b6", "sighting--c5d92f0e-9989-4d30-ad1b-f9ba77a91e78", "sighting--04024230-eae9-4dc1-b0c0-1f54746bdc23", "sighting--a335a9d9-0503-4025-8b74-b986496bfebb", "sighting--470bf8ae-b760-48b6-b558-c96d7867cc28", "sighting--848dc882-1f27-4401-91c6-7c24e8780d0e", "sighting--04013ff5-186a-4e2a-8d54-2035abf381d8", "sighting--62886c3b-5006-4177-b941-28ff45f693d5", "sighting--6974b842-607d-4e29-85c5-5c812034ad10", "sighting--01dceb22-bc76-4648-a547-d317ae62a09a", "sighting--82d05ac0-36b8-4217-9626-8f6a09ebc22a", "sighting--158b0148-e46d-4dcd-9dd6-6d46b6ef4843", "sighting--986a598a-4566-4cb3-acae-84dbeb8017e4", "sighting--0e7d0340-1d2b-42d7-8a23-ea2030a4c05e", "sighting--4a269723-fbe3-4b00-8cfe-ed429edede72", "sighting--8aba80c7-3092-4d0e-bd24-030c6ff01a7e", "sighting--05d9ec42-2edc-4c5d-9c2f-8e42d7673e23", "sighting--68c605ff-3612-419a-a54a-80f46bec8d9a", "sighting--6afba8fe-821b-4684-ac00-99995751f085", "sighting--74b8dc37-7f7b-4c12-9ce2-37ac7329b526", "sighting--362827b5-e310-4fd2-a3b1-e7c54ca3dd32", "sighting--519848a4-1040-4a75-8700-e129a9a90fed", "sighting--c305c6fa-4955-45fe-898f-1233023f97b0", "sighting--44b94ca0-14c2-4359-bae1-1fab8f32fd36", "sighting--51869dc9-6b99-4006-89f4-3c7700ace9c5", "sighting--cb2a93b7-bad8-4d8a-a8ff-66f4b9f0c662", "sighting--0a851d7b-ce6a-49e9-8fe7-92c348d4fa48", "sighting--12d399a1-b085-41dd-8aca-ba27357441c0", "sighting--0096e59d-50bc-481c-b420-1502e2f958b2", "sighting--ca1f7034-0cbc-43f3-9c64-57f162cf9920", "sighting--837a8503-902d-4f55-abce-602c7f2a2ddc", "sighting--6f06d31e-1e58-4cbb-9ab6-5f8d6973a24a", "sighting--5edd0141-7177-4a62-ab4d-3e0e6d531a07", "sighting--22e06cf2-6439-4024-a067-6c58b86b3f6d", "sighting--bd968581-9554-4c17-8b3d-d006a5348108", "sighting--81b5f7b9-ae1e-49c1-8010-c92e93afed26", "sighting--79d05fd0-2ee5-4f39-8d5d-0151bea4d057", "sighting--e9f28150-e7fb-4047-8a92-fd99465fe492", "sighting--72378986-55f9-4b69-aabf-6afd5e43e2f2", "sighting--87358bd2-982c-4604-8eb7-5a1540c1e312", "sighting--6637de32-3f54-480a-9f79-8d358f24ee89", "sighting--f220acbc-1bcd-4c5a-8d0a-f46af3c8f742", "sighting--632ea18e-bf38-4140-9471-4128e124a36a", "sighting--dd6b9fe8-bf0f-453a-9968-b914aca86f45", "sighting--2e716c29-0b53-4716-8f26-daad03a8399c", "sighting--d6fbfa41-00a2-4af5-9ea7-dca30b8a255b", "sighting--18374780-f5d8-4c76-b8d7-f428f961255c", "sighting--318ffc89-240b-4c46-9e4b-a0f0d8de28a4", "sighting--b2e8a353-c3a4-4c06-9543-c31ed64be22c", "sighting--4d8ca410-d83e-4cd6-87c4-8f479de90830", "sighting--2de224f3-1bb6-42eb-bc60-deac21335aa6", "sighting--c6e722e6-7818-42e1-8603-e0d921e540c3", "sighting--c82db972-f018-4041-adf7-72ac2f53474f", "sighting--d75c7648-5e44-43d5-94e8-dbb84b92ce9b", "sighting--e0c2dea1-338e-40df-9d02-255b938afbf3", "sighting--ded76507-786e-498c-b334-e98291a4704e", "sighting--4ec37e6b-0995-4b86-afe1-c08cf6437a6e", "sighting--c6e9ffef-993d-4e9d-88c7-54240ca3183a", "sighting--ed2c0a13-8835-462b-bd81-3dd92fafc409", "sighting--83c7e998-49ed-4707-9c4c-5f5d993d86f9", "sighting--6d68f928-6b50-4a99-a67b-30c4125e51fd", "sighting--ddc3b220-cce2-49fa-a487-6791a39bf7b8", "sighting--5f533a67-8fd3-4116-bfef-585ddd92d7fd", "sighting--a062ec7c-0cda-47ca-bb4e-1562ff054740", "sighting--f161eedd-1f30-4dee-8124-b342de0805db", "sighting--1852fad6-9132-46ea-aeee-4ce207d29653", "sighting--c03f50d3-4eed-4116-acfd-dd05eca6c22c", "sighting--f2f476be-5926-4218-9a5d-6f020b77cda3", "sighting--a7e79937-5777-42e7-829c-a4c992678389", "sighting--c8a6965d-509c-4f36-a86e-a566ea953670", "sighting--ac04ac80-ce34-4e7a-a646-74b7a96b86e2", "sighting--6ba6c964-06f0-4925-a361-10e19e4f9e08", "sighting--89ed3b3b-a307-4720-82cc-698d565bebcf", "sighting--0dd932a1-1383-42e9-97b5-51f112b0340a", "sighting--e43bcecf-ecd4-42e1-9225-e044696897f8", "sighting--0b8d1ab1-e590-4ac2-ab70-37e937a6882e", "sighting--49bad455-ab7e-43d6-a6c3-d91a466a1f72", "sighting--6102ab32-a1cf-42a6-920a-a7489a086b54", "sighting--5b6165d2-64b3-4e05-9972-14a95cb4b03f", "sighting--5708b17a-3589-4936-8dad-5af80ed390e2", "sighting--4d6f834a-79e7-4e9e-9191-36687f798c9c", "sighting--83b1e4eb-2223-44b4-8f84-4116cbe94c29", "sighting--269baf61-85d0-4833-9d30-6672735fa4b1", "sighting--3199aecb-b5d9-4684-88ae-8b1e293d5fe5", "sighting--e31b02a9-6124-43ad-a270-ec30881987f6", "sighting--7ead827a-fd39-4d84-abce-a0f2d0fbf599", "sighting--b43e0553-de12-4f60-982b-a352218288d3", "sighting--13eeb11a-fdca-4594-a27a-0355921373fd", "sighting--cadb0fff-6141-45a4-90d2-25538e189b5b", "sighting--6026d325-8ebf-4fbf-bd03-a818c9ecdec8", "sighting--6718976e-6033-4884-a28c-55bd824cbf6d", "sighting--6f481613-d19a-4311-96de-7badb14c705b", "sighting--4f15983d-2bc5-43ab-9a79-7d4e05290699", "sighting--64918b9e-38cf-41b4-a4be-e353405a3841", "sighting--00b1748c-af07-464c-bef5-07c7d7be63fd", "sighting--ef617440-c2b8-4947-a4f9-450a0249eede", "sighting--90c1006d-a1f1-4af6-b890-13d1c9702a5e", "sighting--b39000d9-8b4a-422b-9e30-5cfcfaa81eaa", "sighting--03056491-bd2c-437e-9e3d-52b1143b0cbf", "sighting--72a965b0-a877-4695-816b-c2ad82a37f64", "sighting--d93811fa-4de6-492d-a411-236139a933fc", "sighting--e09cfcad-4b8f-4082-ad0c-6166d3f7d345", "sighting--a4159c48-704c-46ee-b3f1-9953b8b80b76", "sighting--aaabc6d5-03ff-4515-86c5-6bfab8ba293e", "sighting--5886d70e-acaa-42eb-a73c-2b0fb7995181", "sighting--ee00d77e-1375-4f46-b701-a6fd3eb42ccc", "sighting--b947f2b7-37e9-45bc-98bd-2955d4ec639d", "sighting--d6bffb48-e923-4115-a1b8-c7e21ed45435", "sighting--dbd4a2fc-d5cf-4b89-9d5e-d33e4c37e66d", "sighting--3c909b67-63ac-4557-a041-89d6a0b1085e", "sighting--b92b1c17-04df-43b0-9197-0720cd9e0666", "sighting--6a190d92-523a-47bc-b046-bdd1e91bdb0e", "sighting--1317f585-a30a-4be1-a06a-c2fed13f718b", "sighting--5fd23cde-5e4a-48b8-bff4-92a54daeb6c0", "sighting--5d9aab22-1ba2-482d-baba-d5eb39d2d747", "sighting--ff6648c6-eda1-4199-a271-cb37edc16d08", "sighting--d747a658-1fd3-447f-b1a9-6553391a7140", "sighting--fc4c7849-58e6-4d6f-aea0-4113cb2f2663", "sighting--0cdd48ff-586b-406f-8bfb-95df266e6ce0", "sighting--4eaf0586-fd59-4e7d-96b8-ec39336ed6ca", "sighting--4c5029e6-9284-4d14-a299-f5dd83ba009e", "sighting--7c5bd1a4-63dc-4cec-bf99-f94c3942c34f", "sighting--1b037d65-e8ca-42d9-a4eb-6261a170a6cc", "sighting--f719786a-9416-4c52-9199-a5ddbcd957ed", "sighting--197cea92-c6cb-4233-a6c2-76661b6f3b50", "sighting--407d1add-421a-45c8-8c07-96d2c502714b", "sighting--937406e9-2966-47f2-a808-dbc4f44cf1ac", "sighting--11cdf635-390c-41ce-8681-165ecd3a698e", "sighting--b87b2b36-129d-4c88-a8d2-a0179290d46f", "sighting--d526fdc9-a5fc-4b9f-a093-a205cf7de729", "sighting--4766a5f3-89a0-4670-9c1d-cb039250185f", "sighting--86019cdd-1388-4214-a1e8-ec13ac3ea598", "sighting--a54250fc-a73f-4548-8099-173feeb45e5a", "sighting--6c446cbf-5e51-410a-b117-765daac22170", "sighting--189f812f-0e1e-4629-8951-11148a870c66", "sighting--e9876b66-d8fa-4748-9000-97853ed77d1c", "sighting--d1040f7a-f1f5-4433-867f-e900e090d3c5", "sighting--c5eb7403-d978-4542-b1df-1f2600c0bc66", "sighting--0fad2561-6d90-45d0-997e-3d69c033a427", "sighting--5f0a610f-6138-4590-ae24-d11263066d6c", "sighting--26412662-a2fa-4af1-8c70-93eb52464b4d", "sighting--ab60d4ad-b8c3-4aa4-89f3-98e9db785902", "sighting--d9fa6768-3a03-4fa4-b02e-12e519ddbacc", "sighting--13928c75-2675-49ed-8786-9783f6a0fe08", "sighting--7a063a18-d68c-4bdf-bae7-90e191eeec35", "sighting--50ac6a0f-97e1-454b-b5c2-fbcb04832f72", "sighting--af6bec89-3c59-4c30-8943-907c455ff62d", "sighting--c5b6953e-afc5-443f-8d98-d458f6a45262", "sighting--5a0e3056-12ce-4bd3-8bb4-43979255a362", "sighting--41037ba5-af7c-4f8e-a038-899bb8fb2948", "sighting--9cfd666a-e7ee-4796-9745-894bb587496b", "sighting--3b203885-eadb-4af0-9df3-b35e7109c25d", "sighting--41248fb4-06fb-4c62-900a-7ef4dddfd124", "sighting--a15a1be4-686e-4a4b-96b7-a320d6715285", "sighting--c6caa7c7-3610-4386-9c40-bbc49771f5b8", "sighting--1fa17d27-41cb-4cc4-bbeb-3955e62685e7", "sighting--28390d7f-03c8-4aa8-b8d1-b09f64dc4eef", "sighting--35b9bdca-74ec-4360-9de6-7a55b3df47c5", "sighting--32342964-9f9a-4a99-8884-860f2ecc9dad", "sighting--059c2e7c-4c67-4a81-8ecc-4a816f97a33b", "sighting--49ab5ebf-7b6b-4991-b97a-37c5f148d1d7", "sighting--a849da71-5bd8-45d2-a1f2-a4e969433447", "sighting--f4cee99d-7ab6-4667-8f46-20e541fe9280", "sighting--98a02c8c-281f-43f1-8ac6-1d52576544ec", "sighting--e9025c73-3111-4422-9bda-2424d3d43863", "sighting--967853b8-a211-42fa-9e2c-d1a72afa0c39", "sighting--4f77a500-6fa7-473f-a5fb-dbdbcca05373", "sighting--69618f15-c0df-41bf-ae2b-e5e606c2f87d", "sighting--f67985f0-e00d-4091-840d-3d459e2be464", "sighting--32fb1987-1589-43f4-8691-1540d5bd4252", "sighting--5c4133de-b284-46b5-90c7-789c9a66c477", "sighting--bd4ffabb-ee08-40ae-a072-069684e7bd3f", "sighting--04acc46f-1db3-41cd-816b-ef659c2714ed", "sighting--12c114df-28e6-4ecf-ae81-c18e3f94a0c9", "sighting--64167778-c230-4e99-85eb-da30d8de217b", "sighting--f5f07eed-c3b2-4615-b820-87a2e9c2845f", "sighting--52f90208-da65-4bf4-8031-d1e1634bac36", "sighting--78c36c96-9df1-45c4-8f5c-a128806ab1e6", "sighting--c5335a86-55cf-46a3-ad1a-6fd3d0e1c949", "sighting--3c1e4657-f8f0-4cbc-bd5b-8ecb839a4fa1", "sighting--f819caf4-e415-4cc4-8483-2ebf9563cc21", "sighting--04ac2f8f-0c1c-44cb-801e-575a33242cf2", "sighting--b5d04665-933b-4e82-91b4-136a2a501de7", "sighting--13d91c93-fc4b-465b-9313-1ede90d251eb", "sighting--3f513eef-9b2b-4643-ab78-44db1a3ab626", "sighting--b8a1b2f3-2147-41b4-8887-c42121380b7c", "sighting--a5a31c87-df35-4d3d-87dc-61d4326e3a0f", "sighting--d0a3d370-9193-4987-8044-8b9ff9798a7b", "sighting--4c22d8f3-2004-410c-b956-d41204165614", "sighting--7aa34887-3b52-4aed-b8e0-7db514128491", "sighting--13f31980-3d4f-4e50-a963-ad5fed1cbbce", "sighting--dad5a5be-ac41-4607-8edd-c3bbf18818db", "sighting--315e69f6-a6b3-4f73-bf60-fd03df603391", "sighting--455899a3-36f9-45f6-9d06-cad51438b00c", "sighting--84b72b1b-4e92-4e92-8a30-a243f74001f5", "sighting--3eb5d679-4990-41ad-ab1f-e1c250b5d985", "sighting--1bb3de22-e553-44a4-b941-edbc5b391da4", "sighting--9269c6b6-26db-4c71-a526-532104ab8eb0", "sighting--1d687717-0285-42a9-8b21-ac2b9504cf40", "sighting--b8f60191-a373-4e38-b216-6e484a5781a7", "sighting--1916ed44-294d-4b5a-9282-b7f2d6f644fc", "sighting--6b17ba7e-93ec-4b19-8c90-3a9187f8439f", "sighting--e42e1983-0ac3-4421-b5d3-28eee3e8b670", "sighting--340bb8c2-96c3-401c-94ae-6fa58be60731", "sighting--4f47fe36-c866-4e88-aa10-e30a4a6ca742", "sighting--fd23250b-8a62-4758-984d-f45fee397db1", "sighting--97c8e9c0-cd8e-45de-8094-a8f6ef1e8c21", "sighting--b956c847-1846-4fb7-b92a-892eae0d3189", "sighting--2d845767-c61c-4fac-aaf9-32351e066d1f", "sighting--5cae4fb1-8749-405e-ad4d-dbde5d862692", "sighting--769e406b-5213-474b-908c-8046164630f2", "sighting--fa8ca768-ec9c-4b39-bdcc-0eeaaae25344", "sighting--cf802b01-9ed1-4db7-8664-2370f9052315", "sighting--d219c08d-b65d-43b0-b8c2-52285e854d46", "sighting--b9b4367a-a0c1-4bfa-9604-f268073ace89", "sighting--98e01ef0-1714-45c7-ae4f-bbffd6373525", "sighting--7e59ce9f-0d87-4a91-86c8-893f3b352896", "sighting--5f101ba7-80c2-4ef4-bcdb-3b2ede771ab7", "sighting--449a5184-1923-47d2-834b-f238078d0d63", "sighting--f4796064-8e07-424f-a7cb-9f021fc8d492", "sighting--99ce475d-7f09-4851-a016-1257ceac41f8", "sighting--cd645445-f08a-4cf9-9706-fc6ebd1e495e", "sighting--04a5f63a-785e-42da-81b3-431d9559873f", "sighting--aa522e3d-784e-45c3-a496-0cbfc0f7e4ef", "sighting--04880b93-8441-429e-8042-9e21e7ad107e", "sighting--716c2708-c68c-46ce-861c-116a4f6e4812", "sighting--bddd0c82-745f-4b48-afb1-394839f0a0d9", "sighting--90f202f2-5f33-4738-be4b-36bbb2f5779c", "sighting--8350476c-5e5b-454d-832b-4fe9c158a996", "sighting--c33ccb10-9a47-49ce-b5d2-c425243af804", "sighting--1e7ba265-9792-407c-ba61-164d3a812368", "sighting--119a1e4f-c2f4-45b0-bbdc-990744d01784", "sighting--ed67fd99-2ce9-415a-8c25-8a7efa0053f9", "sighting--f3f26e85-5ac3-4f53-862c-43d4d0a1bf40", "sighting--fcd5e353-9158-4e9b-976b-e8b7150ac4b5", "sighting--a1410c54-da00-4db8-bc16-75285e52947c", "sighting--94ec9bb2-756b-4d60-a2f1-15d74195552c", "sighting--95ee12ab-e75b-4c84-af83-98475c4e0326", "sighting--984e3338-57c1-40e9-891b-eab57f2c71b9", "sighting--3df0fe20-9d76-44f9-88be-6c02adf8ac92", "sighting--941092b6-6bcd-4da4-b3a3-a757dfb3bc5c", "sighting--ab035db1-c0dd-4b6d-b011-1c26a00a5af5", "sighting--34136f3e-ba3c-4bac-9f49-2873174fc6c6", "sighting--ea17a4a8-523a-4f84-b70b-bc2afcd25b34", "sighting--9fba8d1f-0e47-427f-934e-31e65ce443e1", "sighting--1e6c706d-f72e-4438-8995-0b40dad7c525", "sighting--265f1a07-ba9d-4d3f-9ced-a6180cc9761a", "sighting--24c0c6d0-62f0-46a0-a788-e90d842a1b8b", "sighting--ffd52e9c-aece-42e8-ba2c-8c3836c1a30d", "sighting--c538e690-5223-44dc-9501-75b73990182b", "sighting--293a1b10-dbf1-4681-b560-8b763d8e885c", "sighting--d5036f7d-b0f3-4d13-8ae5-3ec6dc3a5a94", "sighting--99e5ca10-5586-433c-aa8a-da64c643312b", "sighting--7cf876ee-a8b5-49a0-a0c6-dcad85ab9545", "sighting--d1081333-ff69-46cf-8f92-07c9dfcaf730", "sighting--0d0b6553-9212-4e7f-b9ee-54e10ad575a1", "sighting--b5ff5f6a-199f-4bf7-8ece-238a841893e6", "sighting--243b6593-e020-4c76-80a6-681e59035dc9", "sighting--2d51ac38-e4e9-4d9b-89a1-d43387a02f5e", "sighting--8b919b0e-b2b5-4e25-ae06-d09d1c7f0121", "sighting--5ff5b0b4-099e-4b50-af61-795b7a7a9ee7", "sighting--8c200815-a4ad-4ec5-904a-0b379989f67c", "sighting--72c718a3-b9d4-480c-acec-edca0ad7dfcc", "sighting--7cd09750-26f8-4f22-ba69-d89da0b92b12", "sighting--573c1989-8416-4bd0-9f10-0085c3b9fc4b", "sighting--a924b790-a7ae-4479-8b64-8a9a3d3a42c4", "sighting--fc40b379-c0a5-4bde-a185-5f4c0987ca41", "sighting--3073e99f-7597-4e57-950a-a3c91d2470cf", "sighting--4b682533-9a0d-49db-b7a1-87250fb356db", "sighting--24d30ff5-483e-43c7-bd02-bd00f5c01504", "sighting--3d67e91d-8a5a-4ab0-859f-e74821f207d1", "sighting--2abe98b0-27e0-4728-87ca-ad306318fdb3", "sighting--1fbd78d5-8c19-4204-98ee-ae43c964893b", "sighting--67e4cc18-dfc0-4410-a5b7-1815f6580a44", "sighting--a7cc9e65-38a7-4f1d-bd09-0771573a6a0c", "sighting--0fe18c5e-8dc0-4369-9552-3aa5b11cad32", "sighting--eefe81b1-10fa-4e92-9de4-b106c9434537", "sighting--894a88a6-42df-4a1d-bc89-85927d2effc4", "sighting--2c4581f4-6e24-4ca6-8f9b-69b60b070bbe", "sighting--cd28b90b-3a6d-40bf-a883-2577249be3ee", "sighting--eb088690-8353-4121-85cd-f310f6c6020c", "sighting--2cd736c9-39c2-4153-9804-4b9f68c29545", "sighting--f325cf06-6b02-4a16-96ce-d42f3b6e779e", "sighting--e143f90d-4ffa-4a0f-8ccf-fd7fa3c49e41", "sighting--9c44c8bb-7a5e-47c0-a4cc-c02c33dd67d4", "sighting--e2a17ae7-bb98-4a5b-b5df-406408113a61", "sighting--54c60857-e8a3-43c4-87a6-8430e19f23d3", "sighting--9dc14f11-de85-41aa-b5db-46c0d63a5f60", "sighting--32075c1f-375c-41d6-aed4-a940f7c06721", "sighting--c54e9528-80ae-4d9c-b7ea-b149029838c3", "sighting--70b437ed-1284-4e54-8205-3b02768fec2f", "sighting--482eab15-9ed5-4dad-9dfd-3bd3a43e5c2b", "sighting--efa45046-0c68-469f-a0d6-e1fe21573898", "sighting--e88ebe8e-9bad-4b12-b1f7-9f27dadd2457", "sighting--0ebbf1f6-e35d-42e9-bc69-bcec5e733e01", "sighting--d83d107d-902c-4468-98c1-0abea868a3c5", "sighting--e1c406d4-19ab-40b0-b910-33b0ee957adb", "sighting--e84d8a02-65b3-4425-b294-7f7582eba307", "sighting--fc178e1d-4db1-4868-84f7-4f69a7d8a1ee", "sighting--ece2ed57-dfe4-499a-a9f8-2c852d9946cc", "sighting--b0bb472f-c5aa-4ae9-a8a6-aadd9dee4c14", "sighting--88ca2b39-2baa-4a59-ac3c-51dc24c5ccbe", "sighting--8756003d-6c1a-48f7-bdb1-d65268fbb095", "sighting--812972ed-bdc4-4ba3-a128-e1bb59eb155e", "sighting--9a52e53f-76af-444e-a5cf-35e0af0df6b9", "sighting--9fe33686-ef5e-4fdc-8400-6cab93b9953e", "sighting--e47352a4-ee5c-4f8b-8d95-339557b566d8", "sighting--590f554e-22c2-4f8e-869b-65d5b7823345", "sighting--90097340-7f52-46e4-a71f-f888b4e4b6d1", "sighting--86d8e607-e98a-4d61-bce3-81d85be8e887", "sighting--6e484568-0e06-4843-9eb0-076a7e00920b", "sighting--51ece3bf-aa40-4025-8edd-ae9e21f5858d", "sighting--5285b980-9a7f-4705-a8e1-1e2765986658", "sighting--fe457a1d-1cf6-4ade-b896-e3acf454ed4f", "sighting--90b5f944-bcf6-4651-baea-ad4c183b5dd7", "sighting--a9176585-965d-4581-8fa6-990ffb0699a9", "sighting--f0309cf5-ac0a-46e0-94ef-b6377d5377f7", "sighting--7a8a3df5-5344-40b5-a381-989fb159a05d", "sighting--48f3ce8a-0e3f-4b2c-bcc8-2eaf58b46ea8", "sighting--ec333079-1254-4479-9cd9-e87b59a3fa26", "sighting--9b6b3310-64f7-4f80-8053-6ff608643fa7", "sighting--dfb7f9fc-15fe-4bd8-9aeb-3c43ab9d31c1", "sighting--db01010f-e394-4be6-b255-62d77a3a50d5", "sighting--29a35bcc-686e-4ecd-96f6-e71ec15dd484", "sighting--9de1710b-71f2-4369-b6b9-0f17d5ebad27", "sighting--ba06a2ad-7e07-470f-b66e-8c788453e75a", "sighting--be7e6bbb-7910-4cfe-a6b7-a4927d787b95", "sighting--30e3a21d-258a-416a-9f14-92e880bd7d43", "sighting--9aa87036-00dc-4204-898f-2a201973b057", "sighting--0843ceb5-9c82-4e43-8bda-7a572a712345", "sighting--0e4966a9-08a3-45fc-9769-f7162249edbc", "sighting--4ac5bc84-95fd-4a9e-92ef-6255a9d464fa", "sighting--b4118bb1-a684-482f-bb4c-95200fd9c261", "sighting--d3bafb96-2498-457c-8b5b-0014c78595de", "sighting--28d0c53b-1fe2-4cd8-8512-18eda9b1b114", "sighting--32fe4224-3d0d-4d71-a13d-16d2d0d294c5", "sighting--9910f835-e161-4c9d-ac83-fd90abf31632", "sighting--04e24e48-bcca-4493-827f-49b97b63d9a0", "sighting--15d20265-472c-416a-98ce-ad9d0da981e2", "sighting--56230369-b618-40ab-8bc6-5a4fb1dfedc6", "sighting--67f0b49f-a834-4a05-86d6-8417ff80f680", "sighting--52fca08f-9da9-4059-af40-3f60d6f8059d", "sighting--1c71b817-b21f-484c-943b-d06d2533ec3e", "sighting--08690d8c-8fb8-4ccd-bfe3-829e49b3f03f", "sighting--75658c4e-9419-4b6b-96fc-fe5e5a02a328", "sighting--0b05b931-6014-4a5c-9d51-bad605805c93", "sighting--8fd7de21-c7af-414f-9551-6967e6abfcca", "sighting--6b07450c-993e-4f71-9fed-ac8f2b44934c", "sighting--3a497aca-bb6d-49d2-997c-13002060e5e7", "sighting--de13d0e7-92d2-4da0-9e41-924d8609c4c9", "sighting--6a3a5e3d-3ed2-4f66-a906-a98248bdba50", "sighting--b8965a08-1c74-4e4e-8c32-f12493aeecaf", "sighting--304de1b9-546c-4318-89c8-87a3e625e835", "sighting--58d4dcd5-eaa4-45b3-9436-6bd966b6f859", "sighting--71ff4f46-0197-4cf7-9c2a-41e2d69a3d0c", "sighting--431b702a-c392-4d5d-a09f-1275be7694fb", "sighting--a1a23dfa-259a-4915-b30a-9cfd013c48a4", "sighting--be9ff324-acf3-45df-b3f5-a7032df79ea3", "sighting--49e6d0f6-2fc0-457c-8bc7-295ebeeb79e1", "sighting--671048cf-298f-4862-9f31-7be12c377f45", "sighting--3f172bd8-e624-43bc-8c27-0ba15529b55c", "sighting--290373f9-024f-40cd-ac70-94783a667147", "sighting--24d52a48-c9af-4fee-a0a8-70517e44a95f", "sighting--d65cb048-a786-4028-afac-4eefe07b7983", "sighting--3e7b0da7-450d-4a8c-b1f9-3d551cab7674", "sighting--bc2177fa-d000-4a82-902f-4a9d740a7eca", "sighting--d55670f1-e751-41eb-b9b0-2297441dc296", "sighting--dc689ec9-c6f8-4946-9775-c7994826ade4", "sighting--5ff463ad-d9d1-4206-bef6-eeca0dfb63ca", "sighting--99be9ea1-c0f1-4c9f-995c-82f62238a64e", "sighting--9c34d048-0d3a-4991-a3cf-7e3a3bb72bc9", "sighting--67cb50c5-feee-4e2a-97c3-7ec1bb00a2b9", "sighting--33e2e817-c4c4-495c-ad36-68e7c6bb08f0", "sighting--d4a796ca-51a9-409d-ab79-6b0dbf54540a", "sighting--033222d8-ce20-4ff6-992d-8bb7b1c72552", "sighting--eae276b0-5787-4e35-afa2-2a0feb1b5457", "sighting--bbc62fd5-5f96-441b-8ee3-d55bada5c5fe", "sighting--3f69eb2e-63e5-46d3-aeef-e2be0e902928", "sighting--0a2382a4-6f33-4d41-a976-ab90f46e8dc2", "sighting--dd764d50-643f-44a2-977c-8fbbe7dedc90", "sighting--4f0fd670-e61d-4bf4-9a9f-71a505fb2c9b", "sighting--5cb4c2ae-c234-449c-b5e4-52338d1e5f7f", "sighting--c7fcad6b-9f46-4dd7-8558-582d2e14400d", "sighting--965c8df4-7ebd-4254-952f-665a810e7278", "sighting--450c9144-ee1e-48f6-8c3d-80295666f99e", "sighting--0746c267-fa68-49d9-8a59-83a66a7d38f8", "sighting--521972bd-ee5f-4394-8985-15d6405cab69", "sighting--68d06ab8-bd11-4f62-ae15-ad494870eb35", "sighting--87ef3e7a-7676-470d-93ad-434f28d893bc", "sighting--87d69e92-a504-4c65-818b-027992da04e7", "sighting--ce756f52-79d6-48a8-aef2-6924f6a79592", "sighting--298b857a-f3cf-4cd4-ad18-6c26f9c57c0c", "sighting--fda0b812-53d0-44fd-9d2c-52e5646893b5", "sighting--197e3e87-4749-4f92-aefa-4c7c58d0512b", "sighting--1769a0f3-1649-4469-bcc3-d6dde5254932", "sighting--6537cd9e-92f9-4c60-966b-858d39cb1ea3", "sighting--d7c6fbcc-3ca0-453c-b0cd-d9a74f841714", "sighting--04073193-1069-4697-917b-6188931951ff", "sighting--11a84d01-ff30-4764-9671-8fcfffdff69f", "sighting--f6cf8448-6d4f-4cd5-a018-bcbd9e9da6f9", "sighting--60179ed3-4c55-4acc-98b1-757d050f73a0", "sighting--b2454b24-393f-4aa2-96b3-28869e0c2728", "sighting--6b86f22e-101f-4245-8572-93378db3f461", "sighting--5640a2f6-16de-4870-a7ca-527b8bcd78bd", "sighting--98fc7a9e-0784-4ea6-a29c-49aca3c60e59", "sighting--9ee06e41-9cb7-404e-93f5-0b9e12700ad7", "sighting--3347e1fc-def7-4ebd-9c52-5212f095e347", "sighting--6955b2d2-1418-4bf9-aca9-a9b40b96461e", "sighting--10f18e7f-1c11-4119-89fd-7eb7f1e46f64", "sighting--06cea6ef-55cf-4a9f-b64f-3e47a3b60d0e", "sighting--2e1be485-6919-4f0e-9ef0-0809d2c9d02a", "sighting--0ee04281-ff58-447a-857f-ee005e8ee2b5", "sighting--201b2efd-5a21-4bf1-8c31-a1f819f0b23e", "sighting--b5c7eea9-9c12-4d31-8a4e-98004b3b804c", "sighting--f5c44a08-d7a8-4aa3-b3d7-7bd697aa437f", "sighting--c0b92f34-2adf-48b5-a4bb-6de18a5e3b70", "sighting--c48d11e4-5873-4e25-879f-0a95427d4744", "sighting--57cd6e2e-485c-4a91-bb3c-cf12528e0a84", "sighting--f82dd618-f056-49d1-bfd6-b8537060ec4a", "sighting--1984ca90-67eb-4fcb-a4d7-3f329f0133a5", "sighting--eba172f2-ca41-42fd-bf3b-96320a7574ae", "sighting--b46c9341-e988-49a6-8e26-4b5c1529c00f", "sighting--7cbca239-fad4-4e83-82dc-3259138a0660", "sighting--419b4e92-ffcb-4cab-8a75-ec6331b375ad", "sighting--b9a80182-a86c-45b9-8ee6-0b5353ca06a7", "sighting--23694634-c19c-49b7-b8f1-41be18ba3f74", "sighting--1ac358bd-3d29-4eb2-910a-11ba346a01a7", "sighting--01d585da-d5a3-44f5-99b8-ac5fe297c280", "sighting--9261c9a7-6d2d-4324-879c-bc2347c58875", "sighting--5af90ec5-1bda-48e2-a076-bda7ca8b9bf9", "sighting--3d8fcb17-b782-498d-bf0b-7439883f9f44", "sighting--818bee07-ef48-4376-bed5-25311097c9bd", "sighting--9930efa7-1faa-497e-821d-37ca015851c1", "sighting--f1972273-e26d-4e9b-82a7-4597dd7c1513", "sighting--400ebb98-b968-401e-81ad-13876504ba07", "sighting--a61e6e28-2fba-4fb1-ae02-94f6fb74cc7c", "sighting--b9dfbd0a-a120-4e71-9cca-771c8fbac0d8", "sighting--5bc0b2bf-9896-42c8-8aa5-59c587d9d8d0", "sighting--c1fc61f5-d492-4f84-8288-fc4f9e3261e5", "sighting--c7a6836b-7285-43b3-a641-ce9ee6b4779e", "sighting--002c4077-8106-41f5-aa1a-67788fde4c4d", "sighting--0cdc2145-43ba-4026-a148-5d6ec0af4931", "sighting--502c27c7-f954-423b-ae44-18765c81b238", "sighting--cd24870b-b0e9-4eb9-92a1-06fca7fc8642", "sighting--38c13cb8-f5c9-415e-83a6-65e9a9ef6d05", "sighting--016be7cd-3c44-461e-9ceb-db8e3366f678", "sighting--e4d2d7f3-cfca-4fdd-9edd-e7a2ad26edb0", "sighting--e053e313-e0a6-41cb-9d04-61ecd6f802ec", "sighting--8d4a00a3-8f78-415d-b740-f3505da16166", "sighting--ee89bebd-f731-4046-9bfb-9c8c5ce76268", "sighting--51f62c36-769e-4fac-b86a-7118980bd41f", "sighting--7e9f9f89-645a-4f61-91cd-760189cd1fed", "sighting--9aca333e-e12b-489b-88a3-d7a8e5cd3278", "sighting--efcf7578-e1d4-43d7-952b-0e6f7b1de55e", "sighting--3b54ab50-6d1b-404e-9c8b-3f57d7afd310", "sighting--64711786-8e37-4719-81dd-7d40e6901aff", "sighting--dfb998e9-716d-4714-a291-1a5b2288d97d", "sighting--a8513568-d6fc-4968-a8b3-4838a1c20e1b", "sighting--309b10a3-1c3a-4ecc-b4df-47f7b2a9f99a", "sighting--eb8e5369-308d-4f43-bf3a-de8579eb124f", "sighting--ea9ec3c8-49b6-45af-a031-9998beb6abad", "sighting--83880e7d-8026-4593-814e-9b02faa10f71", "sighting--adf7bd4c-dd37-45d0-8ae7-58ff6e2d7075", "sighting--d3ee62d7-f5d8-499e-8ffd-b435a843acd7", "sighting--aeb0a6af-bb52-44b1-84ff-8e73c1c2b708", "sighting--2bf283fa-fba3-4df4-b881-1419c7132754", "sighting--c6622cb4-1afb-483e-8b68-cac25d84be4d", "sighting--e28d7f50-3bc7-4d4e-a165-e34cc39b056d", "sighting--fbdbfd99-fddb-46b8-8d0b-5c49f315bb60", "sighting--1467e990-5911-4dfa-beda-a2c03ed410bf", "sighting--bc048f77-e178-4ac0-83cd-d657f2d212b7", "sighting--b7db6db5-9b58-4c17-806e-97085d0ad4f3", "sighting--1f52729c-1374-46db-a1cb-20788c953b26", "sighting--f3e049d3-e834-434a-ba3a-4dd5ed96caf7", "sighting--7e17f019-bd7b-4cd9-82b6-86f119a81b12", "sighting--ab1301d2-1d54-44b2-8cdc-48929ed56295", "sighting--5129b898-58db-4f7c-8343-60aaf4abf37c", "sighting--aabc9bba-c16d-49b6-81a0-327ca56ffa78", "sighting--17f51c9e-d9cd-4248-886b-447ea172724e", "sighting--99a7a077-e03d-4e20-8b58-08cf6855cacc", "sighting--c5dbfcb2-3f58-427f-84c2-85c8afc4a0ec", "sighting--b8ee984e-25ce-4f93-8d86-3ff120032283", "sighting--36f1ce62-d4e8-4b74-a0be-63d2f031489a", "sighting--8687b666-8a9a-49be-94b1-f366e5b9872e", "sighting--187fd7da-4ce3-4012-8de1-c66ac281c2af", "sighting--02d6eaab-f5f7-4f71-896c-b570369caecc", "sighting--cd908c9e-5c5e-4211-8a33-17c225139a39", "sighting--62406b9c-25c8-4f9b-b414-0495d8fc4670", "sighting--7ec50e61-42ac-4702-b359-53eafb5f6a32", "sighting--b6538dcb-dd24-4194-b37a-9323e8b56aa3", "sighting--0dde0ea6-5177-4471-a507-01cd6ca62148", "sighting--265256a7-78d3-4cf0-bfeb-6746127cea4e", "sighting--99831b2d-afe8-49e4-a4ec-ed5782efcd23", "sighting--9bd1ac72-0baa-4475-a019-fa78e2277f6a", "sighting--59791e53-3d1a-47c9-876f-65f80dfd6bba", "sighting--6e17df74-ecd6-4cd4-86ed-35d49e9b005c", "sighting--47add3d8-2eab-4515-b5d3-5dcec3f5a1a7", "sighting--d3c637e0-ebe7-4556-99f0-da44626ea5db", "sighting--df39b6cc-1963-4dc0-a935-f6b06ba7d4f5", "sighting--42d2513a-b579-4cb1-8a1c-1f2ab71b8be5", "sighting--03c1cf8c-c6ef-4946-8e68-3da4297a2087", "sighting--25076606-9f4a-430f-a0f6-5a1d919c45fc", "sighting--5d0aa3d4-576c-4856-8a60-dfbb014f5bd4", "sighting--ffb0ae64-9ba3-4934-9438-189dc988dcb4", "sighting--8564a485-6c7d-4e63-96d6-c58fb49ddc93", "sighting--0a2a98ad-6c15-4be9-804d-db8feef930c2", "sighting--6ec6d890-620a-40f7-865b-1cfe09a77cb2", "sighting--01dfb9bd-9984-42dc-a558-0ea51845c7c1", "sighting--0f19d682-506a-41a2-a12c-fbed81c2fde9", "sighting--dd905655-7cf6-4efa-bd07-4cd8f05344df", "sighting--dc0dc172-df33-4e28-8e78-f005ea8a7913", "sighting--3c95d812-4ea2-4533-9683-9889bc5e3226", "sighting--826b6f5c-f1a0-4284-ba1d-3934186260dd", "sighting--98b7b4a1-2a3d-4b17-8372-b2e0521ec130", "sighting--1fcde510-8e60-4237-a0d2-209471dc1ac1", "sighting--f17097ad-31e7-40c7-9494-b453d1c123d4", "sighting--65091601-ca3a-4d7a-aa6d-7737008c227d", "sighting--bfff16ec-56a8-4bbe-ab1c-fa11fcbd4f47", "sighting--963ebdf1-a64b-433a-9f6f-e82f4c7e9acf", "sighting--c4d0a7e1-0d3f-49f7-8df4-08407d14be35", "sighting--d747279b-0ed1-4037-a5f4-6aace123ea12", "sighting--f6931faa-1a0e-4611-a78c-dc7365f1dad6", "sighting--56a98a9c-304f-460f-b2d1-8ca45705795e", "sighting--29f8adb3-6c9e-4f73-baf9-b6cf8dc3e37c", "sighting--7e1718fc-0c31-4a8d-8fb1-9d5c2e8d20f9", "sighting--fd6cd52a-2515-441f-8514-0c95bbab5d20", "sighting--d7350365-8f46-4b92-aa8f-ce82b6d5e097", "sighting--d1368b93-0b02-4083-b890-15826cc1c34e", "sighting--f227cd6d-8e1d-468b-afe6-4896cea6ce17", "sighting--3d7f80e5-4190-4e4e-84a7-88c4091a7f3a", "sighting--dce661b6-9c48-4416-b0bd-0b4072bad1a2", "sighting--cf9b1246-2ba9-4a31-bbd2-703dd7dc2644", "sighting--3a4ba49b-d855-4b2a-a492-f51f3a4b6264", "sighting--16bdfb0b-d068-4fc7-a870-b3cfa5bde02c", "sighting--b72b3b9b-41fa-4d62-a679-ec9d7bdf371f", "sighting--d39962a0-d095-4c38-b217-a6b4a16aeb43", "sighting--3c3347ac-1fe9-4426-bcf7-ba3c466c53bc", "sighting--18235a47-1835-46c1-9e7b-86cd31fc5e2e", "sighting--ec528d87-b55e-4e57-a33b-df44b7dbd09a", "sighting--f2b85f47-699b-414f-95f1-026a231976cf", "sighting--2bcef97d-e609-4dfe-a91e-bb061aa6c726", "sighting--2e3bb0fc-87e1-4331-b293-aa4730435c10", "sighting--010bb62b-ffc2-4f57-b2f6-e2d3f1c6fbaa", "sighting--9680e07b-8d56-4e38-95fb-ef40ef4d3d9d", "sighting--2ee01e69-3e42-4893-a9bb-fb837bed74cb", "sighting--42de7e33-6961-4b9c-a7c0-2e7baea7517f", "sighting--b4386ba1-1fc7-455d-adaf-730a2601bd41", "sighting--d26ad976-8b32-452f-a751-edfba8febdb4", "sighting--f2aff3ad-cf3a-43d4-8d21-048d554bb76b", "sighting--723c792a-72e6-4a6a-88b4-cbdc06f09ce6", "sighting--d98f99da-524b-4971-8af4-bb47746ae767", "sighting--98837fff-3526-41ce-8da1-3962aaac4a24", "sighting--fe308671-48aa-4216-9f2e-ee8a7dd2fd60", "sighting--5d4a2846-1cc4-41c7-9358-e6e8784a1848", "sighting--24e4ff7c-f0c2-4166-a8af-c5b4a8e31ae0", "sighting--f078792f-4f62-46af-ba62-00e5dcc89cb9", "sighting--c34b1172-214d-483c-88b7-5b79bc838c18", "sighting--e9455bb6-6454-4861-838a-fb91a44b5301", "sighting--3f166082-4bbf-4557-b856-9f558b3ea3b7", "sighting--7ec6f06b-d411-4758-832d-0c095127f02a", "sighting--55d77332-a8f2-451d-b438-eea164685175", "sighting--abd47878-4f75-4598-a874-a5ac719a103e", "sighting--93ca1bf5-9fb6-4fad-8d9d-00042c04fc26", "sighting--a94bbfec-9d17-47fe-984f-9a81dccf4fec", "sighting--7a108e84-4820-4d94-9aa8-012648f65ed9", "sighting--6c2353b8-ee1b-4e21-9bb9-d8f888384f11", "sighting--06944c84-f6cd-4c63-b53a-0c422bfc67b7", "sighting--90f265d2-b775-4bba-b26c-06e36c636744", "sighting--43ab5072-526f-419e-8a88-865e8a54aec4", "sighting--368122df-5193-4a4f-9d36-435bad88d94e", "sighting--0959a90a-0659-4800-94e0-c638802b61ec", "sighting--6625b887-50a1-4af7-905a-7da556f1b83d", "sighting--83ae47d7-ab48-4ec7-9537-cee9d4944112", "sighting--1bf83627-6e3b-4015-8b69-5e23ac21e437", "sighting--b536dfb0-4f94-444b-856a-39900055a0a1", "sighting--a04f71f1-01bf-413a-8dc7-2a1557f82490", "sighting--9b42d5e6-085a-496a-9ca7-41f7d16abf75", "sighting--60c7f4ee-59e2-4598-8949-ce5f26d56558", "sighting--f907d9a7-208d-4acb-90b1-f5728fb445e4", "sighting--4cd07afd-2571-49bc-a4e6-68a346143ad6", "sighting--0bcdeef4-f65c-43d6-9d6c-d8b9b94fa309", "sighting--ba08f819-d210-4a1c-9b61-72984d08e0db", "sighting--da6e66bc-dba2-45ff-816e-7274b9e0c216", "sighting--f035b89e-f16d-445b-a29c-7cf4e8f59602", "sighting--b647cc97-7e0b-40c9-bac4-d3a1417cf595", "sighting--b39f0210-335e-4888-a010-f75e9ed3b3a5", "sighting--4a0aa2d8-d819-4e7a-925b-9656704382af", "sighting--43622cb8-0be3-4aa8-9e23-0bb8176a5f73", "sighting--f2f2a599-eb07-46f2-be1c-a2f6ec353518", "sighting--62f67810-d4f6-494b-b147-5e2813d9ae1d", "sighting--0c5333ad-6e7c-4b0d-8cff-59b014423809", "sighting--f1b13057-8597-46c8-99d8-3999f8e4a459", "sighting--3d4cd7c6-0ad2-4615-a9bf-03edd1868150", "sighting--1a1c7e8e-657d-4806-af57-4e10af6b8574", "sighting--3890480a-d7cd-4bab-a3f3-26a47e0620bb", "sighting--16307532-c8b4-49e7-b773-a1ce27d880aa", "sighting--cc1a841c-87fc-4581-88f5-a8652bb07fea", "sighting--03374143-f03f-4ee2-8d4e-111528235a2e", "sighting--83a09d57-f16c-460c-988f-11b33f87a240", "sighting--6508710f-3ab5-4d57-a567-15d11cd88a42", "sighting--d15258f1-8b42-4a6e-8dd3-3511fbfd166c", "sighting--b573cce9-cbc1-4fec-a5f7-7438b1518b0c", "sighting--6da20387-2a7a-4cff-87f7-a17d0bb6b262", "sighting--eef722d0-493c-483d-a5d8-74d01e159903", "sighting--b3c9419d-066a-47ec-b494-2439aad89ca8", "sighting--f84e7b5f-d82b-43a5-b95d-5865ae0c60ef", "sighting--c3eeaf94-278f-4e85-bdfc-a21f64389e3f", "sighting--cb0186ce-7466-418b-bb31-6b3050597402", "sighting--bece5756-a676-47f1-869b-b5597b009173", "sighting--b50a4da2-33c7-4056-b8d0-58a716d12ae2", "sighting--f61c83b9-4223-450c-86a5-9586ddf9ecb1", "sighting--a7855551-4b02-41b2-b731-fe822f583266", "sighting--ab3f19d6-cd92-44c3-af93-8f0219919c90", "sighting--cfcb9de0-93ce-4fea-9059-1e8c25070d7a", "sighting--0662d799-e136-41ee-a1b1-7bd84e35c460", "sighting--9208bb6d-14c2-498c-8b25-15ec70e66e05", "sighting--203ae12f-a55e-42a9-b06f-d8bb0f2543d9", "sighting--54b4e7c8-afb7-4625-bd4d-dfe0f16c0278", "sighting--70dcef47-90f1-42cf-af70-a00ff8195255", "sighting--ddf1955f-27b1-4388-98ee-0347beae27a5", "sighting--ecb1936d-9a82-4bab-8fa1-a94195ce9704", "sighting--968bd492-9f0f-427b-8e11-9420a01f029b", "sighting--b61a94a1-6da0-4024-acae-3076cb0afdb0", "sighting--d7cb2295-366c-4fd8-847b-fdbe6582892b", "sighting--74a413e8-3484-47ff-8369-494afa65b505", "sighting--26076909-38d8-416e-8f83-15fd043af956", "sighting--7f7c6fc8-105a-4e90-b7dd-94a7dfed5d34", "sighting--9932a46c-20c8-4fa8-a17c-a97064e95382", "sighting--9e89112f-5ba0-4a69-ae87-4f9e5520dee8", "sighting--49997639-8c1f-4c30-8030-d5413267ca84", "sighting--02e1779b-952f-4e6d-bbbb-b7a3388d647f", "sighting--709c854d-7dcc-4136-9c68-1a02e0de7157", "sighting--d8d94aa9-8646-487b-b2e7-e130393ca35e", "sighting--bdbab497-5f17-4d6a-90ec-f856e46fb3ff", "sighting--48116b79-0338-4a88-957d-b0ae4e2ebc32", "sighting--09cde350-25d3-4098-a30b-b68699e55b79", "sighting--f0cf82a1-0c92-4c64-8326-a217523a3429", "sighting--6e1381ba-46ed-4ccd-8ae4-40893e95ae96", "sighting--006faa9e-f14a-4ded-8e32-7872cf4c6b1f", "sighting--7d73aff4-5eb1-42f7-9641-111be54e34c4", "sighting--cb7babcf-5c5e-43cd-ab9d-03087133f9b8", "sighting--3d188a81-03a0-4634-ae2e-c0c7d6b99164", "sighting--1df09c45-6bb1-4852-9834-d55b6368b585", "sighting--6af25454-4ea3-4286-99cd-bc021505a059", "sighting--78c73098-be9e-4216-ac66-23922b2dec56", "sighting--894d3ff7-48d2-47d7-a6e5-bba50e30d705", "sighting--7e6f1c63-d3e9-49e7-927a-7bcdf756b1fe", "sighting--4a5c4fa8-e596-4c0e-9a32-b20eaf0f41dd", "sighting--cd689d7c-ed33-43c2-8b0f-4f6b568f54e0", "sighting--3e4d1126-d996-41ec-93ac-30d84f43952d", "sighting--8901b9d2-1f61-4059-9c40-61410869279a", "sighting--ced22e62-8def-4fe2-96b9-8e8776226009", "sighting--cfe2e52d-9542-40c0-84ee-99a6438b12e8", "sighting--89d6464a-5dec-44c4-be27-8a09a3a7a4f9", "sighting--07fe9dcc-5261-4678-8d0b-66fd2e89ced4", "sighting--f49adfc8-580f-4794-9285-d473878f25a7", "sighting--b1afa124-0d1a-48a8-a6b3-f475333f6114", "sighting--fc90ed84-f5d0-4f4f-8712-8717835c5bd7", "sighting--76539231-0238-4fe2-9525-266f7ad8be45", "sighting--06fdc64f-c39f-4d68-b4bc-f0033f3f684a", "sighting--8dd51176-80e6-4ced-9fe1-4f276a0a2bdf", "sighting--88dc157a-1195-4f3d-bfd1-41b6996723e8", "sighting--d46b1e0d-570c-47ac-bc93-3a85b0cd2669", "sighting--b433c5d7-f9f0-4863-9bcf-f8b3c51d4892", "sighting--28b56dc6-5eb7-4445-9730-48b4b08bdaa1", "sighting--67b332b4-ae79-45cc-bd49-2c99f4896659", "sighting--21011750-66a3-49d9-aa37-557dbf00c72b", "sighting--377da5d2-e74a-4b1d-b634-71e5c0f34a31", "sighting--d3c3005c-b25e-4ae2-b797-51af3c653e8f", "sighting--34802ec3-eb57-4347-9aa1-6def1a4c5952", "sighting--ec2af3c6-524d-4f88-bdae-40d6a09835bb", "sighting--057e869a-e00c-4d33-aaab-73bc6915cc64", "sighting--27e7c883-e34c-41e6-b6fb-4461f47fcccc", "sighting--0399c854-20be-4c98-ae43-da110e40850c", "sighting--6ded6a2b-237f-42b3-8974-e0c427fc7bf4", "sighting--4f15bd93-f05d-4270-bb6f-f13ee6c64a13", "sighting--ad9ea5cc-730e-4477-aa94-7415f6e56959", "sighting--04c2cc1c-2ca1-4741-8835-0f2afa9f02c8", "sighting--adc2cd30-2e70-4a1a-b6e7-dc9707b8107d", "sighting--ca9246ed-156a-44da-b9e9-624b1d5fca8c", "sighting--ab9e4431-8f07-4ef1-ad80-ac2bd2ce67b9", "sighting--6472efc6-3fbc-40d0-bea5-f4ad2949907e", "sighting--42877bdb-37eb-45e4-92e1-0e01b78b7d59", "sighting--c13f6505-ac58-4816-8c08-6a16d961d645", "sighting--8aee0661-dc9d-4591-bbe5-5ee39b3da457", "sighting--f632420a-6c5a-43a8-a159-738ad8e6c66f", "sighting--687f20c2-f899-4daa-bdcd-7fafef214402", "sighting--e5ccdfb1-ffda-4a61-95f4-d10134abf999", "sighting--1a5fd6d9-84d0-4052-a2f7-78e561321ba0", "sighting--b37e8b00-913b-475d-9924-b72de546fbf9", "sighting--dcbc93f1-09fb-4007-809e-e5dd5864d35d", "sighting--fb4560f4-e690-435b-97d9-993a589eef42", "sighting--92b10676-c82c-4210-8393-058430c6d52e", "sighting--c437d386-2bb4-478e-a325-8c978d801948", "sighting--0e45c2fb-e000-41fa-9e48-0bb69c4f8637", "sighting--5289e554-dfb0-4eed-9dce-651c51942cb4", "sighting--1a8853b5-94e5-4d34-b8c2-20f3fd3822c7", "sighting--9a3f9b1c-d329-4ceb-998e-1d13e129a275", "sighting--c9a2d2f3-79c0-4585-86bd-2b457363ef05", "sighting--ac4843e8-cb7a-4904-8904-c294d36c7cb2", "sighting--8d64e92b-0f20-4b1c-83d4-7fef097c9596", "sighting--e3de81a1-1ebd-49fa-bb07-849f6c14250d", "sighting--2b15ffe8-b233-4a11-bb9a-4543060beed1", "sighting--f1716ecd-4744-4650-870e-e05636f3c249", "sighting--34463c50-e6fb-4e30-9f00-a0c470c8a3c2", "sighting--e615e4ea-7e2c-4a7d-80bb-ffc07c9f849e", "sighting--c15633e6-3375-4fef-954b-c01085728081", "sighting--d93f97fe-9c9e-426c-b4d6-34569757f87c", "sighting--12313735-1b9e-45b1-bd01-cff3326697e6", "sighting--84ae62db-1d10-40d7-aa06-51de98325db2", "sighting--ab7e3083-cea8-422e-ae48-a75e0fbff93b", "sighting--b1f73a21-0181-490a-8a67-aa75b04a2b57", "sighting--f6c86fdf-614b-4d22-a97f-fa1e5ed2d5d1", "sighting--8dce857a-afdf-4e8e-8ba6-54064c509525", "sighting--4e7139ac-c73e-494a-9da1-d50b2bdd019c", "sighting--27e3b134-7b1a-45cf-93ab-c63c09d2cd01", "sighting--01550ea4-7841-4831-aeb2-ff25fef380f5", "sighting--0568ae01-b029-41c2-b379-56178c2435ca", "sighting--23d61508-d179-47b0-a052-3ed337073e56", "sighting--ded33f63-0598-4709-b82d-0a629eb40468", "sighting--2b7ef6da-05a5-404c-906b-f7174876a6e5", "sighting--ff91335b-7674-41db-ab75-03715a1029da", "sighting--0ebdcbc1-dd30-43fb-aa9c-9f97f5e8e402", "sighting--5de224a3-1234-4370-98bd-66ad9591c289", "sighting--41a6a02a-c794-4612-a764-282fb105fe63", "sighting--f79ad377-1813-407c-86c3-7b6b7d432db4", "sighting--ffc18a68-725f-4a50-afed-1ffc68d23804", "sighting--29768868-5a9c-46e4-b1ea-4a68fb2b09a2", "sighting--b7ade94e-b49f-473e-84ac-b9861de304a3", "sighting--792ce357-6089-47c4-bcfd-e7c51fbc7bb9", "sighting--cae9cb27-bc74-4550-acda-0374be27c6fe", "sighting--dcdca68e-9c63-44ad-877e-cafb894d8ea4", "sighting--be20f4bd-d476-45e3-9d65-fd9d9ac40ddd", "sighting--02ca6424-b08d-461e-9a4b-3efe4af811bf", "sighting--5cf1f945-76ea-42f0-b8d0-54e90db5a8f2", "sighting--c4315e5c-6ef6-4e81-ad0d-afddb3a937be", "sighting--b0e8c6df-a76e-4426-9c89-894b0382e849", "sighting--f11788ca-815e-4d21-ac40-91fa272249c1", "sighting--cad6a33f-f0f2-48cc-8fe7-3e31d32b4cef", "sighting--4be2b4fb-fdb5-48aa-b6fe-5564244bdfd7", "sighting--ced36229-e492-4fda-98df-06216c40088a", "sighting--5b65e9db-9579-436c-a841-f50ae4bf59b1", "sighting--f3f89ffc-f5d8-4969-8317-68b3d30e4953", "sighting--85368bdd-e15f-438d-82a0-d7807a0e580d", "sighting--87cfc8c4-be35-4167-9172-699e2f04f5d5", "sighting--5b9e52ff-bd3a-4462-b790-e700ea039d36", "sighting--e9115967-1ce6-4c0a-aa28-2f26f0973ea8", "sighting--7122ab57-e96e-488c-94a4-3eb4b117d756", "sighting--bb29d626-8df4-42e2-81fd-0c2ac7eb8b64", "sighting--6f9bace6-f3ed-4743-82b6-08093a564131", "sighting--d68c6378-2ae4-4bac-81b9-282db4d40438", "sighting--159c185e-717c-464e-af24-18a0de316435", "sighting--e3069b4f-2134-4bda-ae37-b0b828f97407", "sighting--c33fb074-9120-4b2c-aef2-14268102458f", "sighting--a335c079-70fa-4850-9d16-0bc0407de1b1", "sighting--6a7c06e1-1106-48dc-92b0-a8dcaa8a5d58", "sighting--a61b776a-f8a7-42b6-9956-40cedca76852", "sighting--b9e70433-9a86-4083-89a2-13ff9bfee091", "sighting--487def2e-e180-4ff1-886c-0cd578096f2d", "sighting--ce746c32-c06c-4dc7-a8f6-1c799910a057", "sighting--666eee74-b9ca-4f35-b0ae-56325cb7bca5", "sighting--1d33a8fe-e7fa-4ef2-a7e3-639ee47e806f", "sighting--01411b5b-ff34-4c9d-805f-8d83d772cd59", "sighting--5a90a33e-e448-462c-ae0b-b25bae3de3a7", "sighting--7e387ee6-260f-4b0d-a1c0-122b13245981", "sighting--dcc3f4df-4ce9-4c8e-87ba-f3639df306a3", "sighting--5d1c6b51-581e-489b-b327-9c5a43cdb156", "sighting--6d4fdd76-0dd7-470b-922a-f1f4a7db43b3", "sighting--a698aa4c-b337-4532-bf7e-6e6f5bba6060", "sighting--af6ea4de-cbd8-4fe5-a37d-9caeeb99c0c1", "sighting--61d6fcd6-ff0c-4fdd-9815-ec5470c4f721", "sighting--422f8888-2aa7-4f84-ba25-8254f7e35dc5", "sighting--e30a78a9-9ac6-4d09-be97-1d57125378b9", "sighting--5b9ad374-b44b-42e3-9079-a50e0030a7e9", "sighting--63e791d5-f2b9-435d-b7e9-bea80097e1b9", "sighting--f6aa3a63-ab69-44e3-908f-bff8dab0a402", "sighting--9103f600-92a6-4ed0-a34b-ef3d58fddd1c", "sighting--687783b4-d9dd-415a-b76a-2db4d68aa16b", "sighting--8be8c4b0-ec09-487f-a2e8-c96ce7c1d692", "sighting--d8366c63-4e47-4bff-bbe3-8825be108271", "sighting--7dffa8bf-c630-4e04-ab8c-e837a20a5415", "sighting--ca403b25-99f6-45ff-b4e3-5e4ebdbef2eb", "sighting--f487bd71-5e73-46bf-98f2-e5aff838686f", "sighting--ee281e3a-23d2-4f06-89bd-241262b33cc4", "sighting--00feae97-64ab-4663-906e-3505e5c6a6a2", "sighting--fe3f6f64-27b2-4e45-9d21-4b27aa3d7a26", "sighting--43bb21d9-1c00-4703-b9f6-928d438195c8", "sighting--b3129957-c95e-4ea6-807f-a98bf7747961", "sighting--0a5ba2be-4012-46f7-bef6-395b7483aeb2", "sighting--481e8fdb-8b7a-4051-b797-8850e12d8d12", "sighting--f7f8cd35-2057-4763-a9ec-381728a4e973", "sighting--676e914d-14fc-4ef6-bbb0-82706f53dbfc", "sighting--e1b41d85-5d9e-40ff-afff-99d153f3f698", "sighting--6d1975cf-440a-4aaa-918f-43b41d45814a", "sighting--31266802-af39-494e-a2b4-6ceb5248a2a7", "sighting--8f666ae3-1ada-45f2-837b-1bb18b3be7af", "sighting--ab111bcd-778e-4472-9ccf-b4b90b13cf5c", "sighting--f1fc2911-1342-4bd6-925f-28bb29ccddbd", "sighting--285896d1-0918-456c-a49b-02992ec2c8fb", "sighting--4547a4e6-281f-4ff2-8333-1ee9ca96b318", "sighting--d62e276b-b64d-4dac-86af-4a1cd269ac76", "sighting--ebd5fe1c-0817-48b4-930b-7eb8c19b1796", "sighting--ff011375-8e64-4abc-8559-9c09cc0ea39a", "sighting--08e6b101-3d8b-4bad-9377-5c7ec3cefb08", "sighting--fa128e84-90de-4b65-ab96-ff617baf83f2", "sighting--dfc440d3-1b79-473b-bd27-ad49b61b8e28", "sighting--9b6c084f-7af3-414f-8da3-57dee3421cca", "sighting--b9dc48dd-bb01-49c8-aabb-40b003a9c6bd", "sighting--965187f1-917a-4273-b259-34df29b2d631", "sighting--695250c7-a24e-42ef-bf8a-430799ef94d6", "sighting--d1da365e-3d95-40c4-a9f7-98ce2e0840de", "sighting--8e8a45c6-efa0-4246-8de4-819433b08c9b", "sighting--c4b76ae3-b87e-4d43-bc32-2becd1056a95", "sighting--dbf4ee8c-4d86-459b-badf-7f2ad1ae90f3", "sighting--ae4d35d3-ebd0-4102-a4eb-7a0d4719035e", "sighting--b9c99c48-ae9b-40d7-ae54-332b20da159f", "sighting--84574419-0711-4c4e-a81d-70d3bbaa54ce", "sighting--3bce7404-ddd2-4859-9bdf-59cc6044cbb0", "sighting--dbbfbd22-7cf8-4df5-80ed-7ed7c6dcb3d1", "sighting--cd3fc882-0416-4b68-bf34-b2a48b671df8", "sighting--20a07059-d95c-4c3b-bdb3-a8e62d521ffb", "sighting--28e39749-12a3-4e28-b50a-a3faf6b98378", "sighting--0de0753c-4787-4c1c-a7bb-ae541867792d", "sighting--1ac9c654-e491-4bcf-bc29-b4beae8a8adf", "sighting--bc5eb518-c049-4cfc-b732-7b37a8b8ef9d", "sighting--acc48bfe-7afd-432b-b2b0-2a15e75dbfdb", "sighting--c9414f4e-0db9-4785-b577-a3b4c6f0d7ac", "sighting--53b0641d-48dd-4dac-9470-1f0e20b86a0b", "sighting--cbe8c70b-c427-4900-bbb0-0572335aa6b1", "sighting--9565954a-8fe4-44cb-b63f-b192fb44e6ef", "sighting--d6a3d525-a085-4be7-bfc4-8e07ee06806f", "sighting--b671963c-2519-4736-8bb2-bce5123a8e03", "sighting--49063829-551a-4657-bd1b-884e74ee890d", "sighting--6efc5d89-fc9f-40dc-9c61-59507662143d", "sighting--a4e70388-b0f6-4fc1-bd32-89b629ee3c5a", "sighting--b4eae2c9-b87f-4ea8-9dd4-4b2dcb7d19f4", "sighting--2a07af5a-de01-4d74-bc47-2d7686ab183d", "sighting--e294600f-0988-438b-b305-12f01c139d4e", "sighting--0501275b-521f-4a77-bfbb-1342a818203a", "sighting--baf24a6e-559c-4169-a7f8-e4d18ab83740", "sighting--dac93ae8-2fd6-43d6-8c44-17b8484c355c", "sighting--5664dd7b-2ba3-432e-af84-8022df2ca013", "sighting--48e305e5-94fb-43cd-ba8f-e4f01c442ee6", "sighting--564b436c-2079-413f-b2ba-45afa5c4a2ab", "sighting--5c8864b5-1902-4054-95c6-b9cf9943c941", "sighting--d3765bdb-67fd-4e81-af90-38f5da34b0fa", "sighting--67ad0bfb-2763-4b41-8ac1-8077b12d88ec", "sighting--5d780f56-8ab0-45d3-a9a3-e2f2372c1a22", "sighting--fa383443-1cbf-4ff4-8d5c-353c9db212ac", "sighting--1fb2afe0-1364-49a2-8612-f518026559dd", "sighting--4423f53e-4770-45e3-b4e8-2776c3477d8e", "sighting--2d65bda2-ad92-4b9d-97d2-2d06d34f747b", "sighting--6a06a955-072b-4e16-93dc-0a79f20a99c0", "sighting--ee3394d4-2a23-4ce2-82e0-11749b43592f", "sighting--15cf51c0-07a8-4707-aa36-5540f718026b", "sighting--559e52b3-9ac9-4de5-be2a-3639278c40a8", "sighting--fd0d1f5b-5bf6-458c-abdf-3500f5e54901", "sighting--fa6a78a9-932d-4451-ac84-d099619b230b", "sighting--b70dab12-cad7-4fb6-bcf6-0a6f3a277306", "sighting--9f4aa73f-e65e-4d0f-8539-48806b1c364b", "sighting--436d7db1-f6ef-4734-a015-fe0e84525e63", "sighting--31ca5e3f-c5a1-47dc-93f8-fae1293a55d1", "sighting--797465d2-de68-443d-8993-22328591fdc7", "sighting--9a14a662-9620-4099-82c9-6e30862e165a", "sighting--c9e4aede-0086-4a57-9585-33aae6f68afa", "sighting--2280cd89-39ec-407a-9829-e3f690d8fa37", "sighting--0d4d0285-9ff1-4c21-9ccf-6412442a37ad", "sighting--8b062ddb-8bb8-4d47-b6bd-dac342c75d93", "sighting--d05f0c42-a76e-471e-9d9f-1a3fd2a7a5b6", "sighting--8c054ae2-25d0-4e34-8e84-eae65c676174", "sighting--415c0567-2107-46b9-bed6-ce1801fd2e0b", "sighting--54b69de0-41c2-4dd9-be43-5e05552ec9e3", "sighting--b62ca217-f25b-49c5-86dc-77bf70d22bd9", "sighting--59f9a5ac-805b-4dc0-882c-509d29093261", "sighting--981811c3-a293-4a01-920c-99ec08260891", "sighting--140e4378-42ae-44a4-b65e-888ab6b48dfb", "sighting--4838b8d8-ee87-4a1a-98c4-e0ce55aa40fe", "sighting--b5f8513f-e637-43b4-baa9-a3aa04396649", "sighting--c71670a2-9fe1-494d-be45-29732573cfcf", "sighting--4e3aa26f-95c7-4d82-888d-cb5247c5e8a1", "sighting--4cbb64c6-eca9-4402-9fbc-399792fffc17", "sighting--575310a8-4e77-4e65-ac01-c0de04765375", "sighting--d5fc7a7b-9563-4564-8b4d-27c69e222303", "sighting--e79e3537-5452-42a9-bfc8-36dd101ef8a2", "sighting--cbf03fd0-aa43-4f3e-8efc-123f980df654", "sighting--511cc435-4ebc-4e78-a3d1-e86646fdc2ff", "sighting--7999b5e8-b051-466c-a708-284b4c166087", "sighting--dabbb637-87e2-4422-986e-1c29a061c5c7", "sighting--f97f15da-d915-4bdc-bef4-be57d11a70eb", "sighting--9a0fc4ab-b1d7-435a-8ff1-76b422d0e812", "sighting--58dbbf7e-ed08-43f6-83f3-7a81ee6f6b24", "sighting--7afa300c-c266-44db-ae48-bc049bee589f", "sighting--68fcefa5-7164-461c-bea7-abde88df9b4b", "sighting--c3b1b995-2bd6-4320-af9f-c78d15bf784b", "sighting--73d41864-40aa-4b7a-8bb6-5f2106a64c37", "sighting--0d680375-13cb-4ce8-a317-1b3797cc5629", "sighting--bd8832f1-e0e1-4f14-ad22-1a1cccce332c", "sighting--b93ddf25-6856-4659-aa77-e81e3f3c60b3", "sighting--b6c869a6-4ea5-4a16-82e2-4e23c1015fb3", "sighting--e07e6635-15df-4893-92ed-1e4d82c622d5", "sighting--4851c982-b804-411c-891f-9406b23a2f6d", "sighting--8f8aa21c-16f3-408a-9ff8-eb65d9d599cd", "sighting--160ae8b7-828a-4e6a-bb9f-b501fdbfc3fb", "sighting--fc4e4312-52c4-493b-95bd-90730612406a", "sighting--b90c304d-2ccb-4448-8c99-be694e30ce22", "sighting--0ea3b912-2618-4e24-a4d7-eae9f61c3a51", "sighting--a156af1e-e9c7-430c-8ee7-4bd0e123c4f9", "sighting--99aa33e5-a805-4969-974d-87d8053fbc40", "sighting--a7679286-0615-4784-981f-655329988e48", "sighting--f387dc2b-32ee-4a6f-a0fb-31d4f4b71424", "sighting--a05602e5-0cad-413f-9989-b7e5210ec28c", "sighting--15cbf2d2-17ff-4d18-89be-36f04762e5df", "sighting--0cf60ce6-b432-45de-94ad-3dd12b33ff5f", "sighting--7044d207-3352-4b88-9760-d2077097f80e", "sighting--e0fb6757-7337-435d-9465-acfa7db6021e", "sighting--66cb80fe-35dc-43f0-ab8a-66f35d202cbc", "sighting--a6dbe6c8-2ad7-418d-af99-aef59264813f", "sighting--e39344b4-2914-4986-b100-9ef3875fc6f2", "sighting--3ad117c5-774a-4243-951a-9cc3e2fc5a72", "sighting--2fddfcc5-e119-40b5-b7c6-ae206feebe9c", "sighting--4897e24d-d75e-4a68-be42-daee6348db89", "sighting--05a0a447-6b3f-4419-95f2-83a28255aac0", "sighting--157ae371-ca7a-41ad-af88-a6756f28f532", "sighting--6633f5c0-a52c-451b-aa2f-2017030314fa", "sighting--ffdf51e9-c21f-4d39-b843-3cba29d4c14f", "sighting--34ceb2a8-c54f-483b-83a3-5480d9761aac", "sighting--44c64702-dab7-4027-bcc3-b9c77c1e686c", "sighting--7ae81204-4b35-4a66-9a01-f91c288fe608", "sighting--5733fb82-2f65-4729-88dd-1206f13fd2a6", "sighting--c5c09bf5-0275-412b-b5a6-25e06a193259", "sighting--e9fba12b-4495-4a02-a585-6cadcf6872a5", "sighting--e38be557-0b7a-4b63-89cf-82497923dd07", "sighting--568e3778-4b90-4154-a194-331054cf732f", "sighting--8eae810b-fde9-42da-9ec4-38e6bcc8fc58", "sighting--0aa3a659-2198-4438-ac6e-1d06dd81a9fb", "sighting--2db1b469-748a-4bd8-bb97-c77ee856ee51", "sighting--30ab3251-eef8-4139-995f-a8e0a623d075", "sighting--16a19b9a-a0bb-4ddb-aae0-412e571957ea", "sighting--a16957ea-65a7-4ff6-a973-ac74a343e774", "sighting--a463ca81-d46b-4863-918a-03e7b97f2459", "sighting--af0e80b2-277a-4c5b-a988-335290bc3b75", "sighting--85406094-9777-451f-b684-23d77c6eae43", "sighting--1b8bab6f-08a1-49b6-8b10-87d9f957bdc0", "sighting--09f013c5-b1cc-4cc4-9aa2-adceda2ca38e", "sighting--ccce6d90-7ff8-40c5-8173-839ced90fd2c", "sighting--04ba776e-92fa-4b60-bddd-f6a141e4b268", "sighting--b41996fe-459a-40cc-856b-8274dd6d5e4e", "sighting--33f34c95-cbae-4d0c-b422-bb7c5ae3e420", "sighting--ce03549e-d478-430c-959d-f29acc42ee2b", "sighting--798411ed-1fbb-46cc-856d-8b32dec1d4f2", "sighting--ddcf8910-9127-4158-89d9-9151eefd7484", "sighting--c68e952c-9257-4404-a389-d6a32f8909a2", "sighting--cc7f00cb-7613-4c1b-952c-339181a4ce73", "sighting--50775e58-1ec9-4194-800d-dd009a9a9fcf", "sighting--a069bd96-2b6e-4878-a834-5ef8eb48760a", "sighting--5d9a0cfd-77bd-4c48-9fb9-b96ce35dcd03", "sighting--885beeb7-4842-45bc-be42-8e32f64e9dd6", "sighting--2df60879-6f72-4fb8-93a0-d82f5de58e2f", "sighting--21cacef7-71ef-4ce1-973d-35d4bdae5b85", "sighting--6bcf1edb-74f7-4266-a602-f92f64dc2741", "sighting--3ba77798-a2be-44ce-ab58-fd18a8ce8379", "sighting--f1b2c604-5624-4629-a8e3-443e31d0462c", "sighting--b2fd90a8-762e-42b1-8e4d-f3ba1ddc795f", "sighting--fb6664f6-eb6b-4fb9-a6eb-4721d15c9295", "sighting--721347fd-be7f-454e-9b30-69d8d03be41e", "sighting--388c5890-7630-4387-ae9c-e7edcae82ac4", "sighting--ce529093-e66e-465e-8194-de7c91e49e88", "sighting--13587b89-fa9b-4761-9b45-136f10b28e68", "sighting--5ff114f0-dd2c-4fa8-932c-774471086260", "sighting--39926de6-cb17-4d8a-b584-5468a6eec90c", "sighting--faff5a29-593c-47f7-8fa2-7af7dcae73d2", "sighting--63614d8c-43ab-41ed-96be-e0645ec832fd", "sighting--815eaaed-9da2-4072-9996-f16df958d570", "sighting--134fdc9f-78e5-421e-8c7b-25bcc74f9f09", "sighting--dadcb85c-b615-4fba-82d5-fb579bc67410", "sighting--374020a7-4038-4f20-bfa0-649239dd02be", "sighting--9091840d-7782-4952-94f9-489c83f3324a", "sighting--84ecad63-b0ba-4bdf-aca3-45cba11f47e2", "sighting--6e56d64a-625a-478d-aeb6-1beb54897cb7", "sighting--2f7574ea-d181-4068-9dc2-c69a2557d963", "sighting--e17feb95-1077-4eb9-88f4-c14ec18ba938", "sighting--6cecb985-c5ec-4733-8326-b6cba8a986c0", "sighting--7351efa1-e01e-4cdb-a460-d8b2ad105210", "sighting--444ae971-2d8d-44f5-9acd-628aef581a66", "sighting--f33cecfc-07f6-4c1c-ad75-5182a00b6d3d", "sighting--e21db5e0-b24d-407a-b382-1f488cd33166", "sighting--44bca485-837d-4004-8fef-b8c106ff785a", "sighting--82cd1566-09bc-432a-91f4-975238f2f72c", "sighting--1b1b7255-7288-4171-8444-5a3e371947f7", "sighting--8125a386-0c29-4e9a-b0fe-8f7ed58b03af", "sighting--97ed9b7d-5eac-4b80-b25b-7decb311ad68", "sighting--ee4b71af-ab02-4b6c-a103-9e9df0099cd1", "sighting--a87b5c36-939e-494c-83ed-60a3b57a6b42", "sighting--ea859bd4-7957-413c-be90-6fa8fd44bc05", "sighting--d9d194ec-b2f5-4996-81e9-67a0ca003e8b", "sighting--7c370e88-8a65-42bf-a3b1-6d01b41bc416", "sighting--69a16611-85fd-4985-b6e6-c57efb80be6e", "sighting--6b8be0ad-3544-4d20-8e95-46369fc9096f", "sighting--c5eb6750-2e26-4d32-be56-91b3a8e86995", "sighting--319c1dcc-d2d2-4554-afc0-b26275b08def", "sighting--b67e97f6-f847-4368-acb3-9cd7d8934a5a", "sighting--7b05482a-8406-435c-9231-01cefdf7f233", "sighting--8fb8d5f4-ef75-402a-910c-befdc79d941f", "sighting--0f1b87cf-78f1-43f4-a3ae-29ce7273543b", "sighting--8894c828-9973-41c1-8ff6-8b3fb6fec7c1", "sighting--334df327-19e2-4d4a-b90c-adb9ccca1ddd", "sighting--eacf2b0a-a764-4d02-beb6-428b421684a9", "sighting--43c463b8-548e-46b8-bb1e-9a21864805e5", "sighting--ac8320c3-d651-48cd-ba4f-3113b86cfbb9", "sighting--fc7ebd91-f22d-40ef-b8f8-775e4dd1dfea", "sighting--b7c6b241-1132-41f6-9e32-95db5dfe4d59", "sighting--54d39e6f-0638-4c16-ae03-b281c71a613e", "sighting--97446d13-d2c6-42ef-9723-d2f08b9e858b", "sighting--c0213fa9-ab4d-4668-b2e4-ee742d003e77", "sighting--682cb8e3-ed7f-4137-ae0f-c9a408fbd310", "sighting--ba418246-315e-40d6-989a-0ea35ffa0011", "sighting--606c31b5-51f6-4dd8-8acb-d72b52001e92", "sighting--d0fd5742-acf3-421f-8871-ac2fd0d09f31", "sighting--cc1b0f06-0ade-40a5-a115-6cefa02cb470", "sighting--522d9a4f-8319-4c9f-87b7-4ef7ac5dc57c", "sighting--eee1b412-25ab-49cc-8e38-c04fc6c10381", "sighting--f93bab4e-7da5-426a-aee4-4794b4f34314", "sighting--19155c9b-a0c6-4cfe-a307-783c8ddef73b", "sighting--2a0f6cd5-0015-4974-bce1-75cca2c09c46", "sighting--e0c87a72-e91d-40b2-bda0-4d0a309ef3cf", "sighting--2cf2f871-1cff-4b35-8e6e-67edaa1812e7", "sighting--72bb1270-0d8c-4f09-a674-560878317051", "sighting--8001bbdf-edee-4809-87db-a045261c6951", "sighting--562701cf-04cd-4463-b498-fa25ce604856", "sighting--5a57f09c-3c31-448e-a4b5-5b3a19918c34", "sighting--bf0858c5-a780-4627-9a33-e1990f43bbcf", "sighting--69070e27-e6e7-4361-8288-04c139704881", "sighting--c9b225df-e76f-437c-883a-7c1572fb4434", "sighting--da2ad091-996c-489d-9674-cafe0f85e468", "sighting--86258ed3-9c91-4a8a-b1ba-a148dd35c364", "sighting--541e9fc9-8a7f-4298-9738-490bb8cde20f", "sighting--c2998e4d-8615-4f53-9c20-054a00deca41", "sighting--4b430181-7ea9-4d51-8c6f-00877cbda538", "sighting--081ca9da-d3b5-4b65-8452-3d4700fc4876", "sighting--31e07ffe-0b56-41d9-a7c1-87106f4944ac", "sighting--0758e10c-96e6-4c46-ae0f-c334d799e3b3", "sighting--ef068126-9390-47f4-b7c4-2188d7faf807", "sighting--7a4364c5-d89d-4b5c-8084-cf81a9f22ab0", "sighting--528e9cae-58ad-4ab9-bed6-9c2684a44ef7", "sighting--ab963caf-afa6-4d3c-9855-89d3ebca7f19", "sighting--e9668714-4618-4dc8-84bd-0c9575213e0e", "sighting--7a5d6459-2bf1-45ff-86e2-2dce10c0c5d5", "sighting--dda11143-bcbb-437d-8c42-41a5b8fd1a0c", "sighting--fa8f7580-ced3-475b-b3bd-9656830f7dcd", "sighting--2f570697-7d0b-47c2-8754-a7f9211321a8", "sighting--4b006610-b40b-46c8-bcbe-6c584c7c8c2e", "sighting--2f2d3d40-fe8e-491c-917a-cdcce74d0ecf", "sighting--3138a028-510e-4263-b8c0-3290e2dc8354", "sighting--a0dfb374-cc15-43b4-b348-040838f12257", "sighting--79c95241-416f-4373-b036-942fdcd9ff97", "sighting--b2f37c3d-2730-45f1-83ed-d5baf11f0e71", "sighting--1d9b4616-9c01-4cd5-bf6d-6dfc3b65c24a", "sighting--1f2764f0-69bd-4a9b-8165-5e4f1d23ecc1", "sighting--d250f899-f9ae-4705-b8d3-b24b014f5257", "sighting--8c53fd5d-a7a5-4cdb-bdd9-ce73d171ae9c", "sighting--e9568725-35ef-4530-8fa2-8fab72475212", "sighting--ba11e916-d8b2-4c85-9ff4-cfe35c0cfb1e", "sighting--c8643e2e-76c7-4504-bc2e-2639e649fadd", "sighting--73458c07-66bc-4817-b86a-dd6aaed06da5", "sighting--d1918eb4-a28b-46fe-b659-361ddc162bce", "sighting--60b06964-00c1-4450-8300-acb7dd9a32e1", "sighting--4ba469eb-30a9-4338-97cb-ebaba9c62525", "sighting--7da26241-6b75-4519-b677-c882c244fa29", "sighting--63633fc2-3fdd-4dc6-ac9c-02a171417ea6", "sighting--8909ab31-efae-4168-b17f-1b1e6ca4fa00", "sighting--3faad95a-9368-4628-9f5f-08cf41dc2a41", "sighting--1209c4e3-0d67-4a41-8e88-884c1ef17b5e", "sighting--ec143218-2934-48a8-a1cd-71881caeea87", "sighting--b07806e5-3bc0-41a9-8ccb-b40d1e426859", "sighting--5222be7a-c617-45fe-9a25-91969a94664f", "sighting--7051c635-fed8-4568-bc92-59ae4f3c04f8", "sighting--ec783a55-55b1-4abb-b691-85c7689b4588", "sighting--ff1685b0-02c4-47de-b4b2-d0ea8064b982", "sighting--60455894-62b9-4cc2-a261-aba763a80b29", "sighting--88500626-1f3c-43ea-a976-153449934cf5", "sighting--cdd2f542-47d1-4416-8c80-aeb219938108", "sighting--8f2b7bbd-abd5-4ea0-8dbf-e2d74c50034b", "sighting--d7da01b9-c520-4d51-b24f-d89e67f854e3", "sighting--99fb86b3-6e80-47db-816a-cfedc47c62d2", "sighting--cce3bc6b-b289-4b5e-9663-f13628d05450", "sighting--1084cfab-9071-4abe-b1f5-869570d46a46", "sighting--4d23a443-b296-4b7f-9df7-4041880639a8", "sighting--c06edf31-53f0-47b2-b232-65e91bc3958a", "sighting--b51868fa-d701-4a67-b804-03649bedc689", "sighting--f6d04e23-39ce-4271-af62-24eb67a5c9fc", "sighting--72ee5fb5-8864-4adf-b621-505254b8c2de", "sighting--c04979af-3cb1-4a0e-b962-86a5850148d3", "sighting--1094328d-a048-4111-9ff6-e32879acc189", "sighting--b3602d06-d6aa-463a-953f-2af8af30986c", "sighting--85d80bdf-67c3-4d6d-b926-d3709faaa5f8", "sighting--9804fd15-b6a2-4948-8578-16e72c367e4f", "sighting--c3e6643b-5bf0-4956-948c-95bdf433aca0", "sighting--f4c59f78-71ab-4d7d-b3ca-8651480d8897", "sighting--621a5b9d-c3e2-489a-b204-90e16eb2d2a4", "sighting--96c2da9d-aa9d-4621-b7db-1f52c4643329", "sighting--d293cc64-2b22-45b4-b658-40c1644d5d08", "sighting--27787f6a-787c-40dd-b6e5-64e361fb0724", "sighting--ef4edf18-2177-42fb-b58e-5529e5c80464", "sighting--b9f7ddd2-7c5f-461d-8e25-fd917ee4e668", "sighting--ca98b381-56dd-4185-850c-e86a182003ef", "sighting--4d40ac15-6090-45ec-b342-ecaca8eccff8", "sighting--98aeaa85-eeca-4342-82d6-227ba821eba3", "sighting--cd612e68-33d5-4664-bac0-5e81f46fb248", "sighting--a857fa16-1340-4252-810a-b194fd739dca", "sighting--e2fe674c-03be-4472-9501-5fc628543853", "sighting--db9e78dc-ce6b-482e-9aa0-1621766de9f8", "sighting--b192a6e0-de73-44e5-ab0e-8e54e4058dd0", "sighting--00287c57-a43c-4564-86ab-4ec6c0a9b348", "sighting--e99ac8f3-2ce1-4185-8509-858c6402b368", "sighting--3a33fa93-e99e-4daa-8fe1-d65ef230d1b3", "sighting--02bc7907-2279-4e54-978b-a9f211d2a24d", "sighting--e800fa22-5ed4-430c-9ab3-8b3cd8b7ce0b", "sighting--822ce8e4-1813-49eb-ad03-ec3f07c8d910", "sighting--01fddd14-24bb-4d50-b143-56b9c8aad408", "sighting--f80fdfff-e122-4905-86c1-515899f98c4f", "sighting--b8c2ca6d-799f-403b-ae55-526ec46e7ad7", "sighting--c7f4574c-9d36-4628-9034-2609261d90fd", "sighting--42e56c90-7a57-4083-8a11-998c8b035fe7", "sighting--73d04e83-d11b-4ec7-8b60-ebcd7c1ed33b", "sighting--fc80c0cc-24c4-4656-bae2-7757d5ac2e79", "sighting--3533fb60-349c-4946-91d5-0c241059e50e", "sighting--b1913718-cf98-4dd2-9a49-207f30b04f2d", "sighting--7ca30e73-5b6d-431c-9af4-ace11a95acbb", "sighting--9a126faa-2ed6-40e9-b5e5-604bd89d1630", "sighting--97a6be5d-6bd4-4d1f-b8d7-61067273a564", "sighting--fdd8a8b1-31e5-479a-b07c-7cd22eecd212", "sighting--0e3bae59-0dd1-4f8d-b91d-55eea487d1b8", "sighting--c0dda8c7-4298-4424-8d38-871ef1222d9f", "sighting--da9fd0ee-abb4-4f80-b2cf-ae209158f4d3", "sighting--ff419d92-a18c-4dee-8da4-3a2cb34db8a7", "sighting--c1b76b4a-3641-4ac7-bcc5-6acff5de9bd2", "sighting--91651743-1fe5-4f7a-8249-c9fa06e9b052", "sighting--66b83599-8ae0-4f7e-b3a2-25a7e12da403", "sighting--e3e4ab32-8a70-4aa6-a7f1-0f151702ab89", "sighting--97544944-6a84-40b6-b1e2-9a26d7d8476d", "sighting--32e1fd8c-191d-4090-9072-598537c830df", "sighting--97248fdc-0ccf-4717-9de6-1e8f849da699", "sighting--455a9ac2-566e-4d1c-9f6f-4fb7d079a483", "sighting--6cffc5f2-aed1-49b6-8884-c71dce61612a", "sighting--491b8997-d0e1-47de-8fac-1a75086dc4a8", "sighting--4c084521-128d-4601-83f0-e689d9ff1c90", "sighting--be81c817-ab0e-40e2-bb18-a27e1f0caf27", "sighting--5a833d0d-692d-4ea7-85ed-b8d7db24ff19", "sighting--b791f61f-2295-4474-86b0-ae723bf0649a", "sighting--d555a63a-bb94-4d90-b7db-8eb9b839e1f0", "sighting--4b05e84f-df32-4f13-b77d-26044c977a32", "sighting--4083e802-062a-445f-a952-19277a2443a8", "sighting--1dbc856e-9169-4f89-9ec4-c89c1a50ccb1", "sighting--4787fba7-7805-4269-8ff5-3fcf4df16b28", "sighting--a08f6400-fde3-4e7e-aa29-5c255714fd65", "sighting--3a9d0b55-c5df-4909-8567-690692e5c828", "sighting--1adb8fb9-8ad1-4461-8b4a-e41faf0f5f38", "sighting--25fcee9f-774b-4605-9618-9fe08c66b7cd", "sighting--215ae8e4-84bb-4843-bdb8-39e5af9a0eb2", "sighting--c1e90917-ff59-4c35-b115-48082bba3aa9", "sighting--155b1d69-62b4-4bde-bdaa-62c5fdca5cd3", "sighting--dac17793-9c0f-4c22-ad62-182273c007eb", "sighting--d67de164-37b8-450a-ab6c-1ca8e8105d92", "sighting--052cc132-bc24-43f3-b22e-4604b52aaff0", "sighting--72f15860-e8f7-40d8-8195-499b99179f1a", "sighting--1c0f1665-9ec4-46f2-bcd0-5e1979f4eb81", "sighting--3eddabe6-5895-4b02-8b02-ed50e95a8ecc", "sighting--5ac6f8dd-9dcf-4540-ab69-1b1616a8350f", "sighting--ea292602-d635-492d-94a6-c67ea0378857", "sighting--1a04f070-3527-4022-9b85-60bfc1d322b5", "sighting--303adc61-e3a4-4d07-ad46-277b3c001779", "sighting--eb969e43-54f9-42d9-a9de-2acfdc16154c", "sighting--a5538d8b-86c7-4461-bc84-16fec5c0d998", "sighting--8fc7bb79-8b52-4e67-8e06-6dd5b2992412", "sighting--70832647-e395-4fc1-a7aa-742dfdaa88cd", "sighting--2225466a-60a6-442d-b70a-f6c2e2861a85", "sighting--81a3db4f-e673-4971-98f5-3ca2e2de0232", "sighting--e984753c-84d5-4d3f-8150-cd715b2b61c7", "sighting--668f2f1a-173f-4d16-93a9-605383e87530", "sighting--a7e7cc9b-9f72-48fa-b90c-4f3ac140d065", "sighting--2b541bbf-88ce-4836-8ff0-2203dce93b5f", "sighting--67d12370-3557-46a6-937a-8f7a0e62d4c8", "sighting--5f7dd072-ee68-4949-9ac0-3e7c7fbd8d86", "sighting--1b95b4fb-24ee-47a7-a2ba-9d8be5923623", "sighting--59beaf58-9fbc-40b0-8704-1c598bddffc1", "sighting--12e8cd69-fc4f-4079-9d60-b237b95b9871", "sighting--5ca6bd9b-1449-4eab-8157-4476defbc667", "sighting--dce045b0-6dde-4832-816a-d715d5166bcd", "sighting--b1ce717c-afe6-4ac8-8f6e-e511b3400b65", "sighting--4feae3f8-7678-46db-a9d3-04bd9db168c6", "sighting--134b2086-6ac0-4d5c-9971-2e756183201a", "sighting--c18afc22-ea6f-4d82-8219-64e7c62f76fb", "sighting--47f44ca5-91f0-4015-aaf8-4385c3449fa1", "sighting--79ee97db-ceb0-4e72-818e-9452c301fe5d", "sighting--766cf66d-27cf-442e-91b5-bbceec53426c", "sighting--decd920b-28bf-45ff-b1a7-b7c055270848", "sighting--cd6f613b-0bb8-4742-be6a-41b85fbbbbfe", "sighting--57f29f70-c301-4d14-a608-31cd452312ff", "sighting--09e115ba-711a-4926-a9c4-a3816f3b14e7", "sighting--ac006a4e-e56b-48e3-8e98-d2cf182498d5", "sighting--44f78f7d-ce1d-475d-bfae-517b8df3cf07", "sighting--bf32f579-0e75-4066-815b-1195c378fe38", "sighting--f7ad37e7-2ebb-4926-8045-4cded5227763", "sighting--3254b329-89c4-4a8d-8120-b5546cc5a7de", "sighting--cc7b195a-94f0-4460-8356-7f81629b4e4d", "sighting--728a3aae-6312-41a5-854f-2ef0e822168d", "sighting--88202d2f-8f89-4266-88fd-0fd03552e12e", "sighting--030f11b0-6c0f-4629-a09e-59c3ef9d8d12", "sighting--43696783-4d8b-4fee-b1ec-e6c46e6a64b0", "sighting--b8d3043d-32da-49fd-9820-cf64e3f2c760", "sighting--0d563ffd-66f4-4c9a-b630-40be43e0bf5e", "sighting--9ca1f691-e19e-41bd-a35d-76f0015b71f7", "sighting--21314357-a15a-4baa-aef2-b0f268fa5c37", "sighting--17ecc175-0c56-4194-9a21-646a56ca46fb", "sighting--1243acd8-c5c1-4257-820a-12309af65f50", "sighting--f1355888-d33b-48bc-ad7c-dd12cf4b06e3", "sighting--d7531c53-bbe2-4ff1-a668-b733384888b6", "sighting--0fc2a1ac-28f0-4e79-86cd-49aaf43afb69", "sighting--d9f53dc4-a822-4bc8-838b-3485a4a1b23c", "sighting--e139f258-af43-4159-862f-80f12b78f4d4", "sighting--946d9152-79fc-42e4-847d-a61f0288e74a", "sighting--84af70ee-e0c0-46a7-95fa-afbb96f1161a", "sighting--5889095f-789f-4855-abe4-5f64c76b8e7d", "sighting--6e9d6725-2274-43f5-8f94-7afc93141e97", "sighting--aaa8f545-e14f-410b-825c-cdce626ded91", "sighting--4f596b81-98dd-4d75-8753-02151c6b844f", "sighting--05c23a45-4397-4b94-856a-3d6e388b6612", "sighting--457b5a26-e17f-4a33-b8e1-97f1bf34bac2", "sighting--45f6e45a-3e75-46de-8486-93f3e90408c8", "sighting--8eee372f-74f1-4101-a60b-c952ddcb6392", "sighting--55535dc0-03e9-4519-990c-038a70c7de41", "sighting--9142c831-eb8b-4db9-b918-7a17b9013712", "sighting--fe4940d7-9246-4caf-8aed-c9911f16db44", "sighting--0b71d977-6e14-4c3b-85e2-a926cb36f599", "sighting--b85b56d1-9077-47ab-849a-5fccea1dacdc", "sighting--b12c0369-bedc-49ff-a3c9-fc22af41b208", "sighting--80f58fd3-8e82-4a32-8337-d4583f5a3e0c", "sighting--768a181c-6f51-4b51-98c4-360ea0ff7527", "sighting--ec2dab29-652e-4869-9ac2-822d92a35831", "sighting--f47d2f94-ed3d-4cfe-b56d-b1ee0e2fe299", "sighting--a61b4de0-2a43-4ca1-a545-7df109986d54", "sighting--44b38cd7-22b9-4add-ad31-26801eff95ff", "sighting--75668161-5eee-4c9a-bece-4ef8f9c4cd0c", "sighting--448f238d-2dcc-4d63-b438-f248f143018a", "sighting--63a409c6-ad79-44b8-8e75-ee04cb42d346", "sighting--88a8b1d0-6ac2-4e4a-a379-1967d766a281", "sighting--263347c4-756c-4069-a691-db69e9b0aa8a", "sighting--ed6b3210-0ffa-4550-9dc8-a860529e210c", "sighting--0c73c0f8-311b-4925-8326-16e9dd56bed3", "sighting--f7e07237-0f68-4de5-9db7-1884df8dcb89", "sighting--73f582ec-0edb-44ea-92c3-d2daccad2afb", "sighting--627590ec-1312-4f41-b4cf-1778f6671ca8", "sighting--642f7b0e-b5ca-4788-b869-08b0d65460eb", "sighting--aacb3a18-f5af-46f5-aeab-19793f57e483", "sighting--e7e97a4e-167f-463a-a3b8-fc3b15f8bc5c", "sighting--da0f4b74-b6cd-49c5-a3fc-28431e12ca92", "sighting--179bb808-d06f-4a7e-8d22-ed7c9579efac", "sighting--c3cbc129-4d76-49ca-9cc0-c2c1c769f6cf", "sighting--151640dd-da27-44b4-8e21-5e67e13c4f6b", "sighting--b974431e-5bc5-4d1f-812d-874e1a641c0b", "sighting--5b596bec-3c63-48ab-a326-0b9b187fe0cc", "sighting--a8e7e4ce-cf2b-48f2-b951-a413e29891ca", "sighting--29aaa2a4-7ca8-4fc4-9412-afa406521079", "sighting--1998b811-affc-4f48-9ea9-515817107617", "sighting--bd348a00-4772-438e-9739-5085585e42cf", "sighting--d469d619-b534-4ed0-8552-5d5143357cde", "sighting--4dd8ab76-7abb-4fd2-8745-77c51c68c9c0", "sighting--22cd9af6-f15f-42a4-83f2-f9b2cf3e6cdc", "sighting--7234a45b-174f-4467-bfff-1707d6dfbb26", "sighting--e1cb308b-ad60-47d0-bd06-f4c9eae47e02", "sighting--910bc214-5438-4f46-9159-5ae69b91c488", "sighting--482c7989-708b-4029-93f9-918cee81001a", "sighting--16f6ef1c-5bdc-43ea-9982-17358f35ac2c", "sighting--b2ff776e-8e43-41ed-912e-3f5c811384c0", "sighting--d99dc5be-a708-4ec5-be4c-a8fcb0c50196", "sighting--ddaad384-fb1a-4de9-901f-5c5b6c61f332", "sighting--d47d7539-1444-4782-a437-2e9808fe2730", "sighting--0951b8bc-a977-439b-9cf4-f5f9ee1e26d9", "sighting--999fbbca-46da-43ed-970b-1665f7d76fd0", "sighting--84730ff2-ae77-487c-981f-5c9612653252", "sighting--8f3f01f1-5eac-43d0-af17-d90d1d548d5e", "sighting--b7602f10-a414-4f0f-bf97-966f8b73e387", "sighting--f56338ae-ea13-4a1c-9f82-06408355f508", "sighting--b0a5135b-0e28-434e-bc77-9be82665a705", "sighting--3a928d88-7bf8-424d-b905-e946387002d3", "sighting--f3a97683-74fa-452d-8e5a-58546013d52c", "sighting--bf3b18a1-7a99-4e6a-9c71-6e00b7506677", "sighting--df46ddb8-7b81-4eaf-8ccb-ce67b1315cba", "sighting--d4a1d44a-b61e-4b14-b98a-820e10deb2c6", "sighting--f167d658-e052-42dd-96ec-ed2107ff37f3", "sighting--5054db43-23b1-44eb-b10c-8b7d29fd4310", "sighting--3857f22f-cca4-488a-891a-ac571b29de19", "sighting--688fff40-800a-42a8-bbff-52c9e2e6144f", "sighting--00f86f90-3f02-431a-b583-642bf6055e11", "sighting--4fb105fe-ef0a-4977-b68a-e29cad990491", "sighting--590851f4-395e-472a-b0c9-9f1d4ce491a4", "sighting--00d98757-dc6f-4ce1-90d8-f86b2ce4fba9", "sighting--7c92c415-abd2-4383-ab67-4a8ee18a9216", "sighting--984a3bae-0e4e-43f8-a350-78ccbda5c63e", "sighting--6f520d51-2711-4ab8-84fb-3af590772b90", "sighting--f944a3a5-5dc0-4066-bb40-5026708dd4a2", "sighting--7a01fb57-0fd7-41c9-b1ca-f610bc827d7b", "sighting--d97bcb57-950c-4527-b7f4-8dab5013c64e", "sighting--26fee2b9-c741-4203-a1fc-bf62d19c44e4", "sighting--246c4ecd-c388-4982-86a3-d48386cea77d", "sighting--d0108608-29a1-489e-9c33-e4af1d9d12fc", "sighting--fad5ea8e-0b73-4555-89f9-e5d978f1c2ad", "sighting--a43662f3-f6ba-4474-a327-79406181b886", "sighting--50a0cd6d-ef1a-45b7-9769-27317a3efd46", "sighting--af6f9e5c-362a-4c8d-b24a-3963afc260b1", "sighting--bcb0655f-f3c7-44f0-bafe-c6a4e742d61a", "sighting--70c4c99b-7e11-4efb-b5f8-8c1590d9ce8e", "sighting--d96a82e7-78fb-4634-90ab-f474dc6d1787", "sighting--13ae0e4b-582f-4c6d-920e-6797f6027aac", "sighting--a2b5b8ca-23c8-4074-a822-87eba64b8c3d", "sighting--d920e33b-2cfc-4b22-86fa-a457cd193ee1", "sighting--14d44e1c-be4a-427e-b812-32a86f817eae", "sighting--5b953353-370a-495c-a632-c0a4773bd0ab", "sighting--de7cd319-7985-4d1f-b78a-72e4b2ad30bf", "sighting--36475638-01dc-4f13-8cbf-621a130f297e", "sighting--a4fb4eb6-89ac-4f7f-8207-19f854234aba", "sighting--009f1a72-449d-4231-b1eb-ed79a5d3f6f6", "sighting--3a16772e-0c48-4401-a641-6b36eda8432f", "sighting--b804dc57-3b3e-45aa-b5cc-a3fa5edb6a4b", "sighting--4b1b3468-7469-4d50-8f08-55edd3318439", "sighting--e7dd40e3-ef8b-4324-8d5c-890aa6df0396", "sighting--b4066ba6-9729-4ec8-a3aa-85f67939ac97", "sighting--79598947-865d-4ba8-889b-cf9a729f04b1", "sighting--4029d120-c789-492a-bc22-957e8cc59542", "sighting--e3b920f3-7930-4f48-a36b-0cf09406b279", "sighting--2f6efe4c-dbb3-48c7-960d-e963e67ae04d", "sighting--7d02cc91-dcd3-4f87-acdb-9ff52a5a735b", "sighting--1e8976ff-a719-4cb8-876e-cf7b9acb2762", "sighting--2680b0ca-9319-4339-afb7-93d4d3221460", "sighting--818cbb85-dc1e-4f5d-93c6-13fd238edab7", "sighting--5b68923a-9496-4296-8684-8abdcae7ac99", "sighting--f538c218-e194-4b49-895e-94479179e52c", "sighting--4d295c6d-92f1-41de-b71d-32f3d7caea53", "sighting--41e25a06-bebf-495f-aefe-84947da108b9", "sighting--3a0f979d-2666-4c25-9975-e9182764dfb0", "sighting--698002cf-2a57-4994-8182-da93f697f22f", "sighting--1a193f72-573b-4714-b9b0-2c6cd63be41e", "sighting--0251225c-fd58-4646-931c-8d5fe0649aff", "sighting--1d9a7018-8f6e-4133-b356-4e3ea43d4858", "sighting--ced5be8c-2baa-4a2d-93de-7f07d011909a", "sighting--51832a32-a83f-49a7-808b-6379e97f51e3", "sighting--b8e1f849-383a-4257-9817-85b326a8a80c", "sighting--00f2c831-78bd-4a65-bea1-6e8e134d7124", "sighting--417044b5-f62d-404f-bcf0-4552a1f67f4d", "sighting--39188864-b78f-4108-95dd-b56ab654421c", "sighting--6d9fe900-ee29-4949-a4c9-0f0e9951de2f", "sighting--aa45e19d-95cb-44cd-9f61-0ea4e97cb770", "sighting--58ae4af9-5099-44eb-899a-cf8df5ed460e", "sighting--cb631328-6e9d-4abd-bda8-4252ea4ab555", "sighting--e6b27ab3-765c-415c-b8b3-13855b9327fe", "sighting--f5daba78-03d2-4599-8f51-42b9165ddc52", "sighting--e15d5329-db08-409a-b953-b59af78d2172", "sighting--9665af0d-5e41-4809-b62a-3ace53802c63", "sighting--43a8a297-ef23-462a-9bbf-ba0c5f2a72f3", "sighting--86e945f8-4d37-4998-a34f-22a2e6b1b864", "sighting--c72f62e4-064b-479c-bcba-d40c6c00532a", "sighting--a1e3cabe-ca42-4540-bedd-f512815ff838", "sighting--a2ed7d4e-1253-4d94-b9e3-7382f7097f39", "sighting--a385f63f-8da8-470c-a380-24c5fb869632", "sighting--d89bbb90-0b01-4792-8341-6e1763b99b14", "sighting--e8dcc7c3-8e10-4a55-b407-659b9c372bb3", "sighting--4e1620ce-3365-4888-8c66-7295b7022264", "sighting--4a643373-7399-4343-afed-3bd92958acd3", "sighting--811728b6-8f84-427d-9c10-0871a7f6fbc8", "sighting--a41daed2-8676-4207-b4b3-06bed971742d", "sighting--cc61c875-faaa-43ee-9b3f-e9e35461a053", "sighting--defa383b-5509-44ea-a259-d14db2320274", "sighting--b59db19a-62ec-4b96-8c81-e36836619004", "sighting--19fd1dd5-98cb-4fb5-8de5-e8b00ce3551a", "sighting--204384e0-93e2-4876-ba8f-51907ec737f5", "sighting--4644f9e1-af00-4349-91cd-c83eca7dea3b", "sighting--a92a4ac8-ca0e-4608-942a-cc9b1ad4f91e", "sighting--fdfae1dc-f795-46dc-b844-c2daf6568fe3", "sighting--c6c691a9-e5d8-4e9c-b1c6-4a0c69fbcab1", "sighting--8737ef90-faa4-42c7-a843-54b0055b66ed", "sighting--352bfe08-eac9-41ed-a5ed-170399ae6fd1", "sighting--9631ae9e-84c4-4ddc-9e26-8b8c01478d0e", "sighting--a7eb24ba-23ca-4da2-bb91-3f90c9437daf", "sighting--26fecc80-1c21-4245-b08a-bf4c7e89b495", "sighting--392c006d-683a-4925-830f-06540705c91b", "sighting--ed3a4324-18ff-4a43-bd64-e4d21f3ebe45", "sighting--2a1dbff4-4495-42a6-b6c5-776aeebbf1ec", "sighting--d92922c1-7c9f-47b2-8629-94e1e7b9c2c4", "sighting--b81d4657-3fb8-4547-a20c-f557085f1db1", "sighting--13bf97c8-9f32-4f70-9b33-1bd7c997bc42", "sighting--dbf3f83c-bbf9-467a-b930-9cdd78905cc3", "sighting--3fc8cd75-46cc-4891-9f09-02582dbc1f24", "sighting--4b76e5c7-7c17-4503-9a1d-9ced0cee2459", "sighting--481b4817-ec6c-4c19-ada7-0be79a8b91af", "sighting--e78d7fc8-f095-4347-8861-78486fab0c0d", "sighting--a9e61e28-f842-4ad2-9060-404616be14cd", "sighting--330db5d7-5598-447f-a460-bdf8c8206278", "sighting--08bb903f-bb18-447d-8c49-f9c9cabcdb5b", "sighting--7dc51923-1839-45f7-ab81-f25e66273a25", "sighting--00802c5c-7437-4532-a06f-36183816da39", "sighting--5b70a9b5-dd8b-4bcd-a31c-4f00f1e3a229", "sighting--0c876523-5297-4edd-959b-3a8d290f55a3", "sighting--b0f8f890-46e0-4ae0-ad34-7a218c19d571", "sighting--c9b41a63-21ef-44ac-be40-fc5a36adb3d2", "sighting--f99556c2-f677-4ccd-9c87-3cdbb618d1ba", "sighting--ea26481b-2b03-41b4-9e42-ef9d64528215", "sighting--d2e6b5f6-2c25-4c2e-997d-3a35f62091ef", "sighting--08f62b45-1231-445d-a423-8e2a9851f00a", "sighting--4d8ebcb0-1452-4104-b269-5f60a6810994", "sighting--18901828-dc2d-4442-88a1-209782800ea2", "sighting--25d83e0e-70c7-4220-9d65-866370d10df3", "sighting--1f9f3080-2448-44aa-88b2-4cdf7411aa9c", "sighting--a05056bd-6627-4150-b8a3-d0ff3ce7d9fa", "sighting--94a2565c-2873-4c64-b789-9402ff73dd87", "sighting--1661065a-f9c8-4830-9b9a-c8ddaee153a9", "sighting--7d1f696f-84f0-4700-8b7e-cb9d20eeb182", "sighting--df84dad2-1953-40c2-af7b-1404a66c120f", "sighting--44648b50-cf37-4925-a3b3-a62a753705c3", "sighting--d9cfbbf7-2f76-4f6d-9520-3d11b2e4bc75", "sighting--f2a7131b-1d59-428e-8519-7748311a5eee", "sighting--0cee58e9-5bf0-40ee-9a43-0a3baaf44384", "sighting--4aecce05-85b1-4b58-93e7-d37ca1c98e81", "sighting--d0e26253-7e4d-4b08-8c7a-73c81200bb08", "sighting--8723c519-11fc-4130-a779-19e199884bb8", "sighting--dbd087a4-dce3-4ae1-b5f5-5243015d4161", "sighting--e275bb90-83aa-44ec-ba1a-b35d8a3715c9", "sighting--1ffa96c0-d01c-4932-b6ca-6f57a126012d", "sighting--b95acff5-8811-423b-b509-48b31b6c20e3", "sighting--2f120438-bd16-4d7d-b880-aeaeceada2e6", "sighting--092737f1-7cfb-45c6-ba20-2b761504f698", "sighting--84e10d8a-cd56-4176-96c1-320590389eb9", "sighting--09e540f9-becf-40e3-90c5-e817fc555c5b", "sighting--e8824b1f-e0b3-4d1c-812f-85c1005938d2", "sighting--6f8dbbf8-9217-43e9-98f7-36ee6b4d0f38", "sighting--e2f03c71-6943-4385-87ff-17b204b59066", "sighting--d1e0119f-ecc8-4a67-aaa1-068b8ce4f3dd", "sighting--a116b48f-775b-415f-bfc6-a65feec8fd2a", "sighting--adafe641-bb7d-42b4-9483-5ceb841c955e", "sighting--ddf2d269-94a3-42b0-950f-b9d21be2be60", "sighting--d9f77a13-591b-4627-a15f-c05a9aeb183c", "sighting--d8481959-0b3f-4708-9ff9-176802f45a46", "sighting--13e0f084-2418-49ba-9527-4e9300958c6b", "sighting--ffcdddb7-7b81-445b-8cf6-8dd2ea7bc5e5", "sighting--a222d353-b5d5-4411-9f41-61098735dc5f", "sighting--b03bcf78-46b3-410e-bfdc-fba827ab6acb", "sighting--591a6545-3b89-4e99-b093-890feebcfddf", "sighting--cace5215-04b9-4ac8-a722-6f6d4575ac55", "sighting--d8e90886-1391-44c1-a35a-689d5cd27862", "sighting--0c277a24-c165-4aad-9ee5-c495beda1623", "sighting--f47d94e9-e009-40a4-9cf9-4d942f752eb8", "sighting--2d939df1-8733-4eed-9615-27e1c0ed23c2", "sighting--efd81978-736f-4d5c-ba99-1e35df37397b", "sighting--244d1998-7a02-4fa6-8809-234a34a1411f", "sighting--662238cc-3b78-4872-8676-58bbb6ea102d", "sighting--fa010389-a0c6-40cc-83fd-8a36afeb62e1", "sighting--881955af-bd1b-4c18-9bf1-863d94f42bff", "sighting--823525ed-1102-444f-b2bf-e0b29ffd00ae", "sighting--cf682516-c2d7-4550-baa1-2d26513b779e", "sighting--dc22b072-efab-41b1-855d-6cd31cd9d4a8", "sighting--ff73e0de-37e7-48ff-a8d7-3914f3d9e97c", "sighting--e961a926-f590-45b8-bcbb-6fe0f6c89078", "sighting--d7938c23-cfc8-4058-aad1-d2cb92877ae0", "sighting--643d43d2-8ee2-48e9-8f20-1b91563d4b3f", "sighting--c93eb34f-6fb9-40af-b9bd-4208c8354a38", "sighting--80f4058b-8214-400f-9e79-0cce4ff37d46", "sighting--9b1313e8-f576-41d8-a9ca-42ba6bf9114a", "sighting--295f54da-760b-4e52-915f-87b72a10e688", "sighting--2a26648a-64ef-48d0-b075-b80ecf40804b", "sighting--d8ec7bdb-0252-446e-9ef3-189c11e0d622", "sighting--43093399-1480-4ecf-a5c0-4be3f3bb0590", "sighting--5809dbb4-36ad-4876-bdd9-2f5c112ba222", "sighting--2911e314-6c09-4a70-ad5b-c73e1dfa8be6", "sighting--546f2eec-8fcc-491c-8c15-475fe5207e70", "sighting--a225823e-71e1-4022-9b00-bc31cfeda825", "sighting--2759da10-d0d6-47b7-a963-6a9af570e655", "sighting--3b9f7755-915e-4f27-b126-0aad913ed59f", "sighting--379d6228-4b71-4428-af2f-8b9f6ae6b8c2", "sighting--850f555d-7d04-4c01-9aef-136c94a569c1", "sighting--c7488c27-5e1d-4ddb-9176-cefb2372d120", "sighting--80231ca0-8477-459b-a7bc-1113458cecb4", "sighting--6b7bbe01-1613-4d91-b55e-f5b9aa870a9b", "sighting--63ebdf4f-3f0a-4afb-bf81-4838c1e77714", "sighting--623ec845-277e-41c6-8ec7-a0bd26a5435b", "sighting--777c0399-48bf-4fdb-871b-e2343f0acaed", "sighting--13b0206b-33e5-4396-b4a8-d1a36a558150", "sighting--a3573768-4039-4320-be31-04b68e9898df", "sighting--a7ff173c-b010-4e5a-83e0-b25b8deed4b3", "sighting--8da43cdb-827e-464b-9e4e-aa09e1f0667b", "sighting--7284c95d-a5c4-4109-87ec-d3e2a6fae88f", "sighting--12224c28-838b-43e4-a616-26c25f0781be", "sighting--5608861f-53a5-4a5b-bbbe-391b9472671b", "sighting--77a7c5a8-4418-40de-a181-03eac7e0ecf8", "sighting--b8b7409f-d06d-4257-8c44-51194b04dfc3", "sighting--bb56ae3e-4e74-44d7-8163-fafb788003ed", "sighting--58dda82e-b092-4dfc-ab05-fb400a592d02", "sighting--4f48b457-0bab-4430-9eed-d9373a4b4e3d", "sighting--4426c5f9-d3ac-4eb0-8971-41b07eaadba4", "sighting--43900937-a2f2-43ac-808a-4627b84f4bfe", "sighting--873a7f3f-30ae-4f30-8df9-cf3b1cd82a4e", "sighting--b395d3d0-b6be-4668-9a7f-928a78b5fcc1", "sighting--f465f177-a23d-4057-bcae-2ea774b887b8", "sighting--98831d21-ce1a-41c9-b337-27b0d8d88594", "sighting--a856d7fc-837c-4f5b-91d5-11110ffa865c", "sighting--ccc0e59c-66d1-4a11-bfdd-52e49c64ab9f", "sighting--9c81a12a-2d2b-4e20-a46a-1102f82373ba", "sighting--0bf0592f-d7e3-459e-aa9b-f40f3e5e967c", "sighting--bef5fe80-4fda-4151-8f55-2e1d48d2312b", "sighting--88fe5329-b2f1-42be-8067-0dcbad042353", "sighting--5618fc63-8033-44fc-85df-afaf3452be75", "sighting--af42ab8c-6ab7-4cbd-b3bf-8a8c0f7ba305", "sighting--c2645195-2730-4292-880c-a61a70141755", "sighting--da494a11-805d-469e-aaf6-fc159b7fbce5", "sighting--9919123a-db82-4582-b628-c6d413ab7cfe", "sighting--0dbde55e-29fb-4a18-8784-0b1450192957", "sighting--f2c772c9-a2e8-4efb-af3f-2cf1da8a8180", "sighting--f0b0a125-f9c4-4177-afc7-3e97e72bc664", "sighting--139fa35b-1f02-4c3d-848d-6d8752efa05f", "sighting--d950a6fb-2a6f-47a8-bb11-bfc3eb73eacd", "sighting--7ffb4ac5-7aab-4e3b-90b4-002a661b64bd", "sighting--d3b3a286-974b-4857-aaca-01b67c82efa5", "sighting--1276461b-7cfb-486d-a175-ca7b23c58892", "sighting--c46257f2-55d1-4a38-b1af-16149ecf624b", "sighting--72ff79e2-8eec-47b3-8fb3-6030b8fd7c3d", "sighting--29624b83-75f1-4f50-92f3-2b788af15421", "sighting--7fb4d939-7292-48e7-8c49-08ad335cd717", "sighting--aa162779-550a-41e5-bb2c-5643c8204481", "sighting--8200303f-980a-48ae-a673-1d16b1426292", "sighting--b1fe6c11-28dc-44c4-ad2d-56b72b234e5e", "sighting--0da21cdb-b7fd-42a6-b75f-4fa75fa6f2aa", "sighting--901a0015-9ff9-4b92-879d-b5139d8226c0", "sighting--22569cd5-b303-408b-87d2-37339d9f8a81", "sighting--75a21110-8556-4261-a97b-a544b504b91b", "sighting--a9a28a99-9d78-4632-816d-1b5932b6fed0", "sighting--7e16c734-1d4b-41de-bb04-f4f3627f26b6", "sighting--06327a2a-5816-4ea6-96be-bc68037ba48d", "sighting--bbf397ff-0ca3-45f6-b8b8-1bf69ec83529", "sighting--14016fc9-24e1-4d51-9024-b9725cc713b7", "sighting--9f18f65b-1429-4191-a810-4514e376cda0", "sighting--d22eeaa6-ebcd-4bce-bb26-95451020c1d5", "sighting--d9d09f0a-4006-4c5f-a950-b1876751c97b", "sighting--256fe3e5-08f8-4cdf-861e-dc218c9a11ea", "sighting--208463eb-b588-4881-9d71-b3b482d66f7d", "sighting--30c8f546-20e8-4e65-b5c2-b3f5a0da92fb", "sighting--e2d43cfd-a171-46a7-9814-296840da63da", "sighting--610e5e0f-88e9-4e70-a514-09ff63e9bccd", "sighting--7cb94370-7747-4a0d-b229-b1759ba5bcae", "sighting--166886bf-a6a9-4cf9-9987-228a5aa29a5a", "sighting--dcd9f08d-7354-4cd0-9ac0-b4ce68284243", "sighting--1c952eb1-f69e-4004-a976-e6443b774b1e", "sighting--b2ba9200-4559-4eb7-a592-ec7b8218bbdc", "sighting--79eace2d-2fb6-4b0c-8c59-b25841dd59f9", "sighting--65044f1d-c558-4bb2-a61b-52590a57762f", "sighting--c62013b5-df5a-4e0e-bdb0-fd64cfc0b8a0", "sighting--0152cf92-7fe9-4524-8e4f-e1ed094a0d89", "sighting--9e888160-a1d7-419d-80c6-1abd0b9fd94d", "sighting--b8c0c8fc-384a-4a46-9afe-89502a446484", "sighting--f7964eb0-70ae-44e8-9aa5-01c08fcca839", "sighting--4cf1bbd1-d21a-498e-b35f-bfdfbc5fd542", "sighting--f6e37c7d-7d0b-40c6-8693-2d841edabdb1", "sighting--6450f63a-0aca-41f4-aead-6e7e0d844de5", "sighting--aeb52280-b426-472e-888c-bb6e829d3197", "sighting--82c196d4-8caa-4908-95ca-352406ef98b2", "sighting--d783e6ee-8ed5-44e4-9fbc-b79aad572655", "sighting--7c8bdbdd-080d-4481-bba8-aad49614dfff", "sighting--736b8b13-2d0b-47e0-b0e4-e17b48dc1e20", "sighting--452f55de-0717-429b-a1a9-042023e3a92d", "sighting--8d14f6ce-079f-4477-abb1-2d8a1d19daf0", "sighting--325ccc74-19f7-4d82-ae81-0827e66d293d", "sighting--b89f2738-2f8c-407e-a11e-db9ea209eee8", "sighting--5e41b58b-5e52-436a-a0b5-a3961f213069", "sighting--9cba66dc-1929-44e2-bb12-7a81e3a513ea", "sighting--f286faa2-93e5-4f8a-a9ec-595f0f10d31c", "sighting--f8137dce-daa2-4d30-8019-0bdaac32d62f", "sighting--47e0c369-37fa-4ff5-bdac-27b4879ca559", "sighting--a33ffbe9-1956-4e51-b526-a45fb6cdbcce", "sighting--b70a6da9-ecaa-435b-9513-27ce3be49786", "sighting--56e01132-b51e-43f1-b2b9-df939f42b7dc", "sighting--250f9fb7-eb7d-414d-a57f-d82b6a6842c6", "sighting--42831c6a-2598-4a5b-9772-0df9b5b7b387", "sighting--07d50222-bb31-4df3-b058-ec5b2339cdb8", "sighting--720c6d3c-c8f3-4328-bd8a-327f1bfa05c0", "sighting--f1b005a3-d747-4e02-aaac-3bcdba706328", "sighting--255257b0-3ebe-493c-b268-37e7c5823942", "sighting--acf7d8c6-5356-4889-8f6e-6106e6696afc", "sighting--06154f65-04b1-4f83-8c24-d2d0eb49a609", "sighting--e4378cee-b9f9-4cb0-b9c6-cacbfcb5461f", "sighting--cab6fe43-33f2-4590-94e5-96d114f73fd5", "sighting--f255e7da-8d0b-4132-9ab4-faae69b1c1ce", "sighting--5ff9c9be-1949-4548-8f68-9eb4097c36a1", "sighting--8d794005-675a-45ef-81b5-61af1324a880", "sighting--2f4c8bab-a379-4b4b-b520-b4c0f0cd55b3", "sighting--e5bd313c-b43c-4bb3-af02-83ee9940a7b6", "sighting--a4c78910-fb71-4564-9bc6-5c536fad6712", "sighting--3bddcb62-9ff7-4fab-bd2f-9c3c5f1e7795", "sighting--112c9168-c8a0-44db-9217-471f3df4d99d", "sighting--ba64317f-888c-4e9e-8565-9debc60a129b", "sighting--6e277cf2-978a-4a7f-bf3d-4d4edad39e17", "sighting--80a6a9be-5db0-4336-a316-94ab3c9f5656", "sighting--7dc242b5-a03f-4998-b870-97b793279e08", "sighting--ca33549c-946d-4c30-a8b0-05c156b8e352", "sighting--78d32602-9c7e-4fa1-9eb4-aaee7629429d", "sighting--09b0fb4d-c349-4a28-ae11-743f67dfaf84", "sighting--112d33da-586f-46d3-9b26-59a1fc4ac650", "sighting--134fdeb4-31b1-478f-8fdb-c0082b523b6d", "sighting--6623957a-e6b8-45c7-809e-f3de035f5008", "sighting--fa9b0c86-cf1e-4a79-993a-977f5a646038", "sighting--3040ada5-b737-4410-9123-cf50c96d83b9", "sighting--277d1b56-2c08-44e3-8b21-4b611bdc0da7", "sighting--60ebf97e-e649-47d5-ae41-6e108b0a1b24", "sighting--079afd84-431e-4cdd-af06-64acb77d76c2", "sighting--aba07ad0-2453-4278-90c9-00787507b18f", "sighting--ee238c2b-827c-4c4b-a379-8bd2a882a0c2", "sighting--9c0f1151-55ba-490f-8b91-3be750a7e692", "sighting--6a44077f-a72d-451d-bc3a-6df2d9ebe533", "sighting--c31ca0e8-1ecf-4a6f-ae12-af0751368b46", "sighting--f1330340-1e6d-48ee-8ca6-96fe34189be7", "sighting--fe7050c2-5062-4cf9-9af8-5a0e695fefa4", "sighting--7fa4cb46-15c8-486e-9d2a-19b6d47c3595", "sighting--78fe835a-0bb7-47a4-963d-88957bb97c50", "sighting--ef78eed4-f377-41aa-9c99-9ae8330d1fe0", "sighting--2a9519df-97c9-4112-8954-8483553465d2", "sighting--604458f1-8fce-44f6-b164-bbd854896aae", "sighting--91b2c79c-a5b4-4725-a2a0-102697287bb4", "sighting--f88ed9c0-238f-4413-bd43-40e1b62804e4", "sighting--ab139f77-5860-4dc7-8b14-3bbdf7914149", "sighting--c2906908-05c0-4d66-983a-ea913a147bb5", "sighting--120bb2b3-7f31-4239-82eb-14b3746a2355", "sighting--5ee659f7-21e5-423a-96b4-2338f9e4142b", "sighting--219eccc9-fddb-4361-abb5-c96eebc2bca4", "sighting--06f4122a-7cad-47b8-977e-a13f47e48228", "sighting--0791cea0-3f2c-43c8-b8dd-5f2fb04ac34c", "sighting--f685c03a-11e0-4716-b0ff-1f28b3533160", "sighting--e9a576aa-091f-4bbf-925c-ab5fb990214f", "sighting--a4de7833-06df-4b79-943e-557e933b7d31", "sighting--96c53718-0d16-4bbf-9666-db3cb7f17915", "sighting--7cadd7f4-a196-42de-891c-afb4fc29b934", "sighting--d58ddab1-54b8-4ab3-89f8-772e8e35569d", "sighting--40cad8c5-0aae-475f-a362-828f8fdcfcd9", "sighting--07d153b3-faeb-424c-b5ab-06e403005d83", "sighting--9329698e-7f4c-4c06-b69c-7cb8da8110c7", "sighting--a5e124f2-9598-4c77-b384-48a2c83aeff6", "sighting--8248191e-9f89-4fad-8128-493aeef38b81", "sighting--c7890baa-8323-4a53-b694-4fbaf7b67cfa", "sighting--36c8f029-8b2f-43b2-9130-d5207fcab8a4", "sighting--068f87d5-5f68-49c5-8ff7-9d1b146bdebe", "sighting--37eb7061-6cb0-43b9-b099-75a033a5ee57", "sighting--51a79f60-020b-4a50-b39e-9df0bf9c8353", "sighting--4992bbce-07fc-45f1-b79b-bfdec561c1d3", "sighting--ef9f4d6e-d50e-4dd7-85b8-60c971784732", "sighting--a9dbac87-2213-4d8d-bc39-fabf01551a41", "sighting--63adb8dd-e760-4fa0-8e43-3c20d5d9261f", "sighting--987638f5-a9e5-4a80-8c03-e3e93d31aacb", "sighting--2bf3b0ee-a304-4b44-8d74-d3c3e94cd2d4", "sighting--e024b270-770e-4c1c-831a-43299221c605", "sighting--c6e2b2ac-3a8f-447f-930a-e95a5d674ff2", "sighting--d7c7035b-1cb4-4cba-80ed-b91a1e72abd9", "sighting--745b7a07-0be6-4474-b68b-3d6b3fc9b427", "sighting--b399a838-6a09-44f5-a7df-9bc0c342e2d9", "sighting--1f6ea473-bef1-4bc4-815a-2de5ed3f55bb", "sighting--570528ea-653f-4bc4-bea6-bba1e758da4e", "sighting--2baa76e3-f0bf-404c-8e7d-a275cfb6977c", "sighting--44b9b059-232f-47ac-94a2-013800382fc0", "sighting--7c611a3c-7b23-46ab-b4e2-b1673f5522a4", "sighting--08779ac2-3bd0-4e36-8b41-01693b40c8a1", "sighting--e4a231f4-5c90-4c7b-94ad-b32b243127fb", "sighting--e2954ce4-a76e-4f6e-9c65-828da428243b", "sighting--f12e337a-6258-40eb-a691-e05a82ce4336", "sighting--79332053-099f-4a48-910a-59cf9f197753", "sighting--d03b7d60-56de-4baa-8248-97ef8ed6062e", "sighting--67b7a9fe-5e05-449b-b3f6-0d6e92d5e1d9", "sighting--c17f3c91-c923-4feb-8450-341c345404ec", "sighting--a9335534-5081-47d6-b501-159a0a63f618", "sighting--e0b3e6ef-06f2-4488-a090-6d2793419d45", "sighting--ac4c95e4-34d0-47a1-a89d-db30f3a09d34", "sighting--5bfca6fb-cd5c-45b9-8600-df2145d60380", "sighting--7ff39635-4b8c-4722-b7ec-1bf7a99eae61", "sighting--b2081e51-1111-40d3-8b34-3664ac147812", "sighting--2d0809b7-a263-47e1-8ea5-149aac0bed83", "sighting--2c50348f-ad1d-4d60-840f-8bc9fec56b15", "sighting--001ba226-1e73-4edb-ac30-cf906765f8a7", "sighting--073a898d-0264-4ad0-8510-46514f433a68", "sighting--f1a030db-c2b5-49b5-aa80-c6cedaf2240a", "sighting--ff47ac6f-8d1f-4061-b5e4-a1775708a970", "sighting--5a916302-feda-4cb4-be0e-0b2375923771", "sighting--3ef204eb-6b9e-478e-bf73-c07aa19dc07b", "sighting--a4f41e89-2df9-4fcf-8754-3f8f51952906", "sighting--9363d92b-2b51-434e-910f-7cfcf17a2bd4", "sighting--80b63b91-2ec5-4c78-a341-91f39e683659", "sighting--963220ca-3743-4417-afc2-fbf19b96e1ea", "sighting--2acce125-95c1-4524-9e0a-508b8033323f", "sighting--3bfd382c-f2ee-4961-9cb8-ef30af7e3c68", "sighting--0880249d-0af9-4b5e-9d6f-a473a002f04b", "sighting--b1507807-a8b6-4199-9b48-6c00ccd5e9fa", "sighting--09f31161-bb1b-4fc7-b546-6f7c09f2d490", "sighting--e116bd1e-da8f-481d-8be7-9910b7a830c4", "sighting--69b9d7bc-367d-4429-b17d-7e437dcacfdd", "sighting--9456b2d6-b1b5-41d3-b80d-7e3279f6e9a3", "sighting--9fca983a-3065-4921-851a-4f420ad846b7", "sighting--385bdbee-e357-4ac2-a487-116bfd4bec5c", "sighting--8af6a5bf-61d1-431e-b70c-f5a1f23d4de4", "sighting--a93611e5-24d6-403c-aec5-659129d76eff", "sighting--a3c0aceb-58a5-4c57-9c78-7dd4b592a0ce", "sighting--dca34953-d9ad-472f-84d0-1760007c89ea", "sighting--18a8d315-707a-4dc7-96e6-b13dd7ee5f96", "sighting--f1aae0ae-7e8e-4e0d-a3ab-9a5b1d2a453d", "sighting--ec7bc974-a0b1-4471-9f0e-53097be66705", "sighting--e75ea62d-5e2d-4c2b-afb7-ee316b1ade83", "sighting--97622bf5-cc08-4bcc-af6f-55e91fe3ec13", "sighting--2900f115-93d9-4b39-af8f-0bc6714eccce", "sighting--5695a8dc-b011-40c9-b8e0-152ca69575dd", "sighting--0ffc4c05-5dfa-430a-a44f-48fe0200dbba", "sighting--bf3a3bb7-9a72-4bb2-864f-ad8e5bbde2e3", "sighting--aa58ebbc-82f6-431f-8556-9cdc563be71c", "sighting--32da7bde-0eec-40cd-bb40-9c0fde534de0", "sighting--428e425f-4578-4766-978d-8153564761dc", "sighting--84988586-2c96-4d36-ba95-6b0d9a38f3a2", "sighting--838e54f2-ec1e-4214-a0b1-c015b5854e7d", "sighting--4aa3843f-7f3b-430c-97f1-ea71612c2283", "sighting--64a47085-3acc-4bf2-9812-c27ecf2a3c2f", "sighting--705ecfa9-c29f-4e0f-8585-762110b8de7b", "sighting--6ee3e7fc-26ed-489d-b72c-2cdc97803344", "sighting--a8e52cfa-eb52-4acc-b840-6ca7edc7c3d0", "sighting--244aa034-1c20-43f9-b1c5-f31abadf604d", "sighting--5028c0d6-76d9-4539-9a8c-125ecefb2de4", "sighting--60079657-983f-49a2-91ac-cef8af5d20cc", "sighting--173f1a24-93bf-49b4-880c-ac27430e2320", "sighting--4e07b57b-a9c5-4819-b9d0-f5e45c470ffa", "sighting--243bb8c1-f1da-4722-be1e-5d8e072dd662", "sighting--258e2494-81ce-4f12-baf2-c388e265778d", "sighting--828d534c-2c6d-48be-8555-f62efbcdee23", "sighting--ffba54a3-526c-450e-92d4-31d13d07d2ed", "sighting--bd4f5347-b1d6-4a25-81db-c077825fe2aa", "sighting--cbf3e2d7-d550-40b5-921f-3933ed58b099", "sighting--ea802bb0-0875-4c3c-bf87-5b1a9a0df4c5", "sighting--f6f1a639-f5f9-4aa3-ae13-a69ed14adada", "sighting--278f9263-7479-4f32-9788-40dd701d1bb1", "sighting--400b6ae9-78a1-4d41-ae90-b155fd545a11", "sighting--f9d91e0a-c9ff-4ec0-ae0e-ba4c9ec36cd2", "sighting--f42cfe45-a1ba-4a32-9f2b-aadee8c303bd", "sighting--49b69e5f-900b-40bb-99e0-4f12d886187e", "sighting--8a5219f6-96af-42f5-be83-e00b6530ef3b", "sighting--9709f77e-661a-43e8-badf-0213bd4f75d9", "sighting--97e1e980-8226-414a-a0d5-d620047ade10", "sighting--8cce5e63-b1c8-43b4-b3e5-a433d107eb43", "sighting--b94ffdc9-fbbe-479d-9ae2-f56fa6639d44", "sighting--254dcff0-4f75-4644-80c5-1ca58babe3dd", "sighting--6572a56e-4370-44dd-b45b-8365e96dbd03", "sighting--e6685c54-cbc9-4445-acc4-78b9de18f722", "sighting--e01dddc6-d4a2-4741-8e78-2624c7d68098", "sighting--3906ddf7-ffed-46ae-9640-c1bd8147b6e0", "sighting--1b419f5e-3f40-475b-b00f-50627f92fdeb", "sighting--3daa3480-d731-47fc-aef5-4974cf0b05fe", "sighting--0b7931f0-83bc-4748-8515-84e5db24e359", "sighting--1e5b1a2a-3e95-4c99-b752-5c72bb164028", "sighting--c8ed14ab-8631-4e47-956e-6fa6aa9b1101", "sighting--f75a28be-b579-46a9-b581-e8a68b356574", "sighting--4bb459e0-12e5-49e3-9787-4d9ae0b5c2bd", "sighting--d89c283f-3683-4ff2-9168-7d29a25a55b7", "sighting--deaf4001-2b72-4c7f-8394-2dc567254710", "sighting--ef584c44-8f5c-4073-8bad-065b76dfe06a", "sighting--07927c16-fd8f-4b7e-a903-ee5e60362f83", "sighting--8c9a616e-b357-4d44-acd5-c7c36e053bdc", "sighting--c371eb15-6a05-4c3c-8a78-562fbdbd005a", "sighting--c128af27-5851-4199-9b34-91e1d34a1f74", "sighting--b9033d05-7fe2-435c-b101-99cb4362232a", "sighting--cb1a0d0d-a66e-478d-ad55-8d16f49bff1c", "sighting--3bce81d7-a0c9-4cbb-8611-399db249cda7", "sighting--ccbc1e69-d9e2-49d9-a426-cc2063b2ea42", "sighting--2937ca10-72f8-4739-9a47-31962c1d51f2", "sighting--69adfaa2-786e-47f8-ae9e-15aa7481bf7d", "sighting--fb972430-01ba-4ca4-9f13-73b9aac376bd", "sighting--14219000-6e3e-4e1d-af6c-e9f1c8a4c8e8", "sighting--dbcefb68-19a6-4bb9-b1da-b4eeb6ca96f8", "sighting--6e02a314-ec79-46fe-b05f-7fa0763e306e", "sighting--35515b36-0dd1-48c2-90aa-787942ff78f5", "sighting--e409ea0d-8b65-41c6-9a0d-e9e0ff5cfc33", "sighting--581e8b52-9f34-4629-89a5-8d0706c93de6", "sighting--780b03f8-a7ee-4014-9a2e-29529135e201", "sighting--919f552d-5d04-4132-9e12-cc83a4c19015", "sighting--96a14c5e-4d18-4ed5-8cff-843c31fd2e2f", "sighting--0590df35-66ab-4262-a5cb-5ecb9bd8b9f1", "sighting--dd48a455-6fd0-4ead-a6af-2fe0da1f3f25", "sighting--da5ba416-13b9-4a3b-a855-8d6940a727e7", "sighting--f254b636-bc77-4319-82c2-65d3a3bb9b5d", "sighting--c3e3e27d-10a7-4a9d-8b9a-e2c67792be70", "sighting--328decb5-ba02-40cf-98f4-cad5cbffcebc", "sighting--8d293283-8ac7-4052-b48c-358b532456b7", "sighting--020a720a-7438-46f7-a661-5d689fa63e21", "sighting--8cfe69c5-a8a1-4647-a816-c52afa349f9e", "sighting--95ca8f62-c33b-4830-abe0-8e12b0d34be7", "sighting--f1c23806-4cdf-4dff-b98b-6944615f30cd", "sighting--6f22e582-bdfb-49fa-9b64-35e96accfc8d", "sighting--27ae8c3d-7e4f-4258-88b2-89266c30e466", "sighting--142d131e-d990-4bc5-bfdf-2ed5b54f959a", "sighting--f2e8f809-c89a-49e8-81bc-475eece661cf", "sighting--38ebbada-3dd4-4b68-9e29-703aa194bdf6", "sighting--05bfba2d-218e-47ec-8db9-d6db17e5a3ee", "sighting--22201ced-8c11-4a11-bd93-309e87ec0991", "sighting--1152a4b2-4835-4315-adc4-a8397f754b56", "sighting--80cefbc9-de1c-4f83-861f-33a4327cfa74", "sighting--664966aa-2170-4dac-89b6-43955fb2dd6d", "sighting--43113ec7-884b-4ce5-99fc-158208f55e91", "sighting--964082f8-e24b-4ad9-a287-815d6741b13c", "sighting--8f55f2de-5871-4e74-97a4-3a9a9b6d93ac", "sighting--e1b40e9c-dec9-4473-ad6a-b466fa7cf733", "sighting--a9076780-7ccc-4919-8ed2-672ef2902cdb", "sighting--3d4414db-3bf5-4ba1-9125-a691b0a20010", "sighting--a9760162-c79f-4320-be53-744af920d1df", "sighting--a3d50532-b68a-4fb4-ae9e-3f996fab5fe2", "sighting--019006b2-7c83-4e66-9ee6-9f0487ff8707", "sighting--b627b9cc-ce4d-455e-80e4-207c51e5f4e5", "sighting--3412ae04-a8a5-4358-99c1-1a6058253901", "sighting--fdb4327d-4f7e-495e-8a5a-2b356bca236f", "sighting--1ac8e98c-640f-43eb-93a8-b5c7264b1ea8", "sighting--c815681f-8e7b-4751-91ee-d637ec26fdea", "sighting--c5a374a4-34c9-47b9-ac2f-1ca694450e3e", "sighting--94fb936a-abec-4d5e-8560-c187de2dce53", "sighting--6fc87840-c7b7-4ef7-a43f-72548ffbecec", "sighting--a155c5a7-f965-458a-b0ae-25c70dc49bd5", "sighting--ebdee6c7-9531-41aa-96b5-4e5cb3c05800", "sighting--b9002bc8-1d5a-4e27-a3b9-7e1481247592", "sighting--e0f7d4a7-9d33-4394-b579-a68bf4805b04", "sighting--0891d373-a3a2-4663-bb4a-874f5f7f3c90", "sighting--1022e4b0-ba60-49da-a8e9-932e6ec6fac3", "sighting--d4f48b44-a24c-4d99-8609-e1c9a8b67a23", "sighting--7456b6ed-994d-4ed4-9578-fff89ab0a8e8", "sighting--a848f714-585b-4d22-8406-14559c95789e", "sighting--269ca26d-1d76-4120-8924-0691754c8dff", "sighting--97100341-3b38-4ace-8d80-598d30f481ed", "sighting--fffeb8c0-b4df-4c72-bd67-b6ebe439d026", "sighting--b92df511-9d69-49d5-816b-418a917542ee", "sighting--7b0db9cb-6ae1-4afe-bf66-e9dd78fafdc5", "sighting--e48c7471-e951-4f09-bba5-1681222cdb74", "sighting--32a59bc1-7394-4ad1-8fd1-3d95fd8da801", "sighting--d06e313d-bb56-4027-8f66-85e201c0ebcf", "sighting--563f9721-c573-446f-b5ff-457f21a27d7f", "sighting--73401d70-5068-4f2a-9cb8-bb3b751b7163", "sighting--cd6f94f8-15d4-408b-83de-2a60b31e42cb", "sighting--79e3e3fb-c2be-4208-9b34-64f6eba8c039", "sighting--ee92e7be-e8eb-481e-a011-9b3478d2dcde", "sighting--17990efd-b4af-44a8-8fe6-1082e07a482b", "sighting--fd8f5f4c-a9a4-4245-8700-a4963c447ce8", "sighting--924d44a7-b076-4768-989c-ccaca42e47c0", "sighting--24a4181c-4901-443b-a2af-90fab74d5e1d", "sighting--1183add1-ea0d-4a7a-a1a9-80ca3298561d", "sighting--ba08b0b5-9df3-4225-8538-e7b185fd14c4", "sighting--a713e815-8402-40a6-ae12-d1ce0a2c8c1a", "sighting--b8580169-0766-43f6-92e9-0079b15f2f17", "sighting--6379ee5b-37a1-4dd2-899b-51bd711b8b84", "sighting--8c6a98b5-f89e-4ee1-80fe-3db20b94186c", "sighting--2bc283e9-ca8a-46d9-86eb-ac3dd5ea68c0", "sighting--700170bb-5dcc-47cc-8085-8bc28f096119", "sighting--6297b24a-2ce9-4452-9857-e009779feff3", "sighting--4a1492c6-1f92-4c7f-9488-1315280c0b7c", "sighting--6d7055f4-12e8-4621-9fab-22ea23948bbf", "sighting--174ff94f-8099-4eaf-9c84-1d3587fd5d6b", "sighting--0b077296-6b4f-4509-bd68-777fdb0a5e83", "sighting--d2f029db-95bb-4b9c-8155-64ba02aef8ea", "sighting--56e76af4-1804-4ec7-8c43-14325d1e81a9", "sighting--1759dffc-f3ca-4ef3-8f90-d92eb0fac1f8", "sighting--480c1246-2a14-4400-a0b3-9eec758c3bf7", "sighting--bc6e3ee7-1931-4db7-b1a0-cbd910016bd4", "sighting--099e8226-3f03-4a0a-9c27-b5427cf0912e", "sighting--5523cec0-0f12-4613-b3b3-1ec0604824c0", "sighting--0255cb56-954f-4849-8106-4c3d159af779", "sighting--ae242e3e-51f7-403e-9374-b7c89f319fc9", "sighting--2597ff56-de6f-4eb3-a872-96567f3bd4f2", "sighting--a965b229-9320-4151-bb1a-092167bdaccd", "sighting--10a47fde-d8a0-4415-a278-a2323a11f033", "sighting--ee26c89b-c744-4ced-b844-7b08fb93b271", "sighting--2b8de62c-57c2-4e91-b024-78838d9f4c23", "sighting--0dbc1518-2b55-4189-85aa-95019ca7c568", "sighting--cfa4374b-1601-4b45-8652-3872a06bc4cf", "sighting--cf49cf37-6637-43ca-b23a-63b1b48924a3", "sighting--e3628600-3255-4b93-8391-1b748354805a", "sighting--2a21554e-19df-4467-92b5-120049e2f8d4", "sighting--6fd717b4-5453-4966-830a-8a77d841e1b9", "sighting--ba425bf8-3b59-4838-90a2-08d0f7d25771", "sighting--fe414e3a-4509-4a8d-b50d-7457338ce5a0", "sighting--fc6515aa-0af0-49e0-9155-d8508d3d5ed8", "sighting--b791fa30-32c2-40b2-8418-a4e30d4a255b", "sighting--c905db18-189f-4dfd-af64-cf988e5434b4", "sighting--799762ab-24a9-41d5-a3f7-9ec9d40df81e", "sighting--0fc0992d-ca69-4595-805b-733fa19853b4", "sighting--6150ce69-7d5a-4f59-b7ce-31544be697b2", "sighting--58ced5d2-f1e9-4bae-b877-fb3fce3e9821", "sighting--ca6a4823-92a2-46d3-ac84-aaa80cf2e5f7", "sighting--58db829c-1a4b-47eb-bff5-3dd74cfb23e0", "sighting--28f450dd-3034-4693-a91c-af88335d9742", "sighting--9cea9f92-7356-44f1-b499-78a712af1ac7", "sighting--9e28a61e-eee5-455e-94ba-6936efa19246", "sighting--de2470e7-0b56-4977-9d10-96b8619809f1", "sighting--1e8ca5b7-d5d6-4a13-9527-d259c40011f5", "sighting--0772b659-dba5-4654-bc75-bfa4d706ba76", "sighting--6e089bec-f3da-49fd-aace-464a83f3e38b", "sighting--9795c957-c94a-4fc2-ae40-8ad11903bf83", "sighting--86d678d3-d1d5-4c84-bd98-923622fb4343", "sighting--c5dfe075-d6da-4b72-b51d-64215d6a36d8", "sighting--36e5d600-9cad-497e-b88d-966ddcd14c7f", "sighting--85da5c28-361f-4ef5-bb3e-b8112ce11a50", "sighting--e16fcfce-bbba-4f68-beaf-ed636d9cbb12", "sighting--70daab6d-3872-4cfc-894d-e16c5a2f9b32", "sighting--5ebac87f-bb7f-4c2b-be55-d7a38922a813", "sighting--db22b468-9df9-435c-935b-282ff704c217", "sighting--2276cf92-90af-4901-9eea-52f8ee1d8255", "sighting--dac7104f-d18a-4d33-bf34-92665c0c3f89", "sighting--84611b70-ad8b-4602-be43-e11eeda6dc1f", "sighting--e19079c0-ca30-4723-9e67-4ae47c500b45", "sighting--8a933c44-7ace-4f39-9262-dd71eba4a41f", "sighting--f2c70383-d2de-40c9-8ab8-2ab8ce37a303", "sighting--ca5dbc9e-3077-4c83-b1e5-7a7115b4dd2d", "sighting--21061480-0521-47ca-a8f8-6bb07a42a00c", "sighting--5bb3ddb9-f672-459e-af67-e52a2c4d4e3d", "sighting--50b06884-16c0-4e21-802f-14f460ac9594", "sighting--c4da0fec-2768-41fd-bc9f-8da73537154e", "sighting--a03b6e88-a66e-4c0e-b9f0-3e32bb9cf483", "sighting--b9d419a6-37fd-4698-8e92-18046e713887", "sighting--5d5367cb-c6ee-4775-9c27-2504da9f43bb", "sighting--e3b60ad8-ff02-427d-944e-db0c3ee69c77", "sighting--6a5ca31d-cf7b-4f60-b495-f5e15813669c", "sighting--7ee9b7cf-de6b-4e43-8e8a-ce46c17b46ff", "sighting--1917fc64-4375-4570-8eca-70e23873069d", "sighting--8bf34bd7-b8b0-49cb-a6c1-92c3f265a100", "sighting--c569a303-e468-4b37-8eba-33c292bd5b6e", "sighting--d16e2d51-3d0d-4a36-bf87-9134cc36663a", "sighting--8ce7a3ca-049a-4927-aa48-f8a55a79bff8", "sighting--22d01346-11cb-461e-9245-31f73331d1ec", "sighting--e24753ba-9c09-4e15-86c7-c028d7a513ce", "sighting--04d74d19-b781-4982-981c-4eda4d333fe3", "sighting--ebb9c843-e1f4-49af-a2e3-591198072cf4", "sighting--8a71fd68-0c75-4b23-ad2f-fb991a90adf0", "sighting--55de4ab3-666e-43e3-b6e0-91115fc80b3d", "sighting--90bbccfb-52ad-485d-bf16-cf678b37e52f", "sighting--c8137b7a-5b59-4a8e-956e-43430b372179", "sighting--1fe61270-8fd3-4eab-a0f2-13b1b09ee380", "sighting--f636e4b4-6692-4463-80fd-943a3b13e679", "sighting--d393650d-d8ff-4f51-8f84-d806fc187e89", "sighting--b3236819-eb35-4934-9633-a0b58bbc571c", "sighting--398511cf-91da-437b-8a1a-3d14c1a2655c", "sighting--61552db2-1500-47ac-87fd-a3b8e7679753", "sighting--b5e9aac6-d2a9-4028-ba0b-ebe5f0b4331b", "sighting--9dfe58f2-2e77-481d-989a-eea07306a176", "sighting--9e822bd8-b952-4a31-82c6-4132365484b7", "sighting--009b6473-4a43-43f5-a2d4-0f3dfb1cedc3", "sighting--54d4c9ac-ed22-457f-abb1-48453cf4c535", "sighting--d7c21e10-5977-4d26-bb06-0821d2fee10f", "sighting--6e53888b-c96e-4953-88e0-f321cafbdf87", "sighting--b2ae561b-e2aa-4c02-8c9c-f5ea3b184de1", "sighting--df66d50b-2951-41d3-b831-8576103c4707", "sighting--83dc0042-2e91-4317-b3ee-400368627891", "sighting--21ce3428-7dff-4553-80ed-aa28d1530823", "sighting--a0922004-40f2-4591-b0ad-ba3e718d4593", "sighting--de6d0529-bb19-40a8-8727-3dca5358f0e3", "sighting--34669fc2-7fc2-4f54-97ce-4650bad90e16", "sighting--6f07a5ab-9ebc-4407-a3ed-7087a2405fff", "sighting--cda74b98-c504-4134-86e6-999db5d7b8d7", "sighting--e1bae7a8-a9f7-4087-8c3a-204ca03c3e26", "sighting--cc6454f0-88c5-40e1-8096-a342fa9a8caa", "sighting--17d41265-e2bb-4d0a-9c70-cf82614707e2", "sighting--b12e30de-970e-4949-b88c-6d7efb5476c2", "sighting--1ddd5bf7-6c4d-433f-99d6-2dca4919e22e", "sighting--56e1b421-9083-4870-9079-a03e1f4e977c", "sighting--736d55c4-8bc0-49dd-9e90-4b7a33972377", "sighting--103cd886-2707-496a-83b1-441fb19adcdf", "sighting--ee4c42b0-d15e-44a4-97c6-026e18d9a213", "sighting--828388a9-0297-45ed-af9d-bf1ed7704026", "sighting--8e9026e9-21fd-4ad5-922d-d012fdba40fb", "sighting--1fc63f85-5aa2-4f72-a123-b4ef31987949", "sighting--02714b17-0f64-4825-bdf2-7d5f0dccaeea", "sighting--432a1054-b6aa-4e44-b058-0473f1a3f25b", "sighting--bb8d1c1a-e679-4ea5-a8c5-759817e5c182", "sighting--a438296c-e848-4b93-a4e6-cfc785cfa33b", "sighting--cd84d253-f23b-4731-b13c-0ac47b5fb9dd", "sighting--0ed58019-46f8-482a-a9d1-eb8507a6f5ac", "sighting--acf89cdb-50cf-463b-a49e-f9feed94364e", "sighting--efab0851-f3b5-4527-ac68-c51f4c555099", "sighting--3bfb7d48-c1c1-4a29-84b8-bfe6d8cefe9d", "sighting--0f828028-e55a-4c8e-a27e-4c02eb8e6449", "sighting--e345cbee-e85c-4398-90a5-1c6bebf27b39", "sighting--62b59f4d-5943-4cb3-89d5-22f66627b3ae", "sighting--8dea9de9-7401-446e-8d02-fa89abd8c4f1", "sighting--31f7065a-1092-4df8-8ab8-a06ba913e8d0", "sighting--1d4a3d0c-263b-410f-b1eb-2bec08e922a6", "sighting--20f93197-acc4-459f-9fe9-3de0c58b087e", "sighting--4c215729-7308-4f13-89df-fcb84e7c72dd", "sighting--b9ad5add-10e9-4567-b329-c72901872d02", "sighting--1248b6a2-b913-4e3b-9012-bdf3a762ad8e", "sighting--f40030cb-b739-46da-a048-a7193a39df6a", "sighting--864a5683-7c89-4466-b4ca-ff40f567d715", "sighting--8e2acea4-8f5a-4375-8158-bca5bf4b0d7d", "sighting--33b94a14-4330-4bca-93c2-cdc4595807eb", "sighting--d2966692-3b26-475b-864c-8b2d68f2d73f", "sighting--a5116a0f-0e49-42ec-b047-a67c256dbbd1", "sighting--7ea0eec4-fbd6-4553-b388-1a4d85a89e80", "sighting--05d6bad5-47ea-4f5d-9b3d-448b00e69422", "sighting--ec8b4491-2af5-4455-a3ab-84548a69b0f3", "sighting--c771e279-a567-43ca-8bb6-99195f433d23", "sighting--9f020098-b740-4290-b65d-8f4b59c9860e", "sighting--849fc7f0-4f34-4e80-b27e-d455e05aa608", "sighting--c3b09f2d-33d2-4f1b-a7bd-5b523e743e06", "sighting--724dfa18-5511-42c2-a69a-9bd9bf5683cd", "sighting--d0f2df4e-a2e7-4f97-a829-8697890994de", "sighting--134e8438-b430-4f5d-b386-b122d89ee264", "sighting--852667dd-1c58-4011-8e9d-b279045101e5", "sighting--498c024f-dc80-4798-a916-00b4fa137b4a", "sighting--a699b9e0-0782-4351-b2f6-e1788d53f2dc", "sighting--44db3835-9535-48b2-8f2f-70effa6eba32", "sighting--4670b707-c1ab-420b-a4fb-1c33461e4862", "sighting--f616e6d5-0aa9-45a6-b41e-bb42f4d9ab21", "sighting--47bf0b27-771f-49e3-b3fd-7df0964325d1", "sighting--668b4009-9f34-4dd2-9753-bfa12f28e63e", "sighting--20dae13c-b5a8-4265-8c80-3a21c21fc233", "sighting--d97a32cc-eddf-43a1-9715-f3e33fa5348c", "sighting--fb968a10-4721-4487-8ea7-af8ec127da49", "sighting--5271f5ce-6ac4-441d-bbf1-aab7ff944dd0", "sighting--8c6f9cd2-5d90-4c45-9f49-0bab0554c5a9", "sighting--05779d04-fbb7-4f26-88cb-57a06bb4b3bd", "sighting--e426aaf2-3f01-4954-ad48-748010674307", "sighting--08f9540b-6d6b-4bff-b0f9-1deb8c5d5fff", "sighting--04b4a9b2-879a-4933-9da3-fbd0f51d8f94", "sighting--e7708eca-4410-416a-b7a7-5214e567e694", "sighting--cf84d79b-95cf-4dfc-aa68-6c9b771ed486", "sighting--26d8288e-69bd-4074-9b70-89caf10be988", "sighting--f02f406d-2e4c-416c-9647-cdf3716b1fc8", "sighting--5efebfe5-757f-48f8-9785-d86f1a524243", "sighting--dda8b07d-d0b0-4867-8bdf-4dc70c8d1024", "sighting--11222fdb-d7bf-4386-9f27-7db66a53b07e", "sighting--d2bce241-b356-41eb-b48b-577cb7644d1f", "sighting--3551a712-ee75-4232-9242-20501f46d368", "sighting--b87c45f4-c523-45f9-a35b-55703471ef9b", "sighting--bb227b69-6130-44ef-97f2-45c28be46baa", "sighting--c3b9ac36-f3bc-4e82-802e-c35cb4a3909d", "sighting--45642f88-f86c-4dc4-9a0d-160d0c24e167", "sighting--5cf3e9df-7306-4ef8-b64d-a349ff1a3110", "sighting--76279b7a-59ef-4c45-ae61-81529ae91bda", "sighting--97386b09-d4b6-429f-bed0-379fcf405ec8", "sighting--deeefd6f-bd31-4361-a0fc-3a7b5bacbbb3", "sighting--619197f1-42f0-49c3-9cf5-d3c7a866944b", "sighting--815b20e8-54d6-4817-8100-27ef8c58535c", "sighting--a37717bd-2593-430b-a4f5-45cd01963550", "sighting--16aca310-f990-4139-a5f5-6732282a4b65", "sighting--ef4f984d-c0b7-420f-b4d6-0adb1a8b686d", "sighting--20b67927-742a-4aaa-9e57-8c8765c55947", "sighting--786d18d1-6265-4305-b104-5246bd12f6b2", "sighting--d3f3f408-634c-4b2c-bf8b-7ca512504130", "sighting--74b2d7ce-ccfc-4213-98b3-74fe7555545b", "sighting--53b590ea-75eb-45e3-83a4-b6ef6f78c12e", "sighting--4fdf353c-dd62-4031-90e1-0b4af89874b6", "sighting--64c640fd-677d-45c8-a44b-c640ca322aa0", "sighting--f16980fb-4ed6-45cc-9fab-f6e487162b44", "sighting--638b07b1-f565-43d2-93f1-089107897b63", "sighting--4f6a6117-a45a-4103-9d66-03767ff02726", "sighting--498e072b-57ae-44ab-ace6-2a80c46ec44f", "sighting--46031935-28d9-41c3-8904-75a5b62d2a02", "sighting--32b41e5c-b00a-4d06-8850-13626925631d", "sighting--0776dc41-8d18-4a6c-a951-49543d8ecf01", "sighting--b55aebbe-7690-424c-9ea1-af62e040af7b", "sighting--e7d4bbc8-4509-4e59-ac6b-5ccc83b9a58c", "sighting--8643e565-260c-445e-bd32-ae98fc52a4e4", "sighting--c5f2d6c5-7f75-4bd2-9ae2-a118beb180ba", "sighting--f49776da-9778-4530-9a2a-f3d9bc53fda5", "sighting--432e4997-4c5f-4bc8-b5ef-40f60352d2ee", "sighting--d26c66f3-9888-4a0a-aeea-4a4b7c948506", "sighting--ba33a6a8-c84b-439c-bac9-b7fa5cd68bd0", "sighting--09f5d8db-4a74-44e8-b094-6e907f846b45", "sighting--035537b5-5205-4537-94c9-b04f24e72d65", "sighting--28870664-d516-47a8-a067-a9d1b0839269", "sighting--3bb2ab02-418e-49f1-aee7-4dc13fbc81a7", "sighting--910d8fa9-2427-4de1-aacf-90dcd42983e9", "sighting--bd4b6e62-bebe-4a02-8e4e-a88f4b80c0e0", "sighting--47f2cf52-379a-47f5-8b81-ec8cbeced4f9", "sighting--ea1d896a-eb09-4c27-af6e-3ee34df25c45", "sighting--fc2d1e6e-ec6f-4dff-a133-0299a744bc38", "sighting--3499f741-4055-41a9-abc1-796b77f92fa8", "sighting--133d6591-1447-48d2-91eb-58f3957ffd03", "sighting--f9161a6f-6b20-4ff2-8657-87f4a2b1127c", "sighting--a4a74655-63a0-495a-8372-a6cb5a12da39", "sighting--9490838d-c1a4-4160-bbea-854b82d05707", "sighting--191947e6-a6c0-4e51-8347-88b75c941c1e", "sighting--89896aa0-2b22-4266-952f-eedb78e8f467", "sighting--f222c147-7f36-41d5-8d5b-acce5652e806", "sighting--7414f91c-ef62-485f-a8dc-a32683e7a030", "sighting--be29cd79-7b6c-4a7a-b5d8-da65b8231ea0", "sighting--a48a6d84-1876-4665-b544-029aba2e252c", "sighting--28907a8d-2326-473c-8f8f-2c9fa9befc1a", "sighting--a0daa281-e888-4491-8d22-9eac2d00728c", "sighting--b7832ce4-87eb-461b-8c06-9bf6c62e510d", "sighting--de192c50-39a5-4c19-8c5a-f3c50b186c9d", "sighting--d3ec72e1-ef7d-4fae-87b2-b2135a3c7d82", "sighting--492dcdb3-12c3-410a-83d6-848977bfa997", "sighting--3dd0cc5d-45d9-4895-be10-a0df017d4c8b", "sighting--2bfc24db-536f-4ee0-a28d-1f98c0c95fa3", "sighting--2d3d3b82-14ab-4d6f-9144-8f289476ae7d", "sighting--174311a2-76b0-4808-a15a-f1d642b2481e", "sighting--fd02115d-4705-49c0-b182-c6d37bd0f641", "sighting--5a50caef-5a2d-4e9c-bfc3-463cc70d7742", "sighting--c7eefdbb-712d-4303-8b17-1644b934dffa", "sighting--f0c4b27c-fee8-466a-82ad-1f802f9b8485", "sighting--8f236dff-374a-4c05-8afc-a7818eac03bd", "sighting--f8718f22-b5eb-4801-bf71-aacbb1d97147", "sighting--a4e96ff6-1620-48bd-97a5-131fef7f7fcb", "sighting--35312917-7680-4927-a21f-10f67eabf6fd", "sighting--408a6d3f-f627-4fc0-92d6-4150ea91e7cb", "sighting--7520c96a-60a0-4af0-a572-ebd65bfa2eb1", "sighting--246b65ec-2cb9-43e5-99a3-377b565ab25f", "sighting--8d6b0d7c-a000-4020-9b6f-9113a679d9bd", "sighting--f6de01dc-bf04-4c0a-ae96-416154d92793", "sighting--7a127976-7347-40ce-87b4-d0cb18509cb3", "sighting--2ce67ea6-a48c-4c75-9c0f-33c55c15cb67", "sighting--bd51083c-c526-46c8-9103-d9f9eef488e1", "sighting--bcab2522-482e-41e2-9445-7326b075f86d", "sighting--c6fa392d-8bf8-4c3e-b390-aa2ff94336e1", "sighting--c2048c92-b217-4f2f-970a-fbc1badec89a", "sighting--f818842b-c157-472d-bde9-c163c58b0b0b", "sighting--68debc45-c641-4b6f-9da4-9c41f03fa801", "sighting--929dd627-d867-477e-b338-62654e6edb9b", "sighting--f8c276e5-355c-4cdf-baa9-70e1c42e2611", "sighting--4df89eb6-486e-4587-93b2-ea2b63598392", "sighting--07b6614b-bf79-4d16-8235-9bcfcf01b180", "sighting--97816a12-d6fd-43a6-b6b3-6037d02e2995", "sighting--216bb7df-d320-4bc8-a6bb-3415d9e1591e", "sighting--9c95cf2d-5878-4518-97da-d3bc1cc646ab", "sighting--f8893fd9-e83b-49b3-b1b4-250816902a96", "sighting--5edb076c-6b5e-4bd8-ad21-72f045583e6f", "sighting--416c0c12-00c8-4657-b309-36cde2f998e5", "sighting--52d8f21a-eab7-45e8-9e1a-0476d3731024", "sighting--4c725589-b944-47c7-ae4b-3b93662ab7e3", "sighting--fd3b0612-19f6-4a5c-90cb-6afb211c956b", "sighting--6fdc4c0f-c4f3-45e2-aa51-b464aed64f43", "sighting--19a7faf9-bc24-42be-afa4-6e5b4fa1f28a", "sighting--8c522e5b-60b0-4746-a01d-97689789bfc1", "sighting--c05b8ce2-e1f0-42f0-9cff-63f67fcadb70", "sighting--a27a9bbe-9719-4a67-93d4-13252d90734e", "sighting--1a8e6315-b2e0-4e3d-ac53-1d3a8da86f33", "sighting--61a88ccf-cad1-4a79-83e3-1b5c2b2e0a25", "sighting--6a73ba35-6082-42b4-af7e-2859e5365277", "sighting--1bb3e076-7bbe-4bb0-a535-f582969ab31b", "sighting--b1d784c8-e581-4e3e-90af-fd8a68c118bd", "sighting--198099f0-d3ee-4be9-956a-27e1239f3fc7", "sighting--0b4a4985-54f3-49d6-8e16-703b5b3a75fe", "sighting--9888e891-b76b-46e4-9035-cc1195893321", "sighting--37441188-a902-49e9-a74e-59077ec4f526", "sighting--a02b9bd7-4ab3-4f0c-bdd4-7d3b3dce97f3", "sighting--6cef47ed-2a1c-4022-9bfb-d761160ae32a", "sighting--3b078023-db98-4267-8b09-710ba8d04e74", "sighting--4f5dc78b-34c1-440a-965d-e3428770213b", "sighting--93e8a18c-115d-4fb6-9e85-e4c07c29dd94", "sighting--1adecbf3-9276-4a59-8eac-6724d9136a19", "sighting--7c568fb6-3646-4bdf-83ce-45ccac4f9194", "sighting--7ee7d125-fee1-4066-bd96-0930f3a981ac", "sighting--197485f0-2e39-4102-a73c-3af699ea3f23", "sighting--4a7e1cc4-061c-4c12-994a-300e11139209", "sighting--84a1da24-162e-4e49-aad8-a717b3b44fd1", "sighting--82b12ba3-5b2e-41d4-9b85-cca67e7859b6", "sighting--f4da10cb-9968-4407-9336-e522ba81951d", "sighting--862fe0d5-0d2a-4f73-a525-4e80d90951a4", "sighting--8e5aa6e2-23ec-4785-8f3f-8f4a20b61ff3", "sighting--2309f81b-a401-4010-a6be-8cad8e7b5cd9", "sighting--64d0894d-a87d-46ac-a28b-0a5f4c9d23bd", "sighting--b403c794-d691-4b65-87eb-e7d375dcc487", "sighting--655ce003-7a96-43cf-ad27-34a4610db1b5", "sighting--cb692af7-da61-4ceb-9425-b3d6031c5989", "sighting--a0bf5a0b-6159-494e-95a0-47152126ef99", "sighting--7ee7263e-80be-45b0-835a-eeee42a557ac", "sighting--65318c29-8a13-49af-b339-a1d444d44cb4", "sighting--e43a29f6-82a8-43f0-a43a-a0590b84ed6c", "sighting--f0904e2c-42e6-4403-9481-4f0568cc38ea", "sighting--334c7d76-6a4e-479b-b834-9f77f73af03a", "sighting--135516f5-bc47-419b-8c24-3a14a6ca0da5", "sighting--e042d305-858b-4141-b3a6-cf0978f65f20", "sighting--439649e3-1d9d-47c5-8a4b-74520ddd90f8", "sighting--2f242bb1-9c07-4e2e-b507-4ff0e5425a9d", "sighting--e21bd69a-b7cf-4d86-aa77-3a034644357d", "sighting--9b60ca61-6be8-47cb-8d3f-eb6c189fb347", "sighting--867a4430-0820-41ce-b261-840665c3f4e7", "sighting--7eea7f65-39ae-4594-8c32-d27876bb770b", "sighting--ed3462d6-42ee-4843-813c-a746d0775f85", "sighting--888f5a15-97ec-4be6-8876-f3b5cdbfdefb", "sighting--59e53a29-7fc9-4e42-9569-be9c30d6c1f6", "sighting--276b2a8a-204a-4582-8dd5-57ff07e6ab18", "sighting--1babf4c8-2f3d-431b-a5aa-b51851f2cde5", "sighting--cc44e227-6903-4063-a21b-158d79418df5", "sighting--348700a1-d573-4e5c-be28-b176eda31fe8", "sighting--8d94f7eb-e676-4b63-baef-c9ca6bc16f67", "sighting--9867578e-b09b-419a-850a-f85b62d07796", "sighting--7154e912-1c0a-471d-aa67-457aae4b2170", "sighting--c3827d6a-8b38-4dca-9dc0-f20096d9c7a2", "sighting--4d46e2e9-a1f1-4e7c-851e-648ce804a482", "sighting--b4bcbb33-3727-49a3-a20f-a980810dfa2b", "sighting--4de8be6a-fbe2-4fee-8d5a-ef45fd826f09", "sighting--337f04bf-4793-4097-b3d9-ca50af2fb6cd", "sighting--85073097-6be4-4951-928f-0ba17099d0f7", "sighting--3a2193c2-a569-43ec-85cb-aab1bcedcd0c", "sighting--43bb7c95-d064-4860-a69f-6d760de632b6", "sighting--442f901b-e6b2-48d1-949f-f8a0730b11d5", "sighting--631a9ceb-01a7-4a2d-a928-5b0ce59de0a5", "sighting--e0fa3868-975c-4078-9d42-9cc8db2ea75e", "sighting--fd144014-f29e-475a-956f-75e530d6604f", "sighting--bcda4af2-202f-48b5-a312-cb5d9d0ebff7", "sighting--11813722-65be-4f8c-87d4-da496e011399", "sighting--917021ef-5cfd-4db5-b456-d064ad1a7cea", "sighting--941f4505-2a59-4e38-91eb-99b73e4c3b65", "sighting--3494c39d-8238-4070-8f48-50cf5079bc8b", "sighting--75dc13d1-1efb-4a01-aa6a-c6b42241295d", "sighting--422b585e-046f-4cc7-8c60-6debc3672b01", "sighting--b42dcd0f-ad2f-4878-879c-56b9c70ee1ef", "sighting--35660077-824f-405a-958c-6b9e4ee5a603", "sighting--b3f3616c-bd70-449d-988c-6ec9c867443b", "sighting--f5e06667-d22d-4b78-806f-7e2aadccc287", "sighting--cea2b47e-67e7-4201-8c88-3aaf0083915a", "sighting--ea387f91-e03a-49cf-b3ea-67fef8562616", "sighting--1247200a-0983-48ba-bf7a-9105735b45c1", "sighting--ef03b33b-0a57-4610-8abf-0f13cd7a0b9e", "sighting--e0b9da64-c21e-477e-97a9-0e1d105ce212", "sighting--4808df72-b8d1-41e6-85d9-ffb88740ce37", "sighting--dc433216-2032-4ebb-9e8a-73888189862e", "sighting--b4dc4612-464e-485b-8c12-31c286e2827b", "sighting--a569cce7-50e2-406b-a491-047cc7e7ee59", "sighting--bd15db78-2017-45ba-a9e5-a99d5b033e38", "sighting--21e3e128-e958-40d8-aa49-1f93fe7222aa", "sighting--8a71a7c7-fe9b-4614-af90-a2ffbfa04bb6", "sighting--cea83968-45c5-4cd7-8f94-dce13ccc5f61", "sighting--ca942495-2b99-4696-be43-953ddae7e002", "sighting--0a6f6f95-87fb-4af9-94ad-928680b8834b", "sighting--86672bbb-0852-4392-be1f-052c4caf4d37", "sighting--db772d95-dd54-4e50-a3be-9006c27388d9", "sighting--6efd6d0e-8e3c-4290-818a-1f8d2d5692d7", "sighting--ce3fd10d-ca11-4d99-8368-7cf67d0a854f", "sighting--d889e67c-c7f1-4813-a4a4-9aed2c8cad26", "sighting--ddb97c2c-58cf-4444-8943-77a7e4b0e9a7", "sighting--7d7e8a8b-ed48-4599-a556-4e0621c07869", "sighting--e016f4d2-a908-402a-94d1-0871f2a9e32e", "sighting--8a4b84cf-cc38-4c1f-8812-88d93f534c83", "sighting--f3bd0718-cf9e-4490-8211-1d6061c8d167", "sighting--b09ed71e-fbe1-48b3-a443-3651e6467ca2", "sighting--1076d063-9cad-4954-a02a-ff8cac1188ee", "sighting--4305e559-e5af-4f0c-94d7-ed8f312be0c9", "sighting--f96057ba-68cf-40f2-9fa4-946ea49e3c21", "sighting--96191643-d03d-44e2-8323-49edf8e09aad", "sighting--639f6efc-5f1a-482e-b0c9-1ea8b81c403a", "sighting--c8c7f5e3-10e9-4d54-942f-9ea54975f6cc", "sighting--90f3e593-8390-43bb-9d28-1fac6805c70f", "sighting--387f6795-1e06-46e1-a4d9-5fd034432d48", "sighting--b0af2fb9-e20c-423b-96e3-015554fd0a5f", "sighting--5d156a8f-752c-4375-8b9b-296135860a95", "sighting--46dc86cf-3eed-4245-9d89-1cad73d74190", "sighting--efa94b1d-a0c2-4bcb-ba66-6e563f0d0c9d", "sighting--0b4f3653-d351-44c9-ae7b-bcba692df158", "sighting--3d93fb78-1ece-40ef-9bc8-bf1116a14648", "sighting--249831aa-0f4f-4af1-bae3-ca9ca89f251f", "sighting--0bca3638-7a5b-479a-92e7-17b927dd7491", "sighting--0f39f5c3-de8a-4a35-8566-7130f93ef9f6", "sighting--ab13567b-f7e0-452d-bc77-c64bbd5ca2b8", "sighting--ca7ec6ee-737c-4b97-a361-ed88cdb9e8bc", "sighting--2ce4a824-caec-4d6b-84da-8f42594a8103", "sighting--c0d634a1-a3f9-46b5-bb42-dc4c889ae85d", "sighting--2e4dc4fd-768c-460e-b4c6-56ddd072e567", "sighting--28b93b86-05f1-4fe3-b4f7-b2b718b0de90", "sighting--2ff0b331-3f18-4c8c-82df-7ccd5154c85f", "sighting--b7e29288-0c21-40dc-8697-e5923290655a", "sighting--d90450b5-93d5-48eb-a760-7d9ad23d1fb0", "sighting--7b22e1e6-b9ab-4492-a668-324c62747757", "sighting--cd69cdd9-a44b-476f-a200-8add358531e6", "sighting--670e213c-5a01-4b9d-962a-d6e903550175", "sighting--c30fcfbe-8248-47f4-98b8-5bfa83596a55", "sighting--505cc3d2-39c4-4b5f-b7f5-a6670545637a", "sighting--94f53a64-a6fb-426a-a272-020a35768fc0", "sighting--558a21c4-6dec-446b-be94-e6f0aca55456", "sighting--87d50664-a0d5-48ad-af8a-dc3784ad0dd4", "sighting--ebe7f656-04cd-4ba1-b14b-fdb19683257b", "sighting--69c4cf71-f1fa-41aa-af58-afa5ab697f75", "sighting--609b4898-0838-46cd-8888-e60e7475a537", "sighting--3b0f1861-663c-465c-9670-0f639e8f2c39", "sighting--92d70148-0968-48bc-9a52-b6f1d8e9916d", "sighting--f35b3be4-896d-4cbf-9fae-d9018f12b847", "sighting--a9f270bd-6fd2-45c8-bdb2-46ec79f38768", "sighting--a69b6152-85bf-41e8-b6ef-9bdd1299f0c1", "sighting--cd883f84-76bf-4f71-a7bd-19b56becd600", "sighting--9f7a423d-af2c-45ce-a92e-c210bf0b9dfd", "sighting--2b13a99a-20bc-4432-a899-93e8184b6a99", "sighting--7d05e46f-dee3-4391-8936-4d56332f990f", "sighting--ef2c5d61-9f28-4f0d-aa6e-e6043fca2ec4", "sighting--3a2a8d04-3c02-4075-887c-4b8ffff798e4", "sighting--2942a5b6-e98e-4942-8d6c-f1d355c1c49e", "sighting--a0c6c6a3-c67e-443a-93a1-9060b6f8cb6d", "sighting--63b3c811-586d-4bc7-bc21-ce3daad4c34d", "sighting--d6a1bfab-0cd8-4704-af85-405eaa58e030", "sighting--4d6126ae-f43c-46fb-8f8b-8e60cccd9de7", "sighting--69dfe43f-65dd-4f19-9493-6df3e1f6f02f", "sighting--6355c579-b7d5-4ed6-b027-04360adac662", "sighting--a3cb66c1-ce2d-4672-beef-bec1fffb6d87", "sighting--36d2bd40-536b-4f27-94c8-814e91feb252", "sighting--07a3db1c-db27-4448-a895-c843ce59f7e6", "sighting--66a152c2-5c68-425c-a2e8-0934cbae03a8", "sighting--e8b908d1-37f3-4992-abf8-78eb9fcab969", "sighting--eb29cb19-84c8-42b3-8b73-d2104a98d660", "sighting--9fa19eee-3e6f-4ba2-bf1f-0a08a7f9dc43", "sighting--f38157df-a43b-45ed-9022-d79546b321c0", "sighting--1bee558a-dab9-4bb1-af38-e2493df42b6e", "sighting--8d81e335-4e3a-425d-93e3-87434396e983", "sighting--3c8c56ab-5c69-4c75-ad91-ac310c9f8835", "sighting--ebf88419-144f-4001-a411-f5e4ed2830e5", "sighting--db157679-e802-4ed2-8d5c-61e9857f24f4", "sighting--f8969bbd-4289-4e44-b9d8-e9a9191a35d4", "sighting--e20652bf-af54-4d77-8a8c-292a295cf90b", "sighting--e4931dac-9ace-4162-a61e-dc0b007e22d4", "sighting--9d9796d6-662d-43fb-9408-7892cec83d35", "sighting--8e6836ce-d4dc-49e3-9e90-c24871d7de2d", "sighting--6e8a4066-1427-4440-81c6-d232a44fecd5", "sighting--d9179c81-2d5f-4006-a166-1bd8f0da1da2", "sighting--4241bb3e-8798-4ee3-9964-4e298ee8f8c2", "sighting--de3ea80c-7a0e-4217-a892-81b82ff32635", "sighting--1ec3d84c-014a-4fe5-80f9-4a61766b8043", "sighting--7ce9ac1b-ecd1-467f-a079-37e8411d9c96", "sighting--d11327d0-b4d6-4122-a135-58f2fcd38848", "sighting--6911bf10-67f8-450b-b31f-72d30a508679", "sighting--6c5376d6-d1d7-49b7-815c-27d57776912d", "sighting--a6ebdf17-ced7-4bd3-a835-cc3a35fb8957", "sighting--f66521e3-46a0-402a-83a6-46b640ee5237", "sighting--c81116bd-7a6f-4d1c-8091-b6e05c973e74", "sighting--15659420-86e5-465e-a933-0d5fcbce802e", "sighting--527b8783-fe81-4bc4-b203-1320803e97f7", "sighting--ed52f64e-99f3-4c50-8e06-1d6e93226a05", "sighting--f8fc844d-c57f-4363-baee-794f53fbdbf1", "sighting--0645a839-c9e7-4e22-a9a5-99c9fea24d8d", "sighting--9a99562a-f0fb-4c1f-9c74-25dc482c8f3c", "sighting--f02fce3f-f988-4e4a-8bcc-230dc5d32ec0", "sighting--fe19121c-bb50-4da5-9d9c-8c5d0fff054f", "sighting--6a483bc3-f85c-4477-8e7b-e69543a61402", "sighting--2ec63827-392b-4696-8edc-dc91447a7683", "sighting--dfbf43e8-6b12-437b-bef2-98565fe86815", "sighting--e2d79a28-f376-4e68-85b3-96e9155f55bc", "sighting--320c49ad-ec05-4dd7-8d7e-f3ef8c9c5c0d", "sighting--8948634a-5b5a-4528-a415-8720a83347c1", "sighting--ba9086b5-ba65-453f-9ebf-76f9cc2cf572", "sighting--fafd0ce6-9707-431e-9c27-45a1379913e3", "sighting--58026879-0c9b-4912-b428-07dd9d6be109", "sighting--218d3f29-8719-455e-b261-b8f01d216c60", "sighting--31bf5eea-6d92-4309-8bdf-aeb855b688f8", "sighting--97173b44-65aa-4b25-82e4-01f8d3cd174e", "sighting--f3550004-5b8c-4233-80d3-d33f6916e955", "sighting--b97c42e3-0fcb-43fc-b776-b769f66c96fd", "sighting--ca120f4a-e837-470c-bfaa-029425a13579", "sighting--6ebc51fb-253d-4f4f-8517-4fa8188c71df", "sighting--9bbb8625-c9ee-4676-a7b0-72039f95d3cd", "sighting--0cc2aa8e-b600-4df5-8c7e-f65b037a478e", "sighting--073b6a1e-f88f-478a-b96b-79c89ca09d20", "sighting--a8402edf-10f1-4783-a47c-36a95ba93b3f", "sighting--137e94ef-217f-437b-bfef-16d1b26a73fd", "sighting--557043ba-c628-4478-bb2b-8dc2d1f45474", "sighting--3e379e9b-5213-41e1-8dae-3fdbc653ed19", "sighting--774f7630-0eea-49af-a31c-3ff5b802baa6", "sighting--d1288058-6d32-4baf-b12d-f7e638f378e7", "sighting--0449e46a-7c2d-4e1d-a054-77cc438cbce5", "sighting--20c33607-4d20-46ff-8f7f-33fddadc5d6d", "sighting--a725a36a-f06e-4b17-943e-5db10e8e3487", "sighting--7727923d-55a1-4718-99f2-18c483dbf04a", "sighting--752bb087-fcfc-45fe-9d57-e56a87d3e61b", "sighting--3297409c-c085-4f99-a31a-d33ca77e8c0c", "sighting--0c84f18a-6d91-4976-bcb2-07a4874b41c2", "sighting--06f3cb02-9427-4fe2-bed7-e70a2b91fb81", "sighting--40905a2f-8ea6-4573-a5c4-a972d35d448f", "sighting--0fd47f77-cfb4-46cf-8a87-1f323d3f4bcd", "sighting--41b22380-97a2-440d-9a41-1857c460325d", "sighting--7fdc0566-76de-4323-906b-8e48e144c38a", "sighting--58b4d1c0-7a89-46f1-8175-22fdfbd0f701", "sighting--8220bc8e-131c-49ec-8d9b-e5044c1f385a", "sighting--d2248550-be50-47de-b4e5-d3ab89617c41", "sighting--54f5aa76-6fbe-4000-a0b6-ad07b9c37957", "sighting--3412e3c4-6d48-4049-b254-63664e749c9b", "sighting--20765979-5bf2-4fe0-ba65-ab246febbf21", "sighting--96cdc1ac-75f3-44b3-824a-94b00a0f3a3f", "sighting--79d002e6-488a-4c22-abc4-9e6702b88787", "sighting--9c143483-b9b1-4ded-afef-b63821eef8a2", "sighting--93b0c659-7f89-4cf2-9f6b-44c477a102d4", "sighting--c6d042ad-23b6-466b-9a1e-2c2de6f0a834", "sighting--1cd888e4-3347-46d1-b4d3-23fd4bdfddf1", "sighting--02fceb4b-f1ee-4ac9-8eec-8d5884892ea7", "sighting--d4c4e8ca-d553-4ac2-8f09-5ad509e951cf", "sighting--7027e90e-0ddf-485d-af6b-7cae852a652d", "sighting--d4b843f5-4d0f-4c52-a107-a07d5950176a", "sighting--9d5fc2a6-67a2-42d5-8d19-636f4f1eb1bc", "sighting--9bae202f-7a1f-4230-922b-cb2529523b52", "sighting--2e5b9b3a-6583-468d-bde4-93621d0d19e9", "sighting--88fcffdb-55ca-42b2-87f0-1876929a8a06", "sighting--a1e8d9cb-ea5f-4a41-8308-2eb41e8c05b6", "sighting--cae4d1a9-3954-4b89-8a64-eb71ab46373d", "sighting--b94bfbdc-d9d1-448f-9555-5eafbf8e4e4a", "sighting--0c2f2274-7662-4c2a-a698-ab00a12d1b76", "sighting--59cb0c68-5139-4be9-b35b-cef06c47c4e0", "sighting--a60523be-e820-4e86-9192-2628421d5dc1", "sighting--b61f1c5f-f702-4734-b7e0-2cfd59127590", "sighting--7d5b1194-f9a9-4283-8d63-0bbdd2ca1781", "sighting--d0ab2721-97c6-4752-b608-68ef3eeeed2e", "sighting--23fdb5e8-d2f0-4dc9-bd7a-b5f963ee0a60", "sighting--559a4222-0607-406c-8ccd-62604972e1b4", "sighting--20c38ecc-f929-43f3-9653-e61dcd27d9d3", "sighting--e2dbe43e-93b5-4f44-89f1-273b7f7b0cd1", "sighting--432f9393-a311-4296-8041-06487a82a51b", "sighting--d617e2a2-02f8-4d5a-857f-a21df5cd9ba9", "sighting--5503bf12-7f6e-4eff-8cf3-c0d679b87448", "sighting--23937bca-bc12-4b3c-b58f-4010f1472ef2", "sighting--a34a0a53-0839-4fc1-9f50-c928aae447c5", "sighting--684b487d-b556-4009-a64b-fd8c56c9645e", "sighting--547f3423-c902-4f23-a807-27501549b759", "sighting--06960e35-b1fa-46a0-b4cd-4b424bfed19b", "sighting--32ee624a-e84c-4f3a-8bfd-486951598a14", "sighting--20b08a4e-bc62-4f8c-8055-9fe8897bb370", "sighting--a5f5566c-4d04-4a8e-85d7-ee534e10f4de", "sighting--760027f4-12e5-4ef0-a8b5-3f89c13e9600", "sighting--42aafae7-0ff6-4316-b7e9-3857cc2a7fd5", "sighting--d82f9edf-b6da-4298-b8cf-a3bd5dd86410", "sighting--5247b11f-0f19-4983-9ff6-70a206ef416c", "sighting--2f3ec0cf-3799-4b1a-9770-b300c11b9c1f", "sighting--1171392a-86b4-4093-b99c-94e89633c3cb", "sighting--cfc57259-5d08-43b2-b56f-f023266d0296", "sighting--65a3c329-6702-47c6-858d-960a6c2d4c3c", "sighting--193c6b08-01be-40c0-8490-90b82c27abda", "sighting--75bdde30-dc5a-4358-88fc-1b661bdcf093", "sighting--0f3fdd20-966b-4e5b-b9d0-198167dffb20", "sighting--1cfe5e7d-61f2-41db-b06d-801c97c0d1b7", "sighting--35b3a907-cf4c-4e83-9c18-9ea73d1395da", "sighting--a4ee0aa0-c2d5-40f1-8097-e472e78a678e", "sighting--d85c4112-1616-4330-9a94-c51672ef7791", "sighting--a7e8ebc3-3191-4035-8c63-cb3586a18958", "sighting--ea845cbe-74dd-42b8-8d6e-345e21aff685", "sighting--e9d74817-0c5d-4119-8e94-97eb3e5dd641", "sighting--09f9073f-9233-444f-ba35-5075ca8bccb4", "sighting--9d492ac1-8648-48d5-ad11-d1569c152d0f", "sighting--5dfd1836-ef8e-4eaa-9dca-7c1eabce155a", "sighting--8010e7b3-9bd9-48e9-b94c-bdb5bf70e285", "sighting--bc1dad7d-5d52-4b59-aa80-204813fe2622", "sighting--d7059c32-0dc9-475f-8031-d4958b6df5c4", "sighting--bcd0c8cf-40d2-4244-b3ef-c4ecd839d010", "sighting--ffdebdfb-8ff8-457b-916c-8d36f3e89bcd", "sighting--839f4eee-9d70-49c1-9113-1e7e140e8139", "sighting--af13828f-d303-4348-a913-e5c9cbfec5b3", "sighting--4482e6c9-f9f1-453f-8736-8b8962443c5e", "sighting--ff1c14ac-cce7-44be-89cd-6030c580ea4b", "sighting--216354b6-8b7f-4649-bffe-5b6a2f494a95", "sighting--1eaa8bd5-6ab4-419f-8974-cc7952ce45cf", "sighting--9c83a6fa-cf8f-44b0-ba00-5a729e18acdc", "sighting--30f55a41-be43-4068-b694-0b0880ec15ea", "sighting--e816e27c-d4b2-44d3-ae5d-fc6bffaa5e8c", "sighting--0269eba9-1780-45f4-b15f-2871ac9cea41", "sighting--36d6136e-9795-4259-ad82-54d03589893c", "sighting--6202f1a9-bc46-4aa7-916e-35abd38e2b83", "sighting--dea66594-7b87-440b-a025-6b06ff5ed696", "sighting--63ef7b78-867c-4856-ba69-d2373ea056a6", "sighting--a1ee169e-23d8-4877-80db-97ae3f310e32", "sighting--81d599ed-61a3-4d5f-8dea-62dd643baa6a", "sighting--55b0621a-f75b-4410-9a8f-b3d1a646c7e7", "sighting--e94cf501-25b0-4443-99ad-091c22460568", "sighting--8da7e305-f9ba-4561-8bee-26095e778e0c", "sighting--b7b6bde6-b034-455d-afd8-8276905d26b1", "sighting--77736fdb-09bc-4ec1-bfb8-1a055beb229d", "sighting--a1d0aa48-4da2-4966-9862-590d4cdfd31f", "sighting--c2d8a5cd-ce3f-4b4d-8828-f35694f4010a", "sighting--eb9d2aaf-eb9a-48dd-8fb9-4531db168f22", "sighting--ce83ec1f-e0d2-4969-a40d-5cf36fe25711", "sighting--ecb03895-e435-4480-a805-5f7508ff037c", "sighting--e8e74ec8-5d02-453e-8127-107ead1a0078", "sighting--b8cc7125-d7ea-4b76-8187-a78fd7a88686", "sighting--381aaca2-4c54-4cac-b4de-cc2a33668cff", "sighting--90d13081-b837-4bed-a9fe-c3e215e0f8dc", "sighting--53907b02-d704-4adb-ac56-08e4ebcd4714", "sighting--8c782383-5d7f-41df-93db-df91fbbcee58", "sighting--ddce7114-9b16-4191-870e-3ad59fd89f6e", "sighting--0847575c-d30e-4dd2-9657-96f62f772596", "sighting--6c477600-8ffe-49c2-8a46-627f27d65014", "sighting--ed7ae567-20ce-4667-b77a-705a584544bb", "sighting--92d9f5d6-e00a-452e-be0e-26e3d8ac7c78", "sighting--82df11ad-9572-4d88-b400-0d448ad69382", "sighting--16769823-c07f-4841-aa56-37db820f52d5", "sighting--a18dd48d-71b7-41a9-8488-43fcd3a8d144", "sighting--4fc9010e-8501-4873-abdb-71875fd9a790", "sighting--3d80826a-b30a-49c2-8ccb-031621d7d518", "sighting--412697f9-3fbd-4d58-8584-78224d58480c", "sighting--ab59ca14-9d95-4eaf-a850-87346685fc8a", "sighting--a6bd513e-1a10-42d2-985e-a82942a3c695", "sighting--fa65de29-070d-42b3-8e61-adef5cb49cd4", "sighting--fbb62e4e-fe18-4a5e-a129-216e81dcb92c", "sighting--b2428bcf-c8f5-47b4-97c9-bcb012ff327f", "sighting--bdb77209-5b05-4398-ba18-fcc99f2379e5", "sighting--cf831c8b-1138-46e9-89d5-bdce58459662", "sighting--c3217bdf-eee8-447d-8079-35a7ded102ec", "sighting--62ce556d-c35b-4d06-bc08-8b18b86b7203", "sighting--cca52386-f244-4b9e-afde-d8e7ef646bbd", "sighting--daed1dbb-6e78-4846-8706-fab4bb24ef80", "sighting--4e2acd38-d456-461c-934b-7ee7b4cc00f1", "sighting--ecc35082-c7ca-45b9-82eb-c0a5caaafca0", "sighting--561a824c-0dd1-4216-9af3-822e18edb32b", "sighting--fce0da56-0c64-481d-ad3a-f2f94edb8bb5", "sighting--ca1e10cd-c1f3-41fe-8d81-3247f592045e", "sighting--4897862e-a17a-4991-a8b5-4e8936ca5beb", "sighting--8407b7b9-0800-405d-b985-d13cbb1d6ea8", "sighting--021be1b9-9d6a-4af2-b48b-1b636106c057", "sighting--25110107-6d42-42e6-ba57-11598e7bdfe9", "sighting--3699ca7a-1275-4bf8-b2d9-0d4a8fe48908", "sighting--8fbb6417-cc57-4a7e-83c9-5f8e024e735a", "sighting--39627a31-ba54-4374-8744-4cf71295622a", "sighting--980b07ce-21f2-420e-986a-3934063f67c3", "sighting--15a41f82-e4d7-4ddb-bcbb-c7d050ed864d", "sighting--eacb951a-221e-4b4d-9304-a86552c8581f", "sighting--06efe2cb-608e-4e59-9677-14da55438e85", "sighting--d13e0f71-0e2d-4586-acab-1767278c668b", "sighting--e4326a48-8d46-442e-bdeb-97cbb28b9409", "sighting--6ba6aef3-cc80-4738-850f-c584b74229e5", "sighting--86813f31-221f-4b33-bb32-1a662605b566", "sighting--810cc582-2dd3-4823-a978-251052251ad0", "sighting--79f846c7-8ba0-4a7d-819e-94d16b337a5f", "sighting--1b3410fc-bfe4-44d7-a07e-483770e63abd", "sighting--b9108077-d90c-4a7a-a4ab-e5db0cf663d0", "sighting--fd7f3aff-bfea-411c-bb88-1adc1f915ba5", "sighting--f693c1fc-6de7-41e1-893b-9fe9eef9d578", "sighting--87871cea-b15f-4bfd-b1d7-2fcfdc19d32f", "sighting--aa0fa7e0-af33-4c09-b374-1e05db330c10", "sighting--72a056c9-016c-481a-989f-a85e919dc8a2", "sighting--e79b1736-ce7b-44d9-bcdc-d7ca70ce635a", "sighting--98ed81d0-9ff7-4d24-8eba-13a9c6830ff9", "sighting--f835a631-e019-42d3-92ac-6f0aff3505ee", "sighting--d2e4e0a3-b37b-481e-852b-b781ccb93bff", "sighting--2f38a27a-08e9-4635-9f2a-44e4537a4b90", "sighting--134df0ca-d0ac-4888-ac9a-313d92a6550f", "sighting--ae27ebd5-56bc-4aec-bf79-c0e8c7dfcb4e", "sighting--de154161-8619-49ea-8c30-bb8a2d7168df", "sighting--1ad04ab4-5882-48f1-a711-872cb5d50bbf", "sighting--7d47b6dc-1683-47dd-93d0-a4a7a2e38f89", "sighting--75ecb4d5-0578-4912-b30a-2ab82740014c", "sighting--40524916-f561-4534-b14d-23d80d65cbb5", "sighting--6a8c082b-32c3-46a2-8f77-fc04e78e4d5f", "sighting--2b017cbe-c77b-460e-8a5b-90425ba3117d", "sighting--d5c8dad6-721a-4f65-afd0-4597c672075b", "sighting--0f5bd727-5cfd-45d2-bec5-a4ee10f9f160", "sighting--603b76b7-69cf-4ce0-b370-10bc952918a8", "sighting--134a038a-ff15-4c6a-8fe6-733ffadb5aad", "sighting--3996e62f-9e8b-492e-97a4-bae39b75e5c6", "sighting--fb199805-06e7-4921-ab42-bee96923c474", "sighting--5f688a99-4e81-466d-afe7-f66c828b4e0c", "sighting--27e6ec57-3ce3-44b7-a20d-7b389973b114", "sighting--2bcdb29a-11ce-46a9-9b9c-0be4e1c9dd14", "sighting--af6b2d26-c60b-4c46-bafc-fb591a9bca72", "sighting--efed7e29-0d80-46f1-b80c-a40bf28c09c4", "sighting--4c20b33f-01c2-4daa-8fa6-d210b4a88ac3", "sighting--d81b3eeb-ffda-4c5a-812a-e767e1a118c1", "sighting--f74104d1-6a1a-45a7-bee8-f38d92ade3f4", "sighting--15a7d15e-6152-4aa3-93c2-87f716a96250", "sighting--61c49115-8c8b-4c2b-b7f1-856ec481c8a2", "sighting--4319ef07-f262-43aa-ac3b-1537e3359393", "sighting--ddb12498-a017-48a0-9ff2-b336e244b145", "sighting--707b4bc1-25ec-4a3d-b9e1-47846e1b5a3b", "sighting--fd68f463-1d08-4942-841e-c11999c48b4c", "sighting--e3e8c3e3-d8eb-4866-8e80-8db1bbdc820d", "sighting--ab5d2234-51e5-4395-8575-f3d7809194bd", "sighting--698a41c1-fd2a-43be-8ab2-3d4c24faf1f0", "sighting--c37c2ef2-af72-4f73-9042-2791cf42c051", "sighting--d617e184-a761-4aa1-8947-342db1c8e318", "sighting--53f34c05-50dd-4f0d-85ed-b3baab24d9c8", "sighting--8c8d8bef-065e-469a-8e69-232e100f0e3f", "sighting--0afd0109-45c1-439d-a9f7-58679e2e0977", "sighting--c1e7941c-b098-49d2-86e4-c261de7bef38", "sighting--4fab24c5-35d0-4cec-b904-96f5fde62f31", "sighting--d0be4f53-74dc-4960-9cbb-4ab05405c83e", "sighting--e7c86098-5701-46f9-b013-0d88f4636eea", "sighting--19c6ac75-67c7-4d30-b73c-e52f5180af83", "sighting--ea5d04ff-9221-43bc-9b60-d6bc426662b4", "sighting--acac8afc-4837-4dc5-93b4-0baa9b60b494", "sighting--71fbfe3e-85de-4ca3-99a9-80ad542fcab2", "sighting--1baff8ea-5564-4bc4-b4f8-2f4825e567a4", "sighting--56118366-ea2e-4c28-8763-6a0d154c8ae6", "sighting--524361bd-1cd7-4f30-b31d-b59fd51eff87", "sighting--ed02b7d1-80c5-4b67-ac05-04692212dc27", "sighting--eaee8594-292c-4dc4-9ae9-7eb15c15cb1e", "sighting--10bca564-7f9c-481f-934d-8990728ad241", "sighting--a7b7b91a-a567-4db4-9354-878f10f52042", "sighting--59909701-3931-4e46-8c1e-e0876a9e99bd", "sighting--baf7d0e8-410f-4d29-ac90-671e4a15c23d", "sighting--3b22c84a-312d-4ce3-a2bd-b2ed34d8af3a", "sighting--7cc7b79b-1cf7-4480-b019-394bc91df02d", "sighting--e42f138a-69e2-43e8-bbe7-3bce09f4df14", "sighting--20a3dd0a-33c7-41c6-9482-a37425fa2590", "sighting--e93960f4-296c-4f47-82f9-a32cd48908b7", "sighting--64f992e5-af5c-4e33-ac2f-afdff83f23f5", "sighting--9a7cd38d-56b0-4e32-a3c5-bcd803e9dac2", "sighting--eae2ba19-4310-4123-a090-4940434f4bc2", "sighting--19aa2768-0731-4282-aa89-d80ac449dec6", "sighting--0d6241ca-bf9b-43fb-a2fb-4005a5ae778c", "sighting--e4a0064d-cb1e-408d-bae6-13f98d0cd793", "sighting--1865c13e-0b59-43f8-9468-f22d12b4962e", "sighting--64b7f860-2b45-4d84-be47-47041d654769", "sighting--96a0a92c-eb4d-4a34-aec0-a4197182dd9d", "sighting--7fda4cee-9126-4e2f-be5f-a18f8ec8e38e", "sighting--5459fd2a-8e9c-4826-87b0-60dc97887053", "sighting--f563b843-5bcf-488c-824f-373e6dd7391e", "sighting--1d01a96c-8f66-4e06-9376-0fe629b39968", "sighting--4f973754-b400-4383-8db4-a2357c1e563f", "sighting--cca0c6a1-cdb7-493b-962e-b2eac11f7cbf", "sighting--07b6c791-da07-438a-8ef4-50c2f3d6856b", "sighting--222bf3c9-d5fe-4605-844f-33c9ea3af4ea", "sighting--305aab24-38cf-427a-8600-7c26c6297f92", "sighting--df473d15-716d-4d47-8afa-c36f047658d5", "sighting--faaafcd7-3844-4db1-b3e5-912e3c078814", "sighting--c7bb3be8-4900-4bcd-84e9-e036dc8557dd", "sighting--299760fa-585d-4f9f-af09-ec1dfdff20cb", "sighting--01dcb266-2392-4471-8376-530cefa1517c", "sighting--f074c4e1-7705-4de5-9067-bde159901047", "sighting--7cbc7a86-a4e2-4433-a887-ea16eb88d4f0", "sighting--cee055b7-ea5c-4c2f-956e-a029b8b8b1b2", "sighting--a8684797-191e-45eb-8a81-7b956205bb74", "sighting--aa5ed114-d415-4ed2-a652-37e2b79109ce", "sighting--f7f1abeb-fd8e-4bc9-9952-791a340fd557", "sighting--2f1fe7c3-ccb2-4c05-adc3-c9b009197cc7", "sighting--74a75f7e-2006-44e7-ab41-30dc2ec2ee4b", "sighting--8b8935a6-35ee-4180-b108-299afeebf0cb", "sighting--4b1eb4a4-b948-412a-b374-a6eb6f8a9477", "sighting--91934e44-61a0-4dfd-a65e-eaf202921e6b", "sighting--7ef65469-0f9d-4eca-87b6-a527dadcd23d", "sighting--eba4381e-0fb0-4150-a3f7-2f2e74b67528", "sighting--aab0a591-cd8a-4c53-b53d-59fadcf75245", "sighting--1ec7fdaf-3e76-4e4a-90a4-3d0be1fc8c53", "sighting--e9fce1f0-9416-4388-8a84-c9af11d61d93", "sighting--dd7e8520-b756-460f-aa66-34c395e1edf5", "sighting--0ac03a31-523f-46d5-9866-3168c5cf0769", "sighting--513b2165-b428-44d2-8bee-63d48b3578f8", "sighting--4f633eee-bb8d-42a3-91ae-27d1e7a51be8", "sighting--06f7a1cc-7dad-4e04-acb5-2880596c4296", "sighting--329d6cdd-e073-4ae5-83b9-19cef1f342a0", "sighting--5ee81e52-1a98-49a1-8edd-86014250ffbc", "sighting--436c86b4-3b18-490f-be87-4ba9063f82ea", "sighting--16999e7c-52af-4ad1-bc12-bc8c315bc416", "sighting--d8d27788-946d-4f80-a246-b8dd3f404997", "sighting--70985900-ae23-4152-8ff9-1eb008b060cd", "sighting--fa8297ab-972c-4fc8-b9c6-6349e81f8c34", "sighting--91a01d32-9492-4da3-b21a-ecea375ba926", "sighting--d9b164e4-3ce5-44fc-907c-c72c0c698927", "sighting--29c9a7e2-c758-4f28-8dd3-6d6b447df245", "sighting--7d8e8724-559e-4d4f-b770-f60faa8d7dee", "sighting--ffa3eecd-2a91-4eee-85eb-fb76b9b4d419", "sighting--e8344ba6-142d-4746-816f-675aa0060175", "sighting--9cacc068-0b2d-42ea-b121-0b7f7c9f249e", "sighting--03d669d1-36a2-4959-b592-ee7e7d65173a", "sighting--bc8c5b30-a2e5-401a-83df-13d287d91949", "sighting--1163a385-882c-4bdc-8e55-a5cfa9d310c5", "sighting--194e60f8-5a5e-47aa-b9e0-0ab8d7e6c013", "sighting--31accd38-6c09-48bf-8161-23fca704e3df", "sighting--03e65b04-a6e9-47c4-a459-be366083e311", "sighting--7534cd80-7ba7-40ed-9ce8-98bbc4c3f5f4", "sighting--6a60cd6f-fb61-4dc7-a14f-faa92cc16750", "sighting--8c61dba3-8c2a-4a5f-8844-653c41703e9f", "sighting--f0e1c417-aa1d-4478-842d-df1a7fc20021", "sighting--8e4cac7f-94c1-45d2-9c52-714ce0783908", "sighting--ce8b5d55-66bb-4b11-ba39-9b789c6dffc2", "sighting--771907d5-e889-4384-808b-26e7fff1354e", "sighting--42e5670d-0d47-4e11-b8f4-01bd1d847dfb", "sighting--479d3835-4036-4d1e-8b5c-d771ee509899", "sighting--5805740d-abef-422a-803f-3dc271bc3866", "sighting--69bd0a04-966d-439c-af71-1c5cbf77fa57", "sighting--e7802f19-5a0d-4f53-b1ac-8bdb1e27b9e7", "sighting--63c2a930-40ef-402f-a0c5-8324d5f33b6b", "sighting--8a09190c-eff7-46fc-830f-bb2763ec881f", "sighting--9635f732-32de-4130-ba95-8660ceac9916", "sighting--66acb44c-d130-44d6-b592-27baea44a3ab", "sighting--8b8f218d-3e81-402e-8854-2856a374167d", "sighting--850bab8c-92f1-44da-8471-822eca6f0d5f", "sighting--eecbf77b-5f94-423f-a0ac-95c22e66eaf2", "sighting--554b69fd-665b-476f-bde0-f6ce44b3160e", "sighting--358e5e34-49b0-4929-9e27-ed82f0634aef", "sighting--39b95df6-c9b6-41c6-8112-21dedf5227e1", "sighting--f6e172c8-1759-46af-b459-7c0bfe63df2c", "sighting--be8e972b-9c04-44cd-9258-8d2237c5d134", "sighting--3aa46ce4-bc9e-4c55-b02d-dc84aff51ded", "sighting--5fcb3613-1331-4167-9366-0ac96bb9c8ae", "sighting--dd62eff5-53b7-4d5c-a596-11f7733c88f0", "sighting--9cbaa66a-f8e3-4443-9311-708635ace274", "sighting--a00a2d28-e7d5-455b-8cb3-be26773342ba", "sighting--7892ff15-6266-4214-9812-9015991c8f69", "sighting--06780543-1776-4e86-b073-7bb9c6d0e452", "sighting--1c7eca53-ea44-4ee4-8cc9-8842a6abe420", "sighting--32a482c6-8cb9-4f9e-9697-28e37e6e254d", "sighting--fd40c74a-3f09-47da-a749-f1dd51e5abdd", "sighting--b866cf3f-ecf0-4036-8e02-fa00a2921dd9", "sighting--b27f61d3-c83d-4e95-8919-e33ac74455a6", "sighting--b37bbe92-9b18-44e4-83a7-ed7296276f17", "sighting--d8406c5a-026f-4293-b25d-9e5597c5e4c2", "sighting--2f18c979-b440-4f7d-ae1d-8b0ecfc78ba9", "sighting--bc78fdc7-2ef2-42d3-bcdc-5b748f30e16a", "sighting--556b13aa-c430-4bbf-b24a-0efd5b1352ec", "sighting--7c79b866-820f-49a9-be51-a5950ae1d31e", "sighting--f4ecf9b2-62ad-4e32-8454-7a1867699517", "sighting--295838ea-11ac-44fd-be3b-68eb65e7049c", "sighting--4e71db9e-24a1-440f-b5c5-048046e5209a", "sighting--e66ec516-1cfd-4055-ab2b-8482f11ec8c9", "sighting--b2b54603-c4c1-458f-8cab-8011e1c0d465", "sighting--805ff88b-c232-49da-b95e-879cb00e9119", "sighting--6d7ec708-e208-42a0-a11b-f65592f3d1b0", "sighting--a98c2ace-7891-4023-9984-7505726a3c78", "sighting--89d20b99-ec85-416c-b73f-dbbe7098ffeb", "sighting--78f4102e-f18f-489b-8e27-346ca1bb162c", "sighting--2e637cfe-2896-41c3-aaa9-d4daf5262593", "sighting--f8dd2c9f-94f6-4164-ba15-5149fe667222", "sighting--60c8419f-150e-449e-a13c-8ab497d3245d", "sighting--afafb890-fcfc-4530-abf8-cc96b1b2f74f", "sighting--3bbbf49f-36e6-4c18-8f0d-19d251c8541e", "sighting--e3da7600-9e53-465c-9cdf-8cd003ab11f3", "sighting--5eece6d5-6834-441b-8e97-fc3257184bee", "sighting--322e08be-5cee-490a-89e6-e3f46615e5d2", "sighting--b6be568e-fb36-4a54-83a7-4ef07066a6f9", "sighting--694c2dac-05f2-45a7-a5fe-3f72fd533e51", "sighting--534dfb20-5b89-48dd-86bb-03cbb4247186", "sighting--7e213244-b3c5-4f95-99c4-a32cea61807d", "sighting--279e22ed-0b53-4b87-8589-0ab82a6cef6c", "sighting--bec61291-fb07-4953-bc4e-66a52e4db0d4", "sighting--0cef8b1d-782e-4195-a353-12c56b6b3f48", "sighting--ba6d19b7-3315-4eeb-b6f4-27178b5815bf", "sighting--d80761bc-d6f0-4b31-9f46-7e98fbe6b3b1", "sighting--b49171c9-f9c9-4c21-8fe7-11b1c2c584bf", "sighting--e6c7302e-4017-496f-a4d6-ec9adaa9622e", "sighting--73a38e12-0743-4476-937f-908fd45954af", "sighting--ab77a045-9812-438f-b737-d05578260706", "sighting--6e8751d1-cfd5-4ac4-b30b-915c2c562026", "sighting--cab2bb91-7f2a-4088-b18e-0fa30b2e2c1a", "sighting--c33f87b6-f30a-44f9-9c35-e575b4c54d1d", "sighting--b21b261c-48f4-4636-b78a-b4940cb9ce98", "sighting--35e4673d-af23-434b-bc31-d46c27d5346a", "sighting--29e80760-45a0-40f4-b85b-9fcbfe349ef1", "sighting--2a62eb6b-0704-4168-aff4-48deb88beb9a", "sighting--ab9ab6da-8ea3-407d-9149-5b8375fec274", "sighting--439f0abc-a94e-4480-8f20-5b161e553754", "sighting--748e8ffd-cccd-4987-acba-302755240f56", "sighting--a3ebc702-f861-4b6c-b52e-858836029de4", "sighting--e0409459-015b-4ac6-a7e3-d9c6d78ccf92", "sighting--93bd3add-9f4b-4772-8d42-3ce058cab567", "sighting--255effb2-f67e-4440-b70c-a10b96e7f1b1", "sighting--2e203e89-f6a7-470e-9dbf-2f48af14d824", "sighting--84b8d78b-268d-4133-9708-b8f4076eaade", "sighting--64c03e37-024e-476f-aec4-329c5798697b", "sighting--0f2cbf8e-96a8-41ed-afa3-e21b723733b3", "sighting--81940bcd-1d7b-4cd2-a7c2-9bc2d76cdc8b", "sighting--9f3573c1-e131-47e5-a288-132028d43b41", "sighting--2bcb4202-96cd-45ab-b7b8-cf76ad5e760a", "sighting--a7c84ad7-a6d9-4d60-83ef-d3c66bd7619d", "sighting--88ac0341-9d1d-4a78-b4a6-57da1146a600", "sighting--da084e9f-0a81-484e-bfa5-21ba4f3efdf1", "sighting--03ec808d-6b14-494a-a196-548bf75e749e", "sighting--837ee2b4-4201-469e-815d-f7516de14bb2", "sighting--c15bfb54-c288-4023-831d-1b2920cf47b1", "sighting--6f7bb787-ada4-4a0f-879a-1b58ddf4a625", "sighting--ca47edad-ba04-4065-b0ff-4ff0daa2f1db", "sighting--3544fff9-9696-4e8b-bdb8-8132933a99b0", "sighting--59b8ec66-a4a5-4d49-a999-c5f04dfe2934", "sighting--cfb23283-4b39-415e-86c8-449e1ac5b0da", "sighting--00c0c5b8-1ad4-4260-8064-5f37ea0ab285", "sighting--15a30325-fba0-4db1-b521-bed8391963ff", "sighting--0cb26050-21d7-4695-894b-83a14a22bb9d", "sighting--bc77825e-3a7b-46a1-bc47-093d139f0ead", "sighting--08ade833-73ab-4843-9f57-2dad9d261df5", "sighting--60524fe1-04db-4a26-b060-1ef5fc1364b0", "sighting--068ec992-4b75-4691-93f3-4046445873aa", "sighting--92d2a447-4750-4d45-a64e-220ec06845c2", "sighting--98ec4a31-f782-4049-8d80-b4903a69bfe0", "sighting--23fbfd9f-e7c5-4821-b8af-7d514b0a8ca7", "sighting--fa83061b-cc9a-4761-82ae-2a938ef5a507", "sighting--1101ee8b-df18-4b03-b5a7-09b51a31e6f3", "sighting--2250b0c5-b046-4195-a8e4-cfed1f341cdb", "sighting--4961e201-46ca-4ea7-b8a1-d83844f649c2", "sighting--f23aeb90-dc4a-4587-874a-527c2db052a7", "sighting--e4186975-ccd5-4b9c-939f-1f51798a4d31", "sighting--05fab8f6-d91b-4393-b2fa-60bc6b92766d", "sighting--a7f84dba-8ecc-4c62-accc-d1cd99845cfb", "sighting--5f182aa4-5f38-4a34-8f9a-fcf20b5dfe51", "sighting--67e3ce4b-28ee-4a27-8972-d92c7e162a7d", "sighting--6fc88353-1b0a-4116-9f83-94bbfeacfd26", "sighting--dd4be279-4e2f-49c6-9857-a3dd7395223c", "sighting--01db06cb-a6ae-4f2f-bdf5-a23bfeb93a6d", "sighting--fbad3c3c-c2f0-419a-88ba-fd7fce3e112f", "sighting--87f9efee-0039-44ff-85f7-9ca50ac32c87", "sighting--8b141719-48a0-4b9e-acea-fd9e95909a66", "sighting--fbb4d17b-a5ba-47c8-85ce-abeb224b7e43", "sighting--67791eae-dd37-4766-98f4-afd10bb6ad72", "sighting--aa925e1d-cae6-41bd-80dd-9e1e4cf8ed85", "sighting--866981ee-e6ca-4142-a2c6-b0128747e2fa", "sighting--9e92311a-76c1-4f4f-aa7d-99e206adb79e", "sighting--583dbc6e-0678-40c0-a16d-d41ccf2f99ad", "sighting--f692f1f8-56d8-4ab4-910e-8e7f895bc7cc", "sighting--83ffe9a4-cba7-49b3-9c01-d67b1509fb1f", "sighting--8c32623d-9270-4d35-a420-26391dbe71e3", "sighting--7a78394e-8df8-4534-a92a-0a784a93def3", "sighting--b637c40e-df26-4c84-ae26-bca75fa7b443", "sighting--f713c961-6b64-47a0-9b4f-6044c8fffcd0", "sighting--835a2e6b-7717-4283-8581-6dc9b5219347", "sighting--47a9630c-7fb1-4769-a6e0-9ee8601f1176", "sighting--b4cf637e-451b-4f08-8746-7413b8050afa", "sighting--7cdfc513-dc81-41c3-8ced-67d1e42ca1bb", "sighting--6e61c762-b0de-4bd7-a5f3-9e5d579dc19c", "sighting--fa01e743-b640-47a7-a222-8e4a9fcbab6e", "sighting--e29245d4-513a-4e4c-b6ec-9ac5819ce6c7", "sighting--56de43e9-ec63-4d6e-9524-e4488c4b3446", "sighting--02e80c58-7f18-4c64-b0a4-07e6a86dfbd4", "sighting--779e27da-0a44-48f1-b552-1b5c138948fb", "sighting--052cdc01-f407-42f6-97e0-6aa59e889c98", "sighting--32b9dd04-915b-4a4f-a3d3-283f39da3d3c", "sighting--7727c53a-4e63-4686-aca7-3f33dbe0685b", "sighting--03adb6ab-d883-457f-8506-d464a6d48ac4", "sighting--acd4f578-d580-46b3-9943-8e011540d1b8", "sighting--7808f6d8-6a82-4b74-8d2a-34f8070c1e7d", "sighting--2ff308f4-8460-4727-ac9c-f65117e162e9", "sighting--29060a42-a089-42e4-8afe-a969bd8b9880", "sighting--2ca1120f-ea7a-4a2b-b9a6-9054a63db40a", "sighting--f6415411-07fe-4c5d-a368-124e8e08b7be", "sighting--b4fc42f8-e528-4c9d-a8c6-81827001c5de", "sighting--bcdaafa4-0b02-45a2-80ae-54666b15dfce", "sighting--39da9ad7-09e2-46ee-86da-a18e205cdfa0", "sighting--2e6f5d24-309e-4f03-bd9f-4494222f07f4", "sighting--99d21803-98cd-4f98-a0d4-077cf52a91ab", "sighting--5d28577e-86db-469b-8b75-8ab6d27dc1e7", "sighting--fa77d462-f62a-4225-826e-1353d685efe3", "sighting--6f3a4e65-cc60-4875-90dd-2dc6e3260b3b", "sighting--910d3a7f-92e7-4dc7-b139-18dc91ee8e02", "sighting--122fa45d-8f3a-417d-86e7-7f4fd837b792", "sighting--cc1eb3f5-2885-4b53-8a1e-87bbb092ca61", "sighting--39ea70c8-d248-42b5-856e-f21ce236c570", "sighting--b8060a6c-824d-4c7e-85be-e2a4028b6a7b", "sighting--9baaaeec-dd0e-4a70-8dc7-ab83930309f6", "sighting--0376ec33-97c4-41e8-b028-29f135064b50", "sighting--15551d21-87ef-4f4d-baf7-cada31499277", "sighting--7da9902d-af6d-47f4-9392-c7e1e6b85385", "sighting--2e446a24-a0c8-401e-b33d-8dfdd36a98d2", "sighting--3de6f5b9-3971-4fc7-9dbb-75ab87f0a573", "sighting--378c8a18-be83-4252-aa9d-a30cbb613a38", "sighting--b1bfe4ed-47bb-47f1-a041-199c3fc24d4f", "sighting--162e2b25-ced4-4e62-babd-17a8833a9ee4", "sighting--96054507-73b0-4876-b10d-7218d49988d7", "sighting--383b6cef-8366-41c4-a60d-2cfc6a4ef918", "sighting--38715fc2-0eb8-4074-990e-011cec51f420", "sighting--cb5fbe59-bd7c-459a-aaf3-7c1f3c9fdcb7", "sighting--00d345c7-5d57-457a-bf29-042e90560894", "sighting--ebb33106-c35a-4b5b-bdfd-937c3a6bde1d", "sighting--4c6725bb-a419-4d55-8dfe-b416f31c5c85", "sighting--f2facbbb-4605-463f-afbf-85d8d09b617c", "sighting--d97a33f9-7dbd-4078-bb20-8634257b83cb", "sighting--cbafdb2f-8d48-4824-81dd-5ffa7112e8b8", "sighting--dcb9c4f6-adc1-4940-aa21-627f0a00432c", "sighting--3ea018eb-2d40-45b1-93f4-ab34172fe3d9", "sighting--9449b8a6-19b1-40ac-8ebf-df6fdd13b07e", "sighting--e1ee5428-759a-459e-8b25-f666e61a2bed", "sighting--b7503e74-85dd-4530-aa7f-d5f964b9f7b4", "sighting--342ca688-afc9-4d34-824f-2bee84589f30", "sighting--981d5ac3-bf0e-49ea-a8a4-c8ebb2ce2cb1", "sighting--0d03d02e-4729-469c-bd70-5b049843eec5", "sighting--8ca0b95e-76e4-4a76-b659-df55106940fc", "sighting--7c70a54e-e885-4242-8d2c-21da797500bd", "sighting--14f57735-7022-4891-b8cc-80f38215e0e6", "sighting--58d87dc3-8db0-410b-b81d-b68b56473dad", "sighting--916c6178-e1b1-40e8-801b-c0aee82f64a1", "sighting--c2431a9a-5492-4d5d-92b2-68367fdee54c", "sighting--8c308ac1-7040-49e7-bb64-c75bb5b21439", "sighting--bf1c9cd8-6001-412b-b959-6ada627f8579", "sighting--060f8107-d400-498d-834c-b2705be55839", "sighting--a0055d8f-f88c-4be6-84c5-89061d1e097a", "sighting--240356e8-6b94-4d13-9b2a-627ec9e2db03", "sighting--c996c45d-c240-45d2-95bf-057efc932fac", "sighting--a5c76896-5c3b-47f8-addb-7ce0cbd402ff", "sighting--8fe9afcc-6037-4666-87df-f1a232cae696", "sighting--141fd9ee-5ce5-411f-bf0c-3a912096226f", "sighting--445d6164-d9a0-49f8-905c-69db315c3291", "sighting--293a8eab-a074-4114-b873-1710906d8791", "sighting--5db2fbaf-8cfd-457c-a945-233cd9b7f5ac", "sighting--da882114-d9e9-45ab-80fb-789c5615b113", "sighting--b7cf84a3-6bed-4ed7-87da-5defb7322f38", "sighting--991c6a0b-e23c-4a49-ba07-077b0efdbdde", "sighting--4c581d8f-04a7-4baa-b445-74d3959661bf", "sighting--6addfba4-dc0b-4cb6-aa12-6090bc35c6db", "sighting--688dfa88-3085-41de-a010-fec4e4a2017c", "sighting--db1c008c-5e36-4f03-99b7-a21bf25078df", "sighting--fca736c9-3edd-4202-9e72-5da5e9e5dd6a", "sighting--f3a86365-30db-48f9-ae9c-5e66246f7ec4", "sighting--21899b40-0218-4222-89bf-f077aff92ced", "sighting--7b0b8ce0-02ef-484d-a85e-6bdea118f794", "sighting--664710b1-ddb6-4c2e-b17b-6feabc49589a", "sighting--21b8ea93-80d3-48eb-8fdb-ebf4cac34594", "sighting--0663a1ec-e1fc-4ebb-abdb-edccf6503c49", "sighting--8830c7ba-2a28-4f23-a2f1-504e8ab1f4f1", "sighting--76eb2b85-bde2-494c-932b-30b779955d2b", "sighting--23e89db3-f9ed-42fa-923b-3053ce2b0303", "sighting--5d27a5a9-8395-433e-b408-90234acb55ad", "sighting--9bb9b9ef-3900-4e5a-9e15-52c81677af82", "sighting--b43d6ede-7a5f-4d23-aca4-476fd7cbfc49", "sighting--224a3244-04cd-4320-bcd0-1eedae11269e", "sighting--af4984cd-efcc-4c13-8cee-c605f337bdea", "sighting--8a6ec234-9472-450b-b0ca-29a4419ac7ca", "sighting--35592d2d-aeb0-47a5-88b8-0d97b6285675", "sighting--53262338-7bdc-403b-aaa3-d87117c61f83", "sighting--69dff736-141d-46c6-9ebf-f05f4bd61a20", "sighting--77cfc791-1e9a-4477-b357-d34d9c6b94e7", "sighting--905d90e1-5913-4cd2-bb6d-0bbac3d91412", "sighting--447e2efb-8063-4850-8b99-8e22522a12fd", "sighting--b249bf10-0cdb-4963-a4cd-4c3edec8a25d", "sighting--0d8bfaf3-855f-4919-b748-dc4ef41fc87f", "sighting--c40ee194-802d-4e34-8e1c-f1d7468f0825", "sighting--176bbc5b-246d-4ceb-8694-3dc5a6816c40", "sighting--042e8d5c-5398-46ff-a10f-6b2f35f83e4e", "sighting--6f27cd99-62e0-49c8-aedd-ace885f39a75", "sighting--2b1c89ad-e8cd-403e-ba38-53ab207cd5cb", "sighting--70744285-b41b-4701-907f-60bcdedebe2e", "sighting--02ec6337-c0c0-4404-82b1-bd4f0713ee37", "sighting--ba553547-8bef-404e-912a-995c814dfd13", "sighting--22d968f4-90ff-460c-820c-b6032308a36e", "sighting--137db7da-0d27-4379-8090-016986dc6687", "sighting--926129be-7b22-442e-a9f4-404ef87e5114", "sighting--2163c3b2-9fca-410b-8841-3f965fab19a0", "sighting--9f488d96-a30b-41d7-831d-84d21acbc2d2", "sighting--ab40e6a6-da5a-4cc5-b379-130f06864842", "sighting--eb969241-d4d7-49e2-927d-0e59cbd08005", "sighting--ea327766-c657-407a-ba29-efa89f6ddf2e", "sighting--596d6f8e-89f6-4161-8532-7a6d5b630b7a", "sighting--39b37fe2-6cb7-4756-b05c-fba8ddb1b7b5", "sighting--6ce4cff4-9462-4ad6-8377-27ff09393a13", "sighting--d65ad534-11d7-46b1-b522-348c575766db", "sighting--05967d2c-ffa1-4fcb-ac56-2bc11cf866c8", "sighting--ad038b1a-916a-4d9c-ad97-54fdb6ad09af", "sighting--2890d280-89b4-4dc6-8da8-d2b46512558d", "sighting--66bf9b6e-536a-4c3c-a074-327cbafacd47", "sighting--d138149f-1026-4973-98c4-0a1619b90c2b", "sighting--8b4974dd-f2f0-47c6-93b3-e954e2a2dd16", "sighting--e1700264-73cd-4476-89de-8c041775d41e", "sighting--e8b7bbca-b425-49d3-868f-782bdf3a4ae6", "sighting--1c6c9165-7cf6-4ec2-8d8a-2f02741ea345", "sighting--adde1bdb-24ca-47e8-947d-d46a15806003", "sighting--4dcc2049-fa1a-4ab6-a300-f3042f35550e", "sighting--8db9e0a9-77c8-45ec-a34a-2c498da72f0c", "sighting--44e0a9ac-31f3-4242-a8e9-5f766b944c9d", "sighting--12c4ac40-98d5-47bc-ae33-b0c0a20ce2bc", "sighting--43dcae71-9fb8-4c68-8cea-0aad13447c40", "sighting--ff9ddc45-d5bc-47b4-82f4-04847fa055fc", "sighting--fe160826-31b2-46d3-8094-cb68120d7a83", "sighting--2fe48ae5-1cc9-4735-8dbe-f55bbb20db06", "sighting--0d77e772-71d4-405b-a1f0-cb757862cbca", "sighting--d8743d33-c2f6-42ce-9524-4ee9500a01bd", "sighting--e5cb0c2a-ef3e-4428-bcab-9c2bf25889b1", "sighting--3405f93a-37dc-4865-9050-c861ab7e2f09", "sighting--9f44d19a-8a81-4b68-93dd-6fbf794bfba2", "sighting--2a4836d1-1975-4e82-9b64-3d7e169b11a2", "sighting--71fe92b2-2515-4e48-b25f-e70d606ab7a6", "sighting--24d5279a-0b98-4081-8d59-11c4402915e2", "sighting--7d46bba8-b01c-4a8b-9664-953b65832376", "sighting--26de8df0-da1d-47a2-8cb0-bce9aaa23bdd", "sighting--996eb3a1-59f0-4923-8468-be228136a51b", "sighting--f8e63643-f74d-4c4d-8251-b515f2c9ce3d", "sighting--10999dc4-a390-4307-86e2-888bd23dc4b4", "sighting--8612a700-41b6-4f8b-a190-ebd83e260204", "sighting--aacd0273-06f9-486f-9326-5b83d8d5ff7e", "sighting--dc0e4cf2-c77f-4664-8b2e-5db941831719", "sighting--a645c228-dc03-4e68-9b90-0210cc7a181e", "sighting--2410cee9-8e31-4990-9b95-ab63730503bc", "sighting--e402732b-b65d-4e19-b204-bc1a86e8394f", "sighting--5a2bf99d-8875-4926-98a2-1b861a1c91fe", "sighting--6ae4deda-2499-45b0-af6c-417e13d96511", "sighting--b7e6cc39-29bb-4bc8-ae1a-d72765ab9122", "sighting--4149a4a1-1657-4d8c-b0a8-501ca7cb2cfc", "sighting--958f363d-1517-4942-986d-741563e2c74b", "sighting--f506c754-9c2f-4aad-a07e-7049218d72c2", "sighting--d7830657-edfa-4a40-bf59-d6204a2cf27e", "sighting--2c135aee-cd07-4f1d-9316-be8bcf9c7817", "sighting--37617f70-869d-409d-a7a5-f28da7ed6d0b", "sighting--bcabcc57-dff1-4551-8287-15a300f2ed4f", "sighting--4592ef19-520b-409e-b0fa-72884bca6c5f", "sighting--39ceba78-d9fc-4cb6-9101-550929b0379d", "sighting--c0f54758-8b4f-4604-9bc5-e062014913bd", "sighting--0be77c50-3274-483a-b2c0-15b7b2f00ce3", "sighting--51aa5c6f-cf9f-40f3-bbfc-368a9ca00c2f", "sighting--6f095669-238d-4bf5-8d78-02d30d7f8935", "sighting--7700c727-e4b7-4d12-b0e0-213ab7c785de", "sighting--59d3bf2d-4ccd-4acc-a5eb-a9588ab0e21e", "sighting--3dc28e1b-fba1-4aa9-ab9a-d55e0b19bce5", "sighting--d7dd9421-4fd1-4d16-a3b0-bdc5082e1092", "sighting--ea9ddc09-2e05-44a2-8c4e-c75fc6adf1b4", "sighting--49cb81a6-7303-4f4f-84d9-487e06699c2d", "sighting--39d837f1-e696-43ed-b663-152e01451d15", "sighting--981519fc-ca01-4b60-844f-529fa78aa188", "sighting--aa03187a-4ab3-4d64-b7b7-1b14a73ab7e0", "sighting--5e2d44ff-316b-43d0-9898-6172ffe35513", "sighting--bf923225-993f-419c-a375-a1ef81ebd3ca", "sighting--4bd5ff0d-41e3-42a5-8147-96f84936571f", "sighting--2146c88a-2e29-4b5f-a553-c063886d679f", "sighting--10428b21-6ad3-42b9-b5bc-7ddf18d90724", "sighting--ec22285c-7924-4ec0-a167-279aee950f2c", "sighting--e1f218fb-1c24-4410-88ac-4a33fe692c07", "sighting--7ba8e753-7dc5-41e4-ae65-2b22ebc73e69", "sighting--e2fc75e5-c13e-4616-906a-8dc296426019", "sighting--12c26630-ff3b-4d33-8f2d-ea14eb1c7503", "sighting--e0b0e62d-d3b0-4991-8ed8-aaead8d2b5ad", "sighting--91da38b8-b3ac-47c8-8311-f6aab5445bd8", "sighting--7d342f60-327c-4ad0-805f-828dd5ecb98a", "sighting--395afdc6-8d09-4ce3-9f5e-e9e495cfd062", "sighting--82ba681c-55d3-4c86-911f-a17865b397ef", "sighting--26922c1d-91a2-4212-9195-d9b13b3a7e2b", "sighting--c02162e1-31ed-4f9f-b459-7510d18634a8", "sighting--f58f7b00-bbef-440c-b799-0c89c05a4306", "sighting--e0470a54-0e88-4f35-908a-506430d47c6e", "sighting--4d1805a3-5031-44d0-b7a1-4964ceeef6ab", "sighting--03b18123-2acb-40f8-beef-c24fc016da4a", "sighting--29a10649-145b-440e-a4ee-3c5ea11ee5de", "sighting--3cd04fa1-f82b-4aec-93f8-20c3650fe4f1", "sighting--4fe3ef8c-141d-4446-b4d2-6a82c90f08b7", "sighting--3a914c5a-f197-44a6-8771-12219ac54194", "sighting--f18e1eac-3b96-46c5-ae24-366c46323f4e", "sighting--fd5fbcf0-afa5-4c96-ba7b-71b57e1f0407", "sighting--1b82c940-01b5-4bea-9979-703226832124", "sighting--4c43c4aa-bf44-4f53-82d8-97cd2a27b65c", "sighting--e01a4f3b-2365-4970-8d1e-e63b254de3f7", "sighting--daeb7860-9dca-4dd9-856b-73f62bfef728", "sighting--5bd88362-3571-4cbd-9125-99427fa9fcd3", "sighting--e2474cf5-9687-41ae-9d96-a84311375f4a", "sighting--e5d226b9-8538-44ca-a732-2fe8f1e02f94", "sighting--216f270f-0c81-4baf-b6e9-7d02c1394025", "sighting--cb161998-6d1c-4c33-8788-6f5b357e533f", "sighting--462e620c-a1c0-4754-8534-740779aab9ed", "sighting--121900c3-22cd-46ab-b9fe-5b1a3c65528c", "sighting--ac1ca127-33ca-4493-8449-673fd13a889d", "sighting--c4be4341-947c-48a8-9b57-8aa01b2f5632", "sighting--d1ee6775-9e8d-4b59-a64c-04ac903fa8fc", "sighting--693823a7-f014-4e14-8952-a8570a756f52", "sighting--0fc0b174-4815-476d-99d2-b57676f6aeaf", "sighting--f3606cd6-4223-4005-9bbc-e94fcf61ec8e", "sighting--10a231bf-2f54-4bc5-9656-26edb6e04076", "sighting--67dba98b-d7d0-4798-9ee1-27d303fbd44f", "sighting--41a0cf28-8ed3-4610-aa2c-37ddfa39097c", "sighting--d7831b62-beec-41d6-8837-a7a7cbfd4e8e", "sighting--e69d29d2-087e-4baa-a837-bec2fa472010", "sighting--baf3d801-ac7e-46b9-885e-cb4bc9cac528", "sighting--61ee024d-6c24-4b5a-acf3-785300a8e115", "sighting--5adddab3-c89c-4f71-9e81-fbf33cc9941d", "sighting--144131ee-3c1d-487f-82c6-417eed9c98bf", "sighting--e5c5055b-1962-4970-8529-5c0feb580921", "sighting--99b506d0-c7cb-4765-a60e-bc49c852c453", "sighting--cdd19df1-8066-4dde-90e3-10c656ca83b8", "sighting--e40e49d2-afc8-4ef6-89a4-aa55d13bc363", "sighting--4318d001-99b4-42bb-a9f2-b5fa23997c6e", "sighting--513415bf-a319-433d-8646-2c0ee0f80323", "sighting--03753bb9-bb23-4042-bad8-c978b1a348d0", "sighting--5b9833e1-429c-4a87-9baf-1adbca052319", "sighting--fb6c7f19-7a4b-4b92-928f-4ac423204590", "sighting--469d2861-047d-4b86-b64a-ab641355cbaa", "sighting--e97dd923-7805-4761-b0d9-b4cd632610e2", "sighting--28d1851d-922e-4b07-b8cd-7f7b264c44b4", "sighting--91534b2d-ffa7-4fe7-aa73-1949cbf434e5", "sighting--a607dda0-2afb-4926-a012-cb8799875166", "sighting--5b810ce9-6973-4cab-b2e4-c51f1619ac78", "sighting--38e3057d-8a00-44cd-a7c0-65b286eef49a", "sighting--57db2de8-615d-47fe-98ce-e7ff2d6c028e", "sighting--26d2c3fb-529b-4186-9d48-0600059d81b2", "sighting--22308a65-1727-45f5-bab1-ca88fd8ce428", "sighting--2ca51e7a-54d6-426e-92fa-d21ac4903e83", "sighting--46bbae06-2512-48a8-92be-fe855c3e024f", "sighting--2aa26cc2-f00a-4f2d-8784-f9ba0653a056", "sighting--96929adb-d809-4c2a-ac89-4537e95f18ae", "sighting--e7f59aad-4c62-40de-8e1f-8173cf7ffc85", "sighting--db0d119e-69ad-4baf-bb11-bf78f76f2604", "sighting--8e46a6ed-8066-422f-a808-42f983d7d15d", "sighting--905bb81b-0f3f-4324-a9e6-ce816a51256d", "sighting--fe0c4278-f39b-4421-b36b-3e60b7b763b1", "sighting--78aba1b5-7f97-4507-b714-fb015c79d50b", "sighting--ecfae2ba-1d20-4317-a664-49a4db14314b", "sighting--7bbad043-9ee9-4d7c-a6d0-4f6f567d4ca9", "sighting--60351e57-9a6a-464a-b6a8-2decfa104a39", "sighting--1248f5ee-f242-4a98-a282-739fca7840df", "sighting--4254925b-1301-4bc9-a678-e293407bd70d", "sighting--dcd19276-c5bd-4fe7-a5a5-01ed554ae372", "sighting--00b00d80-575f-40f3-8fa3-ac6cc287be70", "sighting--583dfe6f-e009-42f2-a22c-0e25efbc0d3d", "sighting--3ea5c767-a7b3-4031-a8b6-29f801866caf", "sighting--66f1b62a-f577-4f28-8bd7-eb4ed39a1e58", "sighting--ec0ddcc1-706b-4a25-b162-fae09a2af11c", "sighting--8592e8f8-079d-4573-b405-225bf67381ba", "sighting--fc0efdfa-355d-4975-8379-ad67c305d43e", "sighting--ec8d6a97-54cd-46c5-a270-6b38089c17aa", "sighting--c8918035-cc60-4bcb-9e05-27add0354321", "sighting--a5bd7aa5-fb6e-4bde-8685-2dedf5b4e9e6", "sighting--c6401120-5fab-47ba-99d9-22e37a4abdc3", "sighting--132d43ac-df92-407c-a932-315a71d718e7", "sighting--d7b252ff-374b-4226-bb98-457450aaea6b", "sighting--3fa077e8-08b8-4cc8-a800-c9f8e1c99c4c", "sighting--339b0b1d-d0d7-42ab-96bf-00a924f267d0", "sighting--9db679b7-3be7-4de2-8e03-3b82b7a9b398", "sighting--cbd2b23a-f935-4366-8af1-471788ffade3", "sighting--db4a3b13-bc34-48e7-b97f-76e12301b74a", "sighting--6678eba5-2a3f-4ad4-bdfe-b997b47acdbc", "sighting--67d0f535-f100-431e-8c11-e62a777529f6", "sighting--6fa3faee-d35a-417d-afaa-c0d668a66f43", "sighting--3b8610b4-acc3-44f5-bd0a-e90658f9a131", "sighting--dde4c2a7-8b8d-4a88-bad2-3273e667eec4", "sighting--182edc9f-c2c9-48a9-8bdb-1d26e38735ce", "sighting--2671396e-ea34-4ebf-9135-4cf2179507e1", "sighting--59634b2d-76d2-4856-8b04-7f3cfc330c75", "sighting--2926ee02-8f1b-46cb-8f3c-4aa54f872ae5", "sighting--6e07a2ee-e664-4035-aa0d-056b3d97829d", "sighting--4acfb9bb-9d72-4cbd-8da2-16d4accc4be6", "sighting--5aa524c0-573e-4223-9f81-afc7ecc6c11a", "sighting--74989bbc-c70b-4353-a510-4a1c92bcaea4", "sighting--73f7a9d4-8785-4efe-9b05-9ec6036c3e02", "sighting--95106d1d-61ff-4de3-a776-de7355749b34", "sighting--036d9262-ae13-42dc-b122-ff4791498c0f", "sighting--dd0bd58c-3302-4453-9b5b-b774ba838088", "sighting--0c792641-ba93-4804-b879-19eca6af3f2e", "sighting--21d8fe75-959f-4b70-ab0f-0ef0a8b8fa68", "sighting--9d0edd30-e37d-4d6f-8c67-67593055fdf8", "sighting--3a668858-1284-4ed9-9f3f-aac5a851a20a", "sighting--e0aacf2f-a9b8-4570-8371-ce6294a6e380", "sighting--b43a5592-de42-48d7-8fce-3ed20cd4d760", "sighting--868d8cc5-2dc4-4a38-83ef-9714663756ef", "sighting--3c6b9354-c674-4896-96e7-a041c571b0f8", "sighting--5ded2ae6-7e98-47da-b579-9b982baf6bac", "sighting--1242635f-7c9d-4ac5-8826-a52a03513cd8", "sighting--cc7e23ee-912c-4e24-bd7e-08382e5c6cf1", "sighting--1c49d2f4-1095-483d-ba42-621ba1a4bd64", "sighting--aa427545-b8dc-46b2-a2f2-75c48f5f0747", "sighting--e3b796b4-4d05-4f78-9d65-6c94dfcaf8c8", "sighting--257a4c46-d52f-41b1-9478-6a30e9609b82", "sighting--46cbd17e-bede-4e9e-8e0c-1f44c1a2ff6d", "sighting--32c30f27-006c-49e3-8a3a-c4444f241cb4", "sighting--57b85c63-a956-4586-96e5-b6979e0231a3", "sighting--d97092b7-6327-4524-b208-7df10b27a3f3", "sighting--7a81886d-4177-4f3c-9e73-a413a07b8495", "sighting--91db2cd9-1371-41c4-aa62-0826770fc0b1", "sighting--f0630cf1-0046-41d7-abc3-6c5a6a896893", "sighting--34d481c7-9f5e-43de-9da6-27455db969f1", "sighting--00fc3a68-f613-45f2-a7e2-b01e0a7eba94", "sighting--d7a04a07-d4bc-4002-b86a-4c1446e85120", "sighting--a46c64be-7a77-4e24-9748-582fb9c982da", "sighting--7eaa9734-2667-4b10-911b-6bff9fe707ae", "sighting--66e5fdc6-c658-4ca6-885e-d187a58b773e", "sighting--de7b3ee6-d4c1-4136-800d-58824f075c46", "sighting--d3624a4e-6060-447a-be86-eeced9a8c5aa", "sighting--b5a78ea5-bea8-4db1-b342-d80deb515c3f", "sighting--54726279-e0a5-4b31-962b-2bed3389ef06", "sighting--cb615a1e-eb3d-41c6-a6b8-1dcfdc2464ea", "sighting--466b530b-a042-4645-9033-a22aaa33cf65", "sighting--5f55477c-b2a3-4ad7-9b3c-87d563ac2981", "sighting--3df76ef1-cf92-4cfe-8d15-2b8d63914126", "sighting--b0aa51a3-370e-4dec-a8ae-2bd2ab86a422", "sighting--20b2cb0b-5449-4e77-87ee-c8e8cb162da2", "sighting--2ede213e-659e-4f7b-97ff-ca7668b11d60", "sighting--a995d843-f883-49b6-8d0e-67fc48454b2b", "sighting--95c0df5b-5462-45b4-a64a-bbc97e726006", "sighting--cb91f6f3-1fa7-42cf-b6a4-5536e02b1701", "sighting--93be8ff8-ddaa-4bf0-8ff9-f9990be7bc82", "sighting--5fd763da-9070-41f9-8478-430983d6c071", "sighting--a9d97550-7f15-475f-a37a-56d11c2a3331", "sighting--b3579b40-376d-4dd7-b373-186751656068", "sighting--44f96d78-ae2d-4954-a3f4-dc76f4403c76", "sighting--43df3cac-5324-492e-8dc1-c6b9626c0e96", "sighting--0ec83358-c0d9-4c78-ad16-676032685afd", "sighting--df766038-a7c3-4bfd-98fe-2ae41b0f15b2", "sighting--37d73cb5-5c11-4d4b-8d4c-72a764f52a35", "sighting--6713e248-a4cc-4f03-b6a9-241e95bc2cb9", "sighting--5036fb78-92a8-40f1-acba-ad46e9264512", "sighting--0de02c49-0f99-402f-9bef-0a0ac66dc89a", "sighting--f86c4921-927f-4573-9c55-30214457b6db", "sighting--b005864e-2f5b-47f6-b976-0d382267f892", "sighting--f2b5cfd8-ebbe-4d23-ae41-b559dec13826", "sighting--994e527d-57d8-410d-bd9b-c7a1eef679e3", "sighting--d7c06c04-36be-4154-bbdb-bffbb37f68ac", "sighting--9e0d19a0-2850-4039-86fb-5250f578d102", "sighting--7721efca-9d4a-4d2b-a5af-4ab9e57fb09b", "sighting--918224e5-5d26-4501-90aa-635fa95b74a5", "sighting--1cb94c23-9dae-4bba-bffa-7f88e6939926", "sighting--e0585534-e764-4dab-9a78-8addaaa23bcf", "sighting--1891dfe7-9b68-4166-87fc-6f3e6dd98d5c", "sighting--bf78a758-0b9c-48c0-b070-919854d2c05c", "sighting--75bd9d94-a16f-449e-a9b1-9247cef3d007", "sighting--881b65af-c969-412b-820a-cabd6d926057", "sighting--51c266bb-9aee-4e5f-8554-86327061e2d2", "sighting--ab58e9ba-0f0a-4f0c-ab7a-def292b2e805", "sighting--6352e801-4388-4d84-970e-4b18f73a3e3a", "sighting--b04a695b-a9c2-48ee-8e3f-7d3c1efaf102", "sighting--8b1566f8-3abf-43df-b216-818814eec4f7", "sighting--008f5ce1-556c-469c-96c2-793de5b05801", "sighting--a44fb88c-0feb-4bf5-a095-7dbaf3a96737", "sighting--42804b4f-4a89-4034-9ff9-fe7ca5d9adff", "sighting--b39a5fb5-8428-47e1-8a81-4a8f129b4b3f", "sighting--3334e15d-7ace-4163-af42-a91e83f5148c", "sighting--f6052172-f980-41f8-8923-64f702ebe3ea", "sighting--f3f445e7-10f0-4f7d-a807-b0d219cafeab", "sighting--09aa2ea2-d1b0-4246-9429-c7cb39b02526", "sighting--8777f2e5-7c4a-41b9-860b-924d4575735c", "sighting--54255aae-9d1f-440e-8c03-1e4dd9fc8dfc", "sighting--85734812-3428-4754-8973-77ab996ab560", "sighting--9adf6ce6-309c-4a93-9532-0a433762a0a2", "sighting--f533c918-17dc-4583-a1b4-420deeb6765c", "sighting--6ed2cac7-c9a3-4241-8d83-51e7ec4383b9", "sighting--867bd4ac-7b1e-40f4-99de-cbe7f775d396", "sighting--e0aa92ea-17c5-494d-843b-a0ba78b29fdf", "sighting--f3c918fc-a7de-459b-ae01-e74d6e5affe0", "sighting--a59fba75-1b97-437d-b216-e75035df8e49", "sighting--54abbe7a-90c6-4850-835a-35afa5339792", "sighting--17e017d1-f42f-4bfd-b429-a4efa50ec7b8", "sighting--5a821e8d-5c2d-46e2-a57f-91a95a7612b1", "sighting--cfb6335d-650c-4bb2-bae7-d58e24615c73", "sighting--3307da61-532b-41af-a047-a003fd261ee2", "sighting--c8f9459c-574d-4c1e-9c24-3a723df765ef", "sighting--6aa6f413-ec6d-4990-b073-feeb57a49ec6", "sighting--699a3f79-718e-4132-9511-133c86d8222b", "sighting--e711aa40-cde4-447e-a8b9-1daa6555aed8", "sighting--60deee07-5c64-4411-b530-40e0572c5ced", "sighting--034e1425-626e-42d8-be30-ad4f21ac7643", "sighting--8996063e-7a44-4acd-9153-8ca4a98d1f95", "sighting--9ae73637-315b-43a9-9b96-30343b658d9c", "sighting--a4c7733b-09f8-4c11-91b9-89d4dda55633", "sighting--475caad6-3405-4dff-b044-9d00c2fa78df", "sighting--90864438-efc0-4693-b0c8-fba8f825cc19", "sighting--a339adc2-1295-4b80-a541-c8df7583dfee", "sighting--dbe826da-d1b8-4ec4-9f13-c85a2fb4540f", "sighting--b948a79c-77b8-4e29-8ff9-e76934614951", "sighting--b03f50ab-bf9e-482e-b399-91a178b48977", "sighting--5f2656bb-9695-40b7-8f60-30a7c1057917", "sighting--ae8c525b-6bd4-47e6-81a8-09dc3eba1425", "sighting--20500554-f3ed-4e1c-89f9-29bb7ddd8d1e", "sighting--5800330e-0ff3-4b91-96d6-d303d48e3e77", "sighting--e35fdc64-57a9-4eea-918b-4e1f03ff89c9", "sighting--02f7a053-5b7d-4ab9-898e-d83eb99f25bd", "sighting--4ca98826-f87c-4d14-b5db-fc528b71d0de", "sighting--1ad3a92f-278b-4a9b-a57d-4f4116882ba3", "sighting--58a8f659-b62d-4205-ab6b-a8472e549a97", "sighting--0d94bf53-5f67-4917-b465-d7184104720a", "sighting--151ce401-7cc9-4411-bcd8-19312a348b9b", "sighting--62ea2ce2-9edc-4fb6-981a-c5c5ec5b3256", "sighting--16165c77-6309-4d43-b2d8-dfef9f999f7a", "sighting--75e3bcdd-6697-425c-af00-9b30aa258309", "sighting--25838d53-f64e-493c-839d-cf63591f6223", "sighting--bc5c58fb-d43d-44b2-a593-01b5f6d17249", "sighting--e4e2a1e3-09f6-4969-bdeb-50081a48eb0f", "sighting--ce798c76-3f54-4334-a2cb-b2bfb9e619f1", "sighting--5381fed5-a1cc-4f39-8215-1236cef0af97", "sighting--da73e620-4263-4e82-811c-d26537e1c22f", "sighting--9a104e68-fca1-429b-85ed-8e0d9a11e530", "sighting--40433770-0eab-4a09-a9f3-52c1e409cf3e", "sighting--e85263a8-e176-4369-add0-3389626a2a3d", "sighting--f791ef40-e3df-4002-9503-b0b83d7b2668", "sighting--9182948d-c9d4-4032-bfc0-3230050c49d2", "sighting--3e255f60-1031-4d92-bd97-0fdef49d7f6a", "sighting--83faf11e-bfed-47de-a75e-606ecc95ea3b", "sighting--9b0748ed-ad95-4a24-a682-b230db3a25bc", "sighting--5b82bf07-48cc-41f1-b54b-c783aee17217", "sighting--0dd53f8e-4d74-4a94-9ab3-ef1340de75a6", "sighting--1c6a8917-c4c8-4b37-a17a-81ffebba23bf", "sighting--3dd02d30-c3f3-4b75-942e-2bbb02bd7b47", "sighting--54b5b488-0162-46fb-881d-785312a2efb4", "sighting--c40dc7e1-694b-4fad-9748-cf44c9035e49", "sighting--533c99d4-d2de-48e1-a24a-2cefd46d066a", "sighting--7948a9cc-23b8-4293-aa35-40f1d95a7db0", "sighting--927736fa-47de-4a88-baf0-000d275ae952", "sighting--6847f34e-1bdf-4df5-99e7-92aa0e0aef33", "sighting--89cc81a9-08ae-49ed-a033-8d63f16f4ffc", "sighting--84a726e0-930c-4f55-b64b-5e9d83dd4edb", "sighting--72972c6c-3f52-43ad-8cce-9a02d93a0e11", "sighting--f8272754-f56b-40cd-902b-758f3390ade6", "sighting--6e11adf0-ef5e-4536-9476-0419ff96b9cc", "sighting--33940560-332b-4038-bc5d-e0fa6693e1af", "sighting--9c8e533a-367a-48a0-b2cf-ec49f626da1e", "sighting--8b557e79-c444-4f32-9231-5f5da5c7e1ba", "sighting--70b03a9f-288e-43f5-ac3b-b7aba628d48c", "sighting--7577f0a0-a32a-4ae1-b9b5-ffc61f9ba02e", "sighting--2ee570f3-7343-499d-b448-fba91851dd2b", "sighting--196c1c0f-9446-4362-a1bd-9cedde81d4f4", "sighting--0efdbfdb-5ea6-4115-aceb-f405520c4e7e", "sighting--07f72f1d-5e38-49c3-8f61-85231cc081cc", "sighting--f0f21ada-27ce-4812-b4f0-de6a65c3f6b0", "sighting--226a3709-b6a8-48d6-8cba-2d4514e83622", "sighting--fab13a65-c6fc-4eb5-8fca-aa765d78c55a", "sighting--2c1cfff3-3ec1-4829-8981-00f7f7d72b9a", "sighting--fc985ea6-e4b9-473a-aa95-bf1a129eb32d", "sighting--c9aee15f-1d2b-463c-8a2b-a7bcb54c92fc", "sighting--f881b110-d6b5-4660-844d-9cc8e8a1a0e7", "sighting--98be2b6c-aaec-4213-aeac-2cdd2f3b15ef", "sighting--d84223b7-764b-40d4-bc37-ca04f69d465a", "sighting--96875524-24b0-45f6-aba4-3073f0d4fa51", "sighting--335e2f6b-b57d-4cc9-9bf0-08991864a0ca", "sighting--5a9ec2f9-1f5c-48d7-907c-206d2db20d77", "sighting--b9445c4b-0bf3-4c76-a662-9311b9bd2b70", "sighting--4494bd19-b18f-4d07-907e-08698c9c2260", "sighting--9e749cae-4b61-468b-bc75-ca7a07887d0a", "sighting--ad090c66-c50f-4a3a-9134-85a7f720692a", "sighting--c543963e-0bdf-4d2b-85e4-e593c728bdfa", "sighting--640bf288-b602-47ee-9ffb-19a87261717e", "sighting--9ba40b7b-a5dc-403d-ae1d-5d611e7765f7", "sighting--eba77c56-bf3c-4bf0-812e-f89ef0758bd7", "sighting--bb59cb00-0837-4b7e-8257-1146d5a1c534", "sighting--0b7b2109-ba6d-4bb3-a416-5e590af172bf", "sighting--4fc8570e-4c9b-4fbb-bddc-701791ce85e1", "sighting--b5ccb584-975b-4fed-a680-ca273e65ea95", "sighting--7ce8e450-0c04-4196-9e02-b023406cc175", "sighting--0e48f737-a9be-4f14-a1c4-c3a25869ff23", "sighting--7736b22f-3873-40a5-9619-eef2c5e7540e", "sighting--2d4b31e4-2392-4ffc-8812-d91ca09b5d81", "sighting--e444ab5f-9188-4153-ac6e-7fb8c49f54a0", "sighting--f14b7b07-ca90-43f5-ba6c-650ff0db36d6", "sighting--dd5a3f1b-1936-4afe-b1f0-ff4b0a64962c", "sighting--3d12f81a-b19f-4cca-bca6-4b48a4e4f33a", "sighting--e93b0455-6aff-4e74-812c-33f891545903", "sighting--121acf34-f700-444b-91d5-b3a8eb20d682", "sighting--5c63654b-1716-434e-a1ab-ea021f7d9902", "sighting--d6fcf50b-b19d-4a5e-aeff-5999a47236f6", "sighting--d4f9ee6b-b0d3-4091-bed1-a6173d6273dc", "sighting--d3c81168-51c2-48d5-bbe4-238f75680bf1", "sighting--a1787a2e-e856-4158-b9ac-9e067bc5bd9d", "sighting--c8b59cce-19a1-4d10-8a65-ebba671bccbe", "sighting--3e11a081-15a2-4656-a279-35e98fbd76c6", "sighting--55710fd4-a5fc-4ac2-81e8-42167f35e3a8", "sighting--87a18f7a-c46e-46d0-8627-42d6a07d4b61", "sighting--825dab4f-8330-4098-a52b-b8af902ef276", "sighting--1860846c-1df9-4c72-a27e-448e8b742a30", "sighting--4b87a85c-c21d-4cac-999a-b3a00d697265", "sighting--44a86e76-bdc0-4e3a-8102-1f172206fcba", "sighting--7bf8aa05-96c5-464a-a7b5-841aecd692b3", "sighting--03762bbe-861a-45d6-af87-09ec72e90dc7", "sighting--7ee204c4-1dfa-44c3-8c3e-fcf5c165c795", "sighting--0201023d-845c-460e-b0e8-a3fa7d950a1f", "sighting--19f62c54-ccea-4990-ab22-2daafd18dc8e", "sighting--e3509697-73a0-498f-92c0-887b4c675244", "sighting--51d34256-4fd0-49a9-b855-536694e6830e", "sighting--75bc9ad4-b8a7-47bd-bea9-7111cfb02c95", "sighting--07f04958-fa97-4e1e-905d-27fce42c8547", "sighting--0e8deb5e-3c53-449b-bf75-49b262a1aa7e", "sighting--d922cbe0-4cf2-4f5a-ac8c-e5dae460ea0b", "sighting--6b5060a1-dceb-418e-8bd7-916a4a484741", "sighting--5348caf4-6c62-49e8-9096-bd601779232b", "sighting--c8375fac-57e0-4a68-8cd4-cf65a7772951", "sighting--218749c1-5a0c-4088-98d0-66fd15b301ae", "sighting--16126ad8-9013-4394-9199-149ceef5f91a", "sighting--bb4f9d53-0fdb-40b7-9a83-6ab3d0ce69f5", "sighting--03dc5f45-8958-45ad-8d94-0e7861612d3b", "sighting--72bdb2b7-2673-4a92-a2f5-2001690a7c8e", "sighting--baa4adbe-91c6-4f45-b00e-5c3d656ffe3e", "sighting--2baa2266-782d-4da8-acf6-92dbe5b43fee", "sighting--9299bd97-a11e-4114-88cc-44db9c6dde6a", "sighting--5f16d58c-d662-465f-8a32-9743461dbc2c", "sighting--662b30f5-2068-4f8f-8dae-954b9aed32ed", "sighting--60ff8399-aaf8-420d-9a93-0137028e872e", "sighting--087f215d-00f1-41e5-a033-b22939839a8a", "sighting--7f96b56d-b41e-4cf8-8bf8-0a6a54f005ed", "sighting--73b7095d-921a-4a01-9d15-fc4a74076303", "sighting--7a033ab3-c092-45c9-97bc-f1ec47267edc", "sighting--601e7ef6-feb5-43d6-b05d-12576f56445b", "sighting--6057f3f5-69d0-4e18-af49-1a95ddce605b", "sighting--8b09d3af-01c3-4eb4-a6d7-f6f67153564a", "sighting--b72f39ea-17ee-40ca-a1e0-7554221fc7a7", "sighting--a91edb4b-ce40-4d03-a8fe-7dbce2d1871d", "sighting--f675012b-6d46-4edb-a76b-db7acc6fa1fb", "sighting--4e83aa18-785c-4a22-aa5f-8a41d3b8f1fc", "sighting--236b1d22-f5e6-45db-bfd1-b7a26e19d652", "sighting--e615b7fc-ebcd-4d17-9ce2-8576cfc11255", "sighting--c771c348-a9ac-4e95-95fa-5cb455a6afb8", "sighting--52a5d40f-95ea-42c1-b666-b426f607e6c5", "sighting--cb94b183-767c-450e-8b8c-c043336f0c25", "sighting--f51dc486-b8f2-46e4-a267-081f776e20f6", "sighting--d03afbcd-55b1-4456-9950-b0ff37d9a3a7", "sighting--b4b6eeee-e040-4858-be17-374ef93b7e83", "sighting--9e56d80d-2007-4431-bef5-ea8f847eb563", "sighting--13680b13-024b-4adb-9746-9ae06e732f32", "sighting--f3e9c231-a64a-40ee-bfb2-6b4723054564", "sighting--d03505c8-2ff4-4ff4-8fb0-620255198a50", "sighting--7465d206-5072-485d-a868-3130b0370f04", "sighting--2aa1b44f-7880-4b7c-a556-7df10bde00bc", "sighting--007f0e42-f00f-4177-837e-0d277176da05", "sighting--213793c7-be2d-4ba4-ba5a-c02d8522e205", "sighting--cc7c813a-9599-4eae-b6e6-de4b4c67f60a", "sighting--81f5155e-b0c7-469e-aa5e-720b18216512", "sighting--d95e8098-7ba8-4ac4-924d-65b4a2698394", "sighting--9148e581-c8b7-4f25-9517-5f54a69a1199", "sighting--23941783-5d94-4152-8b23-6fa551be2e44", "sighting--6d02baaf-4a87-4a32-8acb-7e0ed99bf47e", "sighting--384928d3-d350-4c73-8c0c-ef47d5c87659", "sighting--cb6e4e14-4022-488f-b3e0-2706f98ae26f", "sighting--44af9dca-b9e1-4bb2-aa0d-2d5f3b399e00", "sighting--f2a3a670-caa7-4438-8d4a-616645057641", "sighting--69ec8609-79a3-4a4c-b752-9031439428ce", "sighting--b2a58c57-3653-45c1-8e62-f634f9243539", "sighting--e33c32cd-5c62-4e30-a5b4-763cbdf70f49", "sighting--79a5c9ef-b9f0-4153-b9fd-77782696547e", "sighting--12ce7ae8-804f-4e37-9a87-8b0bbc3e0339", "sighting--f3b14bb7-13f3-49ba-a694-39ecefa6b8e5", "sighting--adc66cd9-3832-4269-8625-2154a135467a", "sighting--a2cde114-f81b-4d8e-ac0e-2df059b00671", "sighting--b1dfb029-4229-4f1f-9915-5d30b5362d77", "sighting--67a9671e-b2f5-43df-bab0-4959acef9438", "sighting--42f6478e-85db-40a5-b8bc-90fbfc4acf2b", "sighting--9ede2e7f-261c-4112-b663-adea93a5e93f", "sighting--dd475e49-a89f-4682-a20d-c5ef437a894a", "sighting--1de5f921-0eb0-4c62-8012-84da0820730b", "sighting--f5a5cfe6-2f96-4e0e-a5f2-aa748f0013e8", "sighting--d2fe7b9c-1ee8-4828-a125-a189eddb872f", "sighting--16db4e60-5816-409e-9f6d-157b96e3a5fc", "sighting--5d285423-124b-4500-a080-62725883e05c", "sighting--fbf0fd05-f917-442e-a94a-6c4d91b56ce0", "sighting--ad03799c-acb5-44fa-8e5d-9a7ca8b492a5", "sighting--9fccea88-a495-4759-8196-c61a2df39889", "sighting--ff5cb720-3f8e-40d7-a473-181004984c16", "sighting--2e0578b0-26cf-4005-aba2-cde7a373515e", "sighting--8e3b26d2-835b-4938-ad24-951034c0bd4a", "sighting--72e5468e-4677-4b78-99f2-3654edf25f63", "sighting--64690bd0-778b-4084-8513-c969fbad6db6", "sighting--dada8155-6cce-4317-b268-647cc75993d5", "sighting--63b9c586-6eb3-433f-9669-3663f3041cea", "sighting--a178ef13-04b5-45ee-9630-6cb78cf89294", "sighting--d76e6f4d-8374-42fe-95d5-fa2bfd0f8726", "sighting--63a51476-7b69-42b0-8667-d1923c747e14", "sighting--fe5cd62e-d550-4d27-ab10-8327d4f01356", "sighting--4f72fcdf-84fa-440c-9c28-79bb71fdf329", "sighting--34999170-9978-4be3-8cba-800fa3a2dbb0", "sighting--03770d15-43a5-4b41-8c5b-4ea83a816657", "sighting--4ddcf6b9-78e7-4a6c-ab11-d717b96b25a7", "sighting--9d8511ef-3fc1-4887-9f69-37ee99109560", "sighting--a83600bf-e3df-4c38-bc5a-15c3b5d612f1", "sighting--8f25ca9b-712e-4996-93a8-ac2300473223", "sighting--2e858963-265c-428c-82a9-141901d217b2", "sighting--469c108b-fd74-4c4b-a401-4fb7b2aac9ab", "sighting--12a18c2d-bf7c-4746-bae1-34e778958e83", "sighting--e72d68f4-6643-4c74-99f9-f8c7fe2471b7", "sighting--f6d03071-435b-4227-9713-d4549bc57975", "sighting--956ae608-c0c0-4bcd-9b26-d8ebf3f8da33", "sighting--2888ceff-7031-4302-a9b0-57b42b3f66ec", "sighting--40cbbd5b-0e6b-4917-9465-d0c54460275f", "sighting--29724df5-9b88-4d04-8696-6ad3b37eddbf", "sighting--4625998d-b956-4097-a6e7-eb2d2c57185c", "sighting--d8f3cf33-5d59-4cf9-8210-03eb52933152", "sighting--e1cf0de0-d46c-4b78-89fd-25c8ee8da643", "sighting--ae058e6f-09d7-46c0-9570-033ce37f0a80", "sighting--877a1809-20c1-4cc8-8272-f0adb8709e82", "sighting--7a2fc5e0-cf1e-414e-8400-83d54d0e7a33", "sighting--d1e04f9d-dceb-4e08-baa1-4773377ffe2b", "sighting--48ca83d2-5a22-408e-9970-7a2dc19f4754", "sighting--699945a1-a901-4234-bb35-6ee26c9b12fd", "sighting--e3397859-ebf5-4a9e-a997-8bf18925296b", "sighting--1926a99c-fc3c-4f78-9ba0-d06f2e7c5a91", "sighting--4bd3ac8b-db00-4820-aa1a-21043644dbd7", "sighting--ede84286-e25b-4e3f-afda-013b5916ec0b", "sighting--7177d22c-a25c-441c-af17-0df3801fcde3", "sighting--c0b57255-5a88-4b29-8e96-0b20516254e3", "sighting--aef19d82-3008-469b-8182-9b0fbf78be95", "sighting--8d33e8e0-8957-4412-bbbf-96167da6690e", "sighting--b1a47f97-b329-419e-b204-fd50303a455a", "sighting--e258829a-4536-4cbe-a023-4871849f90e3", "sighting--434cf3e4-13e2-4f5d-ba3b-8a8201ae5256", "sighting--226467e0-1ea2-48e0-afa6-e852587c9557", "sighting--f8e156ff-28ac-4e79-8745-b095fd068a99", "sighting--010d435c-5afa-4fac-b338-f212409be3f9", "sighting--3383c0cc-5d51-4ac9-be1a-747da0840712", "sighting--5df89993-7258-4663-b0e2-8e947297dcb3", "sighting--07aa576a-9a72-4b95-baf9-b3bfbd829f88", "sighting--d169c04d-72cd-47f0-a9e0-0c5de060116d", "sighting--9fa95b95-a3fc-49e1-8597-ca6a5305d550", "sighting--2206c819-56fe-4d3e-a141-6b10ffd75a80", "sighting--a5274685-2125-41fd-92b5-18ab6b6f11eb", "sighting--0d1f23e8-7013-4daf-a963-958da57546a7", "sighting--e657b8d2-0a10-4c34-9fe3-39ffd4e66db0", "sighting--9b1dff7a-299b-4b8b-9106-f40525333aac", "sighting--0fdbeaac-2340-4c40-9c65-6eb9ede18c43", "sighting--cab38b14-87db-47e6-902e-bab72e5227dd", "sighting--80354540-fcc6-479c-b806-a10d3f4c2542", "sighting--f8e817d9-cbbd-42f3-b600-9879a1572511", "sighting--3cfcce09-4ce0-43d3-a9e4-e67b258b66e7", "sighting--40d008cf-0872-4265-975c-1e8da612d514", "sighting--289fb5af-707b-4aba-a481-56f5ab4d85b0", "sighting--b1825221-509f-4b80-886b-3800e2faef82", "sighting--55edd98d-8a51-4131-bfd1-eb3bd70328a1", "sighting--fc41cefc-d1ca-49a4-b920-f426c90291eb", "sighting--88a479d8-8ecb-4e4a-9380-1f8fa39abf3d", "sighting--8bbf73d4-ffe4-41ee-b2ff-b9c7674b73da", "sighting--4f56b79f-76a3-4db8-af74-f08f63e84371", "sighting--95809f13-7dd1-4fb3-9c71-c7040a82561a", "sighting--de44a42b-e40f-4f50-aa4e-f9fba6a046e6", "sighting--5216fb78-99bc-4b49-ae25-b378dc9becfc", "sighting--6ba2cab5-46a0-474b-942b-e9159a143576", "sighting--33d804ee-65f5-4e83-9909-a1783f0c59cf", "sighting--fa30d031-baa2-4944-87e0-f4275af40609", "sighting--bccc561c-de6a-4ee3-a8d4-8e3505cc67f0", "sighting--b1d18d2a-ea48-4421-89cb-5e45272f1d95", "sighting--01df09d4-a94c-4c86-8b44-52a8b77168c9", "sighting--0e2459b6-4195-4af3-9201-bca01000945a", "sighting--2403d624-3c78-42f5-ae74-fa2335adf894", "sighting--691abef8-8d73-465d-9aeb-34bbbc27600e", "sighting--cbf8cfe3-0c6b-406e-8d7c-8f29749b8243", "sighting--67c16c2b-24c1-40cb-8d98-5dec28abf466", "sighting--8027b0bf-5bf1-43f7-889e-5f2efbf410d3", "sighting--80ba39bf-78db-4327-b156-6a00a094190a", "sighting--f6bc1c02-0e2d-446a-9d12-9edd6d33fccd", "sighting--4e41e741-9b54-445d-8564-d269da2565bf", "sighting--d4c97371-b42e-44b9-86af-f96d439db458", "sighting--64d72b2c-c425-4a2a-b2dc-adcf632523ec", "sighting--7655adc9-1bd0-4cd6-9000-86d849dec66f", "sighting--d44eb2eb-ba1a-4282-ad6e-2b3c562213e9", "sighting--74e3b98b-2646-4221-99cd-28a6962e2bf5", "sighting--5c2b072a-5a20-49b7-9173-ea78c72f6101", "sighting--e218591a-d086-4363-84ae-ac7eea2bcf4f", "sighting--4d741bcb-3502-4c07-8562-ded00bca65b4", "sighting--476a4828-a8f8-496e-ab3a-2d7bb029cf2b", "sighting--40944f75-db92-4e64-8672-851fdaf133f9", "sighting--336b3a65-2c88-4d6b-9fb1-3b3ed0759121", "sighting--d41f3c77-4a0e-48b6-a5ad-30888cccf39c", "sighting--970cecd6-edcb-4177-8a68-48f5c27f5791", "sighting--da4ca691-c6e8-40f5-be1f-a97853b9837b", "sighting--19dac0ba-9a2c-4836-864f-0946caa40ad0", "sighting--3b9ea9c4-5ff1-40c4-896d-22ec147630b4", "sighting--b942ed09-44aa-416a-ba4a-d5729336dde1", "sighting--98fabeb7-508b-4791-bfa1-d8ea7bb0b557", "sighting--1e34030a-807e-443e-9ce3-742bb194056d", "sighting--130ac3ee-d593-46dc-8bcb-0801d24930ba", "sighting--e7968a8b-47cc-4074-969a-83a31176ef37", "sighting--d190b080-64c7-49b8-a5ec-021fe8d2c889", "sighting--48bc8e76-af90-4488-82c7-d6dd7c7b7585", "sighting--52a084c2-984b-4115-9998-9473000fa517", "sighting--9ead90b5-0c1b-4ce5-bb37-a2d67e5561f1", "sighting--c992cc27-b2b3-4a18-81f1-04e3d774b99a", "sighting--df4408f9-01c2-4460-9bd1-5e0823fffeed", "sighting--870caf4a-f308-46d0-806a-fda785e60d7d", "sighting--adfb71f6-8a61-4a13-8428-104a6ed6be7d", "sighting--acf4940b-b96c-4785-8b75-d1b17d9e6056", "sighting--d64d8cd7-68b6-4077-9579-52408215102f", "sighting--5e87d1c2-8944-4495-a8da-593ccb3862ad", "sighting--9d0d2d45-3a6b-4333-b6ca-c29e8b384391", "sighting--e8f92e89-1c5a-40c7-985d-5dff92f8314e", "sighting--f5337ae5-c941-4d60-8157-9d19812d1615", "sighting--6791669d-6a0c-4c3b-84db-2d2362f14586", "sighting--49ee13f8-53d6-4ab1-adc1-11a2b810d05a", "sighting--fa06909e-c3a0-48c2-9e96-eabed10ff403", "sighting--f200857b-9ec7-4dee-bf7c-5e6f9e0de770", "sighting--d2f26f61-e1d1-4b7e-9748-ee732832207f", "sighting--7562192a-99bc-4a81-96d2-1edfe2800717", "sighting--a420e21d-9924-425e-8b31-41931645bcbb", "sighting--2a424af4-5f53-4b73-ad63-5ab5dba4dcb3", "sighting--cb95a330-5530-4b7d-a686-095c32620cf6", "sighting--af4581c2-a9e6-46d8-b9ad-1ab1a490d78c", "sighting--cc778e7a-9c43-44d1-bff1-b12470b239a5", "sighting--6224d8ee-94a3-4d6a-9b25-9bec285c9821", "sighting--03789472-98e3-4ab7-82e7-8acd4985657d", "sighting--11601a3d-8188-4227-be00-39320e0e6073", "sighting--460bb8cc-2b89-464a-a32c-81f418ca6f64", "sighting--9dcc7a8a-fd5e-49af-9135-a01080dd4fb8", "sighting--ec68de89-df3a-444e-ae45-097e536b963b", "sighting--25607884-5b85-4938-88e0-62abeda3d3f1", "sighting--7780e99f-3c08-45ad-b595-f9b282515ef9", "sighting--4f3e42ce-a9f6-4c2e-88cd-db82ba653036", "sighting--8df9235e-db78-46e2-91fe-3c4659f5eee0", "sighting--725dfab0-72c0-410d-89b9-8014cac5b902", "sighting--b08219e6-db91-404c-9e1c-29b20fff3fc7", "sighting--17a4cb45-9b87-48d9-bd07-f94a4c72e757", "sighting--bb04e29e-7be8-4695-8942-224ee7734ec2", "sighting--cf122843-ffe1-4214-ad4d-2126aae906d5", "sighting--834ecb97-4279-45c3-9573-6d73f737432f", "sighting--694154ea-11c3-47fe-b75d-60b270d3db60", "sighting--49991e70-a3ea-4edf-9475-30c323df1add", "sighting--9ed89320-e196-4d77-9af9-34001258a675", "sighting--8c142014-a949-4115-a3a1-065d29d493a0", "sighting--6320fe44-ede5-4d60-8c2e-12a6840d37d3", "sighting--50e04a38-fa19-4a06-a25e-6ad90b39abbc", "sighting--8396e7b3-e5b2-4387-9920-c6abe2f1e645", "sighting--32f0b77e-e4fe-4096-b196-787fb6b6995e", "sighting--0964ce38-4c0a-4161-9f36-887bdabe705f", "sighting--3340a423-2e84-4042-a7d1-e3ef2a55e035", "sighting--c6fe6d0e-11b6-4470-848e-8af669d66eca", "sighting--033c10ab-c167-4757-9b1f-c484dc1502dc", "sighting--44526cae-a8bb-49dd-a360-a4513d9c87dd", "sighting--d6f5aa59-1091-4643-86e5-1f82b28ab503", "sighting--3dfd022c-4f27-4d42-80d1-78ba547529ee", "sighting--cabf6cf7-615c-47b8-b6e2-4d0210bdd0c5", "sighting--ed21e0bf-ea8c-4464-9d01-4316b92b792b", "sighting--5b66023b-f224-428b-b247-a2270af026a4", "sighting--af0f0c84-5af1-41b9-9977-5cb833f058fc", "sighting--5c944911-4cc6-4831-95c9-5278adb9bde9", "sighting--fbfbd99c-f414-483d-8b7d-c626213f0563", "sighting--0374d13f-0dc5-47c8-9adb-f8a653b3d774", "sighting--e13ee913-61ac-4eb0-be6b-4a27b5452b48", "sighting--72950662-9c97-42fe-8711-401024215d8e", "sighting--bab97cc3-339d-4618-9b3d-7ac8b5a46084", "sighting--bdfd8eaa-678e-4103-97aa-7f29a7c2e00b", "sighting--fcbda5f9-5f59-4b25-a416-43dcf855895e", "sighting--6a3ea6e1-f765-46a4-8d81-4bb9922d02fb", "sighting--6f723163-7ebb-4032-b74b-c4922f32dde8", "sighting--182b056e-816e-4362-8a36-11312ef0b130", "sighting--9a9519e8-ff37-4367-a721-8aae9506172b", "sighting--7e1e4b7b-21a0-42c5-ad2d-2dfaba9809c1", "sighting--83059b27-a2cc-439d-84c9-c949f833794f", "sighting--e2f6a2f3-ab43-46d3-84ed-0925f2af1e8c", "sighting--ecfbd711-8d85-41cd-9705-7f3c0133696a", "sighting--1556f7a8-9ab4-40f9-ac60-f0151ec654a8", "sighting--3d434aa4-5871-4021-8566-2543d52c5f04", "sighting--5090d4fa-79c1-497d-8253-298dfd76e34c", "sighting--c42196cb-abc4-44b6-bd31-5b909bb9a9e2", "sighting--cb4c8d33-f392-4d9d-902c-622abda04918", "sighting--35ef892e-9383-42ff-9184-e63c35815c29", "sighting--46291593-f303-4bf6-813a-a417f30bd1ce", "sighting--75d1e02e-0b8a-4dc3-9b97-989ee651fc63", "sighting--044fa80a-cae3-4346-a384-584ee0ed3195", "sighting--09dafb39-36b5-4089-a6a1-3bbf327b60bf", "sighting--1192eb24-e85c-4d25-b2bd-89f793db1680", "sighting--cbf2cbb0-d825-4c43-9900-81156969ae3c", "sighting--f11b2fdf-8b53-4af4-84ad-ae38448ba0e3", "sighting--a77ecaa9-d6df-4435-9168-04a24e8f88e4", "sighting--a42dba75-6511-40ec-b140-0a4b015dd645", "sighting--063987f1-186d-4841-851a-68f25ea2593a", "sighting--aa54f6a6-524f-43dc-bf99-ee4347e70a66", "sighting--2738d1d6-8887-430c-be09-7d80d1f04bcd", "sighting--98f5b1ce-e363-4f7d-8083-4e810cd22b7c", "sighting--df3dbf71-6b52-4319-bf0d-29dadbbaca9a", "sighting--11de8c55-311c-4500-923b-3ed755aeee0e", "sighting--d75810b7-4b64-40d4-9e0a-044edb090bda", "sighting--7ef86db7-f7e5-4ea0-9c36-a768767c1056", "sighting--0281a97d-6501-4420-911f-121b0fcb2b7e", "sighting--e01b305b-0507-4abb-b2e5-6a58f9613597", "sighting--86ae468f-a277-446f-8a1b-135f541facd3", "sighting--564c36b3-7e50-4ba2-850e-1ebb48b17f9f", "sighting--3196a62e-f760-443a-ad4e-05fad9721fee", "sighting--4e3ebf35-43c7-4d5e-b317-3870df51c8e3", "sighting--abfb463f-d758-47c8-8e10-3870e539433f", "sighting--b0a352ad-28ac-4bb8-b16f-8baf023210c3", "sighting--2bf5d8ce-67b6-46ba-b49e-2a71ebeafacb", "sighting--60d62842-9ab7-4985-8089-fc49e640ffc9", "sighting--c167b974-a260-48e5-8861-ee692a54f9f3", "sighting--59faa4ef-581e-4f10-9445-f78b59a4c99f", "sighting--7e1a5df9-3d6f-4638-bdb1-22c27ef82d4a", "sighting--02343e56-1696-44dc-92df-e98ddf2c296e", "sighting--ccbc7808-41e6-4878-9fed-a14ca485c9cc", "sighting--b5ca782d-451b-4937-ac50-199d9ea9724e", "sighting--78e54bf1-471b-44d1-b588-f4d4efaf78ce", "sighting--bb432416-73fc-45f0-a414-cf8f9ee49afc", "sighting--1bb74a2e-959e-4343-ade3-5b0500bd2789", "sighting--00ac3ac5-d236-4448-91a5-48a70c7252da", "sighting--e8dc97fa-191c-4744-aabe-c088591c1ead", "sighting--0f4919ec-96ca-416c-8317-ce354cbd570c", "sighting--3ba7bc98-bc2e-4228-96c9-cc64823f30f4", "sighting--5926222c-bf64-40d7-9f33-e729810bacb6", "sighting--69163d98-6c97-48c0-98be-a7c54bf2a452", "sighting--6edbc7d5-8bd0-4e51-9c56-48711e58f905", "sighting--830b234e-9d46-4adf-9dd2-0db3f6520f52", "sighting--1ee514ef-e56f-4450-bb15-4ad1422bb283", "sighting--8df49d4e-57a1-4e03-bfc6-8228ff535086", "sighting--2e6b52e4-fb5d-467b-b167-af4d6ee66837", "sighting--3693bb61-f1ee-4b61-94fa-510bac698661", "sighting--af69060c-b4bd-45b4-b50f-4fa7ff41eda9", "sighting--0988ad74-3e01-4ac9-b362-2350eea7dab3", "sighting--5a2024ce-c244-4af1-a6ad-e3db349efcf3", "sighting--0470ed59-2578-4725-b563-3510d7363ee1", "sighting--de7cf1c8-f4a6-4491-90f6-bb382f81738f", "sighting--6e82a820-61bc-4fe0-9e3f-2b7dd3b1cc67", "sighting--82b12eac-e5ab-4b12-876a-7dd544c5a2fb", "sighting--adf30a47-05f7-4e54-bf10-a67fb79da23f", "sighting--e5204f10-bcb5-496a-b018-b58287ea7d4c", "sighting--2577bdb8-8597-4849-ac17-f33893639f7e", "sighting--411788c4-bcfc-4129-a10a-297743f5f744", "sighting--ca0ee614-4ada-410a-bed1-00f61aa30358", "sighting--757954b2-ffdf-47ef-bc58-07cc5156d4ff", "sighting--576e78f8-ca06-43e2-a2e1-3c340de34188", "sighting--ae314b28-90b1-43e2-8652-d7cd4c50a0ee", "sighting--c3d5ef02-a3c1-4374-a2e8-86519ae667b7", "sighting--7ed9d3ed-1099-4081-a10b-89e044c4eb6d", "sighting--a7486a85-18e6-4337-9cbe-7a6883bb5f39", "sighting--79b2c3e3-2857-43b3-8ca3-23df95850df2", "sighting--e460c089-7248-48ff-a0bc-a4150599d419", "sighting--41e0ee00-4bd6-415a-aadf-af60ef013f80", "sighting--7bff6b4d-ec32-4341-b311-9131de471bb8", "sighting--ccf16ddc-7e68-4444-969e-ec50db3a49b7", "sighting--65646503-72ca-468b-867d-bd82fdd6fa6f", "sighting--4d7a4520-2cfe-4d59-813b-8ded255e8545", "sighting--df5b451b-eca1-4e07-bf83-8051fc12220c", "sighting--2142f29e-434a-412d-925d-8cb39cbcd7f8", "sighting--d215081c-137d-4834-adea-8277edb425ed", "sighting--02a8a435-18a0-471c-b48f-27f90f38275a", "sighting--03858b56-e756-4b59-97dd-835fe155f31e", "sighting--322bd03d-2b6d-40af-b171-9d21630ccd76", "sighting--d02faff1-9731-48a3-975a-7b19d1909ea6", "sighting--009fed8a-2c04-4765-8371-d7f0faffcd32", "sighting--852b30f4-ec5c-4334-b6fe-d5f93ae8ad40", "sighting--36e8fcc5-0624-4eb0-9a69-d9f7d60aba48", "sighting--41c4658f-4775-4995-8046-b76473425be9", "sighting--88bd9e1b-9f9e-402f-8172-ba12b8b9c9f0", "sighting--97e0577a-11a6-4915-856a-d0fe5276654b", "sighting--be6abe0e-9c9b-4590-a2a1-0df56985cebb", "sighting--8a9594fb-148e-4449-aca9-bd758f84b235", "sighting--a8deaad5-b230-4a1b-85e2-166ee670d490", "sighting--7f5bcaad-15db-4264-8dde-a82069e6b51f", "sighting--5c19cf65-7ac7-4ec6-886b-2a0a3a59acb3", "sighting--82fd5814-c362-47da-9831-4a4c601310da", "sighting--f06fb2f5-bc1f-45a2-b93b-b7b423ea4974", "sighting--eeabf904-8e46-407b-b26d-a60c558dcde5", "sighting--6ed50928-98da-4947-a06c-8d926d9a37c7", "sighting--87eecd5a-5540-47a1-aa04-ffed2429cad8", "sighting--c3e7c754-0f06-4291-925a-6430293585be", "sighting--4fc3d274-9a59-45b0-977a-acef9c45d646", "sighting--c64b968a-e427-4609-9258-a1a9e3becc41", "sighting--dcbe8596-bf51-4387-9e3f-035e144901bd", "sighting--9cf01ea5-3768-462c-ab5d-b97b6c8c14f9", "sighting--82e658fc-d22e-420f-bb79-bcf83c727090", "sighting--93dade9e-c122-4705-9b48-68b9148b678b", "sighting--8c34b764-9bb9-4a2b-99b4-e4223367628f", "sighting--37c60b86-5f02-4be0-bd66-14affeef0ed7", "sighting--cf815797-e9f9-4d59-8818-71cbeb17fe65", "sighting--89586558-e71c-44de-abef-5daa03b32b80", "sighting--fc36abbe-46cd-4c40-9fba-0c5945de2b36", "sighting--f9cd3db4-67da-412b-a157-9a52e0079e4b", "sighting--941e5386-a6d4-4a8c-954d-b362970c5236", "sighting--2b8b68f5-bb7c-4364-8b05-45bf680bb47b", "sighting--86d38d17-6f3c-4736-97e4-e757da247f94", "sighting--d9885b72-935c-4982-ab48-9dc50b50e0fb", "sighting--3a92697f-7a47-477f-94b8-37e77359fbfa", "sighting--2b190a21-1a69-45c8-8d70-2b347feab021", "sighting--5fec7fdf-9592-4ac4-a292-3282bf7c2189", "sighting--46452e14-9b23-4bb5-bc9f-b3cff9fade49", "sighting--c9da18d0-3f70-4f6d-96fa-c26175a238c5", "sighting--24e6efb6-5e40-41ed-ad83-e31819dd0b18", "sighting--cc7c4b3c-1668-45a2-95ec-cba20526a255", "sighting--93c9b667-01fc-4566-be15-9fbe959a31af", "sighting--de7eae3e-9e94-41fb-af93-ce0760ca0b0b", "sighting--aea264fd-af92-4e41-a304-a99859214e1c", "sighting--3ac095a7-106d-4cbb-8cc8-2075bc963426", "sighting--15420e03-d5b6-4aca-b924-c3e51ac44f2f", "sighting--e67f1e16-2f12-4249-a39c-436969d219f7", "sighting--e6a146df-4004-40f7-b912-f1f445b74778", "sighting--bfa5c6c1-078d-4098-91ce-0fdcd882c70f", "sighting--040a71c0-96e4-42d2-af51-5fcef8338e58", "sighting--cc5859cd-64f2-426a-a35c-d733c8b9a13a", "sighting--137db55b-1f05-44d0-bf96-e477c3ada7c9", "sighting--c835921a-3ef4-4b68-8229-5bcf71919a49", "sighting--e05ce8e9-e790-48a5-83db-837e16be5263", "sighting--bb9261e8-a3d0-4eaf-bb38-9c94035ecb6a", "sighting--faaf5d4a-d9b4-44f1-8d8a-e5f6e86140a5", "sighting--2663eeaa-1ea7-4bca-a2fe-315a4461e161", "sighting--9883ab1b-286b-4d6a-bd5c-fb2ef0b5e52d", "sighting--af98a062-46a6-4caa-a9c7-e65c987a7bb3", "sighting--8e103c22-ac29-45ca-a6e3-a5637c365d30", "sighting--3dc11fda-b5ae-47d0-bdff-803529611108", "sighting--134076ba-c8f9-4e6f-a4ba-9461286a698d", "sighting--b7e5c88d-b7e3-4eb0-a703-167bfdef9ed4", "sighting--69498aaa-4533-4c3c-9375-8179e90f2437", "sighting--a7842810-64f3-48ae-938c-3b6672dc3bd5", "sighting--b341477d-fccc-4e63-9d00-184c0d61e4a0", "sighting--98b6cea8-9109-428f-8162-ed0cc3ab4789", "sighting--c00f3e0e-ffa2-42bb-93f2-01c7a0acd12e", "sighting--ec1216f3-c746-4cb0-8566-79e0e7bf2dc1", "sighting--26245d7f-1159-4341-856b-68a858782dda", "sighting--9055e321-e377-46fe-8a3b-61b05a0ce391", "sighting--22d26a01-8ee6-46cc-8120-98f274a32a17", "sighting--685abb5e-c950-4017-b497-cb22ee886bc7", "sighting--a4c89add-27f2-4875-b4b3-5d796b807eb8", "sighting--5c64fd4b-980c-4173-b4e0-ff2272e51229", "sighting--9b855301-a068-46eb-b1f0-25a1f301c6eb", "sighting--bb6ec006-a93f-47bb-94b6-348bf4e3327c", "sighting--feffc11e-2555-48c1-83d1-e7cdefa058d7", "sighting--005bbf65-5b69-4d75-bdb2-3e26a8434705", "sighting--62705ee7-113d-42f6-81c9-43a9713c9171", "sighting--b063056b-5b93-4173-b418-5b493beff049", "sighting--af30cf57-be01-4416-9d7c-f70d2753d3d2", "sighting--105ee24e-4654-4ee7-81ec-6722526975ce", "sighting--19eb847d-fe9f-4bcb-8539-3ee25b2a41e9", "sighting--57d149ef-9f14-4606-a104-a71b05b260c9", "sighting--e7c32952-9bd1-4b73-a164-8af1bbd188a7", "sighting--e0677ac9-14d9-4b3d-a966-37bf26e51c12", "sighting--31768caa-39c1-45e2-9852-20167b18a617", "sighting--671e6d78-e12f-4649-8715-aa11db6af5bc", "sighting--5d6db2e2-a314-47ed-a6fa-a5625c0bc72b", "sighting--201aad3d-2549-497a-93d1-fd54f44f7836", "sighting--60468749-b30e-4662-84cb-8dc12ec64a55", "sighting--1c9b65f0-4cdc-4539-81ec-c0d69f40fe08", "sighting--f4f7a8f3-93e6-47e3-87ed-7d1c383fb9a3", "sighting--45c8b7f2-4567-46d5-a789-2963d6caea6d", "sighting--749ef7f9-930b-4ba4-9581-f54f7e165f38", "sighting--b5949e6f-8d99-4be7-9c89-c4a8d54cceb8", "sighting--810590fb-5b4a-4bb2-8885-5b6335fa3501", "sighting--25a2e440-ef07-4399-a40c-f210069178c9", "sighting--aa6fce4f-0774-46e9-b23c-069039820d22", "sighting--38f96f70-13e7-4c3f-828d-a9bd8d7587c6", "sighting--148cfbfb-e2e3-4d61-8d70-da7772eb4eea", "sighting--68e1e9e7-c5b9-43b4-8738-a8ea8198995e", "sighting--b896a70d-00a6-48c0-b671-95bebb9f09c2", "sighting--b85283c2-2e9f-47fd-a431-25c962a1da61", "sighting--0181096d-6835-4e93-b9c9-6efe47354429", "sighting--8a3ce13c-4777-4ac3-a48f-695cb10acc27", "sighting--30891f38-fdc3-4a54-970b-e96843e3e43d", "sighting--7d965d32-ba09-47c6-ae07-3ba9c49c4ae4", "sighting--bd792f71-4a3d-43b9-bbf4-8cc3091f6d67", "sighting--09e5b2d4-db7f-47a3-bee9-2dacd4091b18", "sighting--29b88ef3-97bc-40b7-9edf-b4f5de179f2b", "sighting--905076d7-9aa7-4edf-bb6b-c39159b06694", "sighting--a7615d2c-c39a-49ee-a2f1-ba9421b07e61", "sighting--b80a6da0-f0ff-426c-8462-8339042fc5c5", "sighting--7190426d-20f6-4050-876a-dc2cdda7c6fc", "sighting--a4f9ff91-6ada-46d8-bbcb-513037f66335", "sighting--cd17fc57-67ce-408c-b7f1-aacbe6553ea2", "sighting--78c38c14-3519-44ff-ab16-dfe419617298", "sighting--2ce6295a-5c25-4437-9609-c9e6d1e6408b", "sighting--df25ff0e-0290-459a-9a55-2efda2f05e03", "sighting--909fd46a-328e-4244-976d-d7357dffb08d", "sighting--36e74c0f-aa29-43ea-b64b-1b077d502906", "sighting--c74ce244-41e3-4512-95b6-a690310b39b2", "sighting--98f2557a-9dfb-4a0e-9cc3-06beedf7acf4", "sighting--497598a5-bd40-47b0-8081-d600872040f7", "sighting--fd74b7bf-6f4b-4ffb-8456-d709eebb4b97", "sighting--fe1408ba-3fe3-45a9-a85f-55bc2159bdc9", "sighting--409fdd30-6dde-4d49-8108-c68eea9d6987", "sighting--680c43e4-b3e0-40f6-a575-c37bdf09c689", "sighting--2dfc019a-4179-46b7-8609-22f4118f9cf2", "sighting--7dd9b010-5405-4378-86eb-221094dcad7f", "sighting--5dfd9d75-f845-4b6f-b817-035af4bcb12e", "sighting--4d6a6bcb-7e59-4a99-a506-ebce782b5988", "sighting--96819edd-5e71-4e65-a6aa-791c9c355cd5", "sighting--db0e5faf-b689-47b6-871e-5f62e4d5f5ff", "sighting--d33322e8-0a8b-4d97-989a-c92ba6298342", "sighting--9a3dc2f3-abdb-474d-bf38-681256c5ffe7", "sighting--1a2667ec-2127-46c2-bc9e-3e8862aa6d73", "sighting--3f04cba5-bccb-458a-b644-47d4506549ea", "sighting--d1fe2e43-1f99-4998-a624-1e24411a3d70", "sighting--688b75fd-4486-4fc7-910a-2e7cce3970d5", "sighting--8446576f-e085-455c-848d-1e311d662552", "sighting--f2424d42-30c7-4106-999c-346b0732bff2", "sighting--ff7fc5d3-679d-4243-bfac-92ffbe6ec873", "sighting--290bbd23-661e-49c6-9b4c-1c10615d69a5", "sighting--e0dc3a8f-246f-44ad-9769-b2b3e2a43099", "sighting--824e42ac-5a01-419b-94cf-c20aa82ae524", "sighting--3da19c03-9060-4fbf-a11c-66628af056cc", "sighting--bf8efc03-0e28-4588-9826-7ff7f77406b1", "sighting--ee3845c9-e181-4c41-ba00-aa7d3e84c538", "sighting--56e44320-9f2b-403c-968b-5765b8ded9e1", "sighting--89d0a5cf-154c-42ab-a9c5-9be62b81b6a6", "sighting--84a0b211-3e09-442b-94ff-c48fe3f3d201", "sighting--a1764771-968f-49ed-b83c-4f5ac529a8ff", "sighting--d5bd47b3-16a8-4042-aab2-dfac62a1b13a", "sighting--b7375038-db2f-4608-9fa1-39d3c5f4812e", "sighting--ed61dd77-f8e3-4490-b735-1067c83b6b02", "sighting--14b183ad-25af-42c3-a663-87f856e4206a", "sighting--ae8a09fe-e04a-4e03-8eeb-7c3d1524aa91", "sighting--4c2510b0-98e9-4c29-80c2-723f45b03b54", "sighting--9e970bd2-c7a2-485c-8808-ab4e8c69bee9", "sighting--83c6fb54-b458-44e7-acb7-0785b3b73803", "sighting--a5371fda-c01b-4b04-9e8f-ab250094b0b6", "sighting--71514592-bd6f-4a8f-9c87-6947fd4e3d5e", "sighting--40f9abfe-925a-427f-87d4-9ea2376ac7f8", "sighting--57434041-3730-4b4e-9309-374924ad1793", "sighting--2d7fd0c1-ab6e-4671-8b1d-e9762f0c6106", "sighting--f529d87a-5d2a-4630-aa1c-13f25223f81a", "sighting--1175133e-f2f7-43fe-8c78-92f7f0c048ec", "sighting--d70055f8-6ec0-4942-a982-75b6cf38ff86", "sighting--6ecad4c4-7d7b-4c60-8a33-f683e7d58e23", "sighting--6ebb8131-02b7-4516-bacc-4b029cdada4c", "sighting--548e3199-fbfd-4de3-bad5-8b9769f00ed1", "sighting--2b88ac2f-2848-4cc4-b756-b643629bf301", "sighting--5b50a710-6d41-4a2d-8b5f-9def6a53dce5", "sighting--cf60add0-1430-44d9-8e06-d451519f6984", "sighting--2320e417-0a76-4f90-aa30-8e21dd48fc5d", "sighting--ab49d6e8-4b4e-4cae-8ad9-cfcb59df7f52", "sighting--d4c0ab80-8ea7-4fcf-b410-4d00bf29d1ed", "sighting--3f6162b6-8624-4001-b06b-da41b76cfe4f", "sighting--9995ffa9-aea8-4034-be63-d8e7343bd8f8", "sighting--b22ab779-31d9-438c-a956-6ff7811f05cf", "sighting--332858e5-efa2-4355-9c02-40011cc0a4ca", "sighting--589421bd-f6f7-4c44-994e-8f87f871b2b6", "sighting--19caa6eb-88e3-425e-8e20-214a0d873194", "sighting--84f9160d-6e12-4255-8f11-92ccdfc05792", "sighting--3bc462c8-86f8-4985-8979-3c31242f5be3", "sighting--aa4e360d-8aa7-4562-92a0-e091c668c6bf", "sighting--9cc9daf4-5113-4d1f-9378-00e8882c1040", "sighting--6cec8dd9-c8e1-4ca9-9a86-11f8c06b945c", "sighting--bdcfdb55-8d5e-46fa-a2fa-73e7028acd8c", "sighting--b1185af2-557c-4e27-b219-290edaf3aa1b", "sighting--eab4fcae-5605-4c5a-8d49-7dd98b1f41d7", "sighting--945b428b-7d21-4b83-a707-f972a31e5188", "sighting--74ba7491-74e6-45e3-8b4c-7501e2ab6556", "sighting--9b39789c-500a-4eb8-9fe2-15feb5ef8372", "sighting--2fa35045-0d31-48d9-8383-df06ad758c57", "sighting--81c4b75a-ea1b-49e2-98b6-ee25a6e72955", "sighting--d480d584-39ab-4ea9-bb86-d6534b36cd77", "sighting--d147845b-9b68-42fc-9321-b5df228a4f49", "sighting--6d3657ba-85b2-4e7d-b049-20f6fcdfdfdd", "sighting--d5951a4d-636b-442d-aa5e-7f098164c30f", "sighting--4f5ba5fa-7ee3-42f5-bacf-bd0a44c42195", "sighting--9f9d4194-aa86-411f-a732-0c39bc1d184b", "sighting--aa45bef9-67fe-4ff2-892d-0f32d69f471a", "sighting--978a7c07-9e71-4fac-b499-6cac5eb816d4", "sighting--7fdc7353-2d8e-4e37-b87d-af94d74234a8", "sighting--da0f49f1-4f9a-4a42-afd1-a28ef5c6f648", "sighting--b7e81d49-898b-4963-a173-b18029d7f547", "sighting--a913c6c3-2565-4c86-8446-ea7a0c35b46d", "sighting--28df5486-532c-4739-9d51-ba6a4dc1c691", "sighting--1d5603c8-de55-440a-91db-feeb7429bd33", "sighting--f878d2f3-ed50-458b-b139-8331e6a0ae52", "sighting--4ffed845-18e5-4fbf-b4c9-2973033b529c", "sighting--85048585-63a4-4608-97a8-948fa6f7a116", "sighting--3643f33d-8f5a-4c3a-86e8-2160a1621c04", "sighting--b15a7203-aad3-4c1c-973a-26ebbc5997f9", "sighting--de654f1e-ac43-4220-b98e-077094b44e0f", "sighting--b022f5e1-0ded-4a73-8609-b459ec2cddb3", "sighting--5f75c720-cc1e-44f1-86a6-ab38aa2d46b7", "sighting--3f225e43-c110-4ea8-9839-d12ac3beee90", "sighting--cc4b89cf-674f-4d71-9df3-ed9388912e57", "sighting--49569339-7e0b-4096-a46d-6d9ecb46860d", "sighting--99c40293-fb58-45c3-82b8-359aa4c731d6", "sighting--4913d3e7-42eb-4e79-937e-2944647276af", "sighting--bb3646ab-ad06-4398-8699-f56829a6c210", "sighting--d30856af-a7e9-4195-a033-6a8ca70335b2", "sighting--d42b4f7c-6577-4cd5-9d49-259ed944b084", "sighting--5ff409f1-5402-4712-aff6-f98a25ab7ad5", "sighting--c05c0227-67ac-45e1-8d1e-9a347b417c94", "sighting--367f3fb0-9c6d-4db9-a2c4-b0e7ab2c7d5f", "sighting--91420226-bfea-4b60-a9cb-365052ec5f0c", "sighting--ed5124cc-94f7-43e8-acdf-3a12f069e22d", "sighting--29bdce4e-3aa5-4796-9daa-0c5ef969dbdf", "sighting--59ce0b08-6f81-46c9-aa4a-d1190578e5a2", "sighting--a0193d0a-37dc-4102-9e0f-eb8605d2fd9b", "sighting--9f57dacd-1455-4824-bb7b-0ee8975d0785", "sighting--4db00997-2293-4187-9f82-dff1af096de6", "sighting--9febd669-b0b6-4c96-9097-e9c05a46fd84", "sighting--68aee2be-68e8-4fee-a370-cf8264fe0230", "sighting--db1af567-7452-4572-b1e1-c9740228805e", "sighting--ddec8c02-9411-418f-9503-8ca596061093", "sighting--0218a35f-db72-4bff-8ce3-e022930ab735", "sighting--0e27c6d0-1e3d-4013-a46f-08373a45a19e", "sighting--4ecdb93c-ba95-40bd-aea4-2cf5308643d5", "sighting--c68a7e00-dca1-42c1-85ff-be913113a69b", "sighting--3269d51e-71a6-49e8-afb1-7230a581d271", "sighting--d5fedab1-b99d-49bc-b761-2320c09e6c79", "sighting--fc6cfd10-e28c-4daf-8fbb-633280294dae", "sighting--27f48f99-18d5-4130-9ef4-82e463c1a799", "sighting--d26897d0-9567-409a-ba73-e0368a363be6", "sighting--57290b9c-725c-4d4c-b77c-9bf51de7d6df", "sighting--dcf84acd-a102-4e9d-81ca-f861ffb1bd8d", "sighting--cd655af0-b83f-4e1d-9dac-95e21d2a4461", "sighting--ec73d176-2ed6-4720-939f-810cedafbaf3", "sighting--5f2ecacb-0a7b-49f2-99e0-9f82e6048d1f", "sighting--a142e862-5b29-40d3-878f-18ce205bda53", "sighting--cc7d43b4-283d-4b8c-92b4-dc0b8a899f67", "sighting--d33971be-fe91-43b9-898b-7f26d9a4e48b", "sighting--fdd4ab27-a412-420a-93be-6bd4bf6d50ea", "sighting--0584c404-832d-4404-92fb-3e2cea1e979b", "sighting--beb92263-456f-4a6d-9fa0-9655bdc43bea", "sighting--8f086c46-a848-4bd7-bbc0-736bde044091", "sighting--3da94bd1-c352-4b4b-899f-c0897bd65334", "sighting--a85b3475-c1b6-4e24-afa9-06927a0db6be", "sighting--8d88f7e4-b798-4753-b586-fd6ca75238f5", "sighting--0422251e-52e3-446f-8c52-f67c9747ae50", "sighting--d6a6fdf0-0a46-4827-bd48-638feb3dc301", "sighting--3b357aa0-7ad2-47e0-9a94-6f3e8f318386", "sighting--a2e21fe3-1fdc-4d5b-9311-694775cfbd47", "sighting--0b1d1aef-ee0d-484d-813b-b2e019183748", "sighting--e88859c2-1ab3-4b39-8858-4c332e291268", "sighting--6120ca71-4eb7-4055-b843-d2754d30abeb", "sighting--9464d9e3-2d9b-430c-b1c3-415cb7872938", "sighting--9817fde9-a6cf-44c9-9ac3-022e39038751", "sighting--28febae2-3d02-4589-b970-075b41d0eac7", "sighting--b6cf8c73-ad0b-4c5c-8b0a-22b032f53ed7", "sighting--ed21cadc-3cdd-4dca-96dc-a388ba2571dd", "sighting--a162ff0b-b887-4902-ab6d-cb0a4dd86714", "sighting--f28a6ca9-9b82-47ec-a5de-12f66933da26", "sighting--44a99deb-0ed9-4e5e-b2d0-29f34a21bb4d", "sighting--335591f8-f737-4f1d-a067-c0d07bd174f3", "sighting--66440304-b148-4eb2-a8c9-40ad5fd10afb", "sighting--8dd95f2d-e1fb-422a-b232-61aba35ec010", "sighting--be3924ae-157d-4039-b103-44d3170149b1", "sighting--3856347d-e510-4606-bb14-7f43e2e426f7", "sighting--26c35aff-bfa3-426f-8a24-d9e7d706c3f0", "sighting--f859602f-b168-4bed-b433-619454681617", "sighting--bb377500-ef20-4285-8d94-eaabc1541350", "sighting--bf98f8e1-a60b-4407-8ecd-bbb1fa2ffdd8", "sighting--22323cd4-0f7c-4e46-bee2-3fc7ecdc0cfc", "sighting--9d062ed4-da71-4a00-a3ae-493627eb2aa2", "sighting--049f4c19-ffa1-4f19-afaa-c40a856163dd", "sighting--3bc81f77-f407-47d0-94cb-fa15f4e51447", "sighting--7a2eecb5-966a-4cf0-8450-5abaf282fdf4", "sighting--30ffe51b-b4ef-46e6-8976-c6cf3d3ccea3", "sighting--3794f2e1-595d-472a-b1a2-fecb9410bac3", "sighting--9fd0a3b5-6506-423e-9a61-a6ccb9c71674", "sighting--6bc6118b-2429-4ea0-8d84-831a959697d5", "sighting--65588660-0302-4fee-98a0-866254e39293", "sighting--5657345f-ac3e-438a-b751-7edc8b63dc55", "sighting--2443e255-d5fa-40d5-a4e3-14f43b9452ed", "sighting--934d4e53-1add-4187-9447-8e0dde4e2f1b", "sighting--e070b69c-646a-43b7-803d-9c61f28bffff", "sighting--aa782c81-5252-4017-a1a2-ba3955f05239", "sighting--bcc33082-00af-40ae-8900-d9680a808796", "sighting--73964bfe-92c0-4995-81e9-306bde225ded", "sighting--455b38e3-8f0f-4eae-b46c-021b48615634", "sighting--e9fc8dff-ac50-4e5a-806f-78cd11f25202", "sighting--5601e500-7f5b-441b-b83b-bbb70754fb34", "sighting--76ea1f6e-7ac0-43cb-a1c6-671a00aa3423", "sighting--06c7cbd1-1baf-4be3-84e5-28ecf293ebbf", "sighting--5bf41e1b-2551-4cbe-8510-65b771613210", "sighting--5eec6320-07e9-4712-864b-16a7c9cf7b69", "sighting--cc9894f9-eca5-4f3d-a3fa-381d78231139", "sighting--5f4f2451-689a-4bbd-bde5-c9a7065878c7", "sighting--c2772aa6-d777-4cef-bead-bce7f1d21183", "sighting--e4b615bc-889d-48e5-b31a-dfdefc7f2ce6", "sighting--25e7b711-f7ad-460d-928f-43b9036ceb41", "sighting--1058fd31-a7f0-4386-8883-e1a2115b06a6", "sighting--901d283f-d394-4409-b73e-d4e0fb8e5c42", "sighting--9ba0ac87-3484-4aa6-a718-c6b6c8f05032", "sighting--1b83cbf0-4e26-4fa4-a9ba-3ffebb9e80e2", "sighting--0ccaa996-7974-403a-92e8-7ec79b594f5b", "sighting--042df363-ad22-4715-8bc0-deae3d2f54ac", "sighting--acba19ed-2b93-4ad9-a21d-2a0c7ed698a1", "sighting--f50732ab-070b-4618-9e93-5ae4db640db1", "sighting--fea2f507-bf2a-4d6c-b7bb-8d66d7aa4d41", "sighting--278da2e8-bb44-4272-aba4-2a46df867ef3", "sighting--5ca95bad-c352-463f-a480-0f3d94d5c049", "sighting--644e5927-6e3a-417a-96be-08a3acd1faa0", "sighting--7102bca7-8750-4972-ae1c-a92d9857bd7d", "sighting--4cdbb1d1-e2cb-41a8-96be-ad9f98e5794c", "sighting--db06414c-9c44-4957-a417-83df5e2d043e", "sighting--0ccbce4e-e6d6-4d8c-8891-669b00fae6e9", "sighting--2fd9a66f-23cb-439b-b9a5-a8d1aa59d8f6", "sighting--0e497675-ec5b-427c-93f2-987c4136100d", "sighting--485a061a-b0af-47e5-a9d0-499bc6bda684", "sighting--73de9702-cd1e-4528-94e0-d94cadde96e9", "sighting--6db9eae6-f4e8-46f5-92ed-745b7a139f95", "sighting--f6416e42-92f0-469e-a1c9-9439e5422a19", "sighting--d3385f7f-5153-4539-8857-7851fd96d00f", "sighting--ef95fe37-a669-4edd-bb87-ea9e92ef4a03", "sighting--2741ca60-44c3-4d4a-bb7c-b973f5c4f7da", "sighting--4ad9e869-5b39-4f36-90ab-7d269d5ad80f", "sighting--76cb65ad-fe21-4822-b8e9-c6edda22a037", "sighting--48bb151f-9812-4b75-b07f-a3dd393afdc4", "sighting--c08845f0-ff0c-46a8-8e51-4d4c76cffa96", "sighting--da80ccce-ffbb-4777-adca-daf2911b7927", "sighting--b12e343a-fc9c-4f6e-a91e-f6f4c7dcce20", "sighting--f9fd5dbc-aa9f-4fda-b53d-102ca26a46fa", "sighting--356dabc7-e795-4e99-a234-82014df18c6e", "sighting--74c074e8-b533-43a7-ad41-608e105036c0", "sighting--dddeecb3-e69a-4a30-904d-1635d8242f13", "sighting--81fd01d9-6b99-4ae6-9615-90060e572cc1", "sighting--7a01c39c-0c37-41bf-ae49-3d949f7b90ea", "sighting--ba516b1f-98e2-47bb-98a5-e77db5fe4e23", "sighting--f752ffbc-8835-45b2-87b7-026fd722d3aa", "sighting--871e6b7b-86f4-40b3-ba49-573826eb23f6", "sighting--42822e72-a1be-4aed-9f47-3815a41c24aa", "sighting--9a128fe4-8fa3-4ea8-a93b-827073989228", "sighting--9cc9cf2e-fbfc-4a67-9df0-3815becbe27a", "sighting--6bda4ce9-26a9-4703-8b6c-de966588ebf2", "sighting--f519c23c-d271-44d1-9edd-89e1b5aa0521", "sighting--ef855376-5829-4ed4-922f-74998671daa7", "sighting--0f25002b-6762-4808-9710-eec5d9f686fe", "sighting--61884261-8814-4bb5-a650-d4d95dda3d7c", "sighting--b380d3db-0edc-45c5-8098-24d57b0cd209", "sighting--8dfded39-41a4-4a01-baf1-f46a798fb0e5", "sighting--bef47593-e61b-45c8-a447-5bceb871ba24", "sighting--9dc3e089-b494-4f22-8e2f-e72ec7eb98ca", "sighting--cedb1f3d-5a40-4147-ae2c-5cea9c872839", "sighting--63d26e60-1126-4cea-94c2-1304e3e8e815", "sighting--6c029e52-8701-4102-a017-ed91cec8378a", "sighting--a5b50543-2654-4f46-85b8-7cb68f84f1a0", "sighting--467f0bb0-fb4c-4e86-9ec9-8a244b7fd0d6", "sighting--2e835ebf-1192-44b7-8bd1-d4b3b905ef65", "sighting--6dd9c5f2-c285-451c-94af-569fa380c1e4", "sighting--e752763b-537c-410e-a0aa-bcf4c0743c65", "sighting--2fec2bb9-434a-4a89-9f16-d6a8331afab3", "sighting--bc515add-dadc-4ec0-a3ad-4c8072164d10", "sighting--d2e424a5-c4cf-4444-bfe3-b60d27399f22", "sighting--0f9d42ec-464b-49f6-99a5-37ce1f65183e", "sighting--ff191d80-5adc-4bf4-a431-7a230669bcd7", "sighting--3a79d97c-95f2-450b-90b0-535ce3d871ed", "sighting--15db3860-3563-4676-9b61-8026215b3a74", "sighting--edf6c494-7b2c-43ec-aa3e-e858268f3328", "sighting--3ee22391-75fb-48b1-bff9-de29ce6383bc", "sighting--e0bbb352-cbf4-4ab8-8a55-ad2ecadf6b0d", "sighting--15c37496-4c5f-41e1-9e20-9dc0486d6314", "sighting--a75dd402-efe0-46f5-8679-2a3d44056607", "sighting--6439a110-458e-4ce3-ab76-ce17f1538b1e", "sighting--4dd583fb-0f72-4075-9867-fe6b98b8a5b6", "sighting--19ed94bb-a81b-4ff2-8f7a-9d680fb79563", "sighting--ab0813a8-1d5d-40a2-a24e-4d931bd0541b", "sighting--3821683c-6c73-400c-a8a5-b92ea54e8ee9", "sighting--9a881d63-af0f-44d1-a928-75d16d87055f", "sighting--4a1ab1b7-caac-407a-afd0-e3b2819b5251", "sighting--8df0dc89-91f7-4706-bce6-8bcda034d15b", "sighting--855bf99f-92e4-4bdf-a58d-50bbbae4d095", "sighting--48c4ac49-43af-4add-99ae-c4f94a67ac99", "sighting--d1d61007-e33a-4219-971e-427ac4d5c922", "sighting--bda4f4cc-1c46-4711-aef2-7343186dffe9", "sighting--560178ba-1a35-4edc-8076-4b3850edccaf", "sighting--d2c46ad2-9344-41cc-af54-f51379044c12", "sighting--d4433d72-4946-4d54-9f57-3ef154a52daf", "sighting--cc8f3ef8-85d2-4e72-866f-b0a172027d5d", "sighting--221bb3a5-e55c-4521-be31-2777287b8e31", "sighting--59485591-4800-4ead-b31e-607aca7180f0", "sighting--442bb1bc-3dc1-484b-a5b6-0441ae55392a", "sighting--6bff2648-2e3e-4876-b821-01d2bcc0b5cf", "sighting--b79af158-49e8-4d8e-ae16-083c5b47bca8", "sighting--9f8fad91-94a5-4c28-a3db-11e99d2258b7", "sighting--e9eca9d9-948a-4b95-8547-9b7816635e70", "sighting--5edd5aed-08bf-4a37-82dc-a0f07759e7af", "sighting--03a22c1b-4858-48d0-8263-26e2e03407f4", "sighting--32d9a560-56ee-43c1-8fab-a873f7f2bb48", "sighting--cc1f8097-b6d1-41a5-8fe7-312392a8e6fa", "sighting--24efa084-d2d4-464b-9f6c-133f02e32161", "sighting--3cedc294-cbf7-4fce-8835-6c2405de54bb", "sighting--0db7a66e-2435-4ecf-adbb-995dc1bf64db", "sighting--f31ede2e-9098-4e13-9ab8-9fc751c67fe6", "sighting--f7e915d4-faf9-48b5-a727-ea17a7931a66", "sighting--7cac8777-74c2-4f70-8c72-822dde92c25a", "sighting--d4d7cdea-5ea5-4f98-8771-67d96d01f162", "sighting--cd5d57ec-6447-4c0d-95d5-8afe1ed85587", "sighting--def96d93-2b0f-4a5a-b399-66083a132728", "sighting--c03aee20-2849-44d2-afa3-51fba55a286a", "sighting--7ff1e27e-9a80-4856-ac0d-e4b9e5d456bb", "sighting--18c6e9d4-f76c-48bd-9526-2b8199d87599", "sighting--38a3e1fe-0827-4018-a8a0-8bc476685e58", "sighting--d3bd089a-8f56-49f7-909d-641a13eac1d8", "sighting--03dc8b3b-2483-4b29-954b-255a483f63ed", "sighting--869557b4-c3e7-436d-9909-2f975c910aef", "sighting--f74e977a-1039-460c-9637-58673e8634e8", "sighting--247f40d3-6705-4dee-8974-97b074295a50", "sighting--7b9f37a1-6e61-4b37-987f-7fed3e7f835d", "sighting--7991aeb8-c93d-4e3a-b54b-ce83973c2d53", "sighting--7bb4385a-e30b-4928-812b-3f6a569b5b8f", "sighting--f60a7c70-e372-4b02-85b6-8f1f52420b70", "sighting--a0d6fbaa-70c3-460b-b94f-3ced3d819fb8", "sighting--6e0e4295-bf81-469b-b2e3-53839483a99a", "sighting--783adc70-109b-44dc-b187-20668da76644", "sighting--3c20ac7f-f0f8-49d2-aa36-30f75ea120e9", "sighting--7fb108f9-c003-47d4-81ac-47935b93a0bc", "sighting--46d1bad4-1118-49a4-b745-7b7037d35caa", "sighting--9d4f0fce-bbff-46ad-9d79-6d3cef51b830", "sighting--e8a59c2f-6d0c-4903-86cb-7908f888b9bc", "sighting--b6fed1dd-bfb5-4def-b82c-058049d59a35", "sighting--88e98f36-b681-4a82-b204-38ffc9e35c4d", "sighting--e9556918-aa50-4bbc-833f-f7c93cb8b29f", "sighting--3632f6c7-3a0b-4db2-83da-cbbb3477b919", "sighting--4bac4db7-878e-47a6-b34a-83f7b13bf326", "sighting--7955e102-ca2d-42c5-af3f-30c1b711fe20", "sighting--a4cb8eb5-f43b-4053-a69a-3204ba5fe18a", "sighting--4ccd3fc0-39f6-431a-b4be-6fd09d9b7cd1", "sighting--88b5dac4-ac5b-44a7-85ab-ebe587e1b7b0", "sighting--e9ac7f01-817f-429d-a47d-eee3b8996b84", "sighting--c3808fef-7d5f-40cb-987e-f7a31c2ef82d", "sighting--8514280f-0191-49cb-befd-9ab1f5f07b69", "sighting--dd2c902d-7288-431e-baa9-579d39bd8343", "sighting--43e1ad8d-1bc5-4eb6-b5a8-79ddfdcb963e", "sighting--d2781999-0d9e-49a7-89ed-71032e22b0ac", "sighting--21371d82-a5dc-4aee-a877-9f31c659babf", "sighting--a757e3e8-e47d-4895-8bbe-96cd3a124005", "sighting--810930e2-d31d-434b-a7a0-dffc32b8ab66", "sighting--1a9fa58f-c118-4a7f-99c0-b18e55698581", "sighting--5f2008a9-af0c-419b-b21a-a08195d0855b", "sighting--6181512a-68ce-47cb-89e8-d07be56b2b83", "sighting--2a957b36-102a-4485-be05-f35cec781d78", "sighting--307bdc7a-7edb-4a93-bf21-b0482d0a1f21", "sighting--19fdbefe-22ce-4859-b8f3-05594f57eb7e", "sighting--2fa33aa8-fcbd-4aae-9fb4-cbf9bf0ef547", "sighting--1030a621-5986-4076-b66c-2f514d927679", "sighting--d3460147-1ab9-426f-95c1-99a3e0672ba5", "sighting--c4317edd-6129-445f-8f0e-0e3b08906b1c", "sighting--7a556c47-a6a6-483f-aefc-0b75233bb856", "sighting--36bd8878-00f8-4210-a0fc-8ac069811805", "sighting--adf839c1-5c34-4fee-a36b-3890cbbf3689", "sighting--fef8e8d1-2cea-44e8-8e16-5d95221c6867", "sighting--ac0b2edd-572d-4d36-a791-2021033cafee", "sighting--12a83309-225c-40b1-b432-f354f42f1fe2", "sighting--0c4ce935-8019-4101-9d77-3b2922ad2edd", "sighting--15741898-662b-494d-afbb-356412981ad2", "sighting--4f7e67a1-1689-4c3e-a65b-f7ccac2e3669", "sighting--7c46c2cd-617b-438b-82ae-7e14915f96d1", "sighting--1704bd8c-e5af-4914-8ce1-d756d76a3832", "sighting--64b90d39-3d99-44b5-8450-b72f46c74afa", "sighting--b4b72baa-e63d-46f4-91d9-da3d567c2137", "sighting--8bff2181-7378-4709-b343-768a69761bb0", "sighting--091b6f3b-631a-4926-ae72-575812586242", "sighting--4751981e-dc6b-4bce-b5c8-51a6d85a8c19", "sighting--12f8bfa5-3a2f-4eae-8f15-786684496557", "sighting--8100fcd9-4a4c-43eb-81cf-a99b2e9ac0a4", "sighting--8b6e6c3f-26ec-449f-9adc-e13a2cf4734e", "sighting--1898b4f4-f265-498f-a706-fee173fdad05", "sighting--5f0a01f2-12ec-4f39-af56-fcc71cd5f0e2", "sighting--79a1edc9-ea21-4c43-8623-bd4cd1d5610d", "sighting--f42554ae-3c11-4ed6-8d31-e6bb82a9c390", "sighting--830ba4b6-dc2e-486a-8a5a-09b10567c034", "sighting--ae901478-d4de-4828-8685-6adee82d07a6", "sighting--f5387ce7-0be1-4028-91ca-6dec39df4258", "sighting--d352a375-1685-4ec4-8b99-18293ffe2164", "sighting--86e17024-2567-476b-a67e-c18e6015c4bb", "sighting--364362c4-1fcb-46e5-912c-a15b58740b6a", "sighting--09d28bb1-6c6a-40c2-baf4-e3a6facd6206", "sighting--9aa4dd50-1237-427e-b7bb-a381f827460c", "sighting--0aee78dd-8874-4d86-8c78-dbb0e6e215ac", "sighting--1df1f672-ab6c-4dda-b64c-9c3eea2544cc", "sighting--ff24972f-785e-4716-8505-f44d0e6c1b00", "sighting--38a18577-3543-4def-b785-727d01e28dfb", "sighting--1d382ff2-444a-4587-9eda-db19d0ba546b", "sighting--8dcd0744-25a4-4e57-a75a-05b18bfb2846", "sighting--1ace9029-2c8c-48cb-b3b7-14076514117f", "sighting--038a946b-a8f6-4f48-83ef-80db1a708885", "sighting--27bdaac0-7a1d-4e51-be6f-ea4a7aca6e23", "sighting--ebc591a4-a1a6-4821-b598-f7c013428903", "sighting--cc8cbb57-0610-448e-9496-878b478d6459", "sighting--c3e83f58-5c3d-43c1-aa02-9e33c768af0c", "sighting--d50ef117-2368-4f43-b49a-3d9b9d0f294d", "sighting--28a583cf-3d19-400e-a76a-af7c434689b2", "sighting--20cb6663-7bde-492e-8c48-db49fa7b7567", "sighting--1fcf68e8-4ec2-40af-9442-d21cddecbf35", "sighting--8846bafa-2aad-4ebb-ad14-7549aff922ea", "sighting--a0405e9b-02b1-40fc-94d1-6ca69a3cad41", "sighting--ddbf533e-92fb-4cde-8446-79a71cbc7fa9", "sighting--d5b66da9-1328-488c-a5f2-1dc0d842ef9d", "sighting--f0f09094-6cdb-4ecc-8b80-205771349102", "sighting--2423e8a0-1d86-4244-b5e2-0e765c36aa3f", "sighting--5b536d78-2f50-4d2b-9d94-390bffec1dc5", "sighting--a2f9014c-8a13-48a0-98b4-a61fe81584b7", "sighting--fc409bbc-5ac9-4c4b-a1b7-9d172d7e6aba", "sighting--71813b69-ab3e-4f6b-9d31-0f0001d892f4", "sighting--cbc5532a-bc31-4227-9272-5906cbd975ea", "sighting--a7b33dfe-f010-4cd7-9a22-4a140730cf4a", "sighting--734a2e96-d083-4bfb-a247-c16723e6c6af", "sighting--66f918bf-2d55-467f-b97b-c76442e206f7", "sighting--6b3bd8cb-50b5-4010-ba0c-0e9c7aafd9e1", "sighting--107fb00b-8ca5-4071-b569-f821b8285f4c", "sighting--dc2e68a3-a886-401d-a90e-481d0a2c6de1", "sighting--22e035ad-a917-455d-a2fb-5d0e347b451c", "sighting--0f039ffa-e039-4ca4-abe8-834bfeb257f5", "sighting--b01c6671-0ee9-4e6c-9de5-7a0a397554da", "sighting--4f2f0246-6a6c-4c87-b44f-55d3d2c40755", "sighting--aa380cc1-e545-434d-9d8d-df5647012f3a", "sighting--a15a8022-4d97-4afd-9d8b-2b9b8f37660e", "sighting--3a17024a-6b65-418b-8962-7742e65ad97e", "sighting--46f5a1b3-9e1f-4515-9656-990cf8a63065", "sighting--47148d72-5020-4dc4-895b-65230a9faa73", "sighting--eae259ba-27e3-490d-bed2-6fc563b557c6", "sighting--17de3dbe-14e4-4ec3-83c0-0e1fa3e78a89", "sighting--7808ce27-3a6a-4331-b515-2a1470e99966", "sighting--0d8c83ec-0fb4-4cd0-af4f-2e5325291028", "sighting--6047a527-2619-46b6-96d9-afce3ce28857", "sighting--6fef762e-4cbc-4f76-8976-4afbcbc3a80c", "sighting--a74634f2-fc1b-4533-8b2f-e3a42a7fb7eb", "sighting--e517ff3e-16c5-40ac-a28a-c434a5b18849", "sighting--2bbe04e3-3ef3-4482-923b-6ceced720a9f", "sighting--e28601e5-4337-41a9-9079-56b8b8fcd190", "sighting--243ce071-d18f-4abd-840c-4295d2981b04", "sighting--697cac95-0a3e-401b-9688-22c7fc89fd92", "sighting--c522cb2d-a243-407e-a5bb-b224e8f19f01", "sighting--b80f05ef-adf0-48ad-b9ae-5810e74cb22a", "sighting--74582185-7cd8-4b87-a812-56a4ed9227bc", "sighting--2f8c9c8d-451d-485a-a7c3-e99edd955a51", "sighting--fb83a3d1-deb4-4262-9174-503bebbcec1c", "sighting--60bea605-5f3a-4a6f-a982-0e2a2ec45e13", "sighting--53f050dd-d1a5-4693-bd7a-6aeb501df395", "sighting--7680d94b-cf54-486a-a1fe-ffeedbde16d9", "sighting--442fdfb9-a5f7-491c-bcea-5ec33e572a8c", "sighting--113e6b57-1dd7-4256-ba21-6db4fd47e78c", "sighting--75a12eda-c92a-4a85-a727-71ad37d2e924", "sighting--5da9b5e4-9bde-4847-8fb7-a05c7a753e90", "sighting--f674b572-0226-41e8-b2e9-66eb4fd69c7e", "sighting--1df6798a-ae0d-49cd-b72a-4cfd378b914c", "sighting--f39e2180-1979-49e5-88d4-63714b24546b", "sighting--6ec1336e-4fde-4e3e-a9b9-c020f04282ee", "sighting--b1e08281-7239-460b-8f18-0fbfd4dd61f2", "sighting--3391b9f3-b2d5-45e7-b4d7-fa537b2f903a", "sighting--20be4773-72d2-44f0-99b6-524ad94a3cb7", "sighting--702a291c-bf91-45c6-bf28-63d839dc180d", "sighting--d5ac73d5-1c03-4417-a581-641ebbb00fc1", "sighting--862fde49-05f9-4941-864d-8c0fec689cec", "sighting--28f25ef1-41af-477a-aa05-caa39bf400a9", "sighting--8e01e7e0-788f-49b2-8bbf-f1b4b0e63463", "sighting--469d3876-d9ad-4f5d-b612-5881143bf8f7", "sighting--5f9acb3e-8921-4e3d-8e06-c2ed2f39d2ca", "sighting--724df406-e841-441f-a4e0-c34f4ec80004", "sighting--e1fc11f4-497a-47e1-bbd5-c5c7e81c13c0", "sighting--479373ac-c87f-4a87-9f0f-a4f1ca143fd8", "sighting--41910754-ba0c-4c70-b2f6-b3604becc71e", "sighting--5fa104cb-f58f-4811-9fdb-e0042339479d", "sighting--9993d00d-a114-410a-bf30-2d346585a39f", "sighting--038af7ee-f778-4721-91f0-8383ab33e304", "sighting--f74ccc3f-292c-4a3c-be0e-b34301a67f0d", "sighting--cab29940-4c7e-4a96-ac65-bb3da676dced", "sighting--2a819eca-f6ac-4b71-a999-c9f02a3a38cb", "sighting--8efe6867-44d2-4bf1-920a-58d8def5b4e6", "sighting--f34e9193-bd92-4041-948f-c2ce942bd689", "sighting--e0b97b82-bfbb-4bfa-b65d-8272cd92ba47", "sighting--e450998f-4c72-48d7-878b-e0662b7e4649", "sighting--950f6668-adc8-4693-8507-77b30006d3d5", "sighting--9c477719-4cd0-40f5-baae-9100bcdeb619", "sighting--4a7f7044-def3-4947-abed-c07b95b085b2", "sighting--ddf7ac34-3360-4ffb-b958-7890070d624b", "sighting--65bb6ef1-3715-433e-ba8b-df3675c173b6", "sighting--cfbe1c60-bc4a-4f1e-928f-22ca353fa980", "sighting--cb2f0992-c011-4769-a3b9-b2a8cca483df", "sighting--f67abc34-1450-4a7e-94be-8c8f62e17f3a", "sighting--38cc693d-97a2-4e5e-8b27-06e9085e8c46", "sighting--d5e806e7-22a5-4f54-82bc-80b7719ecb53", "sighting--a9a82507-662f-435e-9877-d8f2f53bec6f", "sighting--672a0e28-303a-48fe-839b-d23605047e9c", "sighting--b16ec40c-89a3-4159-8c2f-af0d8dfe22c4", "sighting--45622617-b448-46b6-bd54-9fd5ca1df4a8", "sighting--ca792d41-ee5b-4279-87c8-d7d9891e8a9b", "sighting--41726be7-41c7-4a9c-9692-3ba610443c92", "sighting--0052f79e-67ac-4e43-98ba-51cd85ef45d0", "sighting--20ad1873-4db2-43d1-8dae-c36f060a9b54", "sighting--fbc7260e-e124-40fa-b08e-a159a809d803", "sighting--bc55c128-1f4e-4774-bf96-1eb4035aeb91", "sighting--44ab5c30-1593-4af5-9931-15d98146bf79", "sighting--a2e92146-5156-44d7-8cfa-2d7762d96763", "sighting--61e31dea-7c1f-458b-9052-590549e2191a", "sighting--998d5cf7-fd2f-4aaf-8282-7a84b5e5281c", "sighting--f79e1f0a-8213-417e-9245-8c2166bf4a1e", "sighting--76f21799-fd90-4396-8598-9ddabe48c2b0", "sighting--93b2e1de-20e6-42b5-8ee0-bee7e7e61963", "sighting--bcc4278a-abc7-4cdd-8e4f-d1706d40d30a", "sighting--e7ffbbe7-6ad9-4293-9b58-e22059134abd", "sighting--9e7b6622-63d7-4402-a9c4-39d5b8f5db8b", "sighting--e1cc67db-33c8-4c9d-aeca-df38f1d5b0ea", "sighting--5db9a18c-7a24-4fb4-bb8f-f32a31b99a58", "sighting--91f3115b-9861-45ee-9a3a-d1f311563ac9", "sighting--2a161b12-0067-4f12-ba29-82d6ea0a4a05", "sighting--0e4f64eb-3c14-4369-b1f2-8b6d2c2844b4", "sighting--fad515b8-032e-42ea-bd4b-1e2aab343075", "sighting--83b92b37-6380-449e-88ab-d518a1a861ad", "sighting--f3791cd4-1720-41a3-8ccd-31b93207f192", "sighting--415c7d5d-4a26-4da6-adf2-8337232cd850", "sighting--d5df2be0-51ee-434f-abfe-f5b229525df2", "sighting--3f5252dd-5d1e-4ac5-afe1-b9d3ad6a7d65", "sighting--6152b366-8153-4d14-b8c7-7d0d40757a37", "sighting--368787dd-a7b7-41df-bf4d-25c7f156c01d", "sighting--44bc4c57-b5d0-44f6-86ff-ff06f4ba0939", "sighting--eda6c1a9-c214-4c0b-9e41-739ca444c9bf", "sighting--39a85f85-5d1e-4eac-a63b-946d19067e1d", "sighting--9f6e6c26-86a5-45be-a9fe-f7779c2b5019", "sighting--b6a99619-d465-419b-ad13-c31d6d404a16", "sighting--640e450e-634c-4120-b726-432f2e310966", "sighting--b14021ff-7cdb-4006-9e57-b69d1a08f871", "sighting--d2178832-42f7-461d-9ff4-f63ec97d15d5", "sighting--9c844958-bc0e-4bce-b0c5-15004098c806", "sighting--1566b37c-846e-44da-bcab-bf9ad7e94bf0", "sighting--529c5048-8cdf-4c3c-8487-6777d8a03df1", "sighting--c76cedb0-20c3-4ff7-b07d-8826fed15b31", "sighting--dc13abed-c9f4-4fe1-be3c-0724459c06a7", "sighting--6a5f2e7e-55c6-4706-81b9-3f0246dc091a", "sighting--b02ef878-4713-46b3-ba17-8d2b81a8df90", "sighting--69476eb2-3ba6-4df7-a767-dc3317898db9", "sighting--2de43269-7d5c-4bfa-9c47-c03103fe20b1", "sighting--3b60f42d-760e-4dfd-878b-659a1a602294", "sighting--e230ac80-d69d-4bed-bb30-c7d3aa81054c", "sighting--f2db5f2f-5213-4878-be47-9b2af0aeabcb", "sighting--82b22db2-8dd9-48e6-b7e2-26c8870cbfaf", "sighting--6c09a42a-d657-4d9e-a724-890919e6d782", "sighting--16d4f0ac-482d-4d35-a853-b1edf7e756ef", "sighting--51dcbebb-14ab-4ebc-86a0-9b91f40f5b31", "sighting--374c1fda-3ea0-41e1-b6ea-9b6d84238f96", "sighting--6eeddd83-bf7a-4100-a6c5-8c7338043a27", "sighting--2c87262f-7490-40ff-aba3-8aeaf2387175", "sighting--5e6b6393-14e0-45aa-bc4a-ce18db341d55", "sighting--556041d0-86c1-41b1-8069-7eda7362f0ef", "sighting--f0a1f97b-b241-4888-9375-c430b5788ff0", "sighting--3f78df8f-87ab-4cf6-948e-d279829e1b9a", "sighting--a7f78680-f8af-40df-bb27-447760362269", "sighting--7121385a-a453-4fea-bfe4-1f533a692004", "sighting--e3ea8aae-908e-4fdc-912b-529c29e0c070", "sighting--f5fd68a8-6f96-49c4-8098-4311fc6c9306", "sighting--139a9c70-bb77-43ba-ae2a-07bde744267b", "sighting--cd8bfbf2-ad93-4a6f-b9bd-da1196894ed4", "sighting--b7a514b3-44db-4631-b93a-af2c2595c8a8", "sighting--ce0710ef-4688-49ef-b7da-11595ae7b6a9", "sighting--f4184073-6d6b-4574-930c-7e260b91b55b", "sighting--1fff1233-a921-45a0-a5bb-6135a0d8c44e", "sighting--e78d59cc-5a93-40f3-ab4b-7cb24a83a874", "sighting--c8e5588a-5a0a-4982-959e-253679d6e6c7", "sighting--255d9fe4-d28d-46c4-9d7d-ab0e02d94201", "sighting--bd867674-9eae-4910-a5e7-7fc5df23f488", "sighting--ebcab92f-4ab1-4cf6-851e-a626a9670285", "sighting--7d3913b6-cd86-471f-a4aa-216491dec3cd", "sighting--98c38a9d-502a-4d08-b4a0-7841ccfbeb9f", "sighting--3e4a8348-f746-4d2f-9f96-019eb1be0c7d", "sighting--b5f49b91-2338-45fe-876f-f91022c5ceb2", "sighting--951b97ea-a687-4159-ada4-420393678f60", "sighting--823c0afd-d3d5-49fb-8fa3-1212ece20a3e", "sighting--3f98c423-7a42-4885-9e01-fe38c930974f", "sighting--4a754575-dd7d-470e-ac5b-ecae36a77fa4", "sighting--4f29aede-47a0-4d58-bc82-3ebe5fdd69f0", "sighting--a097ce80-cf23-45f6-a4cd-468bdf8a1911", "sighting--48bfd3fe-0e37-4539-90ba-ca15a96f0d42", "sighting--5be202a4-d809-414e-b817-354283e950dd", "sighting--5a4c1596-f8c3-497d-a0b3-410f2e8841e6", "sighting--204eb4ff-176d-4450-95a9-c07f6f035cd3", "sighting--fe98473a-a67b-4432-98e5-a5cecc26af05", "sighting--9efa599e-e2bc-406e-8286-b20ff84f5779", "sighting--450e483b-f3f1-4d83-af5b-f767f57f951d", "sighting--6c653654-e55e-453b-81f8-654279c1f135", "sighting--1495a239-25bf-4138-92f9-17abe9bad4b6", "sighting--9345e873-cabe-4728-bb66-e147032b8ad5", "sighting--1cf17f9c-b937-4fa9-89ba-1e42acc951af", "sighting--52b46e30-2292-433d-97a2-79b953f3d10e", "sighting--a3588070-a6a5-46da-b614-2d04f9831eb4", "sighting--8e537195-ba40-4bc9-ae03-810d00a931a2", "sighting--8a64ca08-8594-4468-8b26-2fdea96d1543", "sighting--108cb07c-f039-4b4f-a8bb-a69a58f1a50b", "sighting--4e41eb55-6a64-4d0f-bc46-2bed7860d67f", "sighting--a7ef9358-2090-4272-9766-1ab88f1bd25a", "sighting--d0759b16-19e7-4223-873d-a48bc4fd7984", "sighting--7de51b60-d9af-414d-868c-e5aff16d309f", "sighting--9273744b-a32f-487d-a7f9-09f47f24f5f3", "sighting--881bafa0-98f6-431c-b9c7-7f0add1e1a14", "sighting--321d8a35-f8b4-4e94-b9e1-515f616d1fdf", "sighting--4cbc3f5b-9e9d-474d-b2f7-764f412f927f", "sighting--882988ce-7e59-4d95-97dd-7932f70f1dab", "sighting--a4ff60a2-47c0-4000-abda-f3932c8ae4a7", "sighting--694d5ea2-1550-4179-9738-49a939616e5a", "sighting--530ce355-4a62-4dd4-b3d4-99887e39782a", "sighting--6826678c-3d30-4b7c-8b8b-996407efdf59", "sighting--a759b1b8-f956-4ab8-b771-7878f5641ec7", "sighting--6ec67d4e-957f-4b61-bac6-d00e43f341d4", "sighting--33e04b0b-d456-457e-b5c3-25f6c69b6c84", "sighting--b08c383d-acfc-4a36-9510-817e97ee374f", "sighting--9c4e6658-8ede-43c0-ba17-3f3dacf466f2", "sighting--9f690fbb-66d2-4694-8df7-559e6245841e", "sighting--c705d0f2-21e4-4edf-aa16-c84f272d7c07", "sighting--b28d4e55-c60d-476e-a128-8de026cc2210", "sighting--816399ad-5cb1-41d1-a64d-25dfc0ace414", "sighting--395f061e-a5f2-4002-87e1-ab33909ff089", "sighting--96a1ae6e-45c4-4708-8ce5-8f99bc8bafe5", "sighting--8bc119cf-20f8-44d9-a7ae-fd335e88c2ee", "sighting--02b53abe-9190-4322-a166-b32cd49c50a9", "sighting--1d297132-5765-4d54-8ec5-88076be5a880", "sighting--d1622cad-8976-4fca-b41b-895267c735fa", "sighting--a8f9f8d5-dfd6-4bfd-a91f-b26d8e42bf61", "sighting--f7e023f0-e3bd-410c-a7a0-3be91ba0e5d5", "sighting--7cbb2b0e-dbce-4bc4-88c9-635546c5d6f3", "sighting--db75c1e5-5491-4b66-9a68-3397999d68d5", "sighting--79f1afc1-d2da-4297-996b-82b6b74c6c4b", "sighting--edba721e-dda2-48bc-b85d-333ea480bb90", "sighting--2d54ce40-14ea-4aee-8d37-88f654c0cbc2", "sighting--39f40893-bb08-42e3-864d-f646e6341530", "sighting--22a373f9-5b78-4302-9b2f-06f4a4048251", "sighting--df5a7a3b-f820-4162-bce3-c5be02f6af85", "sighting--797ce19d-e0a9-452f-bba3-4a7c604fcf9f", "sighting--c1b02b69-3090-43f4-b973-79deb21c116e", "sighting--4eee3d3a-8577-4053-8c94-c993810444e1", "sighting--d372f461-2454-4bee-9bd6-164975e89456", "sighting--9f29fa1f-42b3-48ee-9ab8-6fc97bc78724", "sighting--cb8e8ccb-de29-4645-8407-4475b25683cb", "sighting--1e5a65b4-ce0e-4a3a-94a3-5d5856e77d86", "sighting--0e509dae-f227-4103-8596-5ad080855e7f", "sighting--357ae9b0-71a7-42aa-bd52-ffc85869ee2e", "sighting--a839cea7-c2a9-45e7-9ece-a0a0620e6abb", "sighting--00cba922-0eab-4903-b655-5126f1dafd9c", "sighting--7cb3bf2d-c5e0-4c6a-8f91-47d20848c733", "sighting--a088e0f0-8834-4c18-aba4-ad582556947e", "sighting--4ca87254-528e-4d32-abe8-93898e912f69", "sighting--8550acf2-7991-46fd-8e51-9b4c1f56aeb6", "sighting--b2ec65dd-c636-41d2-b195-ee93e4bd9644", "sighting--3d434b73-2ca9-49e0-ba3e-180f40c23d90", "sighting--10d5818e-4703-4a3c-8015-1f0b96ef254a", "sighting--066ae5e0-51a9-4544-9905-1d8a1cb851d8", "sighting--f420de7e-4986-46f8-9de0-c7b8772715bd", "sighting--20bc636e-ee04-4289-94f5-45e10428eccf", "sighting--cadfc77e-5b6d-41ee-a360-55117590dbfe", "sighting--9295b615-5be7-4911-9b22-a0d76bb57637", "sighting--25b8f65e-b719-46c9-848f-d3231fe5f40c", "sighting--e1a28181-d58d-4ad6-af9d-a379e0d07a85", "sighting--a7f96389-b0e4-4d44-a49f-b4d447476377", "sighting--2e48e5fe-9f34-45e5-9711-4c346b17f35f", "sighting--05ee4c7a-cf3b-49c4-abaf-8e1babcbd6f3", "sighting--d8797883-d16c-4345-ac0a-d9d31e13c415", "sighting--26c8cac3-b7f8-4f88-a63d-890032832978", "sighting--896f40e2-413d-416a-8fde-f85f944cb5bf", "sighting--d61e77bb-0b20-4211-87e6-6260552df440", "sighting--d24b667f-eca3-4906-8f40-1d046736af54", "sighting--9aa09ebf-baf6-4b57-8600-eee22c49beb5", "sighting--3fb7bfc9-53a8-42c5-86ca-8406517e0d1b", "sighting--fb9571d5-029d-43c5-99ad-b8b4fea2aad7", "sighting--53da69af-0768-4511-8cbd-9ec492a8b949", "sighting--14f267c0-d7eb-4c37-9041-35a1e71985af", "sighting--c8e28997-96a8-4ee5-a413-0c84946c9bff", "sighting--207bf4ff-59e6-4ee6-aa5c-30a9db94e1fb", "sighting--b873e8f9-2691-4682-82be-d68b91bcf936", "sighting--e9ba9c77-9223-4301-b51e-06062d8e3c52", "sighting--5b668732-4d26-4f77-adf0-4abb41c0446c", "sighting--d09c5c59-c63a-499c-abac-12388e9b5e4d", "sighting--976da966-3909-44dd-85b4-470b635582bd", "sighting--ad218735-065a-440c-9c85-f7d2aa2927e7", "sighting--cdbf59c8-3fda-4b71-8764-b0b3b9e2d6cf", "sighting--92e9e66e-e115-4785-aa17-6241e537ce65", "sighting--fa9be4c0-b6a1-4465-912c-7d821f310c11", "sighting--e1ed4105-3fef-4056-9c71-7d11cad0b7e8", "sighting--6d4bae85-5d42-4ba1-b179-1ff4a1831121", "sighting--e22cea9a-9f10-4fbd-a65d-b8a83e0a96f7", "sighting--4daac106-5d85-4602-a63c-f549b16d74da", "sighting--a7346a3d-316e-441a-8a0e-a793f396b484", "sighting--b87f87e2-e1c5-4874-8391-0b0123af16a3", "sighting--9759db51-86af-4ead-bdb0-c5a622f2ab3b", "sighting--b6aac621-1593-4c9b-bb6e-da86ef028389", "sighting--95b7a96b-f94e-41d4-81a0-08f329dec082", "sighting--4e09a952-96d8-4aa9-a76f-2e797ef9b19f", "sighting--aeaea66f-153d-4546-a743-a6f0b223291e", "sighting--a64e4847-a03a-4d68-8508-f4dd2c597b22", "sighting--ddd63293-73a8-4aa4-b858-b100f62391aa", "sighting--2255ea3a-5fb3-4438-b75d-2346940d0111", "sighting--c98db4fe-7059-46e9-8773-34d3583c46b2", "sighting--a50b15a1-2e93-4e77-8954-a86d7efac0bc", "sighting--70ef4264-948b-458a-8133-ca24e97e86e6", "sighting--7df1ac67-5825-495d-a9b1-6ada6975aab8", "sighting--e0afe255-aec6-49b7-bdce-b05965167759", "sighting--9724ecc7-aef7-45fc-9091-d09baf0ce049", "sighting--5769c32e-d9c2-4711-abff-1716ecf09e75", "sighting--5e631ee7-561f-4d87-b7eb-1ccc67ae99f0", "sighting--98025948-2a34-4663-b31e-8c6b544cd000", "sighting--75f2e4fa-e1a6-4d04-b2cf-5fa8ca52ce40", "sighting--6cf705b4-6e8d-4ca1-b2d1-0a3c5dea180e", "sighting--4cb0ab10-c579-437f-a230-ba2857135fce", "sighting--3f9e172c-2131-405d-b916-57f8b5a857ae", "sighting--92fd666d-0eb5-4355-b9d2-4a96494addb6", "sighting--d56c3ea2-17e1-4458-afb6-a05d09d728a0", "sighting--f09cbdb9-3d78-4ec4-a2ec-86774330d3ed", "sighting--c61566f2-1ae3-43ae-8471-5d6b8ea56341", "sighting--fc1a21d4-a15a-4468-8334-30e7d5d4e826", "sighting--4ffc42ed-a7d2-443c-aac8-74b2f3f457f9", "sighting--9162a46c-508a-4eca-9c4b-47b52b5a7b48", "sighting--a0829c1d-22a9-4770-9b2f-1c3104d31d67", "sighting--4d2d22e6-d164-44d7-9ac2-2d68ee165397", "sighting--9df5dc8b-f82c-48d7-862e-660f896eb0cd", "sighting--926418bb-5c74-4f09-9bc6-01fc77f87e6d", "sighting--489239eb-7368-4218-8527-f19904f51ba2", "sighting--22b89c82-8036-478d-985d-1a5b58f6306d", "sighting--aca342e9-3208-459b-ae8d-f1478abc46d6", "sighting--3510b8b9-befd-43b1-a55a-c9d0f9063b83", "sighting--0676ecc5-7f1f-4965-a99d-630b61e5d434", "sighting--3c1029c0-35c3-480b-95aa-901bf5770f1d", "sighting--10194e9e-fada-4c10-9c02-07efd6e7f092", "sighting--a6cb71b5-4568-414d-96b2-6c6631ec157e", "sighting--1f71bef7-832e-4150-9c0f-95e17f56ac06", "sighting--57c5ee34-cb7b-4883-87c0-f725a2aaa5c5", "sighting--437fdf2d-79b3-4c05-9a25-242dd1d25aa0", "sighting--16ed8b1a-3fcb-46eb-b981-43f5a095ed31", "sighting--78fb7bb2-2b99-48db-b64d-4077748003c1", "sighting--285b2c3d-81f2-4152-a7dc-c18c04af3e82", "sighting--7756c49f-89c6-44a3-94bc-fd450fc51189", "sighting--7b7ae5c9-fdf3-4c09-9247-a229d18a9713", "sighting--a34091d1-5f72-4972-bbf0-a7b087259617", "sighting--b3db9a44-581a-4bb4-8489-fa3429ac3ccc", "sighting--aae16114-8074-41fb-a5b1-b77affb00a12", "sighting--a61d0f37-6793-4828-833f-d67b9014c11a", "sighting--3822fb14-fc29-4647-8d3d-05fefcef9919", "sighting--d814311b-0340-40b8-a4bb-c6d6d09bf792", "sighting--b7f3f8f6-e2f2-46ea-ae08-9af4f66af564", "sighting--1c5987be-cf96-423c-ba9d-3825e8c0684d", "sighting--a9ce974b-dd8d-4199-b147-bdc0273b53a9", "sighting--05e6bec5-996b-4b8a-a25c-237b9d3e9367", "sighting--a64f0f3b-4e78-4c06-9b91-362064fa695f", "sighting--0735b8f7-6971-4855-a999-68c419afd55c", "sighting--4b93dc81-66d5-4c44-905b-a22eb7d50c4e", "sighting--f4e12209-25d7-4288-ba4e-ab5f37a07ce7", "sighting--fb84d7d3-8dbd-49ea-869f-06183edf6b95", "sighting--4b2fc142-070f-4894-b7ea-db6866f985c8", "sighting--a572f53c-3846-4eeb-a1a4-8124f15f9e16", "sighting--f788771b-3a38-4e91-ac8c-54506a88c294", "sighting--d264f933-6c7d-4b91-80e9-b1bb596b5877", "sighting--aaad0430-dccc-407b-a42c-ce5b1a9e9a2b", "sighting--f533db59-abf8-49ef-b665-967773f79a6e", "sighting--ed551182-cef7-4abb-9487-c076640d9500", "sighting--3da88f03-7bc0-43fa-a7d4-f524d1a9ac2d", "sighting--1bbd8f1b-38e1-46f2-b67d-3f57d7d95984", "sighting--b1da4844-cdf4-4054-be61-559bac74749f", "sighting--c167ef74-3979-44c4-9aa5-7b7ee22842b2", "sighting--483c5074-d8bd-479f-8144-3f23119b35bd", "sighting--61232638-3c62-4e74-9650-4172d18ba839", "sighting--69097deb-d4d8-4501-9344-6fee0ba0e72c", "sighting--8dea801a-05bd-4795-bcd6-ca81fe9c8cf0", "sighting--f59e3134-ddae-40b2-94a4-98ea12d738a3", "sighting--5d81bbcb-3ab2-469e-9721-c01cbeee2ba2", "sighting--54189644-7cfc-4022-adbd-113b619d6820", "sighting--0a0454df-f7d0-4e75-930f-2b090a13edef", "sighting--72218b8e-d2a0-4814-92ef-1d51d4921ec3", "sighting--8380dfd8-9776-4482-92bf-db8c8da73cc8", "sighting--b92bfe97-a448-48a6-a83d-fdb5b7420d24", "sighting--cb6ddca3-1839-4033-a4f5-0d896dea5a95", "sighting--27411240-1259-464a-8c61-5ea7203c2ec8", "sighting--ca008141-7857-4ee5-a078-1be7e0d5c537", "sighting--c3efc4e3-d742-4085-8b66-1e0b3aa47026", "sighting--225b789b-bf82-45dd-8a89-37dccae13834", "sighting--2527eebc-a298-43c1-9ead-a01cde35104f", "sighting--903ed531-1856-466a-aa9e-9ed6e8e7fd7e", "sighting--7e9e10cc-4e4e-4af3-90bb-741bef3f0184", "sighting--1e876d40-1243-4f8d-8a1c-e9bfb16bda3b", "sighting--0af68db6-0117-4f2a-888e-328cbe02099d", "sighting--69769cf8-ee35-4931-9c6f-6b207097d4d9", "sighting--f7cc0f73-94e4-4a02-9d5e-ea6cb715bcb4", "sighting--b3a08e6a-dfac-4893-8d7b-cea30c4f9bbd", "sighting--8ada77c5-a96e-4f95-9e53-3ee6fdbf3bdf", "sighting--2d0d0d8b-03fc-4fe4-8bdd-1ff328476be1", "sighting--a733d769-f6ad-4c30-86ab-43673adc0fe1", "sighting--0f2e5c82-73f7-4ea0-8682-efd5d8f33b10", "sighting--2d958184-f914-4c29-b987-1a1adb29c407", "sighting--ed6ae26c-ed24-45cc-9e9d-5758b7ec5fca", "sighting--55f886c4-0ffe-4575-81c8-7e26db065372", "sighting--7bb0f3ba-6813-4f7a-82e8-44d8ba2957e7", "sighting--c25e7247-cc07-4858-9e37-c7739d9c6b96", "sighting--1faa9b27-db21-4622-93e2-b87bb5a13988", "sighting--0d0c808a-782a-49f3-8015-ca503e7ed4d2", "sighting--f997729d-a2c2-465a-a70a-ccf57fff6414", "sighting--e62d0c5b-aeb4-4d0a-9518-a9c99ca7d350", "sighting--7202a5b5-81ca-4313-82ca-86771c4f939b", "sighting--8327ae30-1545-4832-9f7a-01a3f15fd59b", "sighting--29f7f906-e257-4a58-9b5f-eec30ba9b55e", "sighting--e72e0b70-4c0d-443a-9713-7150925fbbb7", "sighting--a5aed206-d182-4a0e-b1f7-afb94651b2fd", "sighting--3303a8fb-8a28-4f4e-acc1-3bcc136677b3", "sighting--a83b613a-5748-48b9-a126-05eba2a4f05c", "sighting--8e406e68-98fa-42ff-941a-0425765deef1", "sighting--f93a720f-7b92-4c6c-809f-a57734f09018", "sighting--c797332d-250b-47be-9b1c-15112fe219a8", "sighting--28cb70fa-af73-4783-9d02-e286e01b4b86", "sighting--1469ac4a-cbbd-4fff-b0ef-02e8f23dbe70", "sighting--d2647d15-4972-45b3-a5b0-967ceddd52ce", "sighting--c55ccab6-5be1-4217-8a7c-6591c00f1a58", "sighting--6b58e426-7e4a-45f6-ae15-324fbbd890b9", "sighting--c480eb14-a483-4d11-8bee-08a4d758ca63", "sighting--6696c25b-3d76-42a0-8554-392abe29b505", "sighting--5dcb6f95-5eea-4c2c-a6c5-adcc41144090", "sighting--c1eccb0e-dc38-4828-986a-167620676651", "sighting--63ee3b3f-69ad-40b4-b124-7410e8c9e478", "sighting--4cf43c51-2a63-45ff-a04a-055d8e88b1eb", "sighting--671fa3e9-3c9b-4242-8dda-8ad32d6fcbc6", "sighting--ae5043ef-a4ff-4718-a2af-77d057687e12", "sighting--3344c2d6-38a0-4139-83fa-2f0965a8c1ba", "sighting--9a6e4196-85be-4aa6-9a11-6e8f50440ebf", "sighting--9b27c332-16e1-4680-80d4-668f8cd920d7", "sighting--1c8853ea-6b0b-4584-8451-5ade32838cca", "sighting--afadbef1-ce2c-40a6-8ca3-e3d1aeea18ca", "sighting--26a2746d-27e3-4ee8-a23b-15d6976ce4ce", "sighting--33b4d18e-3e62-4fc6-a624-623fab8a14dd", "sighting--f6be56fe-046f-4e79-8493-72add58cd2dc", "sighting--89514421-6239-4d05-9902-7bbb7785d6f8", "sighting--008762ae-8619-4df0-94c8-fe46ac6f00dd", "sighting--89bb8c73-caf1-4fb4-a4f4-da8b815aad77", "sighting--39debe0e-029d-403b-a99b-66a911302bfa", "sighting--46408f7e-2c11-4591-908b-f563226514aa", "sighting--2a872714-e07f-4c45-a1a3-dc574817302d", "sighting--63cb607d-4eb4-4f8b-93bc-de727a8f2c8a", "sighting--8021d6b1-23d4-46ee-8236-0ca4eb77a37a", "sighting--5f2d5c70-e0ff-4450-9c24-c04e9ff30b13", "sighting--5a3e1a0b-e008-4355-85b0-87e630f2c5ba", "sighting--10413ac6-4271-477d-9ca2-3f27ceb03265", "sighting--c2287716-def8-424d-adbb-0ece407bc5ff", "sighting--bd9aa78c-3b53-4b3f-912a-b18acf2ace06", "sighting--6fe2aa4a-e625-41a7-b49d-7bc4226bf4c1", "sighting--085ca0b2-f6d7-47fd-9b01-4bd0b0ae2366", "sighting--6cd866fd-496d-4f4b-8e8b-d9ee47844651", "sighting--0062e388-7a94-45ba-bdb0-5153f725d470", "sighting--0fbdbccc-b022-4a64-a5b5-03a213b5b7b3", "sighting--da8921dd-dfaf-4c20-afee-cb42152addc3", "sighting--0d877fa0-d26c-4006-bccb-a050a8a04c99", "sighting--b2d5a677-bd07-49f6-9461-d3e084e7ead3", "sighting--b6ffbe16-3b2c-408a-b25d-8eff46d123f3", "sighting--2740d564-0966-40c4-a17a-081e540e9549", "sighting--ff30cda8-f570-40b5-8ecb-fc0f8c8d614b", "sighting--b33a50a8-f361-4dbb-bbc2-508f2bc0c58a", "sighting--3c0104df-c645-4660-8479-f7c51d38be91", "sighting--ca722078-f502-4b75-bfdc-5f5b917b5234", "sighting--c93ea270-b282-4f72-b2fc-9d4a3e2ea385", "sighting--c4b32a77-bb2b-4b41-8bbd-6a5571b034b8", "sighting--36ecf5b5-589d-40da-b22e-b8f5b0bc391b", "sighting--0501e6f9-4623-4d04-aaea-43c0c46a4b22", "sighting--b968229f-1040-45ce-99fb-b6c30d85323f", "sighting--5258700d-729b-4172-8bb3-7356d676deee", "sighting--d222339f-016c-4281-9ffd-dc7b98a4154e", "sighting--0541b67e-8a3d-40fd-a4c2-f672f9cd08b4", "sighting--f9e324d3-8545-4f88-8aa6-2688f1c96849", "sighting--fbd1c009-46b5-4377-9588-985d7695750e", "sighting--0a6a4cbd-3818-4cdf-a07a-1a469d3889e7", "sighting--d7e028a7-6347-4bdf-b173-41d253e03222", "sighting--f94b4ca6-401e-481e-b651-a1daf0ea69c7", "sighting--5edcbddd-97eb-4330-abc6-483e93cf77e4", "sighting--ff5eaa8c-866b-4350-a634-cdda810449e1", "sighting--7db9f4bd-d5f5-49f3-b19f-641e73325be6", "sighting--edf2625d-f3e2-4f7a-8b94-ab8934d3de8e", "sighting--4bdb335d-a803-4b3f-812c-e31b66a29c35", "sighting--aa1de8e8-7d25-408c-873e-5a72f75e13d9", "sighting--ab628458-4b5b-40b9-bc99-9ad44ef7fe89", "sighting--9291fff5-f045-4af9-8e6f-ab7f97298ce6", "sighting--50b289b9-2047-4365-b82b-96741dc66359", "sighting--47a436fb-45df-4245-9157-8f3efd74233b", "sighting--83b50628-361c-421d-b477-c2252db8cc97", "sighting--227bc426-238c-431c-b95f-410beec363e7", "sighting--637251d2-1a8b-431f-8cfc-7b352c936d8b", "sighting--dea9c757-3fba-4365-ac25-31bdb4ad829b", "sighting--e069a360-7198-4a7a-8f29-27f577cbb39e", "sighting--61b08658-139f-4c2a-b963-d86d05631fa2", "sighting--60e4a8d5-4987-43fe-b46a-805c62cac73c", "sighting--29fae4a3-e166-4362-9c31-907786633597", "sighting--09803c05-79dc-49e7-86f2-57b0ada7bab7", "sighting--99e8fc1a-090f-4fe8-96c4-3069b4b4ae51", "sighting--8b965c8d-da3d-4f0b-bda9-6bef3d29d393", "sighting--d2823a68-d960-49ec-9138-5cbc441a9fe2", "sighting--b6638676-a9bb-4c24-a118-e067be10170b", "sighting--e5e3b8f8-ab7e-4158-8542-7168b055238f", "sighting--816a494b-6b61-48ab-aa7b-0f5ee72e1da3", "sighting--b70f0b70-236a-4700-8869-c7d89349e00f", "sighting--20e8dffa-80b0-498c-87de-b125701631b6", "sighting--a9647c2d-3af3-4099-974f-96e492c7a790", "sighting--a19a0467-184b-4572-95d3-7fbf65a854db", "sighting--ce512e33-fb11-460a-b133-3312017dca78", "sighting--82e42dd9-0ce4-4442-a080-ac9a2cde54eb", "sighting--d949396e-6845-4652-a575-5ed318448e6b", "sighting--53a19a89-eff3-461f-b025-8a14660c7b9d", "sighting--6c4b2ca9-a190-4041-b958-d3672591a4c2", "sighting--d62e10d1-1493-4822-b816-7ca2bd25830a", "sighting--5d0fdd0c-000d-4400-a32a-10e88f363292", "sighting--4541ec6b-107f-4384-ae80-03e6c5a6238f", "sighting--a42629dd-ea83-43a8-b1e8-7f5cd505e83a", "sighting--3007a670-8b0f-4551-af89-4981f8333548", "sighting--a0957d39-a7f5-401d-863e-ab6af97f43e2", "sighting--7db8947d-e41c-4120-b609-be2ddd912a6b", "sighting--a38662e1-bd33-45f1-a298-ae635d66d46a", "sighting--ea347ea6-db8d-4e0c-847c-1c82a859a171", "sighting--3b4d1dba-1b96-4998-9c63-7039418bfe13", "sighting--f23e7d07-72d5-40af-8532-2b8368647b14", "sighting--449082e7-f9e8-4af1-a43a-31073a96f123", "sighting--0b212fd2-3412-4b6c-ad5b-8bd2f303883e", "sighting--6aa56e8e-fc1f-435c-83a5-3483e7f80c1b", "sighting--5d67c912-bfc4-4e49-8c61-60165e56730e", "sighting--b248e4c0-f494-40ea-8b7c-cf2659fc6718", "sighting--20c056ec-c398-40f5-a464-604b8e935f7f", "sighting--08b17534-2c12-4a58-874d-a187292d9047", "sighting--a18aa3b3-54ae-4047-8b8a-77d5cd7b3517", "sighting--e5db1536-e837-4dce-b932-bafd94a3f8bb", "sighting--c77b0a9d-f09d-40cb-9132-62f0e2f63170", "sighting--acea5947-afd6-4fa0-993d-6492389c5471", "sighting--91e2e47f-aef5-48a2-bc07-82209f96968d", "sighting--5e869ea0-8ad7-4538-b957-ebc7fba1f942", "sighting--88caa89e-aec1-4f67-b9ac-039b7e20a91f", "sighting--e1fdc8b7-8aeb-41d0-ad50-1bf79bbe9ce2", "sighting--04c874f5-ee33-4b18-a9b2-4f8659085682", "sighting--f326b65a-ea11-4e51-b9c7-5474bb4df4bd", "sighting--2047ea33-3bf1-4d41-9760-1f3fce50b014", "sighting--f13de7f1-afe6-4f8c-a1a6-4aa3e6c747ca", "sighting--cd5a960b-1e6d-47b0-b94d-64e79d619720", "sighting--1a489b0f-a7fd-486a-a570-71cacf704e87", "sighting--ac63e395-1820-40f9-95bc-25a4e916824a", "sighting--fba61361-7b1e-4f1e-b168-b3e0d9770a35", "sighting--a259369d-e92c-40c4-90a1-1a1258805575", "sighting--0e2eb043-240b-425a-b916-496453b8a0b1", "sighting--6dc01d7f-485e-4229-aafe-6fd9b3d25fd2", "sighting--ea45c1fa-9122-4747-8eee-455916da3832", "sighting--0b605d66-2c92-4710-9baa-d841696e5344", "sighting--627c6b2c-fc0f-4d2c-8268-5411949c62e8", "sighting--74d28c0c-14ed-46cf-a692-e64e2fd1decc", "sighting--a99159fa-b0ca-4a45-b860-d7dbd899aeb9", "sighting--bf0c9b45-b989-418a-80ee-24fcfa4cc560", "sighting--47e87731-621f-475a-b3dd-8f8c3f57e8a4", "sighting--0feb5c09-30fd-42c1-a287-d380f074fff1", "sighting--8bbb9cb5-33cf-4dc1-847b-845fe1ed2749", "sighting--bcdc9a4c-e559-45e5-9a6c-8c2cae5416c5", "sighting--808dcf17-2ede-48c4-8e7b-f2d1532f7bec", "sighting--8f1a0a1c-e32d-4f91-8c91-4bd13b1fbb14", "sighting--a30df075-191d-468d-8d73-5634bc6b8611", "sighting--ec917cbb-752c-46d6-a827-9a76ad925b89", "sighting--f389ac67-ccd1-4941-b17a-37c5df590232", "sighting--f7bd57c6-432e-4c1d-b9cd-2075ab28ff96", "sighting--84737a68-90fc-4d84-a263-57b3aba5d9ba", "sighting--fea0da2f-1b1f-4f13-9de2-f0e71933bc48", "sighting--f023e501-473e-4ccf-904f-083527f00a0d", "sighting--907962db-43e3-4eb3-ad85-7a9e516e4476", "sighting--97505adf-df85-4098-a4d4-b143003d2708", "sighting--5fd7163b-1162-41c8-acfd-65434ee9dc44", "sighting--8e6e4f3e-9894-4655-be2c-2353ed8a61ce", "sighting--f8aeeed0-5215-43f4-b231-331b1890f40a", "sighting--23ec52df-c2f3-4593-9b33-21e65022e6c0", "sighting--db7f602f-5810-4bf9-a1ed-5be10d048f60", "sighting--22e10d97-151a-48d6-ae03-1d9a83499ca6", "sighting--b4ccf511-b678-4238-9b47-09f90d4d4d4a", "sighting--83aef737-452a-40b2-9b88-c68529e4b7fd", "sighting--4e2125a1-31bd-4acb-82ba-c3716ad914f6", "sighting--f61997d7-73bb-4ec4-a6da-bbe56cc0525e", "sighting--39740c6d-e98d-4a59-9d98-778a8f3f6291", "sighting--60b374c5-43c5-4ef9-af5b-74d3fc06d1f4", "sighting--ad223ace-dd1b-40c2-af2e-f219dd6b80d7", "sighting--3ef2dbd1-ec0c-4780-a121-a3f7358bd03d", "sighting--d5f11b49-4e38-4ab4-a26a-e497ea6554c1", "sighting--e8df1ce3-4107-46c5-ad8d-524f486b71f1", "sighting--dcf5a448-e542-4943-84e0-321dc27988cb", "sighting--650d9837-3293-4754-b098-f577ea5c7451", "sighting--ee0fa095-afcc-4dea-8e3d-3dc2e9e14de7", "sighting--fe9bde06-bc10-4eb1-ad23-98c08fb8fe7f", "sighting--2ed31391-1d57-4821-b529-d3b684c63f74", "sighting--f52fd54d-113b-451d-a606-5b4565b3c4d6", "sighting--24f36f73-d0fa-460f-8e8e-91bbabaa4c23", "sighting--3301d3a6-f9c8-45a8-b313-5abfa2495bc6", "sighting--c97b8822-2e5b-493e-a6fc-3bc50bfc0b1e", "sighting--8938eec3-4981-4c9c-ba16-c3c25fc59f7f", "sighting--d724d86b-0f21-43b2-ac2a-3ebff6efa9be", "sighting--3b3129e4-bfcc-4a3c-a2d1-bdb26b37af74", "sighting--6403be05-b03d-41cd-b288-6a1d34ad230c", "sighting--7058d7c3-c8eb-4185-afd2-8f864dc16145", "sighting--cef5268f-713b-4270-b933-2d84d0107325", "sighting--1885cf16-ccfb-45a6-b960-65e028b3a6d9", "sighting--a204dc85-2481-4b82-8c93-f41df1d6a227", "sighting--a7660ada-8d71-4268-8c32-21f4fbbdaeea", "sighting--920b6115-e9f8-4112-a0ac-206385794420", "sighting--9fa2b8f7-f39a-47e7-8bb1-ae585dcd324c", "sighting--2ce0e91d-186e-4710-bbda-cce5dbf488d9", "sighting--91768eb6-f2d0-4651-ab60-5b15b8b337ab", "sighting--c14755aa-30d6-4efe-a37c-50ca38019d23", "sighting--f748eb8b-c949-4046-84c8-f6ff19b3bcd4", "sighting--69648a88-5600-4d2a-aad0-817c68c5c4f3", "sighting--de6fcba5-919c-4bbd-bf5b-f8eda4e38de4", "sighting--b5a53d01-22d1-4a59-a043-5166a670ca52", "sighting--172aeff7-4820-47ad-98d2-5246196e09f1", "sighting--30f65d14-8859-4584-b926-26974d63e7dd", "sighting--d4070304-e48d-40b2-84de-bf8912e1307b", "sighting--cfa1458e-b644-49c0-b202-a9f82994c1bd", "sighting--970d8bd8-1510-42d5-ac87-4f5a21f3ca0c", "sighting--687b9b08-90aa-4146-980e-8b795f42577c", "sighting--a284b3e3-57d5-49bd-b666-e0d231a0e667", "sighting--202dbb12-9143-4c5a-9e75-43e829ac7fd2", "sighting--75f4b63c-71af-4f29-8fbe-fd73698e4314", "sighting--78a65885-c656-4077-ad9f-e3c536e02a79", "sighting--ce4c0fd9-3f91-437d-b544-dcfd8e30ed5a", "sighting--ba9cb93d-40d6-4806-85b5-e8176999f05e", "sighting--f4d54f93-d6ff-4aac-adfc-59ecd5e7321a", "sighting--6f39c629-a9df-4fb0-9e06-274ca5572a30", "sighting--a812f50d-7b71-4f50-97c1-854f65f3a03b", "sighting--157ac239-8185-4700-a749-312ac7dad24d", "sighting--c21c543d-4402-457f-8519-924a5bd650af", "sighting--cd45a7d8-0833-42dc-90d2-ce67d49378d6", "sighting--2f641b60-7ef1-4463-9162-5c8dcd61d010", "sighting--36d025e2-8b12-4e76-9ded-660fd00a42a0", "sighting--2378a3d5-86ef-4b84-90e0-dd0cc73c0933", "sighting--4f83f584-83ec-451f-b72a-37bb15390c7b", "sighting--cb2594da-dc2a-4905-8516-456e5fa680e4", "sighting--4d6b28c8-3660-4045-acc0-a8a6b329f084", "sighting--584c121d-9c69-4fc6-bff1-b64119a5fb9c", "sighting--552bda54-2971-43b5-ad33-f60e169c1b29", "sighting--3190b55a-fc48-4f07-9a15-c7f57566824f", "sighting--6c78722f-5f6d-454d-a4c5-bfcbfe7181fa", "sighting--93e45bec-989f-4b31-bf83-f9684a7c6c49", "sighting--cd973610-e214-4034-900d-0681770135d9", "sighting--3d78f800-b3b8-4ecd-8b41-b2fb7b5b0a79", "sighting--accdcc91-68d8-4de0-a621-5c509a1693a3", "sighting--85e1d01b-befa-4c67-9bd5-a7b37e6c226c", "sighting--5453deaf-e611-4089-9e2d-993cacd473d7", "sighting--7cfc1592-e10c-479c-a2a8-c33342710ed0", "sighting--0ed61ee8-4e08-477e-92e9-bc7541c8de6e", "sighting--92cf1962-16c2-4c07-837a-17a6dd1e29e9", "sighting--b9037f12-f2f6-4dfc-95ef-f0cc172a7b34", "sighting--ef0a606a-1326-43ca-a6c2-7f1bf62551ee", "sighting--171dfbeb-772f-4de7-9344-c52eb7e00d22", "sighting--9cd884d4-5279-485f-850d-b5f6847d500e", "sighting--24652ad7-c11c-4b13-a733-09c2ed430f9b", "sighting--1ea09642-41af-4c8c-8a84-ac089c844a97", "sighting--7b2f80d4-e1b0-4e6e-bfce-db001afa844e", "sighting--efcec09b-89ab-47f4-88db-4e5dc67c6758", "sighting--c8e120a8-19af-44a2-9766-f55ea77a8636", "sighting--15e872c4-1c8d-4d4e-9c9d-0ed0b726d1aa", "sighting--83280082-1115-4f0c-9091-c4c5b5461e10", "sighting--c3d5396f-6d80-4f9e-b412-961e825e14cd", "sighting--5991c3f5-f486-41e0-b014-1557adb22083", "sighting--a773e443-55fc-49c1-959e-3fa880587987", "sighting--c89ae020-efbf-40ba-a538-9eb86e8036ca", "sighting--49a905d6-15b8-467d-84a4-c2c55e76dd66", "sighting--ca477ca4-db01-4672-aeb6-e8758fc4f844", "sighting--0af272ed-c457-4511-a126-2cc1f6ee986c", "sighting--f875d1f7-8eb8-4f54-95a7-fb162877e3d2", "sighting--4ca3496f-aea4-4611-9657-5b7aaf723303", "sighting--6eabd353-692d-4977-abe6-0ea2579232e1", "sighting--9abbd880-7f76-409b-8ff5-8c8045a79704", "sighting--9cd88cf3-f0aa-48a8-a358-245b7d28788d", "sighting--2dd89c27-df12-4c65-b4b5-4ce1fbf0fb1a", "sighting--1208f2bb-b45a-4b48-ab80-01f651a095fd", "sighting--f8a91cd6-55e6-4a77-9949-46f4ec6e6930", "sighting--f3e5c70b-dfe6-4ca4-8dd8-d8ad384a8631", "sighting--5ddd24c1-c1c4-41fc-b85d-420ea8bd4f78", "sighting--78927d49-865d-43bb-941e-c33131c9f47a", "sighting--674a5458-02fd-4140-803d-452085fdd145", "sighting--598f7966-cd75-4c08-a09a-7e3c19ee71bd", "sighting--70dca50f-9b65-4682-aad1-041dff57d867", "sighting--cab651c5-3e7a-4d0e-a2e6-e9d06f751ab1", "sighting--951a5e8c-7417-4a7e-b306-1afc7b96399b", "sighting--692b89a6-ed60-440a-bd04-72f3ca4b34fa", "sighting--6cdd7a87-630f-4fb6-8051-9ec8c54bc7cd", "sighting--a317008f-f67e-473c-be2e-ed25b4917283", "sighting--541c5d93-9d20-426d-ab09-ee0ec73d27a8", "sighting--c35ef234-dce5-4728-a850-94770ab21e6e", "sighting--2ff3cc7a-08fa-43c1-b7bf-5db2bdb52d1e", "sighting--2402b905-c819-4f6a-b6cc-fb7cf0153a46", "sighting--33355dd7-c2cf-4319-b6c6-35aaf07f0a6e", "sighting--65887926-342f-4bec-9a53-2d66e3e8f74a", "sighting--1ba00da0-9051-4a67-a961-9bcf86c72b0c", "sighting--fedd7e28-a7a8-456c-ab22-595f68cb5f74", "sighting--15d68709-f506-4e7c-a65f-3a065e79f2d9", "sighting--67065608-cc47-49a8-a4b9-792ac93381fd", "sighting--b4f06878-8671-4a03-9c9b-332239778f15", "sighting--e4a15a96-48a0-4eae-854f-c7d91ba66288", "sighting--3e8595a9-3370-42c9-84ad-4d42afa45ca7", "sighting--149d1920-5919-45a5-9e12-00d2e3a22b77", "sighting--732b8843-e9f7-47a0-80a5-274b9cbd5756", "sighting--6d2f5d35-cb72-451c-9e3c-0aef009755ab", "sighting--d6ec0e75-531e-48fe-82d8-14018cc7d375", "sighting--d36d94c4-4b82-471b-9b51-39227d0b1348", "sighting--8bd6caa9-ef12-4fa9-9ff1-baa922eb1751", "sighting--fca59570-5490-4950-801b-64142fe916cf", "sighting--9f901478-6fea-482a-b888-d7d5cd2f00a3", "sighting--ec197383-94e2-4f77-bff2-e21f26535d59", "sighting--94fe6206-2009-4f05-9950-839b91d27204", "sighting--22f9bfb1-45ee-41d5-af09-e444e47e772d", "sighting--4d8a6203-d1aa-413e-b3e4-01262733e806", "sighting--1c0cb175-026b-4e25-9d1d-a10350eba6f1", "sighting--86afab60-c484-4b46-83f8-ec5d2538f1ea", "sighting--76504273-2d2a-4d54-9c24-368302ac8619", "sighting--3c84a79a-c494-4eb6-aaed-18783e5d5883", "sighting--f7a711a8-957d-4bf4-85b7-e288b76d06e0", "sighting--d3bca18f-719b-4698-a0c1-97609ce95369", "sighting--e6f20c93-1659-423c-88c5-2589f8cdfacb", "sighting--60251f57-64a1-492d-99af-34a68eef8ac8", "sighting--6869c886-3b55-4970-88a3-a09da52a7598", "sighting--d2917ad3-d528-486b-b2b9-6d35bd039241", "sighting--570bd4e1-25dc-4404-be4f-65e8a4d9aee6", "sighting--808a4e46-14d4-40d6-88a3-3dcac5abc254", "sighting--e6b05843-7374-4969-b79f-45f85f24c220", "sighting--f871d3e1-f5a1-4d57-a101-0fc072ce6ade", "sighting--47fe8a67-f05f-4d4e-924e-ccd407f553e2", "sighting--acb6bce9-3e06-499f-937a-7c5d620fbce6", "sighting--f1f34f44-2f2c-455a-92f8-f7ce15d87a93", "sighting--347a299e-d318-4e66-a06f-2fa94c3f3b38", "sighting--102ad066-d22e-427f-ae6b-be03addc67a9", "sighting--cececb30-886e-484d-8c10-55bd9cc73d34", "sighting--d8c90de4-c908-43dc-bec1-55368c389d53", "sighting--5dc1e1e3-88c9-472e-a4e5-b13566c4d8ab", "sighting--fcbaa84e-5c12-488f-ba48-863238e66e1f", "sighting--34f77c70-de75-485c-9a1e-c25c21ef637a", "sighting--e2586e16-36e1-49ff-91e7-d532d768cc11", "sighting--f18f1ed2-ad91-4abd-8601-f97b0cf72b7c", "sighting--0212b5e8-539e-44f8-84b0-a522630a9ba9", "sighting--868e01b4-c33f-49c4-9044-cbafc628eff0", "sighting--407f22ad-0bbf-4858-b1d2-d9d40cf1ae78", "sighting--2875bae8-090c-4f9b-bac3-2bf6a5846c3a", "sighting--e38b0128-3810-4377-9959-92ddaf00d9e4", "sighting--f8aba7ed-2be9-4946-98ff-fa61d5a024d8", "sighting--d7d23536-56df-44c2-94f0-322a66fac86f", "sighting--a946f8ee-0180-4839-a880-7fb871ea53f5", "sighting--aa1347fe-4446-4d68-a727-88a0e0dd942c", "sighting--cc06f3a4-1b1f-4890-a010-eb04e3482ee3", "sighting--49afb91b-6ce6-468c-858b-b459058fb9bc", "sighting--20e097fa-b052-43e3-bf3d-1df92aa30faa", "sighting--b3a515b8-91d3-41bc-b21a-dd409ae1339e", "sighting--2db658d2-2d87-49b5-8489-323dadb6283b", "sighting--f060ef8f-ff75-408a-87bb-d5024f908b89", "sighting--9585e561-59ae-4dbb-8180-95d4824e6954", "sighting--f8b9ad53-e277-4d86-9c18-6137bc5ce2c1", "sighting--b3cfb47b-f36f-449c-8e04-7405e055b852", "sighting--d1c5d0be-2d88-474e-9993-17f4c2afe5b2", "sighting--6355eb03-9e96-41fb-9dd7-d301f5d82fc1", "sighting--5b6a5954-8920-446b-99a4-c5b0aa09e4df", "sighting--0546ba47-2697-4e6a-824d-4e21c63354f1", "sighting--7c6941f7-feb3-4a20-861d-9211dfe71e84", "sighting--19f5c6a9-7dc0-4166-89e8-51eec416005a", "sighting--54837214-9abd-4b5d-a0bc-36d8c387c5eb", "sighting--dd6a83ba-2b74-4698-9afe-2702fd440b87", "sighting--6cc7466b-feaa-4de5-b6f2-976077b9e02a", "sighting--1f6c5f68-70e2-496d-846f-d86553f5c730", "sighting--021a945a-290e-4ff6-a338-fe15099bf94f", "sighting--50fab1f5-5f6d-4e59-83e8-4abd9dc3efb7", "sighting--e95569e6-2322-482c-a6f9-e9f78f93216d", "sighting--da753564-2726-432f-818c-26a5053ae573", "sighting--a7b82a8b-ea61-46e1-b09b-896d2b631490", "sighting--18885a49-706c-4605-9c81-347f96b1f056", "sighting--95161771-bb47-4197-bb1c-49fb2660633f", "sighting--e00de9ea-0fb9-4b40-bc77-c45b0838a040", "sighting--35e8039b-61a2-476e-befa-0eae93a1a5c0", "sighting--026953f8-f367-4b90-9b95-ac834513e6f9", "sighting--76cbe4db-a92e-4125-a4e9-40c60fca91a9", "sighting--62228742-6933-4df5-ad72-fc8a2c55437d", "sighting--84d2ef68-be1e-451b-bfbc-dd907fe0c138", "sighting--0af3a897-e489-4308-a6ac-e2a1b87444b6", "sighting--2739fe45-aef3-4d57-864f-bcb465a7c1be", "sighting--7304f301-bca2-4a05-a187-718dd487cad5", "sighting--e3b366b0-e342-4156-bf9b-dee0f5511a21", "sighting--d9beae88-06f3-4ff7-908b-c6d209b2727f", "sighting--245d7004-2002-4a81-8f2a-6c5ba73db665", "sighting--f69fb26a-f1d1-4ee3-a914-f4f048c4e60e", "sighting--f9cc4ff7-f8e3-4487-b4be-766fa84c0548", "sighting--748012f3-31ac-4a21-a525-66545732be3e", "sighting--4a5e5f44-1052-48d1-a91f-2c4178667ce4", "sighting--69836a74-6641-456e-bd0d-d775214fdd16", "sighting--854618ef-6deb-4d37-a5d6-b2b5be598c87", "sighting--d7d376ed-1e77-4d8f-aceb-5454b03af35b", "sighting--4468813d-49f8-4269-ac22-6ca8a3fa4ea1", "sighting--a3295571-d7fc-4971-8e2a-69b9b22fbf06", "sighting--2244d951-b53d-4b1c-97dc-be523146a057", "sighting--4e6905c1-2ec3-4e65-ad81-e55e42bef7b1", "sighting--543a44bb-eda9-48bb-adc9-7844527fe6d7", "sighting--4bd5b3b5-4934-45fa-a841-e17dec3dc802", "sighting--b96e8de3-b250-4658-9d8d-845e83217953", "sighting--bad14fdf-5484-480c-a061-85c7831e5783", "sighting--210c5070-0976-424c-b1d5-5aa7aeff53bd", "sighting--156781a2-5567-4edb-a4f1-914e525d2fb1", "sighting--6e2020b4-03ff-454d-a598-216616ef6285", "sighting--97993795-5ebe-4c14-83c6-3aef3db7a0d5", "sighting--b7067e9f-7e8a-46de-9222-94976beb5ce3", "sighting--997188db-7707-4098-8141-cc078c3d913a", "sighting--ae94c87f-8a12-4bf5-8b4e-b89aa91b43e7", "sighting--0a05e46a-3472-4a02-8efe-e92cc7464f6c", "sighting--446d929b-80b2-45a7-8a13-d0ff88b43142", "sighting--4e2880be-ec9b-4d2c-907f-27d9ed1326fe", "sighting--ab9dd869-b969-4487-867b-08ae5bb1fb9f", "sighting--f51057cc-dff0-41a5-ba6a-c80b99b32c8f", "sighting--59f62bef-1561-4d39-bc40-52ed31d21cc0", "sighting--4ef25616-af96-4b99-a762-e8538245da2f", "sighting--42a2bdac-8ffd-4779-970e-bfce598b061c", "sighting--1bd9a8ea-4dc0-43cb-9c58-f47396bacd1d", "sighting--641d6d36-d617-4f5a-8cec-f62ed666b7ba", "sighting--8c0d7082-2882-43fd-88e3-53a567c85b33", "sighting--9758607d-c13d-44d1-b47b-de686a30690e", "sighting--3fcc678e-e2f3-4446-8175-2589bbc0f619", "sighting--ebed70b6-ca27-4466-a009-021899657d42", "sighting--28655c2e-a012-4fce-a73b-dc45a99881eb", "sighting--6635852e-f163-4daf-9729-10899ae4f226", "sighting--832eaf7e-10ab-4ee8-91c5-b6b309ed4feb", "sighting--ee0a68d4-9f00-4ef0-988d-6f826a8e93ee", "sighting--01da2a4c-8730-450b-98e2-cfe6c1607890", "sighting--88dea6be-9bf7-43f5-9c5f-9c71e74b4f45", "sighting--aa0d2222-45ab-4d5f-a950-2438c9b3bd2b", "sighting--dffd8951-b7dc-420b-a2bf-eb5d4712d427", "sighting--3e5cdac4-20b3-4d24-a083-80761982af8a", "sighting--0d99eead-201a-40ea-97f8-ada543d8cbd1", "sighting--ab1e6f7c-42a1-4547-af60-9eb402a53692", "sighting--58bec6fd-925c-4ba2-97b6-0e01ecc17a71", "sighting--f544b80b-3cd8-48f2-a485-1983c3184d6c", "sighting--5b9b38e7-dbfb-4688-af2d-165c0adb1ee2", "sighting--67aaa79e-7a6b-423e-b910-3c19a2b66b34", "sighting--860449ae-d403-42ca-ba8a-db11b93ac328", "sighting--9b317953-daa7-4a9b-9884-df4c3e113015", "sighting--737e2fbf-683c-48a1-8acb-5d99cf6f9876", "sighting--954401c1-37f7-42cc-8507-462ebb908412", "sighting--4da521f6-3449-4a8c-baae-0a975e295957", "sighting--dd7a5fef-8774-45e2-8701-c1336004755a", "sighting--b7b3f9bc-5b46-4a8b-8c9f-b711d5c5fc65", "sighting--b0a7ceaf-ee2a-4adf-801c-53fc24affe81", "sighting--68653ac9-5eb9-4860-bfa1-8559a31c3143", "sighting--74d7147a-36b8-4e99-9d0f-2b62d7fa77f1", "sighting--c12b9189-bd39-4c1d-8871-c8e21e531fcc", "sighting--4de0310a-f3f7-4cf1-a563-fcf4ec891bd3", "sighting--2c720dab-51cb-4266-8d67-2d61d8cf062d", "sighting--293a6be6-f5fb-44f4-a557-f274d58ed340", "sighting--571042ea-b029-4265-9a3c-66c2fe88c647", "sighting--e0087158-36cb-4bf7-971f-4c5c9f1dbee7", "sighting--627d356b-8c5f-4b29-81ea-da556cdaccab", "sighting--a620b9f2-8237-4bed-af67-5a178a6e0da8", "sighting--039c96bb-1f02-4608-b769-7bf3ae66d135", "sighting--c0863c4e-6e41-4cc9-a4d0-61f3156d2067", "sighting--d559e285-9d8c-4967-932c-b1b4cef50245", "sighting--9a8ad3bd-e682-4136-8196-3e930909f0a2", "sighting--391592d6-4e3f-4808-862a-01009d0cc061", "sighting--603d7c2b-5783-43e5-825e-63ffa9c2698b", "sighting--ca6d0dd7-d55a-422e-9750-7193e24e1d22", "sighting--f601fc64-fcbb-47e9-a25c-127914bd4f80", "sighting--274f615d-ea3e-4c61-bc64-e723717575b4", "sighting--aa5ca2f5-7e76-4d09-bdd9-90e71714a538", "sighting--7a81c30a-4dc7-44dd-810c-118842402242", "sighting--82b25ed5-e27f-4979-abb4-b0f89dfcf8bc", "sighting--0e2813e1-60b1-4d8f-8de6-79487b12d011", "sighting--5d4c17b3-e627-41f0-8b3f-9efc65c74921", "sighting--58e0c186-7b33-48f3-8854-ab9b73f68a44", "sighting--5b5ab48c-a86f-4cfa-8cbd-42292a6d9c6a", "sighting--e993b100-6c01-4d3b-a0a3-c1951e933829", "sighting--c0c5bee2-f56f-4880-846f-b106c5eb57a3", "sighting--60f6b6df-b0c4-4070-bd07-3314eb59161d", "sighting--05649ac7-074d-4e4c-9039-ea58d205b90d", "sighting--6e99ae90-73b5-4c4f-9495-9ed410a8c060", "sighting--7990c39a-04a3-4c64-a694-77b9ee719351", "sighting--93e548c2-44e3-47ba-8092-95da15f99300", "sighting--77e16112-405c-44cd-ab50-2cfd0fbb2dcb", "sighting--8f7397c0-de1d-4d24-9185-082a37d96e3d", "sighting--88dde859-9592-47f7-a791-c196b7fcf4d9", "sighting--d5481edf-47dd-4b01-8c3a-3a82f3014786", "sighting--009f6669-991c-40ab-8ba4-b90f4c47b660", "sighting--c2eac33c-c948-4dc7-a302-a9d801068437", "sighting--722d57bf-866f-42d7-9899-ffd83b34fb52", "sighting--73bd748d-fdd2-4733-ac55-9f69e369357e", "sighting--58974b38-2eff-4806-924a-57d5e5f668cd", "sighting--4725ef1b-36f2-4853-a298-424515c48b22", "sighting--c33e7a7e-814a-495a-ae04-94ab665d9784", "sighting--ea64d47b-fade-4f64-b4b8-1d3e8f123804", "sighting--a7a24deb-878d-445d-9e12-d6c2444e50ac", "sighting--8d475840-f705-474f-90a8-2b11df1a333b", "sighting--42e535f2-3028-4873-bac8-f31e6d9d1d3d", "sighting--87ee9769-ae36-4fb8-899f-aacd9ddf82d5", "sighting--f8f01033-46b0-4b37-9047-0d320a473271", "sighting--881dcdb1-938d-4f9c-9588-ab6e9ae1b7c2", "sighting--136bd985-0559-4a9a-9b67-3d720387a41e", "sighting--fc7537ba-62ba-42b1-9ade-077bd3e1e9bf", "sighting--d2b44530-faa1-4e75-ac3a-7fbb764b0fe4", "sighting--bfdd17f9-ec45-4ff7-9622-e69051655daa", "sighting--69160847-6805-4476-bde6-ec0ad77644ec", "sighting--e82283bd-cf30-4c25-b6cc-95d4ed4c84a9", "sighting--dc4b4419-af5a-4e69-acd7-182b99d9d878", "sighting--44c446d2-4e9e-4ff5-852c-c47490787328", "sighting--b4fc4634-505c-4435-8f45-940aba436fbf", "sighting--2845b417-5cc7-4be9-b7b6-14fa94fcc6ab", "sighting--e5e10310-b079-40ef-84e2-7784a344824a", "sighting--f30e6681-aa70-45d7-bcfa-1f4e7e8cae7f", "sighting--4872b78a-1388-4fd2-95fb-629aab68c814", "sighting--08017df7-0956-47df-9c7d-de11d1f87c00", "sighting--18e14417-2aa2-40a1-af1c-fe5641ad9555", "sighting--7a85a032-f90d-48b6-8527-7cb16dcc1cc9", "sighting--f683bf9d-faec-40d5-9f15-910d0d8df3a1", "sighting--395ae5a7-5411-463e-b260-152d07e1c79b", "sighting--8da31980-a8d2-4c54-b1a3-59705c241438", "sighting--2bd59f37-2519-4841-8b74-b7a6e60b33c3", "sighting--d07ab269-f7a2-4b17-a0b2-1c3bcbce764e", "sighting--567c5be9-4a99-4c25-b0f0-c49fe737f624", "sighting--d45fd9aa-4156-45ed-9e55-9573486c7e4d", "sighting--166d5d59-a2a2-45b4-92d7-c42005f8f968", "sighting--effb8b66-0c93-414e-a4a6-5d7cb64414da", "sighting--47d00a48-ecd0-4562-9aca-cd79c9fc3063", "sighting--d84f417a-a6f1-4d83-bff2-7208af0386cc", "sighting--458520ca-34a1-4d95-b4ad-95757562551f", "sighting--3b8b0507-dfd4-4bf0-826b-37a78fd97a07", "sighting--6ff53419-4b5f-4f90-9739-8e3f8408ffc1", "sighting--32c6acb6-059f-4736-aecb-4f2234580877", "sighting--cb86ca3d-832f-423f-989a-cd89e60b2fcb", "sighting--9d039fa3-f5b0-4ffe-8bce-1ec4669bdbd3", "sighting--bdb596f8-cff8-406a-a47f-a32e171628eb", "sighting--d10b5353-d4f6-464e-981d-b4f6f917d3f7", "sighting--6a7de2d2-09ee-4da8-985c-9d3566be1977", "sighting--d1ef2061-57b3-423e-9af8-fdba5124b304", "sighting--e7989a22-e599-488d-b282-cdf9849a17e1", "sighting--2b028dc2-52a3-47ee-9218-73a45f03b804", "sighting--b0871123-9611-4551-a1d7-98a20a37be7b", "sighting--0cf105ff-e791-4e32-8fe2-87e59f33ffa9", "sighting--c69adc8d-2d5b-4f7c-a5e5-a89d33cb450c", "sighting--1ca6fddc-d9d2-4481-9422-ed8dec724c8d", "sighting--72de82f6-e606-463d-a318-1a0c061550eb", "sighting--6539e596-9895-48ff-9935-ecbcb593db70", "sighting--38bcfeb7-55bd-4e60-be48-95340ff669d4", "sighting--9c138c66-a488-4d38-8e6e-0d6e7efd0fde", "sighting--c711c8d2-0fc3-45f3-a7ba-739ca14864bb", "sighting--f48f3d69-5d85-4f4e-97d2-6003cda8230c", "sighting--c9e60c83-f95a-4d9f-9947-770b03e750c4", "sighting--14431644-03a8-4fa0-93d2-de049b223cec", "sighting--3439b34e-5305-4eb0-9016-50233f6bfce7", "sighting--bf2a7c58-3c49-42a8-b79a-df38af6f971e", "sighting--990c1dc0-5fe3-420e-be26-5393e0ad35e0", "sighting--e3946ecf-bd92-49d2-8b39-0efadcf9f51c", "sighting--b5ddcf78-be43-43fd-9d75-0e3033fb2f06", "sighting--de857bb2-81c3-47cd-ac09-580d9dd69e87", "sighting--25779192-5c02-47f7-9f63-e4f0522c25a1", "sighting--7e5345b8-f8ac-4a2f-87f3-d5965357d330", "sighting--ee4adc92-f573-4a78-bec5-cbd84e88ff26", "sighting--2f4236be-2d0a-4b3b-b6b5-c9ead6eb9fb9", "sighting--3bc1c6bc-eed5-4932-a760-feeb42855504", "sighting--adf52470-ae7b-432d-b793-b74c54ee7700", "sighting--d8963ab8-232f-4006-9409-982c1132a522", "sighting--7a2c13ee-0c46-450e-a5c6-67c16d187b1a", "sighting--fcaf140e-a184-4ccf-a8c1-a7ebe8c05c14", "sighting--8da3cbc0-7525-4353-9046-26abadb54e41", "sighting--cfbab0bf-9be1-403b-ba0c-32e5ce26b668", "sighting--5a5c35ed-3d0b-4bad-8316-dec761db2663", "sighting--6ea0cae4-c55d-418f-a941-f955ec0e9769", "sighting--015fbfce-ef41-4516-a5b8-4a256e17a6dd", "sighting--899a4787-36f9-40ed-a3bc-2c46109f6dac", "sighting--6c7dd50d-db81-4ac5-a818-2147d158055a", "sighting--b2c8c385-ccb9-4811-8056-da52f145fee2", "sighting--f7f86bc2-eade-4651-ad29-c66cbf99dbe5", "sighting--37f6f85f-1c48-49ea-82c5-c3a0bf54da79", "sighting--779129d5-3215-46e2-9e7b-fc8acbb8820b", "sighting--cf934b31-eabd-468d-ba36-74672643765a", "sighting--37590641-351d-413f-8cab-8bde70905d8e", "sighting--aae2c5cd-ecc4-4877-b87c-19d416a773a0", "sighting--37706a18-73fd-463f-9573-3036a035e765", "sighting--217f1d9a-5848-457d-8dc0-33a0643df843", "sighting--51159a6c-5865-4174-94f5-0b2427977e12", "sighting--af204c3e-6d41-4003-9c45-009699b6c6ac", "sighting--af1e3d55-cd92-4fa8-ba84-52b5669b86ec", "sighting--ef97b0a4-eff8-4a1b-af34-46a9c587033c", "sighting--2b99a791-7f3d-434e-98f8-f90fb5df7564", "sighting--f01f1cc6-d6cf-4b1b-89c7-9e18dc0b3dc6", "sighting--9d6a1667-6a88-4d88-8c84-74ba13eb103e", "sighting--3fb68561-0bd8-4bde-b2b7-69a9cc5819b0", "sighting--6e3a4556-630c-493b-8d7e-ccdd2da6bd7d", "sighting--555def56-3567-4901-ae95-2af5168851b1", "sighting--f9990841-f8bf-49f8-bd76-ba99b76a6ce3", "sighting--b6c01bbb-ebbe-40f2-ad6c-0051321393b3", "sighting--6359a014-21ea-4091-af4b-f9a1f99b75a7", "sighting--2bcaad09-4127-4e86-9b93-195c44184ce6", "sighting--48cc1862-6a09-4155-a16a-baef3797868c", "sighting--14c5ec46-dd06-41b7-9cc6-58de4199bb73", "sighting--e00c66f0-1a90-423c-ad28-b8298388d827", "sighting--22a49c44-33c9-4c24-a879-e91ba7c8e8d3", "sighting--e4a5499e-68ab-4be6-b259-3a70581a2fd5", "sighting--d353cf6a-fd0c-4353-abef-a7d2bc7bb863", "sighting--db9c9185-1cf0-4634-8e28-77b0b90f9ecc", "sighting--80366b22-7a14-4089-98f1-782d81b76079", "sighting--b314ff75-3ebb-45c5-9704-5c54a8effad3", "sighting--310a46af-1834-4848-949f-54401eb9d807", "sighting--bf38faf7-05e5-4db6-9eaa-65da1a2a5f47", "sighting--f7084367-7580-42c8-921e-6fd6de5f3b34", "sighting--eaff47d2-6f60-4f60-9996-2c6b02e6cbb5", "sighting--9fcc205d-9468-4ead-849c-3e578a4c73a7", "sighting--e624a908-7bf3-422a-be87-93814945d04a", "sighting--26e90225-9dd6-4307-9a91-e72d8cbaf155", "sighting--cbc68037-1fc0-4723-bca7-dafce3cdbdc1", "sighting--db0c5f60-e220-43cc-b9b2-0f1b592436e2", "sighting--1298a321-b30a-4acf-b1c4-54869abbbecf", "sighting--88bb8b87-a863-46c2-8637-319c58da0d5a", "sighting--a4bbf1d1-c48e-4232-a2e9-31b9c05ae681", "sighting--f0d5af15-1003-4f11-a6db-ea29211dff52", "sighting--3f8c8a26-a00c-4c8a-b119-01c5fabb5b55", "sighting--5b49ba6f-6112-4ce3-a432-eb47ab425b88", "sighting--b1b51dfd-335f-4323-9290-96a7bfc25d7c", "sighting--74fafc9a-8064-437e-8471-e1caaeecfa11", "sighting--44dc2b87-74b2-4fdf-a77e-10a14796c6a9", "sighting--b24bdc2a-0708-46b7-900c-08a50a23a038", "sighting--1826578b-d43e-4f73-a561-7e585fdcef06", "sighting--d9efc888-fe81-4d7a-baa1-2e4c6e7f6065", "sighting--a3feaade-a873-4a66-880e-ea895cdfdbd1", "sighting--6f4266f0-8dc4-4757-8b19-b8cd2913775b", "sighting--35630b65-d027-40ba-a1e1-0552fdb6392e", "sighting--d6b97583-4e2a-4be5-8749-d6937e918009", "sighting--a0954135-3ce0-4253-8fc2-0745729d1e1a", "sighting--191b000e-a5a1-4ac5-9a0c-46138f5d1783", "sighting--e3f4d416-1b1b-4961-9d83-f498e7d9d5a1", "sighting--47129acf-ef87-4310-865a-c10e058af0d5", "sighting--c892671e-5144-4716-a638-42f960b6bcbb", "sighting--a6d0fd9f-a668-4a23-b0f0-90329e87f518", "sighting--33a4106e-9911-415d-8356-3799048506ba", "sighting--e919f148-64ee-4a29-a05e-4e384410dd2c", "sighting--143bd06e-6f34-4855-be01-b7aaee5c260a", "sighting--83d3086f-503b-4c9c-86ab-0bd4bf4b8ba9", "sighting--22a8e4a8-db20-47dc-884f-d066fa2085dd", "sighting--dd0dbf38-e69c-4ce9-adcc-3aa679979c39", "sighting--413b4cc8-1e7b-4a4c-b268-4a7b7ddbe2da", "sighting--0f23198d-e7ec-495f-9cc0-6c1c618f3f91", "sighting--7a8d204c-58b6-4eae-8710-230b2cec8a27", "sighting--0786dffc-4912-4159-9941-2ef2c46b3a71", "sighting--21958d53-349a-4702-a90d-d1db1f0d8611", "sighting--be6742fb-79d0-48ae-8128-58de6ed4dd81", "sighting--b272634c-49a0-4614-a89b-b57552f8f91e", "sighting--93f7d067-d3d6-4178-9da8-0216a913656c", "sighting--adfba7e0-ad94-4c71-b5f8-ca65b0199329", "sighting--8522c95c-8284-41fc-b874-d4d451f1180d", "sighting--ed6afa9e-af9d-4034-bed9-c2ac9305a7f9", "sighting--5c1abb3f-a105-4b7b-b83d-1ea5fcb19774", "sighting--cea41da1-8c18-49da-b62f-cc1d9b7fd54f", "sighting--cbaee878-675a-42e5-bb00-2e48727948af", "sighting--e7025883-f790-4ef0-8534-3605a64cf147", "sighting--0e46a436-d049-4e93-9f02-8b1b884a591d", "sighting--84d5e6a3-f44f-48f8-8994-d1775d24a044", "sighting--8a277c01-c026-4810-923f-dfb62cc315fc", "sighting--708e3afd-03cf-4bfc-8509-0ef8f883a2ea", "sighting--1546e2f5-fdb1-4c62-aa67-7af58197eb10", "sighting--965eb89a-3bc6-4e63-8c34-833b0dccc595", "sighting--1e8575b8-00ac-44a5-8376-a6d6791fcb8f", "sighting--d30b0e1c-03e4-447b-95fe-04d391013105", "sighting--a19d0fa8-9372-4b71-a6c6-d117035053c1", "sighting--738ae67c-8c9a-4931-8c43-a08b8c23a3e9", "sighting--58331716-4d82-4f1a-b065-7aaca7488c70", "sighting--536a1e40-c45e-4397-af17-545c0edddee5", "sighting--65a7c814-70bc-47c3-90f0-be9f8913f2e4", "sighting--33393f2a-2179-46cd-8dba-368786513873", "sighting--81836104-c1b9-4e77-90f5-9f45a979a659", "sighting--b8efb274-4415-4f26-b4c6-3484533072d4", "sighting--190fd06e-a626-4b6a-96f0-72a6cafa0cc8", "sighting--1d3e2b0a-ee31-488b-8e1c-0aad7f2a765e", "sighting--d27c4193-92c9-48e8-af14-cd3709d62f62", "sighting--4cbb1fb8-5c93-461a-a6c4-0401098659f2", "sighting--7ba54db4-325c-45b7-92bb-ef8dadbdbc6a", "sighting--eb058600-4431-4123-afbe-f905aa520e9f", "sighting--41cb1d7a-6dea-4788-bba1-e132d056076b", "sighting--5071ea18-dca2-42fd-81c5-5e408fa354cc", "sighting--1aa47c3a-e8e5-4f16-b62a-26d6f3ccef9d", "sighting--ffcaca41-6ec0-4a33-b525-eec5d5506e32", "sighting--77742a54-5e37-4d39-9ff3-4d7523b73272", "sighting--88f309ed-296c-45fa-92fd-f4a2cf5a359b", "sighting--af04d5b2-7213-48a9-bdee-fbd0c2caee9a", "sighting--595c1b28-f28b-4a2b-b1b1-636bb216c758", "sighting--4cca55b5-ab6b-40a2-bd5e-2f6ef7d58b75", "sighting--528b5356-1e32-4b33-a518-13b4d7561662", "sighting--1d35649f-4699-4fac-b189-d11aabeb42b9", "sighting--0a44cf4b-16a5-4368-8c5a-301b30b406ac", "sighting--af53533c-c267-45ff-8d85-1eb043b2047c", "sighting--b4aa3503-6538-47c4-b521-41bf63de5a65", "sighting--d2a1bc5d-3d27-4035-9cff-31e702e12fab", "sighting--22a64913-4b20-4d03-9024-5a4e4ba1dfb8", "sighting--1cb4502a-fe17-4edb-b1fb-8dfbe2ce1db9", "sighting--98157d07-c0ff-498b-afa0-ae1ecc4dd10e", "sighting--8fb65cc8-a941-4ff1-ba51-593ca101598a", "sighting--3c125d46-c865-4538-8a8f-6b5e925ea232", "sighting--486e9902-7635-43e3-8414-0cef66b84e02", "sighting--35c93940-7c8e-47e7-b749-8610853ed5a5", "sighting--6645f99d-0f81-4e34-bfaf-34547bdb817f", "sighting--b04c4996-3f60-4271-9bc8-38cff8152188", "sighting--5a12c5d0-7d38-4a1b-a8e6-223d69e4729d", "sighting--16121e62-6286-4e34-bc33-871e652c0064", "sighting--110850dd-4dfb-4450-aeae-d5d9264a2bbb", "sighting--4c965025-76be-472f-a4bc-d6ea84431186", "sighting--ba14f3cc-162e-4a93-a2ab-9a5b9d929ee0", "sighting--f899c6c4-0cb4-473e-a34b-b50d5f06f66a", "sighting--d1557fc1-c8c3-43ad-98d4-6765df7b8714", "sighting--8c7a3e4e-c551-4bc2-b89c-5c81f59876c7", "sighting--33bcb4e0-8319-4778-bf46-50e6623ea62d", "sighting--8fba2235-0467-45a9-b95b-e8ac7afe569b", "sighting--6a5768bf-36cf-461c-a0cc-f64beab5bca2", "sighting--94d08b2d-592a-4687-abb6-ee64c0be0b7d", "sighting--52039d14-5f8e-4929-a89f-762e8e7fc1dd", "sighting--c686c2dc-6e14-424f-952c-71e9b95933b9", "sighting--38443997-912c-407c-bb76-2d6b8c8a379b", "sighting--30ab39f3-b81e-4d3c-90dc-fbea5e72b6dd", "sighting--edcf2355-62cb-4de8-b416-3f7e7d93edf7", "sighting--0b418441-a841-43f1-b7c5-84b0dd73aa61", "sighting--5a2f7201-2ac3-4086-9ac4-fc266146b91c", "sighting--0afc5b9b-78e5-47a9-9e9f-54eb4c96898b", "sighting--d2e08876-b4dc-4ed4-81d6-d36ccd199dc1", "sighting--a46fa647-ae0c-406a-9fc2-04a5e49a71f8", "sighting--27e35a64-3c68-48f7-a8bb-6b6a8bc1512c", "sighting--b55e0eb1-aa17-41e3-aa74-11f56b97b133", "sighting--43a973b4-1757-497c-91b3-e1cd134bd8e0", "sighting--441198a2-a80f-4c8e-80c2-52079072413c", "sighting--55bf690b-c22a-46ae-9289-bed8994711fa", "sighting--1d73b200-fd4a-4bfb-b446-ad896aeeb238", "sighting--b6fc818b-1625-4c91-bf78-f6d3d099f75c", "sighting--81c2ffb8-a562-4d60-bfa2-59137c56234d", "sighting--e411ef0c-b0bd-49cd-8d77-3752b2f7280b", "sighting--827f865f-b081-433e-92cd-0b6a7b76071f", "sighting--eef89d65-0578-432b-8913-11bb157b229e", "sighting--8680dc62-3165-4562-9942-62ff15ee4d5e", "sighting--6e89436c-8ff4-4690-ab5b-5371a3602aaa", "sighting--393ba14b-163b-4db9-8608-809def96d297", "sighting--561c0738-d7ed-41ef-8e10-dfddddbb5221", "sighting--7de70ba1-e121-450c-b875-f3b344a0b163", "sighting--2906d07e-57a7-4af5-8c6c-0be7331b46da", "sighting--ca2cb849-4161-4255-b7ba-bbbac51c11c8", "sighting--4fbf1517-7bb5-4b40-af88-ce991f96ebc2", "sighting--fdd0650f-57fb-4523-99bd-35b1b32593c1", "sighting--22616efe-ccd5-4c09-8721-340b984d4370", "sighting--8075e63a-7103-4376-84de-efad7865a053", "sighting--252785a1-956c-427e-bac8-d68ad37d395a", "sighting--4616f4e5-62d0-4523-a0b0-5a4e603d0f5c", "sighting--3fb517eb-6697-4576-8f6d-4dba344f2f42", "sighting--826d96cb-87e2-45af-b92a-76cefbade118", "sighting--ede0d816-9b29-4267-ab7b-6f398dd94f06", "sighting--6c4a6212-6284-46cf-93eb-db58e28b4991", "sighting--d13a65a8-7d91-4963-b634-21c0fa497114", "sighting--c32b1dd3-2946-425f-a5d4-a15cb8671e09", "sighting--81c43e1e-1ce8-4c4d-b7dc-b9f5fd4f3320", "sighting--6cb12ba4-3ad3-4ce7-bc27-6826bfefb6ae", "sighting--46e3cf57-df85-4445-8fc1-bdfffe8538b1", "sighting--3facddd3-92ae-40b8-a652-4ec09997decb", "sighting--ad89182f-4038-4443-8802-5bcf88acf9ab", "sighting--ba98a050-fbe0-4f4d-88a5-039d01686367", "sighting--2baff7e9-166d-4af3-bbde-389944851559", "sighting--b1264cba-1d1b-44b2-ad3c-ecb6c599e1ca", "sighting--14b3e3b0-7b93-4c44-bd81-86bd3c58c280", "sighting--c76f1fab-9b59-4716-a52a-fb3d83f603d5", "sighting--9e5c283e-fdf9-4ce2-b3cc-62486b8c6663", "sighting--e85cdf07-f510-43fc-b538-32fa474e64a7", "sighting--79cfbad1-5ed7-4cea-86ea-abc84f1b542e", "sighting--847b3082-4c70-4d12-99e5-20d484417455", "sighting--415f178d-9074-4f9e-9ccb-f71f0e70d504", "sighting--d9e500b2-9b1d-4b3a-b112-40db077a09c2", "sighting--98794235-9842-49f2-b7dd-43a9c768d64b", "sighting--57643a07-e88f-4d75-810c-0ee92de1edbf", "sighting--4805c331-b566-436e-a5b9-f00b84e9fe3a", "sighting--681762be-55f1-44ce-b3f8-c27544d70650", "sighting--5e5a5192-0f06-46c4-a514-9e78ef448c03", "sighting--edc3c92d-0f55-483e-9752-784ba7811409", "sighting--c7da6c33-24f7-4b4f-82b3-114d7945c305", "sighting--00b846d3-5d06-4683-9ed7-9cd19b44443a", "sighting--328fc55a-9778-4044-9e12-a2476c6570e5", "sighting--96b1e751-d283-4a3d-a106-0c885237312d", "sighting--eb4f33eb-8337-415e-9f48-221dda655e7a", "sighting--23965473-f2b1-40dd-ae66-8b4453324174", "sighting--963d2027-92a2-4abb-83ea-d47c160bc6dd", "sighting--8ed5e93a-816e-4e71-a9af-bcae5afb8a95", "sighting--19a4c3c2-eba2-43de-afc7-df2b6ae27758", "sighting--12932322-157b-4809-8868-2b5bc9a87e20", "sighting--62f7e545-c667-4bef-bf2a-dd924bc77aec", "sighting--1051fd8d-b270-4540-a5e9-3e6d882e6210", "sighting--9c95c28c-74ce-4797-b632-e4c511fe480c", "sighting--a8f8a2b8-e01a-4594-9052-b8c896c87248", "sighting--8c3e5797-dc68-4f8a-9f6c-8a105019204c", "sighting--3e417156-6938-403f-a050-02bf9a5a6f11", "sighting--5770bd8c-4b73-4b41-a345-be04bcc1002f", "sighting--222e05ca-4b5c-424c-a3a1-3e1918ff2c1b", "sighting--b68ac367-7034-449e-9ba2-e72ebc8a7268", "sighting--99d3204a-c650-4a66-a7e0-97b2c4bb5507", "sighting--c6f83d41-85d0-43df-87cb-62631a0592a9", "sighting--f58ff3a6-efc2-4d13-a9c6-fdf57b2878c3", "sighting--5fd26406-54bc-4726-a19a-5eb69fd275b6", "sighting--37fcbfa1-da9f-41a8-a1f3-332841646166", "sighting--b1dcb94b-0a80-43fa-a756-12d3917f06f5", "sighting--4ec9279d-2da3-40eb-83c3-56554b17acd5", "sighting--d61f8904-3a23-4bfd-b536-334ecea1889a", "sighting--8e6dbacf-e160-4e97-851b-7ca42b9ef4bc", "sighting--26b361cc-b809-4fbd-9e85-e102efbb3ff3", "sighting--ce221801-984f-4937-86d3-95ae6a8b9c5c", "sighting--fd733a31-dc3b-4d95-bd3c-ab36de698b97", "sighting--fca607e2-35a0-4fa5-8546-cd8d8d57fc0e", "sighting--e05f1cd9-ffb6-422c-be66-0e4d44482a36", "sighting--dd7c0013-1e08-4db7-8128-ccac5e2c6794", "sighting--8873e5d5-f878-44d1-ae0a-2eec0ba3039e", "sighting--685df438-a1a5-46df-a155-32081b23e9b1", "sighting--137f6ca9-1902-404f-b27c-7d17b9a5499e", "sighting--9bf90a61-9836-4a6e-baa4-9bd9ff365e3b", "sighting--fcb50777-0ede-43c0-87ba-8361bee33dca", "sighting--5ebf402a-0597-44dd-9926-6ba2800248ce", "sighting--8ac1e9cf-f6cb-442c-a766-8b671feb67ce", "sighting--1f92dd4d-6e15-452d-aa84-dc5ccae11cc3", "sighting--135f64c3-b076-4d9a-9b2d-f397c7383f60", "sighting--4243dbfd-7270-4e04-97ab-12b715850752", "sighting--d1979cb5-3da6-4fd6-9956-6fc6d1f8cdfb", "sighting--985af77e-92f9-4fda-ace9-f4470a161911", "sighting--7516894a-0df8-43ab-bc65-255dc3ead30b", "sighting--238ddece-9cad-45d8-a985-faef4edb0a67", "sighting--58c06f5d-eb82-4843-a8c3-d2b4c4ddf4e7", "sighting--cfb7457d-23c7-40ec-8764-d52d4060efa6", "sighting--e7fff6bf-0170-44bf-bb7e-3f547fa730de", "sighting--076a3e6c-5054-47dd-9f97-c48d656f5391", "sighting--e9016b9d-e5f5-49bc-842a-aeafcdcf82d2", "sighting--95cde8bc-39c6-43d8-b62e-69f9a2c5fd95", "sighting--59311a19-7853-471e-bf15-c1fc18f5e9f4", "sighting--9ebef269-1680-4e90-ae00-07dbfc3eb857", "sighting--3e1cce0d-6147-4388-9951-1f20b76797b7", "sighting--703ce693-a471-46a4-94aa-a97f5e5f52fe", "sighting--f608daf8-2bc8-4f08-9521-3184109ac25e", "sighting--7f08f47b-b1a7-41d4-b3e0-57e25f27848e", "sighting--c1c26a98-a880-4d09-a6d4-e033a8b7a74d", "sighting--e5329f66-8e5f-451e-bb5a-452a239fb261", "sighting--d90f78b3-62d3-465d-b569-8bac727e5a33", "sighting--bfcef957-87b2-4186-a5ca-c2c17f0ba4ef", "sighting--7c36caf4-efa2-45a4-8500-9e9549704d73", "sighting--6408d39a-2d23-4368-a5e4-284c99bc50c8", "sighting--1fe5e793-cc25-4f18-a552-381cc423700d", "sighting--43387395-be01-438f-94a5-eb22ac64d8b6", "sighting--a5479376-0899-45f6-a3ab-f255c73c2b2f", "sighting--39d87099-bbc7-4096-8835-d594fa76d63b", "sighting--c19dfb1a-747a-46a8-989d-3272c7a6db63", "sighting--b6e704e3-3bed-48ef-be45-f5a73f5dfc46", "sighting--8de1f55a-9695-4ce7-99b9-a4892f02366f", "sighting--590484ea-11e2-48ec-be32-d15cc3b747c9", "sighting--b0fd49af-52f6-4704-9426-4a404bcaf876", "sighting--16f05c1c-d1da-4791-87ac-033305fc63d5", "sighting--7eb2d471-50fd-4e4a-bb66-3a27227a5acb", "sighting--072d2fdf-2aaa-4d29-bff1-54804101f182", "sighting--41aeaee4-2e60-468a-9d34-40f13cfb463a", "sighting--7894bdc9-42a5-41e3-8287-afc2a7e26d23", "sighting--e9879315-7063-4eaa-82cb-8a4a7f34cccf", "sighting--9166afff-a43d-4e69-95f2-685e56e7018f", "sighting--1e8eac36-746e-4367-b4e5-3a911d01925a", "sighting--2851dfbc-2039-4250-af83-f8e0cbf91ea0", "sighting--93f938f9-3d93-4d02-942e-57653782e99a", "sighting--727152f8-402b-4f41-b294-0dba53c45d6f", "sighting--998b6415-da0e-4a84-9f1d-920e95acb971", "sighting--af224176-4641-4070-8ac2-ca1296aab5a8", "sighting--8d20dbde-5758-4b86-bcc3-e6a27b8acf77", "sighting--94aef19b-0815-4f3d-8017-94a8e10a466e", "sighting--111e5d73-3aad-4a43-802a-0f4e44a55685", "sighting--db769e3f-27ab-48eb-99c2-6271d88b33f7", "sighting--8529a4e6-6a83-44cd-b2e3-999b0c9fd318", "sighting--d3653ce1-0dc6-4e52-b271-c0a22c2fcd5c", "sighting--5eaa771d-9cee-4e3f-90d4-0d9d08f85f39", "sighting--6d49b3c7-c1a4-41d8-8a5f-2253663a94d8", "sighting--c3875e8a-82ae-4da4-b785-9d1048a985dc", "sighting--8664f83c-ed5d-41e1-9b9f-cc50f6fc81f5", "sighting--3478fabc-82c1-4b95-bbae-ac5feddd70aa", "sighting--ed9b8e16-5211-4b53-a6ea-0bb0252ce60a", "sighting--c2dd7493-dffb-4a6c-8e9e-1c7b4a57899a", "sighting--6d36687c-575a-43f7-81c5-e37385596169", "sighting--817f873d-3a31-4d78-83f2-fad0e8418e0f", "sighting--46a21b92-b404-4b3d-955e-062f196692bb", "sighting--2ff14f0f-ef75-4407-832d-c76bf3a399b0", "sighting--dc587b2b-fb95-4890-8408-2ac29cd4e19d", "sighting--9ce02216-0cfd-4d43-a258-b408ef72ba20", "sighting--6c8c24fb-5384-44d9-869f-2f80638fd0ab", "sighting--3d890521-10bd-4b55-928b-54ab9ff5468f", "sighting--966cc6d5-ac19-41a8-b62e-ce5b65884619", "sighting--91b997aa-4b36-43af-9208-8966ba2a6989", "sighting--48801886-7ffe-49d9-a525-d6a77b58468e", "sighting--797081fe-7c2c-4dcd-9784-0e18f0166b5a", "sighting--52473b42-024e-43bf-85fb-796884bfaed6", "sighting--492078fc-89fb-4207-8cd4-c7052e0b2845", "sighting--27a54dfc-8ffb-49e3-ad9e-90698d2e1ba0", "sighting--a968f304-0601-4c17-8adc-ae4a3b9040ff", "sighting--9696d81b-1351-4823-9227-ee9a8114fd4d", "sighting--5997599f-8b1a-48eb-81ee-c6e3506edb24", "sighting--43ed60c6-ba3a-4abd-b486-72b979d8762b", "sighting--a927e003-876a-4682-afe9-d7967679f839", "sighting--a7b9523f-2246-4566-b5bf-064395939a77", "sighting--fcc676c3-d7cc-437c-bd18-c6e7832fd4cb", "sighting--cc6ca9a4-1ddf-4a06-9fda-1801f17707e5", "sighting--2b4f18f6-75a4-4e45-8ac8-79fb01f41627", "sighting--9b6ac5bf-b6bc-45e3-8f25-a86f53e3bd45", "sighting--3fd89da4-a700-44fa-9ab7-36bd1e7ac0af", "sighting--851698a6-516e-42f9-8a6a-792f5097b0ee", "sighting--8f66af52-a05e-441b-a5e0-42584c210f9e", "sighting--e490a48c-e34c-402b-bb30-89ae5d436617", "sighting--4b723701-6f6e-4ed7-baa7-12c20f3d0c9a", "sighting--182f0a77-2a72-4601-906d-0d7b8ba7ff6c", "sighting--7e652e34-97e0-4c4f-bdbd-34af4e2b663d", "sighting--18ad38c7-a5db-4d32-b8a3-f632ce9e8fa4", "sighting--ca59ec8d-f98c-4a0e-8f3a-8bdee6919ac8", "sighting--7d814922-e17c-4465-9020-a328b04bdcad", "sighting--c16c5f12-9156-4c65-8edd-48b686496d85", "sighting--17875ebe-2dd3-45ac-831a-280f30b70f43", "sighting--d2c4dcdb-ca09-4c10-b56b-b6d8bcca4771", "sighting--e735b4d4-c466-452e-83df-661a7e821c07", "sighting--86751377-ae0b-4038-95e4-482814cc5937", "sighting--435f5ba3-98c6-4771-99df-d0fed9617191", "sighting--edd1ad23-b010-4039-a11a-b2065c87e3f3", "sighting--475228ef-96f6-44ab-86d2-76b5ac96f35f", "sighting--f4b90183-0e11-4351-b608-6591d99ddf00", "sighting--af6d128d-39d1-4f73-b3cd-67db7bcb3ce6", "sighting--6a583c5c-39fb-4d62-be57-408ab3553155", "sighting--91a636e0-e816-4d33-bb44-53462ce863d1", "sighting--f0765f0a-2555-483a-9d98-c0a2c49d2273", "sighting--3dff05f5-4e4f-43f7-9cde-05402e6538ac", "sighting--263fa709-d17f-4cbb-842c-5ac9d3921c84", "sighting--f5c9e986-4b97-4cc6-af7d-570c61c7de39", "sighting--70ab5e17-ff97-46e0-9785-61a9c9226b72", "sighting--e40f6a22-7739-4d76-91c5-7060551a8e6d", "sighting--4b400231-eb42-4eeb-b6b8-95080c18d19a", "sighting--d6fec8c4-03cc-46e2-961c-bb28867f2221", "sighting--40181a28-e6d1-4277-b6b9-257ddd6d76ff", "sighting--b8e3a3d3-46f5-46d9-ae86-cd77c8cba3a2", "sighting--80b784fd-af30-4f1c-a4a4-bd3c6e07b49d", "sighting--8407351f-f950-4bba-9478-a15256546672", "sighting--f462061d-73ef-4313-8d94-965ec7879cfc", "sighting--7e6c7fab-ada4-4637-8606-e77389580596", "sighting--5f2eaa35-0827-4917-8c31-209ca8aba8e0", "sighting--98032d86-07bb-4dd3-b822-64ecf5dad09b", "sighting--78ccc398-bb6b-4f2a-8683-9e1f42e4318d", "sighting--be9ec66e-4325-41e1-9490-a2cd30050296", "sighting--cbee8001-ae37-4408-83e0-68b231fa96fb", "sighting--d279f64b-cae2-4b66-930e-8115ee90051a", "sighting--8905dfbd-e172-4993-bf1f-fceec44b9be7", "sighting--47e0b41d-3025-43eb-b2c6-4f86928d7492", "sighting--4e135e54-38e6-4c71-9547-ba120fd22d86", "sighting--1610f3fe-8855-4d40-b343-cec146333291", "sighting--c4d1cc96-e64f-4c6f-b9fd-651899459360", "sighting--552a03b2-b561-42ca-b15a-ec7b891655a7", "sighting--eca2eeec-2ceb-4bfe-ba5e-49c484184176", "sighting--8c66abff-35a3-454e-9586-3852dd62c3fa", "sighting--48b7d6fb-4e94-4549-a8ad-abc97e9af9c1", "sighting--e3fc6f63-c6d5-469c-851f-50287dc06085", "sighting--3ddb85a3-bae2-4e77-9d3c-ade0c6555c34", "sighting--e1914492-7759-494b-8e0c-39f7365dd769", "sighting--85719a9c-c78d-408a-863b-cb1406a9dbaf", "sighting--33c38cf0-a528-4b18-96e8-81a436ebb96e", "sighting--7f3bdc38-b9db-456a-9fe1-5351ccd7e14d", "sighting--2731b5cb-d802-4da9-bc2d-d9f6539ca2d1", "sighting--06f75d60-4ecf-4345-a443-595df4ef40aa", "sighting--b3d1429c-42e4-4753-b7c2-50d83482ff50", "sighting--0b6b188d-93e3-4573-b9d7-573e78a100d7", "sighting--e1e6123e-61c5-46a7-ae7b-15907b344360", "sighting--a0c8383b-cfd0-4575-b871-1ada8e5c08ab", "sighting--9c6288d5-6cee-4bfc-91f6-f602bcbb5f7d", "sighting--25262387-888e-4249-9a9b-65a00b5d1652", "sighting--8dec07b6-9caa-49a6-bc9a-39ecd9551801", "sighting--7e22b79e-13dd-439e-8b62-5ba7327f9a6b", "sighting--826a8a5e-6dd9-4079-901f-8de5a824a289", "sighting--0fbe0e0b-cb99-47a7-a89e-40637aedc26c", "sighting--3fcd0306-2b25-4c6a-93f4-3083d4c058ea", "sighting--9116b0f8-82bb-4d06-bb1b-895b7b21beb6", "sighting--cce0340c-e0f2-48f5-9746-9ca461198c85", "sighting--ae4fc2ce-e0cd-4612-aa8d-5fd3d4505861", "sighting--b18de9df-45fd-4391-8a6d-00cd1ed61e74", "sighting--5dfcd1bd-3da5-410b-b9c5-c966ef97611c", "sighting--2b06b4ba-04da-4f29-9e43-b53ce73a218d", "sighting--19c7af0a-c4ba-468b-b9e5-9a93fcf1c5d7", "sighting--fd1a010d-5d28-4df7-ac5e-8acf8f4a31be", "sighting--6232e399-7f52-4c63-9170-7c7caf071282", "sighting--79fb4379-23f9-467b-8bd4-57abd4bd3660", "sighting--7c42a053-bd88-497b-978e-fc05c3799bdd", "sighting--24fa8143-e0bc-4ad9-8726-c20fee28578b", "sighting--e0157c7c-153d-4054-ada3-97cbfdadbf61", "sighting--e43fe52b-ad63-4a73-96ca-437bb9dafc25", "sighting--aa40e617-d3df-42f6-b07d-bab7a8d00de3", "sighting--fb327b50-7266-40c4-a5a8-a6fdcd354638", "sighting--27317933-38d0-4839-8037-d2b3d82500d5", "sighting--c70529ae-77ed-400b-9106-f24b9e9c2b9a", "sighting--6d3dc51f-34e1-4232-a0bf-22984e14555e", "sighting--bde083ed-be89-4669-a3bf-69547975f948", "sighting--7472137e-d654-4c4d-9b92-59c403d4729d", "sighting--c4fbf846-6241-4982-a32a-d2beac79e138", "sighting--ec3532cb-2e92-41cb-b384-e3b6bde63aec", "sighting--3057b5fd-9775-4c32-b7a4-8db40bfea951", "sighting--8b746eec-abad-4c66-821f-ce67218259d5", "sighting--322868e5-8211-4101-a417-56bd71f59b95", "sighting--5dcde0e5-9da1-41bd-b0a4-84cf561f565b", "sighting--95a0b252-990a-47b7-aef9-5692ff37fe09", "sighting--97f8fe7b-8238-42b0-aeb5-6c5f90a65085", "sighting--4f390f92-1b7b-4f65-9152-f8bec922ae6e", "sighting--175ba25e-a764-4a3f-8b0e-25945e82d819", "sighting--83672b90-a7c7-496c-950d-97c4c126895a", "sighting--1de2a33d-fee0-4b14-8a4f-77acc9181893", "sighting--7ecac594-6555-4829-97c1-622383fd7880", "sighting--95aea360-1bf9-4c55-b9b9-06f26315eb4f", "sighting--994d9b41-1639-45bc-89a6-b34a8a167445", "sighting--065c92ff-c774-40e9-b1f5-bba482582270", "sighting--05b30e02-ac35-4df9-92de-d2dea2e53222", "sighting--51f8d980-7e1b-4292-9f8a-d3de9d75ea1d", "sighting--dfffb389-a532-4549-87fa-68d88226afd0", "sighting--a762239c-d50b-4a37-aa75-3219294a496d", "sighting--454d695f-f5bd-4822-8764-f48c21c23d03", "sighting--51999661-b457-4647-82ad-e7a3b20c6538", "sighting--50eaf649-844f-43cf-8dcc-750e81993327", "sighting--00dadb90-dfc3-42b0-8fb0-0e0671e09d82", "sighting--4296836c-a80b-4baa-b71e-47bcce1acb50", "sighting--8aa36502-4785-45df-b084-6a53577302b2", "sighting--dae9a5e6-7dfb-4fbe-ac02-bfa3abcf1823", "sighting--a3fe566a-95b9-4b6c-bd42-fe1ba9c01b0b", "sighting--74f6afa1-457b-4058-a6c5-88bd286c5a45", "sighting--78bc0bf7-0dcb-4913-af5e-1469c04ecc30", "sighting--ace1a8a6-c4ab-4e88-a669-e77131e4fe57", "sighting--76d64fa8-19dd-4bab-9159-92343a8c344e", "sighting--547c76ee-129a-4276-88f6-d425a0829f61", "sighting--9034f181-f036-4ebe-a504-1f3352aff02a", "sighting--170e3c2b-ba88-42bd-9602-9aac71c48165", "sighting--7cefc878-6a0f-468e-884f-3e533f79d418", "sighting--c2dc81f7-0b78-4c20-8751-8868cf520489", "sighting--08f0b393-c6b5-4404-b507-47bd91be69d5", "sighting--eefac1eb-2711-461f-8619-2de7abff049a", "sighting--51ea2aaa-255b-4025-940e-7f3f47c7d13b", "sighting--8445620b-228c-4603-9d0d-9a0c8b4d1875", "sighting--5ab35686-7a21-435f-bd92-fc9633c6f61e", "sighting--e2aa685c-0ebf-41b3-820a-a9dc72303182", "sighting--54999fca-ef61-4d3f-b4de-193b887f029c", "sighting--7ba08bbc-6318-43a1-8f88-ccd75b19fdef", "sighting--56cbe27b-f440-4da6-9171-72710bc37148", "sighting--b5ff0635-d8ed-4831-a0c3-d684cf33d543", "sighting--b5a7f372-ba79-47c7-a9f8-59b0f9bb7d1b", "sighting--1817e0b2-4a74-43f9-95a4-4cb797521558", "sighting--c27a04c0-159a-45f9-ab5b-f4ad25b80aab", "sighting--7860df82-41e6-42ac-8e97-c594a38d1d96", "sighting--173bd691-0377-474a-87ee-989aa2ef3d80", "sighting--3bc5eb09-097c-43c4-a540-772dbcd192b1", "sighting--847100ab-de5e-4003-a0e4-3f795dc0f27a", "sighting--85b0212d-7d62-440d-bb98-f3712bccf050", "sighting--0a3ddc7c-2739-4112-85c1-76cf34a5347e", "sighting--7a18eba0-9ecf-450d-948e-fc480ae361f5", "sighting--79d5e414-688f-4d32-84e4-fbbcbfb75516", "sighting--6e0b3079-3bdd-490f-9ccc-f6a3cf8abf90", "sighting--8e391e2c-3418-4e88-8370-261b06738265", "sighting--1c2666fd-6e02-481c-84fe-80eaef133a36", "sighting--c0414014-2c54-4919-806e-36ea334ee1d2", "sighting--0c0d6b0d-29b3-4979-ac7e-5a6b60df2468", "sighting--4e09e46d-94a8-4949-a27d-802cc41cf171", "sighting--c3b37187-5503-43d6-9afe-4e0bd4ba81f3", "sighting--648eb220-959d-4983-a043-7fe13455db7c", "sighting--fde4f83f-faaf-42b7-bec1-f0c4ad4fe5e6", "sighting--8f7fe530-8ea7-4479-8091-34d351075bef", "sighting--e6e45db8-2bf4-49a2-8573-f21b70991f24", "sighting--e3eff9e3-0b99-4021-805a-6fe37fadb146", "sighting--afa74428-8748-406c-94dd-4c67f421e089", "sighting--24824e6e-c8af-4ced-908c-5bc4014a774c", "sighting--0e8562f3-18f4-47ca-a92c-9ef66dade2e1", "sighting--fee51e70-bd34-4e83-a264-892ad2c78e0f", "sighting--16f6c33c-ae68-422c-8405-2c137faf925c", "sighting--7ed60ae2-e54f-4cef-81f8-62c16111056b", "sighting--e22b39d0-3cfe-4b0f-b95e-b42e06341f67", "sighting--561b39cc-00fc-48eb-bd1e-0680f407f325", "sighting--f3036475-850a-4173-839b-892aa17df280", "sighting--25378c05-5e48-4758-9d29-7609a31d01a7", "sighting--0cf5beb8-9313-4abc-9495-22661003284f", "sighting--59913dae-a8ad-400a-a8a5-5eeb0b9319a5", "sighting--77dbf0d4-db2b-488a-891f-21c3fb1716d9", "sighting--2ec04346-9bae-4568-9bd3-87633b62aa38", "sighting--0ebdfa16-7d27-4033-af0a-2570d9a39a30", "sighting--acea17a3-2484-4749-b2d1-30a0a450d880", "sighting--5f26b3cb-b9da-4464-800c-efe606665adb", "sighting--509f30e1-4783-450e-a427-961a3b39d0be", "sighting--496d057f-cd9a-4712-a72e-b751b75529f6", "sighting--37e8b2a7-ca01-4481-9cb1-f49c65f14fac", "sighting--c22a63f6-6c73-435d-bed0-f477ade8c0d0", "sighting--28c96184-0172-4201-a2fa-416f7bc9ffc9", "sighting--3a3221bf-e479-4e4d-80a6-390b5ef026dc", "sighting--037846c9-22c3-4899-9101-b9004250c742", "sighting--983eb584-481d-46f7-806e-ab85b9fc68b1", "sighting--f6e5c798-edda-4af6-ae82-4b3b9551d35c", "sighting--db80c8d4-4900-466e-b44b-957114284ddd", "sighting--4483c3aa-d6f6-4f80-87c0-f7c0ae6e16e3", "sighting--3418b550-d065-414f-b1f5-40c4d497ff0a", "sighting--791495d6-7f2e-4992-920b-7c2268acb865", "sighting--92f3f309-c700-445f-89fc-0a6c6777c4e9", "sighting--1378a33b-84fb-4ad6-82f0-00cdf1d50e4e", "sighting--d88de3d6-dbaa-473a-bb6f-52b595546550", "sighting--99abee63-cd07-49d8-9ee8-c7dfa13f931f", "sighting--5345b675-f0df-4a15-b2d9-0368db15ab20", "sighting--06e7ce51-99f1-4d2d-885f-82434ef72847", "sighting--15e6ed13-d518-44ae-acec-ebdc70f8a49d", "sighting--f9a9e6c7-c3f2-4600-88f0-0f3f2244610f", "sighting--8e0b3fb7-7458-46e3-b384-e8c0f1d2ec22", "sighting--3be238c1-c549-471f-a44d-a185ca510822", "sighting--b59446cf-a183-4420-9319-d899207209cc", "sighting--3cad61df-c78c-42b8-8410-bf294cf29f58", "sighting--32db8112-5904-4cc6-a766-29236423b80b", "sighting--480e0911-8795-4521-b7cb-6845149f3ab7", "sighting--3ecba9cd-8cf8-4435-8d2b-1575b30c937e", "sighting--1c148cbe-a2c5-45f1-9df6-f7aeea56d242", "sighting--726d9f8a-ea5d-481d-93fd-67e265c3295b", "sighting--730312ec-66c6-4cfd-815c-d21edff03a18", "sighting--033f3546-c8ad-43df-8874-28b544ee7c9c", "sighting--7d0e6600-cbfb-49ff-bc2b-e2955787c07a", "sighting--e9f03c85-3a7e-48f4-9f9c-4a76f911ddd5", "sighting--2f775579-1180-459e-9c45-e6f56cd8632a", "sighting--a26a4e8b-ffac-4260-84b6-052180e25814", "sighting--27f94a02-0846-476c-a091-9838e4dc7913", "sighting--2c710ea2-f271-44d4-80b3-40cdb60d71d9", "sighting--ca475c67-d5d1-4f42-b1db-bd3ca092b4df", "sighting--2dda2f6c-f3d3-4064-a5fe-7240d3832fbc", "sighting--13103e2f-9c2e-4c90-8275-b4a771f180d4", "sighting--767827a8-ba22-4369-81e3-5451ab0cc1d8", "sighting--39207584-6394-4216-b463-1bedbc76f7a9", "sighting--ca386dd0-3eeb-4676-a6e1-abf50cf6dfcb", "sighting--1e8cb402-b738-45bd-9626-a5d1e1488bd2", "sighting--7418e920-0b5c-40f9-952d-5d9fa6432300", "sighting--a15a0649-757c-4855-86ab-093959bd5a57", "sighting--b04b9c4c-491a-4e0a-9572-938fa08834b6", "sighting--05dc7761-79c7-41d5-9329-0b82d18d7adb", "sighting--265c51c4-dd5b-4a6d-8ca3-c053b14cfe61", "sighting--cc8b338b-64c1-42b2-9507-b713b607fc17", "sighting--5ba0b2dd-0a6b-414c-b6c1-8871288bcf9b", "sighting--38566efe-1fc7-478f-ae6d-4f7c68ea8d82", "sighting--cdc97a2b-ad31-40ec-87f4-7c6f7802b8ca", "sighting--bbce8fb4-1ac5-466c-b719-3e1581aba697", "sighting--88cad34c-97ca-451c-bf05-5196e96e16cc", "sighting--c38e434e-e2c5-4660-85fe-9d72f05044f4", "sighting--8aa238c8-e3cc-4328-b3ef-5a617cdc16cc", "sighting--37731640-ddc8-4c55-961f-19b12785d846", "sighting--4d732be4-d768-4a1d-ace7-e0cba0751807", "sighting--1211265f-d90c-4089-93fe-023741dda749", "sighting--88e8635e-5de1-47ad-be25-8dd7e70e161f", "sighting--e7794042-bdf9-46c3-bab5-7b45b3142f2c", "sighting--5b899758-cd32-469d-9dec-d9a09376a935", "sighting--56c50448-b3fd-4665-bcd7-3c17ef083762", "sighting--11f8ff13-c9c3-4235-bff6-6b602b498855", "sighting--3e5677c5-f9f0-4981-b695-d9569da9e0a5", "sighting--22a3a20e-8e06-474b-acc7-0b4ef0989f3b", "sighting--1bcfb2e9-e61b-4433-8b3a-e28d3dad64a3", "sighting--4a109bbf-cf9b-4c75-b1e1-4de79054f2a1", "sighting--196ce00a-38d2-4fa3-9916-d5a45e6c474d", "sighting--77f32f47-e8bd-4cf6-8171-ef9358ebc0ce", "sighting--804bbf5c-a8a2-4150-90ee-2d8ab1f7dde1", "sighting--b4d41fcc-e8ad-43b3-af34-9b82cefbcdc6", "sighting--4bcc8cd8-c150-440f-9dc7-e22698da4bd9", "sighting--4522b7fd-938a-42fb-9432-ad1e4059f536", "sighting--6f61c9a5-792d-41af-a70f-bf4964b81a5a", "sighting--0aa91d43-3011-433d-b67d-a08d23eac776", "sighting--5eef0fab-e40d-42b4-847f-5afcb7f58ac9", "sighting--673b23c5-a0b4-4c65-8c24-67237822d667", "sighting--a86d8c11-0e37-4025-838f-626f4cf2d2b4", "sighting--62ad87c3-b9ec-4fc6-902d-758116803420", "sighting--bc45f21b-8b78-44ce-8423-fc7dcb6a12e3", "sighting--cf827ce9-fa23-4b13-ba75-db407042ce49", "sighting--60f363d8-bf3e-4396-b499-0cec687d9ee1", "sighting--89ba4fb9-0a3e-4f20-86b0-78ecfd306d96", "sighting--ba22cd78-d675-41b4-9b8b-1acaaad42e9c", "sighting--8eb5c827-9c47-4cfa-8509-e199280d4762", "sighting--2134a610-8dcc-4f5b-9bd8-e317b394c52b", "sighting--26dbb735-e590-44df-8cf6-f2fc6b40f262", "sighting--fa9ff344-50a3-416e-b398-06abb1cbd952", "sighting--6dcb7ac7-807a-4157-a9d2-663dfa2b12ea", "sighting--67877df1-f59c-4fb2-ad6b-340c4026d310", "sighting--e1ee2dc1-88da-4ea8-a699-bce357d4fdb6", "sighting--bce818fa-5303-43d2-aa5b-e32420bd941e", "sighting--ba7531d7-6f72-4202-938e-b126c7eb998e", "sighting--f63cffae-d342-4d54-8093-ce8954242178", "sighting--162621e7-be11-48b1-ac46-129e4a964bf7", "sighting--673d59de-9d4e-434d-a456-237e119f6305", "sighting--aa1a34b3-6976-4874-8da2-632fd9e4cf0c", "sighting--cc150996-5402-4ff8-ba51-3a551d34da7a", "sighting--b8b3d6d2-8d84-40bf-b502-1367047858cb", "sighting--dd9c3aca-b1ea-423d-9e75-6133d750fd37", "sighting--3bba2c0e-b961-4eed-bf6e-d2b8b9394540", "sighting--e870564b-b13a-4d7f-8d2b-816d180fc173", "sighting--f6ae6751-60b6-4acc-a188-9aa15761b164", "sighting--b6c5a06c-2a7d-4f80-a97a-8b6da7d45645", "sighting--cc7eb324-23b8-4aa5-9bcf-d7370d092ac1", "sighting--04f44d36-5e5a-495c-a8ce-c07130937fcf", "sighting--24003c06-2e63-46e6-8266-19b02dfc2efa", "sighting--805cf5cd-668b-484f-b98c-0e0bd743a427", "sighting--2667beac-dc78-48c3-ad9d-d5b35d91b265", "sighting--d4f118f8-e46c-4a80-a7c4-24fb60f5a128", "sighting--c5c06e9d-1c4f-48ee-9202-d20f46a0353a", "sighting--7737b220-0633-4de3-8d80-4a87193c18c0", "sighting--c2fb0d6c-3318-4558-a18b-5555e2846a2a", "sighting--76e57971-f0f3-4f6e-91c1-be400a6b5adc", "sighting--bdfb59fd-cc62-42c4-a76d-cc116a531dc2", "sighting--0c2692b8-bda7-4eed-838b-d680f2573ceb", "sighting--40886910-a289-41ef-9f5f-318a46383529", "sighting--ed1e49bc-368f-4d3c-9486-2d5d638e6432", "sighting--7e198a76-fad0-4838-b7f1-564847dbf3b7", "sighting--163075db-fb6d-4446-89bb-d7f2440de149", "sighting--49681f42-f96e-42b2-9b0d-734ae095ac7d", "sighting--cdeb5967-7f52-4851-bb1e-ec6e59d115a0", "sighting--7d60292c-0e29-464a-927f-fdb7709e0fa3", "sighting--b2e762fb-855e-4a9e-9153-f34cceddd617", "sighting--20e8518a-dd44-429b-aa34-a4acb6b5db0e", "sighting--e03135b0-418d-42e3-9f1b-d8ad3026036d", "sighting--53b8d923-f349-49cf-9cc0-b212a097e129", "sighting--830ad30b-9ea6-4444-b142-78a5cf9827c0", "sighting--1432ee1f-aa00-4d8e-b62c-756881178a4f", "sighting--3c563e7b-1ac9-40b0-88e5-a05166e551e6", "sighting--e878c037-d24a-483f-978a-1cc791c82b86", "sighting--262b70ee-c6e4-425a-a93b-f36b85323633", "sighting--c7b12409-304e-4786-b55c-7e735f243d2b", "sighting--822f248c-1733-4778-b5ed-4cb4506a8229", "sighting--4aa64bf2-0544-47ce-a16a-5edf851fa953", "sighting--bc0ea9c9-a197-410d-a8cb-3187ff8be649", "sighting--a6d1c35b-a187-441e-97cd-b9a046c3834e", "sighting--6e70ff58-4810-4845-8197-cf16866051a4", "sighting--0fd64ef5-ef63-4c56-b468-1a7d79d2a8d0", "sighting--fa371a9a-c069-4afe-ada3-b3597a0c75e2", "sighting--3152f8ac-172c-43eb-ada2-5d641a228bb2", "sighting--54f79f57-9479-40ee-9e49-0528c036e675", "sighting--1acb2ff2-f367-4e1a-bc7e-1540d1e4245e", "sighting--47c8c26e-c7e6-45a1-986f-43abd05920ec", "sighting--934e1560-c2e8-429d-951e-cbddee5bf3a0", "sighting--a63a5d02-3870-44ba-8653-3b34962165dc", "sighting--02b1f156-ef0e-43da-bc4b-22478b30b721", "sighting--ade41bff-de7b-48b5-aee1-37d9dbcecaf1", "sighting--0962c0ce-cbb1-45ca-9bb1-57cf56056410", "sighting--6e3c143f-8a9e-4787-a4f1-b2392602fd45", "sighting--debd60bf-b310-49cb-825b-b1e822da726b", "sighting--7a2d40ec-51ae-45d2-9a32-628b54dd5b72", "sighting--35d953df-e2ce-44c2-822b-f012df389240", "sighting--dd893523-236e-4159-8d32-41324c328c0e", "sighting--a5156241-56c7-4010-ab53-1befbb4f21e3", "sighting--ad7074b8-4452-436d-83c5-2dd2457edfa6", "sighting--a4b7399d-622d-4c5c-8f34-c6b9a6ae91dc", "sighting--ddca6a97-8f72-4915-bbb5-604c0561a823", "sighting--ed7076e1-fbb4-4a77-a8ca-997fc7f264b5", "sighting--346e7575-d600-4ea5-8fea-5367f28ab030", "sighting--03099735-df68-467f-af5f-54a420b3c0cb", "sighting--8425f7ed-f401-4a74-a483-ba2b3f09b1d1", "sighting--5ef6e0f9-39cb-4f7c-b443-0c31ec151449", "sighting--cc6e004a-8290-4929-bd28-572250cb361b", "sighting--a113bfe7-d66f-4cbc-9b19-d65f11a513aa", "sighting--d04cb859-2c73-4fc7-89b0-cd5ae7e0ef7e", "sighting--d7de52c9-0ccd-4320-a7ef-80dd70974d14", "sighting--d6b904d6-bae9-4f18-9fb4-cfc55049204b", "sighting--74895411-9e95-4b71-ae09-0de9b0608fea", "sighting--b3608c95-3ffa-4416-a6e9-2bf80094f581", "sighting--93ee52fa-6135-45e1-9df2-a6f2f3b7ea06", "sighting--d8f9e473-bd82-4192-9bbe-80f3b3f44ffb", "sighting--ecae7d08-642b-4df2-8b5c-14879e023511", "sighting--241f92c6-c410-4b06-804d-3c93e86f8c1e", "sighting--231f1d5f-7b20-4e4b-a573-f8267fe7781f", "sighting--0d902278-8775-4c61-a025-86521b137451", "sighting--9aace297-7faf-468e-ac76-671792ecd378", "sighting--7b494b2f-7e4f-4bf6-9bf9-56db3f4fc6f8", "sighting--3e03ffe0-8635-484d-b778-215d4bde953e", "sighting--d5154ddf-ee3e-4627-a4b0-372ba53ce736", "sighting--72ea6432-2d0e-4d1e-a18c-647c4243bdee", "sighting--d8ed32bf-458f-489f-8ac5-330e54b4d110", "sighting--2d417fd6-3170-47f8-ad11-41e84f59248e", "sighting--76a2ee60-4f62-4f15-9bf4-4a39b75b707c", "sighting--03eea94b-c5ce-4ea7-ab5e-6c641deab21e", "sighting--ecb0026b-c603-4d09-be4d-de5357f1f8fd", "sighting--2f3673a6-3b5f-46cc-966c-005c27dce07e", "sighting--4945d4e5-332d-4ae9-8a3d-709d38d43c60", "sighting--a391dc01-4271-4b60-a9a6-37240b0e05fe", "sighting--406fd742-7f9b-4186-8838-e9ce127e4fc1", "sighting--fac80570-b5a3-4b89-bafa-8069cc0ba1b8", "sighting--2b71ee49-334f-4a91-9333-00ba605a07d1", "sighting--2843c1e6-6dd7-4bb4-a19e-9d83c58ea0e8", "sighting--f2b38afa-92ef-4fa8-98f4-95417ff163ea", "sighting--91bb1734-b4ba-43ab-8afd-bdd8253d0ce0", "sighting--2c9fa474-6191-4bbf-b62c-13a6fcde7472", "sighting--5dc8f644-4194-43a9-8d1f-459652e8380c", "sighting--68069e7d-b5b9-4db7-b47c-b9aa5fbb6051", "sighting--37fd458e-9ee8-4045-acfa-29f56fdf3ba4", "sighting--c02f0a43-737a-4a2f-83ce-fefa4f8b6230", "sighting--151f019c-e82c-46ce-81cb-a6095d74a163", "sighting--faec31cf-c457-491d-b4ea-ba211ac09f34", "sighting--3fb13bfc-9fbf-4d68-a3f4-8d77e99c572f", "sighting--5419a69b-93a2-427e-aa53-a9db784b1d66", "sighting--e8ad5d6f-1d0b-470a-a5eb-098ba28f4607", "sighting--f075e1ce-7be6-40bb-9c6c-f6e1032bef49", "sighting--dfdc6023-6072-475d-aab2-13010eecef34", "sighting--ea6ae4e0-0843-4fd3-8ccc-d5914ca9cd4a", "sighting--067c26ef-a8cf-48b1-b9a3-81031c055ded", "sighting--c5070ebd-5dab-46e1-8192-9e0178ff285e", "sighting--4687212a-4ee3-4057-a8b1-9a12d2f2707d", "sighting--df7e4caf-314e-4da5-8083-a1b13ca7373e", "sighting--13015d78-f16a-4c91-9153-f6f409501db4", "sighting--4217a4c2-54a3-4022-a383-119efbc56aef", "sighting--9bcc081d-94da-42cb-a517-f4c1e5c68022", "sighting--7c77de8c-f02c-458b-96ef-9b13a5f7c0f1", "sighting--06aa577f-1296-46a2-a19b-1941f45cf3a3", "sighting--b0559609-9b38-4bd8-a92c-5b7216f25220", "sighting--5320f813-ec25-403d-b1a6-de88060443a2", "sighting--2d7a4991-b863-485d-abf6-92cde08a66da", "sighting--f7911988-300a-4917-b6e4-ddf25a79f265", "sighting--ab2b53f2-3106-4b7d-956a-a8a048690015", "sighting--9426a252-dbf3-4346-9063-c974239b2bee", "sighting--eb489b42-3960-4f30-aa8d-5c6ec1dc6321", "sighting--61c4b9a4-9b74-44d3-aade-c6f59d5684f6", "sighting--e1f45f8f-fa6e-48fb-8a11-221d0d9fdf6c", "sighting--e697f94a-6592-4e9c-ab45-a0cfbf57d0d1", "sighting--90f3d249-4ad0-4abe-8a59-42e72debd34e", "sighting--03884ddd-1c37-4a1a-99ed-ac7f5c3609b7", "sighting--9edc4498-1e66-4b41-bc99-f3e0b110df25", "sighting--ea47cfba-0777-4457-a3e1-a49a9cb93368", "sighting--4c58e379-9f04-42af-af68-b6e0cfa80421", "sighting--abd77952-2343-4c05-849e-011394396bde", "sighting--e26739ca-3401-4e93-aade-680d7fb74595", "sighting--1a8353d4-8c33-4b9b-b708-7a915a32dadf", "sighting--c9beae42-3034-4d96-a647-909b6171369d", "sighting--d143d579-47cd-440c-b725-e1b8449a742d", "sighting--5d1e6d71-8d9f-4ee2-8deb-c96b75850405", "sighting--26235062-ebb2-4244-a1d6-d09176f1d209", "sighting--502fef8e-3790-4533-bc52-45465ec2a47e", "sighting--3c530902-8142-421e-a55e-e95d84c6f55c", "sighting--9d120074-ce47-4b28-a6ef-ee4899704e3b", "sighting--c0ad6ea7-49ac-445f-bdb7-a4c532564cda", "sighting--92cee2bf-ebfd-47a5-81ee-7fae28d0e612", "sighting--c37c1b2f-e433-49e6-b510-885f6d2f8b0d", "sighting--bf84f398-53c5-428b-8999-b993ff382b33", "sighting--b0f3e701-1245-4fdf-994f-df353d213fd9", "sighting--4b65e3d9-c097-4d2c-ac7e-4723d77e578b", "sighting--206c6fcf-05eb-4421-8ccd-e2c8963e1a7b", "sighting--3a81d051-f8fe-40eb-81fc-ae39f82fc24d", "sighting--94e05737-b749-4018-8d33-f28f0d34b0e4", "sighting--1372dc01-8129-4527-9508-d2af9d65b467", "sighting--8a45a05c-b864-4fe2-b881-36a45c23c3e3", "sighting--60a34462-2a23-40d9-ba48-609b9a2e4b4b", "sighting--f4da9a4c-8f94-4281-9dc5-0733348bc968", "sighting--5bafa71f-6031-4646-9d03-8a516adcdeb0", "sighting--8f9b4d33-830a-4a5b-9600-43f9a4a11ce6", "sighting--63e6e318-ccd4-4025-87fb-f1261598c7ff", "sighting--aca4fd6e-8492-4daa-9681-5293e8c8e48d", "sighting--95472388-2ab9-4d15-89da-ea7c5e49f6b0", "sighting--08f00b72-1ba0-484b-b041-30cb602ca92c", "sighting--44a4bea9-cb5b-4061-8682-d00cd40beece", "sighting--792395a7-60f5-4dde-8fe2-9d66e659eea0", "sighting--ead80503-cba1-4f78-a502-957f34ab9a72", "sighting--9cf64e6b-52ff-4aba-a5f0-1a62f6b34be3", "sighting--0ac9ce18-7863-4e6a-a9c3-7844e7b6e8e4", "sighting--6c9ec788-22fe-4349-a30a-9ed3be919f9b", "sighting--430b50e4-7488-4e9a-88da-ffec5baca6c1", "sighting--a7f84509-f2cf-493b-9480-b54e30f91f9f", "sighting--8c4ab443-49ec-4778-8802-edf8209b9ba4", "sighting--26eeb087-4c65-41b9-b7bb-3e469366632d", "sighting--276a502b-a24b-431a-a772-63c9217904fd", "sighting--bc0aac32-553f-47b7-b828-e173fdcf29a4", "sighting--daef9c17-13d7-4448-8db6-4972f67e8744", "sighting--86f9958b-9280-40c4-adc7-333cb4a2c238", "sighting--61934b4b-b419-4dc2-9579-3eec75762f23", "sighting--6540b907-e752-4af1-9a10-d5f43f32c606", "sighting--c0030d9c-afe4-4079-bfa9-ae61458c0a34", "sighting--925523fe-25e9-4df2-97a6-39896e467651", "sighting--6f20a7a1-868b-41e1-b5ba-b7625a925db4", "sighting--fd05205f-e903-420d-9c2e-24b0ab713bbd", "sighting--09cd8b0a-7174-46b3-beb5-01396b235d24", "sighting--51d6e4f7-8d3b-4215-92bc-2f143ceacb1c", "sighting--e70fdeb6-44e0-4a1e-a007-00273a203a3e", "sighting--e303c747-f355-46a1-a32f-c8cad97ce12e", "sighting--b1407e87-85ff-4455-a2f2-f4c07ab5cdad", "sighting--55b87d66-f987-4824-86f7-2eceb57402f9", "sighting--2770e59f-a450-48b1-a89d-f57a21043ca9", "sighting--8fcf49db-a467-4915-b7cf-d1af924763e6", "sighting--e76c87a8-82b3-472d-b582-d75e8bbe241f", "sighting--f3efedc5-a1d6-4cd0-bbf1-07d52ae2acb8", "sighting--8e9f7996-1de3-4be1-b123-def66e32ba5f", "sighting--d4bc434e-109e-46b3-a9f8-0632999ad676", "sighting--5400ce52-b75c-413e-8a15-7ed00879f75c", "sighting--b19ae7c0-cc0a-463f-928b-ffec2fd6eb67", "sighting--9de306e9-5ecb-46d1-92ca-5f749cadf879", "sighting--96bcc755-c79e-4f1c-b710-108eb94e494c", "sighting--92ebcf15-3e57-4f2c-a1d9-f737b1fa616f", "sighting--9fefe37c-4243-45fd-a6df-7f231d8f92e7", "sighting--297bc7ee-1cb1-4288-a4f5-c738b65b8a96", "sighting--8c2d3c73-e84c-45ae-9314-9a82c8637fa6", "sighting--b8b2893a-bcab-42c1-9c83-d0e5fc62d3ae", "sighting--61d24d6a-2c39-44ed-a6d4-b04bb3a02723", "sighting--7a4d496d-7b60-4fcf-91de-04891037aa49", "sighting--0587543c-9eec-4034-8eb7-361e17d3c429", "sighting--7f3b2605-42f0-49da-918a-984a6583ab60", "sighting--8e3af54f-6417-4397-bdb3-1e08b3db225d", "sighting--0a88142b-3a42-44b5-969e-62ec4cc595b4", "sighting--8d094cc9-8a4d-445e-9c7e-eb077bb34e7e", "sighting--f91f522f-4d21-46b6-a629-f7a3c243fb95", "sighting--9dc17afe-00d7-48e1-8664-6518d3aeac68", "sighting--00b80e2a-7c73-4ba1-bcf0-724b16e24788", "sighting--65e69cb8-5bc0-4241-8072-ec165d4b7b5f", "sighting--dbdc9276-497b-4f4b-ae83-016d52ca9ebc", "sighting--44da69f9-b3e6-42bf-9e06-fce70d8747e2", "sighting--7d3632e0-75da-43c6-b6b1-43eba5d456cd", "sighting--be7fdf6d-b379-4457-86b9-701bfb490eaf", "sighting--0b064107-d79d-4ad8-97a7-5bb2db50fda5", "sighting--e24b660e-0d3e-43d4-a026-1213382cc85d", "sighting--edd9e743-45e6-4bc9-bda8-f29976c394bc", "sighting--8ef34fd6-ac8c-4c04-a638-da9d483c760b", "sighting--293587cd-bf6d-4858-912f-b3f5263affa2", "sighting--fc27ea64-180a-4494-b56f-909f0f6bf114", "sighting--325768c1-5b57-49a0-be2b-a0c42b2f72a4", "sighting--2d4ae41a-2a95-4ab7-a350-a397369bbd58", "sighting--0e9e382e-be8c-4a30-a08b-9891badc1285", "sighting--0298a332-0489-4a58-9498-ec5ef586e8b9", "sighting--cea58330-a36a-4b15-9005-355385493c12", "sighting--6e944d63-78f0-4dc2-9797-1154d8c737e5", "sighting--585b5c4f-bce0-4a40-8521-7461ad3721fb", "sighting--cc2f8cbe-c879-4398-b693-ef920615b7d5", "sighting--d1a199fb-db40-4607-8bab-345f60dd5497", "sighting--093bbc66-ca10-4a6d-a5c0-3dae591dc1c0", "sighting--ec40f1a2-af96-40e0-9f25-54a7cb08d3d0", "sighting--3281c36d-fba3-44ae-863c-aff0e51796c0", "sighting--b9229627-ddfa-4d24-988f-527c58bb050c", "sighting--606158d5-e1cc-41fc-88c6-e735854f0bd9", "sighting--100ba8f8-1a12-4db0-b4b5-a0b60d566118", "sighting--eee5a607-fd6b-429f-9148-cc799b7eea4b", "sighting--be567890-64e4-4e59-bf00-b364e061c9a8", "sighting--6874254e-acf2-4d12-ac38-72f10a39be56", "sighting--36c7c5ce-4934-4e34-a33f-b1ae6ce81180", "sighting--d00f45bd-6f47-4070-a4fa-4bc390c9f9af", "sighting--55f306a8-d9b7-4d61-861a-bad2d9da6ad9", "sighting--01dbfba2-2cca-45a8-aeba-0c7354d773ea", "sighting--07ff176e-8a2f-4aac-b694-7d9832d61893", "sighting--347bbd11-afa0-4c41-81d9-35d7b3d21171", "sighting--8677585c-8fd7-4a00-9718-e6030a9e126f", "sighting--3c8c9505-d92c-433a-956b-44a597c9190d", "sighting--e955871a-64ca-4725-8fa0-22966c7b002b", "sighting--f43c51f1-cbc4-4a6b-b98f-074d835e64f7", "sighting--272beed6-ca3f-4499-a0a8-0185f9126a6f", "sighting--a17b70ee-cd6c-4532-97c6-e37a79066ebc", "sighting--1d8e098d-65e9-4c02-8146-f31537d95c32", "sighting--f9775034-66f1-42ab-8ab3-c7789732051d", "sighting--909043a3-69b9-4cb5-92d3-a89a8f249c03", "sighting--bebe9543-0489-4809-8406-e56322ea387d", "sighting--4896b615-fb14-442d-b5e1-9a5f70b9d990", "sighting--6b211988-92c5-49f3-9a4c-d7c3cb06c577", "sighting--71aecf6d-89fe-494b-a92a-62b3abfe0dce", "sighting--f0678953-620c-49ea-8ca5-3df2250bb92d", "sighting--a2af9ddb-4b32-4bc9-ba62-8a632953e4d9", "sighting--55889db9-2be1-4a23-8c65-02955bbf5ea6", "sighting--84f54f63-8ad1-41d5-b268-63238b788e21", "sighting--11d67b37-c18e-48e1-bee5-3caf3a5bf5a6", "sighting--15d97e5d-a62c-415d-88c9-f90584991fd7", "sighting--349d5221-1b42-4758-8dd4-dc6d628b2b2a", "sighting--32d63a7c-e10d-4251-82bf-400866d6d142", "sighting--0cfa4710-0aed-4658-99b3-fbd8682a7d5e", "sighting--654ba803-eb53-4230-b6ec-d7ad24878ec2", "sighting--b7e6123d-9559-4452-b6fd-5c3f6ed4a836", "sighting--15e24457-8a6c-424c-b258-c44bf030e9cc", "sighting--ecb78154-b0fa-4800-8e2f-167eb9df479f", "sighting--943b0433-112a-4560-bba8-1e7b412fe65b", "sighting--1191442d-cf4c-4983-9c66-4f89b8a618eb", "sighting--27b3a08d-b214-4e84-acba-25566ba779ca", "sighting--1da7db6f-29d0-4988-a380-d3003de40cfd", "sighting--0dadc984-70a3-4b2e-9725-a5d9c51bc2c2", "sighting--2acfb503-ba7c-4dfa-a965-9bb6229bd06f", "sighting--470c75d4-799d-4aec-8089-ed608c71cdad", "sighting--d3cb0874-9b13-451d-89d6-1ebc9b3380f0", "sighting--7b9c5a93-f30b-4b2f-af80-6195b717a084", "sighting--53e5d0ee-2b0f-4d68-9bb9-36945c48d692", "sighting--e23ae30c-b77d-4d63-9cfa-5fe4390930c4", "sighting--bd547fbe-8c41-494f-8a70-cfa9d7000058", "sighting--47b8f838-127a-4ad8-afe4-cdf806c15354", "sighting--82f62123-d151-48d5-af65-ac7f4bb93f9c", "sighting--602a2418-5d83-473e-ac7b-9a0d9e7d64e1", "sighting--4017681e-db4f-4023-84ea-2c58684d3e3e", "sighting--a3ea156e-3b12-426b-ab75-4368df100762", "sighting--79b056d0-5ab5-474b-b82b-1cf48648b518", "sighting--8a56d893-7ff3-4d2a-ab9e-dd4ea4edeba9", "sighting--b5ec16bf-1989-4689-bad7-527af7467ee0", "sighting--4cf4f5d0-4e83-41a8-891b-63eb7f4d62b5", "sighting--e28446ba-a243-4dd4-92a9-bf4ae9dcc485", "sighting--76eca236-2e0b-4676-b37d-0aed60df3384", "sighting--f54711de-d761-4ca1-8406-abf912df0f1e", "sighting--deb61d92-96bf-4c75-ab1d-ad16f4a6e1c7", "sighting--1d1a24c0-5ca1-4ef1-8df2-170f21831393", "sighting--423f8716-3e28-464f-a346-0afcf59f042c", "sighting--6b6104f0-1f75-437f-9998-fd014d9ed34c", "sighting--6fc3822b-01d3-481d-a21f-da1153cdd7ba", "sighting--ee127b3b-9caa-4bfa-8450-9be9e3fa4bc2", "sighting--34db56a3-cd2b-4f6f-baa2-738c1c77491d", "sighting--0ba5464d-c871-43b9-b82d-5f0a85e03c1d", "sighting--07c9dcc7-27f0-4679-8f1c-ab91953cc16f", "sighting--b11dfd9c-2f2e-45d6-a9d4-582c8dcbfcbd", "sighting--6ce2e119-f032-434c-969d-f1edef1c7e6a", "sighting--b1d07ecd-53a9-4d99-858c-c10dae5c29db", "sighting--12df715c-b405-412d-b9b1-633265d7ae44", "sighting--7fcbd06a-49f5-4a49-bd2c-d5b3b8a62f04", "sighting--12c1f78a-2327-462a-80f1-d03e79dc41dc", "sighting--7817fb1c-4ba9-40aa-a683-dd31649f5e4e", "sighting--67a5ff2b-f47b-46bf-8471-26acb9d9c177", "sighting--5935afb9-e7e4-4195-a6ab-7ef8a7357fd3", "sighting--8cedb0c1-85d9-4540-9e0f-6dbeb5eb926a", "sighting--6717aa9e-8d60-4118-bb80-97369e036372", "sighting--0980a3ce-2d5a-4c07-b299-296124314992", "sighting--0fa1e240-8117-4e35-af1e-c4cbdcc472f8", "sighting--3f5f49bf-d66e-4dcc-9fec-3ffbd4d244e8", "sighting--844891fb-3ef2-430f-ba15-536e14bfc154", "sighting--dddb6a30-b3b6-498c-8fbe-09e328cee0fc", "sighting--8dd7d95f-2b1b-4bd2-9bb8-759fc92a5567", "sighting--08a74be0-b4cb-49c5-a347-96be97aea023", "sighting--1c1d589d-4312-40f7-8f4f-23f8c87ce841", "sighting--524ce8a7-5c76-4d5b-a8ce-ba7b75cb0974", "sighting--acbe0123-e630-43bc-b682-cd8d7646b028", "sighting--90bad1db-6228-4ae4-9624-305654b6fc18", "sighting--9d3abdaa-3698-43b1-8c26-1858b75c31f5", "sighting--01acb83e-2aa1-4612-93f3-446d9a00b822", "sighting--1cb6c050-1942-4294-a627-b7c3a773051b", "sighting--a2ea169b-7ffd-4bf3-9d63-656dcbef8abf", "sighting--a03041be-2672-4f3e-a825-07b0484d564c", "sighting--079c1f96-bc2b-4575-9d1c-b3c472b1ceb7", "sighting--503f5256-511b-4975-9de0-1f26f71eaeb8", "sighting--b666d107-1059-4e36-8841-38190c491233", "sighting--7c6f44ad-9ab0-4d99-aa9c-69f33358fc67", "sighting--56534306-9054-4db4-a975-781b5a13e0e2", "sighting--8221d7ca-2473-4d9d-81ad-9f85c3036fbd", "sighting--6a278f5b-b617-4573-81ee-617d8b583de3", "sighting--0a46ff79-b08d-4fa7-ab9c-22567b72b1de", "sighting--539a2ee6-6c07-456f-bfd0-77a256722991", "sighting--823d4099-df94-4901-ba7d-428d83661bb1", "sighting--394a63a0-f856-4e45-b287-d1ff76469f81", "sighting--f9baf080-3984-4f95-9aec-bb8b10f12a8c", "sighting--9b22ec21-76c0-4fa0-ba50-992319214db9", "sighting--193c18cc-21d8-4184-b6f4-2608a48adb9e", "sighting--f993b5b5-8531-4ac2-ac7e-3a94bf6f1cbc", "sighting--656a4cbb-cba8-4aa7-9493-c6d7e7bfa362", "sighting--36d073d7-5ad8-43e9-84bf-6c4ad7bf27ce", "sighting--01cdbaca-4555-4a77-8339-b2daf6f2384a", "sighting--e24f96a0-0858-4974-b81f-cd46807892bd", "sighting--a8df6efc-fb31-460d-94e0-b4f703fe6791", "sighting--d9bff5dc-663b-45d0-b9a8-b214654db94f", "sighting--5df487ab-5175-4155-ab79-5c472540a6b2", "sighting--6a7e7fb5-b02d-4fca-8004-d40cf5f1676a", "sighting--39dbbb18-4e17-45f4-98e2-35566fcb9b87", "sighting--60a58c4f-213f-4b2a-aa2f-e463680825cf", "sighting--c10425c7-3e9e-4b34-958c-17d542ba564b", "sighting--b0dc7195-6f7f-4853-91b4-9d1dd00c11cf", "sighting--c75afb81-a577-442c-b8d9-433c5e71778c", "sighting--d2cf2b14-5f82-466d-bd7d-e772bbb0dde9", "sighting--c053f81f-02f5-4d05-805d-019e1150e7b4", "sighting--026ccbc3-45a0-4efc-8857-8c48997bf9ab", "sighting--0a28a3e4-2849-4a81-9ce4-1e8a23bb01ff", "sighting--72830db4-3139-4ff3-a9a7-685d0b34353f", "sighting--f68b9788-2c64-4e96-b330-d7a0d154a89c", "sighting--9c9ff94e-50c3-4f30-a1ab-01366f5c668b", "sighting--9604b9bd-66ef-46a2-a43d-46b3525ea332", "sighting--5d0b7bca-c0f9-47a6-aeb9-c1fa09d782d5", "sighting--e0f9c5a3-79d4-4fb0-bba2-9fd28c6d9700", "sighting--2189cf68-a0e1-40a8-bc7b-a38c8838bc2b", "sighting--9138a9d1-740a-43e5-94be-d5e6b95253d2", "sighting--0915dba1-c63c-4f81-847c-3dc3875ddd88", "sighting--8ecc13c4-966d-4e46-9a29-1fdd95db8975", "sighting--19f88a62-aa01-4093-a342-ffe551b46946", "sighting--ef2014b0-4fdd-42a2-b6e6-aacde86d3211", "sighting--439ad964-bca9-48d8-8b10-cf74c21a024d", "sighting--bbfea1c3-2611-40ec-a0f8-fae0879aa01d", "sighting--9b872264-9e7f-4272-9117-165415ad36f7", "sighting--38fbee09-8465-4194-ac8a-b6562aed18da", "sighting--20e7da01-c1ae-4e56-b62c-c4599c699928", "sighting--481efcea-5daa-4468-9525-33070c70a051", "sighting--9b0b55b3-b147-47c0-9afb-a28aaac440be", "sighting--62ef225a-068d-41fb-8aa9-00e4b716acdd", "sighting--8d0be649-1a1a-41de-9335-366e45208e93", "sighting--448c69cb-b2f7-4490-8e62-425f1d72b911", "sighting--0c882e6d-74ee-4931-87e7-ca10dbc594dc", "sighting--2dcdfaae-6982-4e74-b507-ec697f5541e2", "sighting--945f7cbc-ceb6-4fce-9101-8d2ff871bbdd", "sighting--2b2f091b-513c-4122-8fc8-c51383a1006f", "sighting--a508b024-2594-4915-9746-09d344d38144", "sighting--9f04572a-e6a9-4831-ac25-5c70601e627c", "sighting--4b858fc0-c1c2-43af-9bdc-3a906e09fe40", "sighting--13df40dd-275b-4805-b1c4-e8426424f3c4", "sighting--f335901e-b8a8-470d-b117-180ed0a64729", "sighting--86199c79-3dea-4712-a006-ec95f27bab80", "sighting--773cb360-080d-4c3c-8a9c-f2818ceaf083", "sighting--a3b5f3a3-4ff6-4372-a380-9f5a4a1592a2", "sighting--d4d26234-0869-4467-8ec7-a4732acca707", "sighting--6a971419-90b1-4044-af97-4d3ab527352d", "sighting--69fcfe10-6bb6-469f-9af2-042696ee05db", "sighting--7f1e93ac-ba9c-456d-88fa-b1e3c20eeef6", "sighting--6eaed7b0-eefc-45d9-ab28-8874bf9e9598", "sighting--4bc1ee40-262e-4c34-90a6-3d558c8fd280", "sighting--2cd3e2fb-ef9d-40c1-8e06-c69a1b3934e8", "sighting--ece800cc-fda1-4727-802a-10847d9f13c5", "sighting--20593a0e-294b-4629-9c73-e0f6273a1b08", "sighting--e7a1ee5d-5f0e-4f17-9537-c79af207eaa1", "sighting--22938118-6677-4955-933a-1f1066b55d7a", "sighting--7162fe7b-b76b-487c-ac2b-efd5f5f92453", "sighting--6d563f57-5982-4bc7-a149-1790abd19ea2", "sighting--d4a15907-0078-4b94-aa25-9a8f28b32ce6", "sighting--ba69e784-9d6d-46f5-a11f-d3529a9234b1", "sighting--a7d92489-5061-4d19-8965-0d35605a9ca1", "sighting--6bdbabad-d322-45c5-9c8e-6a7a59ca6870", "sighting--106ff7ed-7fe4-44e6-8bd3-afa3cdbe2fdc", "sighting--3ed5a8fd-4acb-428d-b572-1105605f860b", "sighting--44c27da9-a1bd-4eb2-88ab-2b7524275b05", "sighting--abe972e2-0601-4d9f-8ce8-b29e7b1af5b1", "sighting--8390bfe1-710b-4be3-843a-467120d62c8f", "sighting--96439bb7-cefd-4231-ab36-93aaa4141afe", "sighting--97a3bd4a-61f7-4da4-b233-6e054ae7da5e", "sighting--61560cc9-68e4-4ada-a725-40b2959969db", "sighting--125b503f-ec05-4a5b-9937-3d701e4a523e", "sighting--833e0c7d-4de5-412e-9222-2ba4bddae096", "sighting--e2b82aeb-7097-491d-82f8-d96f428ecf72", "sighting--5a0ba2b0-c3dd-4478-9e3f-36b84c3df4bf", "sighting--5925e8a3-6095-449d-b5c4-7c12969d0f12", "sighting--ef1f5946-bfaf-4bdf-b04a-dfd3421ee23f", "sighting--ad4b0ba7-e8bf-4bb6-a665-a535402cc398", "sighting--125d03d4-ee64-4907-9fbb-69a6698c72c8", "sighting--a1d92346-f976-4d81-8a41-a243c7d80881", "sighting--7741b3d5-cc07-43a9-b4eb-e83118b38ecb", "sighting--739e7ac0-2d80-4dc5-960f-b310e45c49f0", "sighting--dc259021-bc66-40a0-b973-c0465faa0c9a", "sighting--855ca5d8-61f5-4b64-aed1-e74be6bd315f", "sighting--6a1918b6-f7e4-4572-8c9b-8440def2e9da", "sighting--13d5a494-499c-4e3f-97f2-96b0d935e958", "sighting--a6291f70-a147-4f1f-98cc-ce2f95316d85", "sighting--f2e98bbe-3d9d-4760-a147-000cbced415e", "sighting--63fa0249-1922-40ae-b760-464bf341b351", "sighting--e5a04572-2fd0-41ae-ba26-38ad54725b2d", "sighting--20db2bc4-e30e-443a-9c48-9636e10d7417", "sighting--e85d6704-9644-4f83-8a9e-8f15d131d79e", "sighting--8cd93346-4144-4909-8db5-d50479f0f20a", "sighting--dd82877f-f481-4efc-9482-a61aac094f34", "sighting--ed192a00-99ec-48fa-8a69-ed2ac902ca5b", "sighting--31c51e2d-ed15-4ada-9295-91c7c46dcd97", "sighting--320862a1-d71c-4c21-922b-01367101254e", "sighting--35f8caff-8dc3-45b9-bea0-477e0a394f4c", "sighting--bb2c7ae5-39f3-4eff-923b-1eab38a09278", "sighting--986bbd26-c25d-455d-a1a3-b63c3d762ebc", "sighting--e1a6ba15-155f-4c7f-bc66-94a7e270e182", "sighting--c131f2c3-885f-490d-a714-ff3fa297374c", "sighting--defe919d-d24a-442b-b14a-b8630f7f198f", "sighting--42b6b34d-4461-4c05-a564-94eeac5c6abf", "sighting--f130b741-ef87-41e1-99a4-ad54ba5ab753", "sighting--85e0d568-aed2-452d-9f81-2f44933a6532", "sighting--a4e1b00d-319b-4db5-b303-1ce664127ca6", "sighting--3ef0b761-8a54-486a-803b-b3cbfe00a257", "sighting--939975df-fb46-4ebc-9d48-62c03e0d9884", "sighting--426b28d7-723f-47fe-9d63-a00162e77a1e", "sighting--6c000064-52ce-45c4-9b6f-2783d4bfe925", "sighting--e4803521-78f0-46d0-8d3e-4f89dda2f732", "sighting--d1044419-0796-4e39-8f07-79290bd0013b", "sighting--d990461f-4360-4aa5-b6c3-67702eb230f8", "sighting--645d6fdd-c3a3-42d8-b3bc-67d2446fa137", "sighting--e9b2ee13-4a17-4666-ae9d-61211f5b8f26", "sighting--4f08391a-1a66-411a-9847-e0e6fd4bebb5", "sighting--9c19526d-8907-4b44-acf1-c517371fcdb8", "sighting--08bb8505-f1b1-48e6-935f-5b8779856de3", "sighting--4f4949e3-4129-410a-a2d1-ee335d873ab4", "sighting--21c0d91c-50cd-4aff-a140-8392b45568d4", "sighting--65a98ed6-cd77-40d4-a7a4-a02b7c1d056a", "sighting--d6745627-f0fa-44a2-a88e-8cf2e0231761", "sighting--07008133-b43c-4b56-a444-a4c53b0ffc05", "sighting--c6fd250e-3acc-4927-95e9-e5cf5b783e09", "sighting--19b3c324-0d69-46e8-a5bd-e15c35d5bad1", "sighting--86da6ffa-382a-4f06-8fe1-72b7f8e9ab6b", "sighting--ce3f6aaf-5458-4b52-bf5e-f7ebc045b0b5", "sighting--9e35dd9a-3a79-4c2c-8c6d-11622aed8a9f", "sighting--c9022dde-027f-4926-8e91-5b77daede414", "sighting--0142e288-0825-4ac3-b132-2eccbfc23b9c", "sighting--51b252a3-7f01-4359-a626-4eb4ff72f04a", "sighting--d3c97c98-a1b6-4853-bc87-c3c3cbb432b3", "sighting--fe2dd6f8-6cc4-4d06-9ef5-d3212ee022a8", "sighting--16f98768-d440-4896-9d6f-8ba883fddef6", "sighting--8ddf7bff-8df1-48f8-8ed8-8fd9c0465afa", "sighting--c3d2b021-1e8b-4d09-a13a-cb78edd4e425", "sighting--3f746bc9-0157-4bed-8a3a-cdae2b80b337", "sighting--9c63cf06-26d7-4124-b76a-617f3d901ffa", "sighting--3f98360d-ece7-49a2-90f1-dc64c98930c1", "sighting--84c841e2-cbe1-4df0-82d2-4d7c8399f2f5", "sighting--6d647ce2-1573-4465-81ba-630059df8d28", "sighting--1411e05d-9776-4031-8bc7-051551e2f024", "sighting--8f01f8c9-9e4d-45e4-a2d8-513da3b15fc1", "sighting--1b8b57ab-0eee-462f-9738-b468cc97f31b", "sighting--a19015db-4817-4e79-897a-136927babc05", "sighting--8e180309-7080-4283-8694-c4e4fce2470c", "sighting--5818dc43-3f33-4c91-8656-19c82be9302d", "sighting--e4683ff3-301a-43bc-ba98-e0c1bcd23151", "sighting--fe426d56-a47d-4cae-927e-40dfb9ac5dd7", "sighting--c777b7ca-a6bb-484c-a823-f7499c8db9d9", "sighting--17b132d7-09f7-4fae-996e-0b1fa498702e", "sighting--3954c998-bba9-42b5-bd22-5a04d6efe163", "sighting--be668f21-6783-48a7-ab64-8c9ea0589f83", "sighting--7bdaaeee-4e90-414a-b9af-33a2e17a01fc", "sighting--f404b834-90a0-41f2-a10f-7b8a324a1e1a", "sighting--710371cc-be61-4428-8083-129020b4bc7e", "sighting--c1b3f240-fed4-458c-aa58-ca0a93e34ad2", "sighting--4f12532b-faa7-47d3-b4b0-2729f7e3bea6", "sighting--9a19849a-b556-41eb-8cea-791870911ed4", "sighting--03fe23b3-8d1b-475b-bc24-c11de181d7c8", "sighting--3e0218c9-f17e-460d-bc03-25390744e0e6", "sighting--ec55c0b9-62ec-4948-be0e-d4bc6fc0e134", "sighting--a5e404a0-d122-42b9-8113-7d1e35879213", "sighting--60cf152a-6939-45d6-825f-01bbf7409634", "sighting--83d472ea-a3cc-4ef1-a0c8-6ec6a467a99e", "sighting--3896b1e7-45ec-4053-840d-e21a6a88e228", "sighting--a06ec9cd-cdd7-4686-ad8a-50735a9245f4", "sighting--cbc5a4e2-3a67-4ab9-b99d-f71c62450fcc", "sighting--448320b6-e998-4b15-b688-4f040cf5e64d", "sighting--97a39438-23d4-43f7-852e-78ee3bf83610", "sighting--da39db10-5dcd-4b63-8013-6f7e3812768b", "sighting--8a933af2-3944-43a8-9be3-0cc19d072103", "sighting--3e669306-400a-419c-bf3b-200fb5560107", "sighting--020d1110-1fa2-4acc-bee8-f5d80e5831ae", "sighting--741a83ec-1073-481f-8643-f0f089385f7d", "sighting--17e77ebf-7144-4712-b491-325368978824", "sighting--dba56658-2a67-489f-9d82-97bfe677f4dd", "sighting--e8f3fcb4-6665-4e53-a01f-1cd74bdbdedc", "sighting--138435bd-e992-4abf-a0ae-ac084e69af4a", "sighting--0287672d-d2fa-4ad8-9ed7-acc6a59f1a38", "sighting--cf4b8eb4-c333-45f0-bc57-66de1399ed80", "sighting--1673dc66-a53c-468b-80a0-b43d27b4fb8a", "sighting--8e327782-09f5-4eec-b61f-b358ba697be2", "sighting--732713ef-7acb-4196-b65e-b95aa2a380f9", "sighting--269a1836-6c53-4900-83ea-ef042237dbd2", "sighting--6b8acae2-f7f6-42ca-b3bc-c81ed1429c43", "sighting--b5eb4241-848b-4273-acf5-5b6087652a54", "sighting--6b38a432-b0ac-4a36-8173-49c1ca1d6946", "sighting--ab2b455d-61e8-4030-962b-0b6ef7d5f2b2", "sighting--7a19929d-bcef-4381-a604-3f76f90e88a4", "sighting--45db6bc5-cea4-4567-b4d0-e276e371823a", "sighting--11f38f01-44b6-4a4a-9518-850dc6c7d98e", "sighting--7279bf75-c74e-47fa-ac87-b1889ff43bfc", "sighting--b97d6fa7-abb5-4543-8b8d-3d6acab936b7", "sighting--54313e19-f0dd-4844-8011-0c10249db79f", "sighting--ab7c8c64-c592-48b2-8def-051a84d4c18c", "sighting--021baa63-e198-4a6d-be84-66bfebe4802f", "sighting--001f898d-1cc0-49d9-b523-d31befcb0914", "sighting--3ead566c-23fa-4ab9-9a67-1896c3072aa2", "sighting--cb1ac4b3-5374-49da-a50a-2c76a9719f4a", "sighting--6411396e-1380-4f81-a4d2-fee2f592b53f", "sighting--095aff65-6160-43b7-813f-9fec1fb4a3c1", "sighting--72217b69-e4f1-4bad-b52a-fa0726e14968", "sighting--de3685ae-bc48-474b-9263-1af84e8cb918", "sighting--152c3a42-f536-4e4b-bb0b-0a09ffca8a84", "sighting--5892bf45-078e-4e3c-ab16-7fb80fd96e6c", "sighting--d2704505-054f-42b9-b792-f28b93af9126", "sighting--0721d27b-4ec5-41d5-ad4e-177c29af542a", "sighting--98f68110-87cd-4a95-a0dc-70680cfe64ed", "sighting--cbae53bc-9d34-4585-9bce-196a2532c498", "sighting--ad9fe2b3-6810-4704-a231-4729f39f7a0f", "sighting--6cdcd6d6-89d6-412b-9e5c-8d534a6074fa", "sighting--de527cff-fe2b-49fb-bf4e-e149fa0acf8b", "sighting--22d490c0-63fb-4933-b043-e60369607e7d", "sighting--99b88858-006b-407f-afd9-e7459df0c246", "sighting--3ececf73-be79-4c75-9f7c-54af1438adf9", "sighting--13d92f18-5444-47db-979e-79dbeda9d310", "sighting--3bfe2674-3084-4f66-a32f-41b3b6146816", "sighting--26afb072-7b2f-442b-a7c5-6347c14a91d4", "sighting--53d589ad-24a3-42fa-8061-fe7fb175d518", "sighting--efa1ed79-7b30-41bd-85fb-8e96ddbae92f", "sighting--a88dc785-bbbc-465d-979a-f654200a2700", "sighting--cc7e9d52-05e9-4653-ac10-2834afde7c92", "sighting--d456eb92-5873-4786-92b3-47c9ee92858e", "sighting--278c9437-d441-4bd5-98ab-a2320a0f51f3", "sighting--5d51b7a8-c6f9-44cb-97ef-a57788ea2105", "sighting--2143bda0-b5ba-4e90-b04d-fd575757b8df", "sighting--c0d2ad7e-0793-4a5f-a887-6d4d2a9cab17", "sighting--64ecca35-20d9-4edf-a7e8-304bd2a5a896", "sighting--70dff756-8109-4762-9da6-8f1e351acd73", "sighting--ed711fdd-a020-47b2-ad55-194bd1bc05ea", "sighting--dbe36066-45a3-42fb-9682-aa2df754fc3c", "sighting--ed230ce6-0f66-4248-87dd-cf18ad0ccf10", "sighting--924bf9b5-051b-4bac-b665-6f1a404e8887", "sighting--d2f6a8bb-3b85-4444-9c1f-c1284e3b181b", "sighting--5d730fbe-9135-4086-928e-3b41440d92ac", "sighting--e5ea8da2-08be-426d-85cf-309d62378e37", "sighting--beab1bc3-6c25-4050-abff-b98b10c15c63", "sighting--30e9086e-9900-4bd8-a2b6-2840ee0ab121", "sighting--38f795bf-9b3e-41a4-975f-e68b0af1a499", "sighting--6c5ea0b8-d64f-4d3b-9de5-ec47108fe0f1", "sighting--535d7440-c7a0-4b4c-9e98-bc480b8d8347", "sighting--12a59e18-af9f-4c78-b174-e252fcff42fd", "sighting--fe3392ab-d1a2-4e4e-b7ee-257337be6a81", "sighting--b136e3bb-5b7c-4670-a50a-40544a53ab25", "sighting--3cab387b-d461-47ca-8c84-ff7e3b158204", "sighting--8ff29b58-3bda-4ac2-8df0-976e05a18535", "sighting--98432dd4-1c75-480f-896e-a4d89cc6d48d", "sighting--1e72aea8-1d1a-4599-9624-e8079f090e51", "sighting--fcc69796-c12f-45d0-9dca-7bfb03cfd507", "sighting--b0ecb5c9-66ef-4667-8d95-b088c2c17635", "sighting--110e2891-37e2-43f8-b8b0-8eb106a03ece", "sighting--d5e99e10-9355-4323-99e7-d41650571a95", "sighting--0ecef04f-7732-47ca-8712-533fcbf32a31", "sighting--ad8bd65d-cdf2-4b1d-8cd2-1e658478108e", "sighting--46ab561e-7ff2-47b0-81d9-ebd386586bff", "sighting--0eb4170e-aa18-4752-ab7d-1dacf5df5a3e", "sighting--1846dfce-3dfb-4c02-a3de-265fb4f6be03", "sighting--225679b6-5b70-4587-aa98-3e35ef22116f", "sighting--530cc7dc-ff09-4eda-878d-15042117449d", "sighting--0eda7c5f-88c1-40ca-bd92-62cd9a62267d", "sighting--9d55e889-ba85-4fdb-af79-b46d7476bf6a", "sighting--6b58f556-dbe0-41a0-bba1-244c9c389006", "sighting--26c43b2c-f728-47e0-8732-f17ef13d0685", "sighting--2aa4d0d1-7d22-41e6-9c23-c627ba0878d7", "sighting--322029d8-95c6-45a3-a0d2-a6c9e44d7b1e", "sighting--6826d86b-4e3f-4b9b-950a-2559204cf723", "sighting--5d02dae6-d557-4dbe-897f-56971d28741c", "sighting--8e3141ea-72a9-4861-892d-16e147aa2877", "sighting--38737813-a236-42df-b2da-b27ae84a3f02", "sighting--afbe2731-f12f-415a-a679-1fec92798249", "sighting--412432ba-cda8-421e-98e5-912368b2a796", "sighting--96cdf360-e3e2-438b-bccf-02f77d60bd28", "sighting--47448ebc-80a7-450c-bda8-759c1b3a6aeb", "sighting--b965741b-45f7-48c9-9ef1-56045279ebeb", "sighting--9b6487e0-ccb3-4f6c-9e63-090c9d088e87", "sighting--f9a7573d-d178-47fc-a142-3fce0c3a75af", "sighting--8d4d14d8-3eb8-49fa-99ba-43f68c0eda84", "sighting--69fdc595-aa6a-481f-9896-9c3d0c94e606", "sighting--d19df33b-a901-4aaf-badb-9ee9d4b9fa83", "sighting--7139d3f6-1dc7-4c65-bbba-e8172484eda8", "sighting--041e6985-3d37-4fbb-8015-9fb4846872ce", "sighting--2f705f2f-b884-41f8-a119-50958fe262c3", "sighting--856d3e30-8294-4c0d-bdca-c0fc49cecdad", "sighting--2679b663-edbb-4be0-9d2e-f0f1b6402f47", "sighting--119419f9-fc43-4a0a-98e7-39fd385fe16e", "sighting--eea36917-7c54-4422-9770-07fcf2993321", "sighting--036613f9-f5fb-4e3e-a194-2817af4c9012", "sighting--f4b48ff2-3631-4251-ae3d-53c635d61b5f", "sighting--2ae44e12-7e6a-47df-80f3-350b4d2cb8ff", "sighting--b0034bbe-dd30-4ecc-b7f0-47d539616325", "sighting--689232d6-2d6d-4a12-80c3-8a7c1cf34292", "sighting--18cdbb31-d350-4d73-91fe-ededc8d52a3e", "sighting--570352c2-6c6c-40af-9440-f2d15f67a67c", "sighting--a870b714-5057-454a-b67d-b4ce77c097a0", "sighting--85f36d0d-de3c-4c72-9fcb-7683fc2f53f1", "sighting--121a09b9-8e45-4837-8b8b-8d3eb5cd92ca", "sighting--c3581642-e0c9-4156-bfc8-4d73f7cd19ee", "sighting--0487cae4-bc0f-4315-b887-b5a666823292", "sighting--738d56eb-83a9-45d6-b2cd-f8b37911cbd8", "sighting--e9e1c1f7-cd6a-413f-98e6-1dd67ff375d2", "sighting--f3329956-77e2-40c3-a6b6-7d0c28cf38c0", "sighting--a9effff1-dfac-4933-9d30-2c2228333274", "sighting--0f916254-1d01-45d1-a908-3185af826af2", "sighting--3f98b615-1b6e-4ee1-87ce-e958f0a2a5e0", "sighting--be88895e-e25d-4918-9851-e7791957e0ac", "sighting--480480e1-1d6e-44f5-a4c4-bfae3d27bddd", "sighting--71787d53-5440-4a48-adaa-f4c773674572", "sighting--436fb926-438f-460f-80db-04a938df5969", "sighting--26f9ccc8-4e8f-4f41-b95a-a8f185e570fd", "sighting--3f984918-41bd-42e7-b62d-5256de9977d7", "sighting--ff51b2f4-510c-44d0-bce7-460dbaba0c88", "sighting--d34d751f-eb53-4604-82c9-2d3cb7668de9", "sighting--5f0cfe76-cbf8-4018-95f3-c49c8fc42706", "sighting--90c5a0e5-64ed-477d-89be-f3eecb109b47", "sighting--5197204c-a64a-47ca-b641-56dbfe45135f", "sighting--53c99b23-d9f2-4d83-a411-cfcfe9d9b2bb", "sighting--51bc790d-13c3-4ca4-99b1-58f358f100b8", "sighting--a1031363-4542-4b70-b0b2-b8a916b2f2cd", "sighting--7ca19210-1706-4ab5-96c4-65826388a5e0", "sighting--36dc7ed4-0d40-4217-a2e2-015d712364a7", "sighting--1529a6eb-8d0e-40da-995a-761ca8e1849a", "sighting--336e846d-a7c1-4ef6-a0e2-26ce1ce227cc", "sighting--e1bd6c13-7888-4d0e-ad68-449d107c9503", "sighting--daaeafbf-2a4f-49a8-a093-15a773be3f71", "sighting--260ac708-0c6a-42eb-841a-05035bc1beab", "sighting--aaab7f0a-d148-45e9-930e-1e879edbd120", "sighting--aa7d2385-f549-4f9e-8f31-69fb671f5f9d", "sighting--f766a1b2-7608-47b3-ae35-9ab26bd1b48d", "sighting--09d4539e-63a9-45ad-a489-768073fb8904", "sighting--9b311c70-5824-438e-9f7d-25f86964c266", "sighting--a6c6d93c-4f3d-4171-94e5-230c6029d8f5", "sighting--356c7f8c-3dc0-4224-96dd-aed427d9af6d", "sighting--1bf9b917-26db-4cb8-83cd-2fcb32145da0", "sighting--5f5c5840-c7ce-4755-a004-4ad572d853d3", "sighting--007e3c50-48ec-47be-a83c-f867597f2f0f", "sighting--9b09972b-f26a-4150-9f57-50a3dd053853", "sighting--d9583c22-ea88-4265-9e5a-309a21748220", "sighting--00f2fbf4-6a15-4e7f-8714-c7540151e14d", "sighting--853dab5f-286c-4424-98b6-4ac6ef1ae4f5", "sighting--7e770c43-08ea-4afb-92b4-ca244c672fdd", "sighting--bed82530-fce2-4ba9-b883-07b6ebf8cf4a", "sighting--bf99f563-308b-4c86-ab34-46806e8c394a", "sighting--b0af1cb4-790c-425a-aa98-6e184ffa8513", "sighting--37d2edeb-10f3-4764-88fb-4ed3818a66df", "sighting--5d8774bc-8108-46df-9d93-ee73029a3294", "sighting--3e7e2e08-cd32-42a9-af1f-9d780b2344f7", "sighting--fc2122c3-918f-483d-a1fc-794053db9168", "sighting--6c57e3fa-e20e-401e-8d53-4fbdaff2493e", "sighting--2b619f87-f44f-4160-aac2-14b6cb3cbd02", "sighting--41bcc99f-3db9-4c75-8e28-3ffb94dabf9a", "sighting--7f2f1b6e-268b-4e44-b866-f61f3a8afbc9", "sighting--c1b43e38-4538-47ef-a460-df29a7213d3a", "sighting--68d0b0c6-420b-4a81-b01f-920089a18fc8", "sighting--c82b0e4a-06db-40a9-bfda-13518530b413", "sighting--55b7bead-e146-4533-bac9-60fe9afa06ce", "sighting--84801e8f-b9b0-4257-ae7b-c1825dffaddb", "sighting--fe615aef-35cd-48b7-a1b4-cbbae3304767", "sighting--dc868a17-5822-4885-a17f-5384a7abe936", "sighting--5d4c9a73-03e4-4646-8562-e381440ecf7b", "sighting--9d37fdf4-70f2-4afd-88f4-d5547f4e1226", "sighting--65a2b36d-c6cb-424e-9f89-535e77242606", "sighting--5cf7757c-d2f0-4cd8-837f-727877cbdbeb", "sighting--e0abca42-e19a-46e6-82a5-b1d577b624ce", "sighting--740e836f-7ee1-4315-b58a-7e1f82de8cab", "sighting--13b9dbaa-ad65-4049-8449-3ffaff184dcb", "sighting--a0c08077-0266-4fa2-8ec1-c695df563206", "sighting--28ecc28d-1c50-47a8-b261-032b2bfa5d13", "sighting--df4ba0d8-89d1-4f5a-b0f4-e25ff97cab2f", "sighting--f355d668-488a-4d70-9e3b-225d9812367a", "sighting--6ed8df0e-9c92-48e9-a48e-739f3330ba32", "sighting--46d571d5-7cdc-430d-945b-fbdb9c7a0535", "sighting--068ce62d-4e42-4a2a-ba30-bd00aea9b58f", "sighting--e0ea0b07-aadb-4f66-9a0e-29b4378213ee", "sighting--bfad74f6-bc82-4049-a4ca-3a26d805a6cb", "sighting--bbc5b37c-175a-4caf-b407-f989a30544c4", "sighting--eab61022-5f38-4095-a96e-0fc4eb5d48b5", "sighting--05c54b98-86a6-46dc-bd79-6b759f6985ba", "sighting--f2a058c6-c234-4468-a476-a1c4ebab6db6", "sighting--baa07740-355d-49b9-8a03-dec2d2347aa5", "sighting--181367de-062f-4115-a01e-47541adfa8c4", "sighting--11b59950-048c-4ce1-9f51-ba0a1d6745dc", "sighting--54aaccdd-5737-4463-9ca8-80750cd6b46a", "sighting--7ffb537e-71be-457c-9cee-65485cb75b5a", "sighting--8c9619f2-bde7-47d5-bfde-95f511acc940", "sighting--735f412b-1680-41d7-b8dd-a7f3fa087f91", "sighting--a5fb1239-65fb-4377-bde0-b55b67afd80e", "sighting--4ece14f1-a533-493f-8e7e-55c5ff463927", "sighting--f8cf26c5-ac79-47bb-9e81-48dec12a2e27", "sighting--afd5847c-8b06-4a82-8dbe-fdddbc093a2f", "sighting--f5f2da97-8a2f-4526-8671-8966f8449491", "sighting--20c10dbd-fa11-4554-9ef8-d683ab1e71c2", "sighting--77e4a1b7-e3b4-4bcc-8edb-cc8422bed54c", "sighting--d67dedf6-caa3-486f-82d4-1e525a2ed97c", "sighting--0acadca0-998d-432b-a631-b21f6927c3de", "sighting--b007a770-9198-4d4a-8cd6-55a54cf962b1", "sighting--a32ce09c-fc03-4b27-9de6-4eacd456e3eb", "sighting--8c862da1-5e92-4106-aed4-fa0e544ed6f1", "sighting--3a17736d-af0c-4ed6-8e9b-1fa42819f5c0", "sighting--54c8e9ec-9252-4ad5-8ecc-7ca641f08bef", "sighting--a899f2a7-5e2e-4a6e-89a8-8e9926bc406f", "sighting--75efa231-e64c-47f6-9d39-9ed28cf8d8c2", "sighting--22981e6f-a791-449a-ab68-3c96a06b47a5", "sighting--848d11da-5915-4c7e-a625-16890408c56c", "sighting--0010d3c3-441b-42f2-8498-c6b74826fabc", "sighting--2e62cd5e-746a-4cd1-9854-bd32cff7af8f", "sighting--fb837129-07ba-4937-920b-ad75da6c965d", "sighting--e619fd14-90e5-44d4-9abc-9f4b96f3ecf6", "sighting--a05e51a9-3454-4036-933f-ef0041fb8bd6", "sighting--fbc0bad3-2a8e-4848-9c65-3085fa2e8f31", "sighting--56b2664e-d851-4130-aaca-2c16d0ca5c90", "sighting--5b608813-afa6-4f19-bd34-346afe8cbf4b", "sighting--2f6aadac-10d4-4b7b-b7ff-a5beffd4af27", "sighting--a2703de7-050d-4200-b57a-46f37aad5e90", "sighting--fdd181c2-e171-444b-be1f-b7c982155a45", "sighting--fb0d732c-3cfa-4b64-aac4-f4a81680d672", "sighting--c957c2bc-e25d-4997-81fd-09ac3a48122c", "sighting--59e7a1b0-598b-4bad-91bd-67cc7a123477", "sighting--ca0928d1-c531-4ce6-9850-41e04d550e2c", "sighting--0c964408-a991-4625-8248-2733ff3b4e5d", "sighting--71e2c488-b6cb-48cf-90a3-682d820f09dc", "sighting--8b7a474b-1be5-40ca-a285-f28d2a46838c", "sighting--048a4410-6793-4c04-88d7-957c89af60ad", "sighting--00caace0-722a-4809-889c-c36a9e64605d", "sighting--f9a50951-a976-477a-b4fb-e73ad9892980", "sighting--1a507d2d-7e1d-49dc-9ebb-d33fac266187", "sighting--ff7a7826-2baa-49ed-aeb3-2c4410a0fb28", "sighting--90e7c772-c7d3-4115-b9d2-c90976840fbf", "sighting--1e771540-01dd-4ad5-818f-2a43d4566779", "sighting--d3bbd96b-485b-42b5-86a5-100e78288236", "sighting--3b6d4b78-1ef5-483d-9818-d49d2cf0e7b0", "sighting--559db993-026c-4ca4-86f2-aa97dc586e45", "sighting--8c865960-5486-4a36-915f-ae15a2ee3f34", "sighting--c852361c-4d51-4329-b86e-0ed03a912834", "sighting--b828e02b-67d7-4083-bfe8-53a08216f0b7", "sighting--be2f2920-f797-48a1-ae48-86a0457418ee", "sighting--008f3508-767d-4d15-b7f2-54089c1c518b", "sighting--148b1076-895f-4003-b707-090df184b36d", "sighting--7c8da9c6-f03d-4095-b586-84959ba25a89", "sighting--fb883bc3-7677-4490-85cd-f9c7b5c8061b", "sighting--79f3de5d-e8f4-4076-8c08-3a05d63ee531", "sighting--6117fb9f-a838-42da-a790-6abb01c83a9e", "sighting--b9d72438-8d67-4034-a5de-9b0af8bbaf96", "sighting--2851c829-6d7a-470a-8c6a-033558dbaeff", "sighting--51709484-c0aa-4657-aa7e-d58feb20f0c0", "sighting--557ff144-1b98-41d5-823b-6aee78fd13c9", "sighting--e72278db-f815-479a-a11d-ef67c5cb139b", "sighting--4e52c052-c4cb-4883-b8a1-4768cd0a19a8", "sighting--7791d79d-ee2c-4cef-83d7-2d088de5963d", "sighting--b4a9024e-467a-4a1d-81b5-d980974b694e", "sighting--4d8d9fc7-6b36-4c86-bf81-446d9fbfddfa", "sighting--239c31c9-3fe1-4d78-b805-06a3de61082f", "sighting--ed9b5d74-5e89-4b67-96c8-d4faba397f5d", "sighting--b59232d1-84f4-4672-8c21-09fcd19ae290", "sighting--80081093-8ee2-43da-911a-94575a91c24a", "sighting--710669e5-bfa0-4cc4-889a-644721d119c2", "sighting--d8ce091d-6292-4037-8dce-e2555f5b0ee1", "sighting--d7046ce6-73c7-49c8-8bbc-497e0e3ac61d", "sighting--1fef577a-0591-43c2-bab8-03409aba03a7", "sighting--26fece32-a9c5-4e0f-ad13-21b8aa8f7ede", "sighting--e97af9f2-f0a9-48dd-81ca-31b15d874787", "sighting--0edb6493-5728-4d7e-bc77-10db9a757a7a", "sighting--5d70334c-3fa6-4d68-a9e7-499fa1d5c803", "sighting--e3a7253b-02b5-44bb-a479-3c56d8a26b3e", "sighting--c1abfe17-869c-4d63-8cec-95c72da5f8ca", "sighting--c4d6e527-d378-4aee-a87b-14a0f4a6a373", "sighting--e1c421b0-8bd3-497c-aeda-5401ecdd2a40", "sighting--f143ff96-fa3e-42b2-bc8e-0065cda7e6c6", "sighting--30e742f2-cbe5-4932-b901-9c58b56dd37d", "sighting--4edeba32-6025-4a9c-a234-0410b27f64be", "sighting--faf96098-3500-4009-bf32-0d6267fa0188", "sighting--eb6a47e9-9c46-4c89-a100-42b11c0f215b", "sighting--dd89ad1e-3c9b-4829-adaf-3f9d4418aaf3", "sighting--b30d229e-8480-45b4-82d4-82196e705113", "sighting--3c6872ea-4f59-4008-b28c-56644fb46798", "sighting--0493aa8f-24b5-4f15-9eff-7ca762444cb8", "sighting--f934ba33-cfb0-492c-bae2-4df8785395a4", "sighting--6abf8a13-8cf1-428f-8dfb-a70cb67d98f4", "sighting--ed1f8bb5-17ff-42ab-919a-4320089e35eb", "sighting--6d39e7ea-fe3b-4c5b-845c-7b9dd45f7f9f", "sighting--ec61d747-fe38-4f75-b5b6-21279a4f7b74", "sighting--cec2e974-64a3-490e-b999-8c3a2c188808", "sighting--cb506b91-a4f4-449c-ae4a-62bc7427def3", "sighting--f93c2265-6ea6-4ac9-b037-1fb7a41e5231", "sighting--98e8e6f4-2878-4e4b-9609-5bfc1c3a8d18", "sighting--1303650e-ff12-4438-922b-07bb9949df21", "sighting--f904b924-fa49-42cc-9332-2af91f7abc71", "sighting--fe0f7f60-b86e-4171-bae7-3d0dce9e3d42", "sighting--2fe17ec8-0ec5-454b-8739-7633b89695ac", "sighting--d98e0477-0809-4d13-a50a-c6f6da4d5a83", "sighting--c35c9bfa-ea2b-4ffe-afab-6bb27b8a1f84", "sighting--0aaa959d-c230-491b-8e71-0e086d58f58d", "sighting--30452d36-ab81-4096-a927-359316a20b28", "sighting--9a4eccd5-021d-4d6c-b413-8bd62f81bd27", "sighting--e85753e0-52a4-417e-b54b-8b796a8481bc", "sighting--b929dd6a-5d62-4158-97e4-bc97044747fa", "sighting--b232f22c-816f-4783-8564-2eeb8c83aa4d", "sighting--49fe625f-7b91-4d35-a3ac-bf057347741c", "sighting--569eeaa6-9fe8-4ef2-8f8f-f1c977e2505d", "sighting--bc866741-ef43-44c7-9e9b-ea7c7f237745", "sighting--e9ef7070-2a7e-4a88-88a6-7aaf6d46cd42", "sighting--f98a53b3-df63-4acf-a0ea-48b294bed145", "sighting--0086d3c5-5434-4335-9c5c-1c6e47e93ec8", "sighting--9cf0b12a-918d-4946-8211-cfed4e314a7a", "sighting--0fb31d31-5dc3-494a-8a66-559181efceb5", "sighting--aad681af-04cc-4c14-804d-9b20583d473d", "sighting--6103059a-a066-4cf6-aa6c-8bb0dc3051dd", "sighting--6336fa13-c6c3-41fd-94c9-0920b6b883f2", "sighting--29acce1a-514b-4133-a08f-bb387bd621a5", "sighting--64432a36-ca57-4f67-8a83-e0a8515d92b4", "sighting--73659570-7948-4fe4-9abd-f0d69a1e4e4b", "sighting--7b90fec3-20fc-4377-a9ae-36c490320a22", "sighting--f24e333d-5090-4e3e-8804-00bb287ce440", "sighting--fda2a575-27d8-4536-be3f-83ff0885db60", "sighting--18f9e4de-da2d-4837-b90d-2b6f7c5293f6", "sighting--2d179242-0d8b-4d97-8010-3b05cd2acb94", "sighting--ca4a0a23-836f-4ee8-aef1-8aebb0a577c8", "sighting--515b20c0-23be-4046-8977-b198b591b5dd", "sighting--b03771c8-05fb-4352-b240-28325ad6f259", "sighting--a644de07-6115-40e9-9674-1d8ab078cdb4", "sighting--c0346b48-8a52-476c-9cea-0e224bab0695", "sighting--14dbe6a7-cddc-4f73-8a11-191e2d75ab6d", "sighting--0933dfbd-8a15-45fc-8757-b62d36f60f9d", "sighting--85ff4a39-92b1-4b9d-868c-bc805eb29162", "sighting--3f264c32-ff80-4197-8c58-90d288353b3d", "sighting--2d91d752-aa9e-4595-bd0b-56592ce259f6", "sighting--4a20eeb1-fc9b-4dae-baec-02631ff60503", "sighting--6776993b-46c2-43b3-a053-7735a133d9ba", "sighting--387a737b-f6d6-4b21-875b-c9529407aa0b", "sighting--73cc69be-0d81-4100-bce1-91066c7af496", "sighting--ecef7314-c6c2-44ae-8b02-5b14e57932d5", "sighting--ad47fad3-8316-4df6-893c-deb69761a379", "sighting--c225b336-ef5e-4dc1-9dfe-443ba9c1186e", "sighting--ed96b6bb-4a17-48cb-9275-2248aa0f9ecf", "sighting--00634838-4744-4bfb-a924-978562053dda", "sighting--ab9834ff-bf9f-4643-afc6-fcff45888703", "sighting--a5dad15a-4d31-493c-8460-b84dafef02d6", "sighting--99d628c1-5c7f-4c0c-83e3-a2966d605e1f", "sighting--20a9c0c5-a6dc-44ba-ba0a-ea786accd4f3", "sighting--9a59370d-fe57-4a1e-9a19-e3b281d5e29a", "sighting--3777fbc7-71f0-4d5b-8d87-8e558243a1b9", "sighting--6e54bac3-1620-4b11-a67b-e1779769d709", "sighting--5e070f68-bf03-49d6-a8d2-b676c5cb1c10", "sighting--5b20e3c1-f4ad-4562-983a-ded7ac8b8c48", "sighting--d60e4838-0347-4d98-b183-9be8c90daf30", "sighting--5e7b95d7-4898-4172-ae64-11cfffcec71f", "sighting--31f4e2f8-bc83-4ab1-a619-40caf9434b7a", "sighting--2621a295-fe23-4bbb-9baa-bf1fac6132dd", "sighting--5e82dd14-acec-41e3-8b36-4c2b48e0ca34", "sighting--3ad91ffc-a81e-4e94-8756-c3aaab6762e8", "sighting--5acd94ce-211a-460e-9a83-a1f1652593c2", "sighting--75e96aa8-b8e7-4441-b491-e5ca4c053bc3", "sighting--a621792a-5de5-4452-9a13-690f05816140", "sighting--da951987-5ef2-4620-a3aa-79520c3997d9", "sighting--70accd34-613c-4adf-8624-c57c3bcd066c", "sighting--de1ff2fa-ad32-4202-af96-da8d1f7c20af", "sighting--07c8b597-1db1-44ae-bf88-3330f407f39c", "sighting--03d99807-1d41-4537-8cc6-6316b327aa58", "sighting--49abb943-6990-451d-8007-e667a0e1f7aa", "sighting--46a9248e-90ac-40ab-9003-9397e0746d46", "sighting--eaf47bb9-a48e-46eb-a7cb-d8bd914a6ea4", "sighting--af8533c1-4c4b-43ec-8ae6-99319179a486", "sighting--0371d06b-93b8-40d8-b420-facc7d710120", "sighting--dd9b9432-2b68-46d5-867d-127df07f4c60", "sighting--3cf2cfb8-920e-42e2-880e-0b859643df40", "sighting--71c78a9e-28a0-40ea-8cca-b1423b0fcf39", "sighting--aba28a19-f44e-47f7-8cef-24cea9d0fd51", "sighting--53a3f637-ee75-4e1f-bbd7-ec76fee70d46", "sighting--e812808e-ef01-4c5f-aeb3-41eace1eb6c3", "sighting--9c557a8a-abcb-4be2-aa25-7692c508ce13", "sighting--5de13f1f-e67d-499b-b57e-3d8b45227b34", "sighting--24bb1d20-2896-489b-b0c7-c2996f3e26b3", "sighting--69d4e4b4-8842-4669-8512-d4df6255b30e", "sighting--832ee02e-d374-42a2-9166-81165d79a024", "sighting--d1703a1a-6148-4dae-9775-1f3c7f38f124", "sighting--aa8e8cb7-f20a-4a0c-899d-3f91f3ed246e", "sighting--a2c302d7-b24e-4bf5-8906-6b5c696df97b", "sighting--30d12d20-cb04-42ad-b643-e5d60d28a395", "sighting--9d1f2a14-ff81-4af5-bebc-42c679b0f643", "sighting--3f7199bc-a271-426b-b587-eb405929e306", "sighting--1c5dfdee-a8fe-473f-8dad-5748d62bc916", "sighting--b0dbf112-8ba2-41eb-9184-91bc39039dd9", "sighting--40d31291-7bf1-4524-97f4-5a2c62c6b28c", "sighting--837a1d41-f23d-4c0b-9c1a-695cba19b59d", "sighting--94c15879-cfbe-455a-938e-1fb28e69169b", "sighting--cab21f95-389c-4fb9-bb8d-2b07ee076ef2", "sighting--a3788ed5-e982-4757-9116-9ac6b0e1741d", "sighting--2372e630-6b1d-4112-9472-3551f8ee571b", "sighting--1e93241c-93c1-49c0-84dd-082548674c6e", "sighting--8bb7da2c-3ef4-41ed-9bc2-3fe3d8a8343f", "sighting--0ce8312f-fde5-447a-b8f4-2904e66f5e13", "sighting--d067163b-b862-49d6-913d-fcb14a93977b", "sighting--00f2f2be-da07-4c39-92f0-0fa1d183f9a6", "sighting--5ec59b03-ba66-4561-a69c-f06aae15300c", "sighting--3c323ef6-6f49-4c7b-a49b-1130df64c58a", "sighting--c6f0f8e4-350f-41b6-beb6-f42c30ec2bb5", "sighting--91701166-2c4f-465b-89f8-012f6bb36606", "sighting--53b2e183-ee07-4895-95f9-cb73742c08fd", "sighting--4d6d2080-beec-4228-aa42-35f9c96cc31c", "sighting--87cda5c7-57c6-45a0-b269-757e031b3440", "sighting--b51cd923-d085-446b-92a0-7238c7a02137", "sighting--fc865908-0f87-4509-9630-e48d1d0a5e36", "sighting--a772453b-8826-4ed0-b48c-bab03d584cb6", "sighting--c0a8b216-59cf-4e8f-92bd-5f0644cfa3f8", "sighting--e0606ff9-4477-4dbe-b10c-f80a178324b4", "sighting--2d99b13e-3786-45cd-a92e-57a991ce71c9", "sighting--960eb072-36dc-417b-a260-0f408523ad45", "sighting--77c8dafd-821d-4d53-8a7b-25bf68cb9bf2", "sighting--8f1e363d-80f5-4f7e-b9b3-521c33daca8d", "sighting--e2420726-c1a8-4401-a0a0-5daad5f51b51", "sighting--86fb5601-e494-4358-80cf-91982c4402f8", "sighting--101d04db-bb17-4a56-a31a-506d432f22f8", "sighting--1d0b9869-bcb3-4f9e-b5b7-31b96093a99a", "sighting--75e06a80-372f-4877-b246-124a2fc0946f", "sighting--4140e10b-239e-416b-9c93-28fb9eedbeac", "sighting--875bffee-1296-4ace-b904-c3ef4c3a8f63", "sighting--e3a09b2c-87ef-484c-be9e-c9d557a14708", "sighting--0fe130e5-582b-4a83-b24c-abcc8ae5ac04", "sighting--a4cf891a-0509-46b4-8954-63ba8b3f8c01", "sighting--274fae10-3ca7-4365-a160-e3045f797c07", "sighting--bd9cbe5a-d2a2-4f3b-bd72-9b292900cc50", "sighting--c74bdbc9-6523-4275-8887-01f65d2d3eeb", "sighting--c61732f2-a662-462b-a8b6-240be20e0b3e", "sighting--1ba950d3-14cd-4e1c-a11a-ab1ec1e0108a", "sighting--5f1166b0-185b-4b12-b8b0-7c9f3beec046", "sighting--d94068b6-13cf-4f43-96e5-1aed36cec398", "sighting--ad498e1e-bb2e-4b46-9913-b733c5dd8124", "sighting--6011e9f8-55f8-462e-8629-fa289848699c", "sighting--f63f20cc-5166-4337-b43c-ff8211de83b0", "sighting--25a86823-1a95-439a-8b8e-4d84ccc60c3d", "sighting--ebc6f602-6ccf-489a-84ba-9a278dba36a8", "sighting--18126288-fded-4a4e-a841-6ef318211601", "sighting--e397bba2-049b-4ff9-8b66-eb07ad8d2faf", "sighting--680cf042-bc03-4c90-b686-d5b2df9e0504", "sighting--99daccc2-aa0a-49c2-9ccc-7b932c2c4797", "sighting--33d085f8-a019-493b-8f68-8c0bef224faf", "sighting--7b1121ff-2920-46b5-a643-372edc88c19e", "sighting--9d9521a9-6fea-4e15-a099-1c570ff3ab9b", "sighting--54b456a1-a730-4fac-8b67-79a778e7791d", "sighting--e1bf8c13-5505-46a0-a1b2-8ac7ebc4be4b", "sighting--b8b7cef5-1970-42fc-98db-b32b03504cf0", "sighting--c7dedb63-650b-43f2-9f95-d1cc5a40fbdc", "sighting--ec2e457c-e104-4e83-8c8f-fc02d4106ad8", "sighting--85a49ec8-1a23-43f9-b2b2-2bcc7fa187b3", "sighting--dfc0f9aa-810d-4768-a6bf-09736ae393e3", "sighting--c9413f49-50eb-4952-9409-f73c2e50822c", "sighting--61a4ed99-826b-46a9-abd9-75041f90629c", "sighting--f2ca8459-4097-4450-857a-319080420a83", "sighting--6a33ef8b-455f-4e6b-9f86-ef35dcf63699", "sighting--b69102ae-456c-4e09-bc4b-83afe2d1ad78", "sighting--e97ae478-a43e-45f1-bfac-42c9c469d415", "sighting--2d02b4ca-1eb9-42b8-a5e5-a43525517525", "sighting--06a12c0d-038c-4d3a-99ca-b2f694bb21d3", "sighting--f7024d5a-d117-4c52-8a6e-311347caeb4f", "sighting--356d1431-3c00-42ff-bf0c-40a6cef7cb30", "sighting--1c3ddc66-2cfc-4283-98aa-7a3f3f7f4e38", "sighting--660b3016-2db0-4e67-9382-35bbe833ae0b", "sighting--924ca5e2-3ee6-40f0-bc44-8e0503e4e813", "sighting--4e2f50da-11f3-47ae-8776-8fc31c53a808", "sighting--c6f047dd-e75f-4e79-bfc5-298a3b9a1c60", "sighting--965b6dc0-2095-414d-826b-0756fc4019d1", "sighting--61e44e2b-b552-4e1d-b783-6ae0033d3c33", "sighting--2aff7df6-99cf-4e2b-9a25-1fab75805482", "sighting--578ce596-1ffe-4ed9-a5aa-169d9dfba371", "sighting--8b9e2c62-6c4a-4109-975a-2bcd4ff3283f", "sighting--1053350f-8d6a-492b-a770-172a4583346e", "sighting--7018f177-6802-46ee-bdb8-f427fd0e2e64", "sighting--7080c1d6-c612-42fd-aba0-00af4b8f3ed8", "sighting--19d55e15-3dc4-41f7-90cd-05b2a9b61439", "sighting--ef1a33cd-d9d4-4eed-a959-117db4c8cf40", "sighting--4abbc4ca-4b6e-40ce-adbd-12b7edd81216", "sighting--04e061ac-7ee0-4cdd-aa45-39777b5d8ae1", "sighting--d28ece58-afc3-4c61-b48f-c974cd125132", "sighting--fbb5cd83-17b5-4ab7-b403-2ef4152508a3", "sighting--c6d077dd-0ed2-4186-a6c3-a5b372010f9f", "sighting--93e7f2c2-f7ad-4271-bf3a-b3ebbd4cfaec", "sighting--b0e519c7-1044-4a94-b805-47a13846c463", "sighting--e7ad377a-4fd2-4734-b9e9-3fa8bf546ef5", "sighting--94a6ef52-d86d-43f4-b6aa-634e123c15d2", "sighting--cc571715-4a6b-438e-9063-dc7d4957f013", "sighting--1202dbf2-0172-404f-9ce6-969f397c86af", "sighting--82f97b37-a87d-4603-af7f-d00669699050", "sighting--f25ecfb1-4713-4e56-95d3-88f662a1cc7a", "sighting--bc69598c-ee9c-472f-b4b5-e411c1d4f77c", "sighting--56382098-78ae-46d0-b212-390a82632792", "sighting--6e45c584-ce52-41d9-994b-ff857409c7ec", "sighting--f90918c7-d6c2-4ee8-85e3-599db66421bf", "sighting--fb2ffa8e-2b0e-4fdc-8adb-7393b2390e86", "sighting--1f86f482-e4ce-402e-9473-8b2c8b8aee2d", "sighting--0afdcd31-5491-4084-be53-81059360708f", "sighting--1f55a15e-32ed-4f67-b353-dea8a051bf64", "sighting--6e5aa990-2f20-492c-9ab5-ca1407241cb6", "sighting--b82afc2e-699f-4714-a789-49857dd63ece", "sighting--ce051532-8f8d-4d3c-9ace-83cd3cd42256", "sighting--d1fc6366-608e-4dbb-9928-83e035e85533", "sighting--9c548367-aaa6-45a4-b419-6230b4746f3f", "sighting--9fed6159-f1d8-414d-9f79-aa1edb664687", "sighting--8614aa83-9607-4f61-8c3e-ae5533fff8b0", "sighting--7eb6eeaf-1485-48ff-8805-fe0b431df704", "sighting--cd97d07a-7289-459a-858c-f1541ec4cd47", "sighting--d732b1ff-7695-4061-8665-efff2675bf54", "sighting--633a79d8-d33b-4c4e-9a01-5e9326133902", "sighting--dba95959-4ea4-4a90-b07c-e1af380000cc", "sighting--64d4dda8-575e-43dc-8dec-90f5621addef", "sighting--bd97b9fa-7ee7-418c-8fcd-656c3c300ace", "sighting--1a1e6da5-d536-4d97-a966-30b9a04afe59", "sighting--f7275bd6-7093-4a51-ab06-9ee2b81acf04", "sighting--5e093b13-5e85-4b56-a9de-4596ebc5a7b0", "sighting--2256fa93-100a-40db-a52f-458b707cb569", "sighting--cf21bb12-0bff-4351-9b00-37c56b95a1a0", "sighting--b2da2f81-e3d9-4a32-9e71-7ad6bbe4d36f", "sighting--94ebb669-f351-43d6-b608-d96535da93fe", "sighting--73225426-f51a-47ad-ad45-cedc2790141e", "sighting--48fd02b5-36e6-4542-af0b-4dc18b4153b7", "sighting--516c7528-452e-4b27-88fc-111c934587c8", "sighting--8fe23247-fda5-4e8b-8f05-246b9a8053a3", "sighting--2335e393-bf4c-4240-bfa5-40a1a1c81bb3", "sighting--45dae84c-ce10-42d6-8a85-2a2a47181ceb", "sighting--c59524c4-ae33-411d-b6c6-b8b489f8fd8f", "sighting--befb3ca4-ae92-4b9c-bb8f-7df4c76608b1", "sighting--7b9226d5-9501-4c9c-8eae-eb839cba21d8", "sighting--1d061464-38f1-4ca0-abeb-de690e20e7c4", "sighting--f3bb3434-df4d-4c2f-804f-4b73c3cb66c7", "sighting--9e829b6e-24b0-4e76-be95-c24c5b8d2db2", "sighting--1cd58b6c-d56f-4802-8565-41d671c23be2", "sighting--7f2a8598-fe23-43e7-8713-1f1a33216087", "sighting--7afbb95c-2a18-44c2-a933-f34685c3bc1d", "sighting--af3a3ec3-b2a9-4ce7-acd7-ff4c699e365f", "sighting--7d581702-b7b5-486c-af47-d1c5316c7177", "sighting--91ab8056-cfd6-4909-a4b2-c1eb652fa890", "sighting--82c6809f-e628-4a0a-8081-31b41b6c4e43", "sighting--62fde2f0-dd1d-44e9-9df3-9b2a58458621", "sighting--8165c2d9-f958-4370-a8f3-c8acbfd2da5b", "sighting--20220c9e-be43-4135-9e36-8ad45a7d1264", "sighting--7894733e-d5dc-4539-920e-130eba31876e", "sighting--401c138f-3506-47de-9c0b-c97d0df8ae48", "sighting--1c9efbc2-af8b-4edc-afe7-c80bafdf7be7", "sighting--7b2872ae-ad34-4fab-9b24-9bdcf0372281", "sighting--c5f83b50-01c5-4a18-a9ef-f2c620df5242", "sighting--6e93be3f-168f-4bd1-b33b-1e409fd809e7", "sighting--c6b417e4-1b67-4344-ab1f-e9b067af3abe", "sighting--5965ef7e-5d51-4afa-92c0-2bd87192925f", "sighting--9bcf190b-67ee-4cd2-b3ea-6e6870f08774", "sighting--930e1747-ea92-45b8-9fda-647c7ba57d58", "sighting--ae82aedc-c1c4-4b5e-b112-989aa075d8fe", "sighting--336f5d4f-2cc1-48bc-8b01-ad115ee8eba0", "sighting--4f901fce-4848-4ace-8ca3-9b51275f7286", "sighting--fc525fa3-9256-49f1-a7fa-a7a080953ed6", "sighting--63762571-5814-49b0-8697-cd716055c477", "sighting--43879aa8-db90-4818-9d4b-4febdf0bd42e", "sighting--210abc51-5fc1-48d9-8bc1-267fa14e195a", "sighting--cfbfbc49-feeb-4ed4-982a-63bedee1a1c6", "sighting--3accd5d3-70ac-4405-854e-24aa0f0af981", "sighting--f68190f8-1c45-4cbb-b22b-bba1bb594867", "sighting--b89d603a-ec0c-4031-a1f2-5d4f5779266b", "sighting--ee89bf9d-8941-475d-a0aa-017a0b06a4ca", "sighting--5c048c37-d83e-49c7-8bbb-4f28e7f9941e", "sighting--5a76f5b3-8da3-484c-8780-b5c1d6ca8ef0", "sighting--72fd4383-e52c-4d87-8ada-0942df5dd118", "sighting--89e21d56-d388-4bde-9a90-9ba5b104d6b0", "sighting--e266bce1-017a-4c97-a197-fd339a5f0753", "sighting--461402d7-d05c-4cf5-85fd-a28b0685925c", "sighting--5ac62a18-85fd-405f-b205-baea61ae649a", "sighting--ab27ca1c-78bb-4f61-b185-51e5edf00107", "sighting--2665ec82-5d52-4acf-8c41-3d062975f814", "sighting--8e5cdc2b-6e80-41f0-9902-104af5511a65", "sighting--c26425e1-c6ac-45a8-8341-f33ffbbeb91a", "sighting--ebf261ec-96b5-4d5e-b9d1-354d45bbd1ce", "sighting--003240f5-cb71-4dc2-9350-5e36f66e7886", "sighting--c6b799e8-4bce-4488-8b48-49fa63226c83", "sighting--2d8e3a54-5f29-468a-9be1-5b0ac1c795ee", "sighting--1ec36f7c-0967-4bdf-a35e-f7aa07dea431", "sighting--38a4fbe0-4b4e-4e08-ae7a-b8e19fd7c7df", "sighting--2372ffad-3633-4743-b9e9-2d7fee67c2d3", "sighting--231fbeca-50bc-4ab3-825c-c37ee8c40337", "sighting--a4d10452-6124-4bb7-91a7-5fff8b245ff3", "sighting--c636402a-a62b-4b73-b15f-c79a50040379", "sighting--d1646db8-c95f-4ea5-a39f-483157bba2ad", "sighting--de3d7b78-30b3-4c5a-bbe1-8feae72a527f", "sighting--33ef1816-4422-453e-96ca-ef251dbf5502", "sighting--13504bf2-bee1-46a7-ba6b-f28c662cd450", "sighting--1ec7dcff-8796-486a-9e43-68b8d0d58410", "sighting--736b7528-9b5d-4092-9253-c624f3bf34ea", "sighting--6278c23e-1c0e-476d-aedb-136f2979b228", "sighting--ede5090d-c158-466a-b540-8146ef815a01", "sighting--53ff31ca-d378-4dbc-a85e-ff4c2255395e", "sighting--6e4c6c1d-2a3c-4738-a781-603f329bd799", "sighting--6d110c23-dbf8-46dd-92dd-493d4c855b8c", "sighting--e8a2c3f5-db4a-496e-bd59-1fb7f6b8a2d7", "sighting--4f6f23c4-c308-4f59-b495-25d74e7e7b0c", "sighting--bc3c13f5-02a7-49e7-8771-c1fd60c5b0bf", "sighting--8371900f-c198-4f27-a2e4-cd5cb8da0224", "sighting--89f99a70-5aaa-463a-b453-59dc66be58b4", "sighting--a2a2ff21-fd1a-48d1-8f4e-f0e41e69523c", "sighting--8b694318-4c88-4505-b983-c53071030e02", "sighting--01c83d61-232a-40f6-9289-b3b72a9f21b8", "sighting--b13abd55-7d4e-425a-8fab-3ee5cc66a248", "sighting--39a382d1-94ab-4a13-b4ce-70e2029412dd", "sighting--0fdeb64d-213b-4bb8-80fe-1508ded2f231", "sighting--61574d45-ae62-43b9-bf41-31f4550fa404", "sighting--f121c4db-882f-41ee-843a-a1824bb69f3f", "sighting--3c9dca0f-e179-4a5e-bcfe-6838a5935894", "sighting--81650894-ed99-415b-ba2d-59fbe7286676", "sighting--da0c52d8-74a6-4bc5-b25c-ec64a75122a0", "sighting--4e3d99d7-ea00-4b52-ae00-f3b69c17585f", "sighting--63cb06d6-16c7-4885-9437-b125b17a570b", "sighting--e478da09-3eb5-47e2-add2-bcaf55fce047", "sighting--9ef35b2f-bc64-4d94-bae2-b6da686d8b7d", "sighting--4b97a3ae-93aa-46ae-92e6-bdf0af31a2c2", "sighting--24bd7b5d-c5ca-46b2-8159-9d8fee2c875e", "sighting--331a882c-b2bb-4146-803f-e874b46e44f4", "sighting--a76d03d6-ea88-4319-82e0-adb4b07f5bb9", "sighting--5c85cf5f-3590-4126-9f9c-4b3627e1a5ac", "sighting--be11728d-f980-44c5-8421-a1f58bcc6806", "sighting--d057d3f9-0825-494a-a4b6-a3006b937ba7", "sighting--e8a13bd2-1eca-4c3f-b4e3-e676ef77cfdd", "sighting--195494cf-fb2e-4c3a-8f7a-ad63dc55f15c", "sighting--6c5a7e42-9ffa-4519-86fb-975bc9c97636", "sighting--356f6923-d7a4-455e-b8a2-3be842ed13b3", "sighting--a769a375-d7a2-4344-b8a4-4df0cf6c5382", "sighting--60aeb785-5061-49cd-a709-99f8f21e5381", "sighting--28f5da0e-653d-43c8-8eba-b6ff3439b82b", "sighting--0f0d6905-b621-4bfa-a580-b4f6b085aca4", "sighting--920f9197-6f1f-446b-9af7-284e8f9ca706", "sighting--6a22fb76-b2b2-4391-8887-27928b9b75b6", "sighting--9adfb42c-3072-4b55-830c-4e194143de8a", "sighting--64197202-0ada-4a8c-a6f8-3b78e84500a9", "sighting--d0bf0180-81d3-4402-a4bb-5f1b71451588", "sighting--55c2aaba-39f3-46fa-af5b-79f642f988f9", "sighting--b3274e7f-3693-4f1f-8d3c-9802d1acf72a", "sighting--15b32b8e-7f34-4c01-bbd8-92ed875b5436", "sighting--2fbafae7-8a5e-4da7-a6b8-449a1dad9313", "sighting--907ca3d8-e4ea-43e0-aac6-66d8811f14c8", "sighting--0d7e1493-0b7f-44a6-9907-9706f255ea5d", "sighting--60c96c17-88f1-4573-86ba-f784ad6a2024", "sighting--077c6ac6-4720-468f-ab8c-060693f8bcb1", "sighting--f67de5e8-d56f-4f9d-9a9c-2271af22ba36", "sighting--f5a5ff4a-dbf4-4201-8119-de2d518dafc4", "sighting--dec5ce74-3e70-471a-bed6-f5a131d48c29", "sighting--75ebf107-7dbe-44b0-9201-8c4e080f4b56", "sighting--e3d358df-8ef1-4a5b-b212-833d9104cd11", "sighting--968b3ba3-c6f8-4c67-ac25-fba4f1a6b274", "sighting--6ce758a7-0086-43fa-9bb7-c98641036b6c", "sighting--5eb8ebd0-6859-49a9-94e5-cc1db0fe5368", "sighting--e5690d9a-409c-49a5-a30c-55c1f02fdd83", "sighting--0c28f5a7-489d-4e91-bdc4-502fd34cc3da", "sighting--2b051817-aac9-444d-8dd5-120db2f6938f", "sighting--eb443ff8-e35c-4157-b6ca-bec0f97dc48c", "sighting--18b01b6b-6abf-4c8d-88a4-b4cea004fa60", "sighting--7111f750-cd28-40d3-970d-11b86c887bc3", "sighting--9e340b1b-bb63-44aa-8877-e10eea88b993", "sighting--b80e3d34-27ed-4d1a-98da-f9bc6ea758b0", "sighting--3557e60e-b627-4b71-af30-2789e1c37854", "sighting--591f3b0a-9ffd-4eee-bba2-bcfc090d38db", "sighting--689c2996-8911-47cd-ae97-3df12370cd64", "sighting--79b3987d-47a7-47b1-9878-fcfce053cf7f", "sighting--0c08259f-82b8-4d95-95c5-042f1e93eda0", "sighting--6381bc28-4135-4e71-95f0-add87f061667", "sighting--992c7cea-8c0a-4b5f-b21a-fee5c7f929c2", "sighting--0ab76594-8f4b-4406-80cb-e16ed57f66f3", "sighting--eb67869d-03c8-4474-889c-aad88cede0d9", "sighting--2924d310-5a8d-411c-bb76-597c08abe052", "sighting--162c8133-2222-4c3c-b3fb-69c425907139", "sighting--34fd542e-c47b-4f94-8095-e7bf32f6530c", "sighting--db30b8cf-a834-475e-bb0d-cbf510f62f48", "sighting--8d6eb2b9-c0c4-4dc6-ac1f-79989358ef3e", "sighting--17068539-c071-491c-a537-fbe60c6f6469", "sighting--5ccef747-1faa-4814-9ce4-b00dd1da1473", "sighting--96c07579-3afe-48f7-b06e-680070106e97", "sighting--c24217b6-5918-4576-918b-08f2a929714c", "sighting--fda27877-7866-4a82-93c6-eca9ce26d14d", "sighting--43c13772-733c-47dc-a772-9ffe948477d1", "sighting--09db39c6-d4b5-489f-8265-9891eabb5aaf", "sighting--872e9e20-e0d1-4f6f-a241-3672788b4b3f", "sighting--c2a14ab4-f16e-4774-9618-2e84d6d47c2e", "sighting--d70ecebf-284d-454e-a747-7c35786f4406", "sighting--885dfdf2-af42-41b7-a7c7-277827aa5fe0", "sighting--44e94d7c-6b62-4dae-b31c-f7c1b5187ec5", "sighting--b1699bd4-7e18-438e-a631-1681ebf1c9a9", "sighting--8acc45da-7765-454e-8501-e3a485864742", "sighting--35c9d3e8-916f-43fa-be41-62bc4e8fef7a", "sighting--06fd591d-4f28-4fef-b9cc-f6272930925b", "sighting--e7b47500-644f-464c-a94e-db6d189578fe", "sighting--821d58a0-4832-4e09-a3fc-c69e4a6fce1f", "sighting--baf9ff6c-2477-43a3-a657-81243119bb99", "sighting--ad6e5a81-3d42-4cd9-955c-86c3cb824b9e", "sighting--817ee891-ab07-4936-922c-8d861ab8a6b4", "sighting--853d09d0-5260-46b6-a019-3a3df2121e5a", "sighting--8ceda8a2-80c8-47bd-a453-4cfdd227af39", "sighting--1a2e9444-23ae-494e-b126-5dfbfb0ad2d6", "sighting--e704f7bc-78cf-4205-a33c-3b91d3eb2019", "sighting--031a3919-48a3-43ad-8432-93006589376c", "sighting--d4c9dae2-0b89-482f-bf7b-75da094c072e", "sighting--ce0903e2-e36a-416d-a923-8b76c7a5a9fd", "sighting--2bcf6081-906a-4c63-9174-57bafd2b856d", "sighting--32f0abb5-ff1d-4dc8-bc27-59b97cedb69e", "sighting--b7edd678-1d2e-4a37-94e5-c7fc088d5a89", "sighting--ad6f47d0-978a-4e58-a607-32b979d83823", "sighting--9ab34ee5-31dd-49ce-b3dd-507099c2623b", "sighting--8fb5e580-b47a-433c-b535-8fefeb31087c", "sighting--0c2d05fa-85bf-47eb-9e67-37b377f6d59f", "sighting--50ed5634-0ac0-4021-a7f5-12e35da31665", "sighting--1f751ca5-3029-4780-8c1f-edb0fb14a92c", "sighting--e3902c29-dbd0-4f0c-9c51-5bd7261afe82", "sighting--35fe65e5-0f60-486f-98d9-4e11c32ed0ab", "sighting--cb5f7a24-4268-454c-b609-d3b70abf8f67", "sighting--30371ab9-4116-4cdf-b9f1-e1d8b112fdda", "sighting--abda1254-dd67-4f9e-8abe-3d86a71ed919", "sighting--77b2f128-a5c9-4957-9652-61ffe024540b", "sighting--b1091cc9-e8c6-4570-be8e-6af72502d9ae", "sighting--6c715e20-a8fb-4188-85b2-b0d4ba2c137b", "sighting--a4f7b8ea-26cb-41df-8530-6d7213fb2e6d", "sighting--371a8249-f651-4576-b19d-ec582e0f0479", "sighting--9ff29a7c-f3d6-46fc-bf1e-ad9b97abd1e1", "sighting--48ea4c92-8b6f-4176-84e2-ef2e635fa042", "sighting--031a2a62-5fba-4ed1-9257-d1e608c2be51", "sighting--d6e5c839-b7e5-404c-8464-1953d3e59cb7", "sighting--8a9006f3-f1b8-4ad6-afa8-862c750190eb", "sighting--5be6fff5-50e8-4384-adc7-0b58e58fc758", "sighting--d1566aff-e1d8-40b7-9211-2824877fd6a3", "sighting--d3a3bfbe-3c21-4189-9b4b-ce3cb3e92c44", "sighting--b93c5514-d827-44cd-8576-5a7b96d8b842", "sighting--7d1eca54-18e3-4bc1-8473-2d4645ce867c", "sighting--8fe34f21-18ce-4b6b-acd5-6a21562a4910", "sighting--6da456ec-ed74-423e-9a47-0e3d6e74301c", "sighting--a0a9c10d-5456-4479-9095-0dff752f5142", "sighting--02475847-7659-472c-937b-d4e13870df36", "sighting--f5d96c62-bbcb-4b84-bc81-b753e421ab39", "sighting--019f6deb-ffe8-47d7-b7d3-8f6f54efb5a2", "sighting--fcbb3d97-3134-49fe-910d-1bf3a7cdf3d5", "sighting--1cdd032c-7711-4f6d-b1c6-292511c2dbec", "sighting--319a1961-0e15-4a80-ad8d-fbb557d855b5", "sighting--990ba4a0-6845-496c-8970-a0b2b062b64d", "sighting--61330240-fec8-468d-81ba-77a6e2e893dd", "sighting--05a92f15-2303-4b81-9187-ad6532809fc9", "sighting--579e7f17-702b-4926-92c6-5b1d29342cf7", "sighting--ae1eaa7b-5134-4395-b874-cdb67ef20e14", "sighting--d2663e13-3e1d-4639-bb6b-be271fd5bc63", "sighting--b551ec65-5ad4-4ea1-b042-90235d6a0f1d", "sighting--4e77c8cf-3ef4-4a4f-85ce-35b4699ddb7d", "sighting--dcec3d67-7ed5-4800-ae8b-bf79f4dd58d0", "sighting--3591bb39-9f5d-47d4-9db5-8c559d09ac08", "sighting--ce4724ee-1058-4e35-8620-c90cea2f16f4", "sighting--719424b9-5fd2-45b5-864d-6a6101de3055", "sighting--bc08d4d2-b59b-430d-95ab-e13046ac20f4", "sighting--7d8d6849-7056-497e-98be-2f542941eb1d", "sighting--429f063e-9671-49c6-806d-f4e11daec6a7", "sighting--44d02f32-ef4e-44b5-b637-c3bd752a15bb", "sighting--1aaa003d-81a5-48b4-8c01-22ad65079b31", "sighting--8eedf9d5-0803-48c1-ada8-f7328ad1f165", "sighting--58a7c051-e28e-45b7-b14d-c10393435fa9", "sighting--a6d3aba9-159a-4d15-b2e2-de5091cc70e0", "sighting--c1fa37be-3045-46d3-8485-cd711b13d656", "sighting--fb10cb9c-ffdf-43d3-a33f-e33714b2a80f", "sighting--809540cb-7b37-4f91-b3dc-c5b511218551", "sighting--11f04be1-ee7e-46ca-8e48-526bc15c622b", "sighting--27e4e1b5-78cc-4d51-94a2-9083d4a7eda3", "sighting--781e0b21-b844-4ef1-9f16-000eb741f125", "sighting--1eda7f25-8476-4dd9-a646-edd284a241c4", "sighting--4b7017bb-cf6a-43f1-b455-3b02ce709db7", "sighting--ec510c98-c33b-49b5-8a2f-c6bb843d7ee6", "sighting--a1959ac0-4973-4397-b987-f2d6372ff24a", "sighting--12ca0517-ac90-4652-b1b2-d7d946ccb617", "sighting--aa28fe51-4fee-415b-a62b-84f8ae60aca7", "sighting--b31601f1-88ab-4833-9c34-fa8ce77fc175", "sighting--d491ae6a-7b87-45b9-8e23-a274b45ad7b7", "sighting--b613d4c0-cd8e-4882-9cd9-8b20755b7dee", "sighting--e8cd95d1-6c1d-4c25-aa51-e4ea67934d52", "sighting--1d5f5613-a3eb-4b5f-bf1c-56f2f394544c", "sighting--2b00d25e-a72b-4c7c-ab7d-7f228e5c40ef", "sighting--25485d0e-7b49-4302-b11b-4df4a7eaadbd", "sighting--c2560749-0e22-4b33-97af-3a79f9f7509b", "sighting--f6b1e69f-abaa-4a19-993a-7acc89364ff4", "sighting--51bd8902-ebbc-40cf-ba04-c5dc23c4aa9a", "sighting--dea9daae-3d18-4ffd-b668-a5c9dace76fd", "sighting--dc723d9b-2ce6-4b7d-9dd2-a3a1fbf7f497", "sighting--5b07c708-749e-4227-9c4b-ec79dd8f6d1b", "sighting--907a0630-951d-4212-a52d-5533aa1c3e99", "sighting--626ab4a8-eb00-429d-99cc-f8e30cd7b53c", "sighting--28acdddf-e203-43f8-b143-7bf2c86e604b", "sighting--e1903a40-3f7f-4594-b85f-799a46623980", "sighting--6e1a370a-85a3-418c-917b-629fd523ac02", "sighting--96dd2036-d266-49a9-9789-a6f935407858", "sighting--e852fc89-76c5-419d-a00b-66f9cbb2bbeb", "sighting--775d9bbe-ec26-4f53-8cff-56e5591ba14e", "sighting--f303bb0b-7c17-46bf-a093-b731867aa8c8", "sighting--a2aed0a1-83a1-4b04-a140-34185f1fe5cf", "sighting--614951ae-a38e-4430-b8a5-c3454c6843a7", "sighting--d385bd20-9420-4294-ad85-9e60a8badbdc", "sighting--5a112871-81b5-4714-96b2-4d113041d4d0", "sighting--b930d9e3-d340-4cd3-b235-78e617c193c3", "sighting--b974a28a-2391-4139-9e77-cc4a0a712822", "sighting--6397be45-614b-4153-be56-3f2062b60a6e", "sighting--1481f155-c844-4c0a-8169-ecd176ccf017", "sighting--a389b138-0928-427a-a9a7-dfe5d378ca1f", "sighting--db40145c-b1bb-4637-939d-0686b9e39ccd", "sighting--0554e1bb-5cf9-492c-b8e3-5002f71617e4", "sighting--7eff10ca-d992-4555-a3da-90dc435fe986", "sighting--01ba7e57-2629-4dea-9a48-7cc2b441f2fd", "sighting--49edd14e-0ac9-4ed8-b539-615dee87301c", "sighting--8d1ecd0d-714d-48fd-8384-97ce7667f43a", "sighting--52bcfed2-8ede-407a-92d5-7c1319e80976", "sighting--066757e4-f975-4fc1-9844-44aeae8592a9", "sighting--ba7122fb-d633-4de7-ac64-d5b0839d16ce", "sighting--1da0d534-7bba-4c32-8406-5b88591f9d3a", "sighting--2216cb0e-22f2-447d-9e60-04c13dc1f533", "sighting--46e95223-c73e-45f7-a2a2-cfd907f3c6c9", "sighting--d66dfbc4-ab83-4324-b123-8189ff52b739", "sighting--13b346ac-f722-4ce0-884d-8845139c0ae7", "sighting--f8460b41-5c07-46b8-ace8-97b71124e1f8", "sighting--e9b82156-cc3f-4df1-bacc-6b1a1964d80d", "sighting--71a954ac-822f-44ee-9b1b-5434dbb8983a", "sighting--978c4787-fdac-429a-805e-ef457dd80c28", "sighting--91d8809a-137e-4ab5-b1d0-00e459cd6be2", "sighting--976dbdb1-0f45-4c4d-9a8c-1a4f07c8cc49", "sighting--493a8182-db79-4d9f-8cd7-98b664306632", "sighting--9fe82b66-0655-4712-85e8-edc178e50e8c", "sighting--52cc6bb9-0c83-49a3-a69f-d4fcd1cbb748", "sighting--e159ff97-2a56-4c4b-9206-09ecc3a09813", "sighting--8bbf8f54-2be1-429d-9248-b02f7a453e65", "sighting--3861aad2-8fe1-4c9f-8679-4ca1af47c481", "sighting--0a4d22a6-8661-4d2b-8028-c5d57f4cdc24", "sighting--0049488a-496d-47e5-88f3-fb41c6e4181e", "sighting--044b0120-03d6-4f26-9d0b-f12f6d22f7d4", "sighting--160b1432-94a1-448a-a8c3-6beef6b97b3d", "sighting--5c0441af-46a8-448e-be2a-9ae65736ce57", "sighting--8225d4aa-7ee5-4f8c-9f05-ac392bf29024", "sighting--9ec1f90c-510d-4fd8-84d0-23e385fda303", "sighting--3395d7bf-901c-4105-b5ce-7df5aaea86ed", "sighting--5c5ce61f-2bb7-4f00-982a-aa49bbd8ee85", "sighting--acd2b178-1cb1-4e79-bdad-097ee68862ef", "sighting--c299f5e8-3668-407b-8e01-04a433a26745", "sighting--dcd8a310-b875-4d9c-a069-bf8ef68f8874", "sighting--5352547f-773f-4ff3-aba4-888f680af017", "sighting--c634814a-bdb0-48b6-823e-6dc0d61e52a6", "sighting--06febdf4-15be-4e8b-9524-7415684b7c27", "sighting--12c01dee-1f9c-4fa0-88b0-eee1cf9efa04", "sighting--016b46d4-601b-477b-8474-b183cdc8450b", "sighting--347724d0-2f50-434d-aea2-051a43a6b235", "sighting--6e90dfa8-65a7-4ada-90ac-f02a11afa358", "sighting--9f3ee683-400d-46cc-b2a9-52c5b6011c0b", "sighting--a02a6c29-8154-4ed8-8f8c-c7a1668cd1f4", "sighting--444e7dfc-9b41-4506-9688-9a09dbdf7642", "sighting--eaebde2a-abe5-4f1c-bdb6-77d007671b06", "sighting--a59571b7-1669-460d-949c-010b60d39210", "sighting--f1c01fe3-ddd8-4c99-8e11-9addcccec3b5", "sighting--9dee11eb-9671-4ce0-ba0d-1ec9634758e3", "sighting--528537c7-1ec0-4f4f-a0d1-f6e112063bf9", "sighting--927233bc-b1d7-4840-b990-0f7b4df3f95a", "sighting--f95ab6f8-db94-4472-a346-e676ff61071a", "sighting--5085b988-ba0e-4484-9e1c-f8497ca91a66", "sighting--e2cdbb99-ff83-47fa-a41a-e597a6133c6d", "sighting--4c54e05c-a414-4b6f-873e-f0eee4f2a58e", "sighting--59b75198-da1d-4034-954c-028d6e72364e", "sighting--b8c6fdc3-c15f-4ac5-999a-4a20a4053c4c", "sighting--1c15ea1d-6534-484f-a3a8-2cece86e8d09", "sighting--1fa134c4-7338-4bec-b23b-ddd38cd6de69", "sighting--62317517-6e4b-4a51-b002-aae6498c8bac", "sighting--739791c1-7b0e-437d-9620-2b20469ab8af", "sighting--307b606a-35e3-4317-86c5-3ea75bf7bd32", "sighting--12138919-78a4-4f07-be75-059289fe9692", "sighting--e6bf40d8-c4c5-4793-9b7c-73ceedd3e350", "sighting--efe7c91b-17df-4c8f-bd0c-ce25f004928e", "sighting--0c9c4d9b-1556-4559-b61e-7b133f9a9469", "sighting--f0f89237-f90e-4f9f-8e73-27356f28d916", "sighting--3bc912d0-9876-42fe-b34b-744893fde54e", "sighting--94304c65-4088-42b6-83a3-0813a63f0139", "sighting--beecfb23-aef0-483a-ae78-ec9fecbbacc4", "sighting--735d5d59-22c9-40e8-8c87-c96f283a8677", "sighting--f0f63a02-0fdf-4acc-a053-71368ada0a09", "sighting--4fe052ea-a549-4959-9609-2481004a4304", "sighting--095138ba-1345-4ef1-ac07-723515d6bcb9", "sighting--55c7999b-b459-431c-966a-cc71bcf8300b", "sighting--d973b3b9-35e4-4781-b2ae-838fecab8811", "sighting--ebf4df65-0f88-4e7b-83e8-63ddec5546f0", "sighting--962746a1-8c33-438e-8da3-9af670e330c8", "sighting--df255fa2-90a0-4472-b994-1d1ee04f9b68", "sighting--ed29b013-079d-4649-9c82-c3ff3f3e719e", "sighting--0930dd6e-b407-4708-b4a8-c821f1ce75b9", "sighting--3a4ef64e-6965-452c-8b66-846958e36541", "sighting--b2134757-868c-4441-a103-6465a30e68a2", "sighting--0930e73a-3947-4299-8e7b-f038f4ca6b5b", "sighting--fcac00c6-605e-4075-9f75-e3f94f55aca3", "sighting--6fd40964-a159-49a2-a137-14153cad56bc", "sighting--1a8c522d-d801-4b8d-b6df-1f8dd040f283", "sighting--0c5874cb-c817-4b9f-93aa-e208cab12c67", "sighting--bf3c4b8f-7978-4cc0-9a54-41cde47741d5", "sighting--b121f813-6690-4e48-916c-068f4aa3cf3a", "sighting--9220e4e3-5a17-4561-953f-75e166780e63", "sighting--142ecfb8-8227-4e9e-b5cf-781ec2598a0c", "sighting--f1f1fd5c-490e-4218-9ac5-ac828d1ac784", "sighting--4614a521-f0d4-45a2-8f8c-bb107b552b72", "sighting--d09d0722-18fe-46c1-81be-df980ca95b18", "sighting--7b627f02-cff0-44c7-92d1-94faa6bd32cd", "sighting--63090c87-d615-4a06-bcee-c88b333c7719", "sighting--7360ffe3-3515-4d38-8d40-26cdd6e974f1", "sighting--d637bb4c-38ce-413c-aafb-c9ff894c118b", "sighting--f957805b-d9cc-4aa8-9711-11355b4210e6", "sighting--6ab5d12e-528d-452b-bd5e-08ee238123ae", "sighting--fd1671a1-0d66-4499-8ce3-b867c27b1a82", "sighting--4e64861c-a0f7-4abb-96cd-78f6e230912f", "sighting--9c750103-69a2-41e0-8384-fbbd27c1b221", "sighting--bc9f2535-56e5-41d8-a9cb-bd3efd200d81", "sighting--a51883d4-c5ed-4e5d-a32e-23e1d953ecb0", "sighting--55d16062-a321-4f34-bb92-5417624b9348", "sighting--ecb4ed55-068e-4ff4-a088-fd78405a6812", "sighting--b4d46b68-d555-4989-afeb-4a427449f612", "sighting--f0196b96-7e3e-4361-a86a-a76eabcef0ac", "sighting--783f68d6-848e-4593-9b84-581af98a885a", "sighting--1e3d0895-c5d2-4e1c-95f4-71dd85d22040", "sighting--36e78528-69a9-446b-be38-042f2fcf3c4e", "sighting--92d75454-c190-407f-be7a-a51e8d37925f", "sighting--256b18b0-6efe-48f7-9c1c-aabaf2ee1e5d", "sighting--953bbdca-876f-48f4-ac98-b04d60f380d9", "sighting--591590ba-9d94-4166-9c70-7f8d2973c51d", "sighting--23d6447e-9903-4d40-abd3-05720d374cf2", "sighting--ebd33d03-5513-4163-aabb-355e50e18dbc", "sighting--ef95cbee-a994-4fbf-8733-f7f3a778b0d5", "sighting--f6dd00fa-f542-48b7-972a-e8b8d2439440", "sighting--b80e7240-7316-4c4e-8758-cebf6326a959", "sighting--a2dd6204-de5d-4ea7-a877-581230068ef3", "sighting--e9daaf0d-8cde-47db-ad73-cdc866531ed5", "sighting--00ea18b6-0af4-4afb-ac5d-4e3bfd1996b1", "sighting--8967440e-779a-462b-86a6-bbca2bca6819", "sighting--fc893830-cdf1-4ee7-b346-7a9cd4acff6c", "sighting--30f856b3-37ba-4e9c-9c17-99309c2d0eab", "sighting--8f4aea5b-cfa4-4872-9f5a-80b323a8c533", "sighting--bcd05573-451d-49e1-84ee-b587b2b0d4ea", "sighting--c2575391-9995-44b9-9a8e-cb5b48eac649", "sighting--b0ce271b-c6f8-4c29-ae32-f71df257a9b2", "sighting--8b2231e1-147f-4822-ac45-d2595a66adf8", "sighting--ab478629-3575-4eda-86ce-2fc06601a255", "sighting--e6b70dbe-1f5f-46de-8009-83ac20d062f7", "sighting--c45426cc-c880-4e11-ad4b-14a7b1acc48a", "sighting--3169c28a-575a-476e-805b-4c8f11bef3e7", "sighting--a444532d-58a2-4ccf-84d6-ffedf7fb8e34", "sighting--8976467f-bae1-4d74-9905-5f8f4b822e51", "sighting--0172ffe5-d32a-4642-b400-1b1f34c2808c", "sighting--2cf5de7e-92cc-4c36-a5c4-42047ceaad7a", "sighting--889a5f1c-101d-4de2-9ec9-b9760884cb37", "sighting--ecbcac1e-25a6-4a57-a1ce-fe9d7329fb46", "sighting--e18bb1f6-023e-4e67-873d-97caec7b38e8", "sighting--b482237f-fdce-4fc7-88bc-3b75f7fb1542", "sighting--3693375c-c7ef-4b0c-8d98-e6f1d5218467", "sighting--32d9d56c-be63-405d-98e6-7e6f409e5f53", "sighting--343c76cd-ccae-41d7-970a-1b3d3c408789", "sighting--20dcdfb3-9565-4e8b-98aa-6e2c682de848", "sighting--3a9e2484-0dd4-4850-a9f7-e2c186b66fc0", "sighting--8f10bb69-8080-47ec-a013-a20a347a14c7", "sighting--2b342a3a-1f73-47c2-9858-bb8c2f0fef42", "sighting--88b1dae6-b2d3-4ef8-b1a0-888e4ed72a9c", "sighting--66ccb2f2-d9b7-4a2a-ab86-d33b9a1d1ae0", "sighting--ee5cda0c-d17b-4b46-b63e-6fff30c5cafa", "sighting--cd2a1319-7a2c-437c-9273-39ed44689858", "sighting--d922611f-b2d6-4a98-82c4-613c13b9a86f", "sighting--fcab2b7f-72bc-4887-96e4-90c1de0af9f4", "sighting--e7cae127-21f3-45c4-afa1-d5d00ec4448f", "sighting--7309539a-5aa3-4437-931f-e4e222746111", "sighting--d41e616a-0f50-4f76-806e-5e36440b0021", "sighting--e67f184b-bbb7-4d9d-b018-6b554e231a78", "sighting--133c2131-fc42-40ab-b547-70e1ed12359a", "sighting--ef9b0426-f866-4bde-81b6-c2f7877e0de0", "sighting--8637db0e-8c39-469b-b72e-a7a6f3d35775", "sighting--8901ac4a-6ab8-4b1a-88a8-5d47aa13aa9e", "sighting--216d99dc-dd06-4906-afee-efa63515b924", "sighting--68a09a6f-2900-41ba-8681-d5b17e3a7e90", "sighting--e7210005-c57c-4309-b6bd-008bafad5069", "sighting--ca2dd6d9-e723-4615-8de9-5ff3f689e859", "sighting--fba44f7d-4132-4d0b-a1bd-369c0b83df7d", "sighting--9678bf4b-31c4-4ee7-804b-b5d3907b7fd4", "sighting--10841cc1-2a1f-4284-9218-94679e8e02d4", "sighting--832cec80-2489-4cf6-9d35-cc17cba64932", "sighting--92afc42d-3572-4fd0-b774-5235a5ffed59", "sighting--69cd4be6-31f4-43af-928b-e3e4017643be", "sighting--feb6c984-dc5d-4cd9-8973-214b4bc0d73f", "sighting--7ae090b9-40ee-4cd1-ade1-c930d853d8ba", "sighting--2b76acc9-760d-4251-8b99-7f79f3ac1acf", "sighting--0e8f9d8f-5b54-4c04-b271-86d3fdfc5636", "sighting--6a753353-c171-48a9-bbb7-a1d974bace15", "sighting--ef8cd7af-2268-4054-b57b-dbcff4fcfec3", "sighting--920dffd6-f697-45f9-b208-86b301d4716a", "sighting--d9e399fb-8249-4557-a57f-bcaa2f3dddc9", "sighting--02653f8f-02b5-4086-bea5-984d68219cda", "sighting--6fcdbd9c-71a3-4179-b3b0-a8aea4d71961", "sighting--5ca9667e-e43e-4ca2-a12d-dfb3bedb12f9", "sighting--c4b96e71-a2d2-4929-9f31-251bb9ed3ad1", "sighting--ff59c71a-d685-4e03-bf94-d2794174ab9b", "sighting--b927ab82-fb34-4aa3-8431-df24fd52a95a", "sighting--431b49c0-e66b-419b-b4d4-e2dcdef6ae73", "sighting--e24ce951-f7f7-4880-88d2-b47a3bb2bf10", "sighting--72ae5b00-0b69-4e4e-afe0-2d64872b6e17", "sighting--f6d84b99-24e0-40b8-a295-06721a075ea4", "sighting--1243775d-1531-4e59-b9f8-a7bc402ef949", "sighting--41868ce5-6759-44e6-866a-5ecb37c8e0e6", "sighting--6a63a052-879d-40ed-a11b-c4cb71623142", "sighting--22a127e6-c52d-423b-a4b3-27e260d360df", "sighting--923059cd-7f1a-4c37-978b-2be1e451b325", "sighting--8ec7567c-5b59-4119-874a-bdc604f470a8", "sighting--c18f41af-2c94-4890-90d4-a459cf09a0ed", "sighting--c30c8ecb-c759-4509-9364-463b2fd866f9", "sighting--a87e0160-80ce-4999-b691-5f859d16b973", "sighting--4e7e07d6-5cab-4e97-be7d-e98bf5d4d380", "sighting--c9453ab7-d02b-41d9-ad91-9357d1b5cdbf", "sighting--846a89ed-640b-46f4-baec-d727871c667b", "sighting--b6c06d88-64e5-429e-8dbe-7d2764b57970", "sighting--86755787-000d-416a-b38c-05cc1748a6c2", "sighting--2c7cf2b0-656e-4d20-8c7f-29e8f6565bec", "sighting--3c9ad719-f7e1-4cc6-b0a0-b80894a1f559", "sighting--ef67270f-4514-468a-8aea-b2af80911787", "sighting--8a3a870e-a615-45dc-bf1f-63e0fa9b6f73", "sighting--b18b66d3-d4c3-4128-b9c9-82936bc537df", "sighting--a91f5679-a035-4d36-a8f6-16ec658c173c", "sighting--84be6c58-7113-40d3-a83d-24eb820e5b7d", "sighting--9f9c297a-f418-41af-b6ee-84672653c5ac", "sighting--323ed610-8c9f-42cc-930f-140191b9e7ec", "sighting--a0be033d-3b05-40cf-bd61-a41cd81b079b", "sighting--7326aa9d-2b4b-43b8-be7b-e2884b9bfd5d", "sighting--1c22ee5c-bd11-4217-a8ac-e5ec36510782", "sighting--8d6eb168-988b-4f93-ba0d-2b6c76776420", "sighting--a2005faa-188e-470e-8eae-f647938ad29e", "sighting--631a8eb9-ab5c-47b7-981d-f91b8fc814c2", "sighting--2ce106e8-00b4-422c-84b4-adb0ad5a3c0e", "sighting--378a9dff-e6e8-473e-b0dc-94a7e32fcc2f", "sighting--2dbe7f52-2284-4010-b8a0-e96df5fbf7e6", "sighting--4036a7b3-3c31-4785-b3bb-8eaf5f64f650", "sighting--48b41bc9-4ec2-4387-aff2-a4b9e868951c", "sighting--a192eb10-3f7c-4363-b923-067e46b220d8", "sighting--3ed73200-49e8-463e-8502-146b4110d918", "sighting--71baa1d1-c49c-47ec-8027-0c599e2c4308", "sighting--480689da-00fa-4a9d-be5e-b18553b2afc1", "sighting--282c73c2-266d-462e-accb-35a8d6b0c6fe", "sighting--d5814e21-9487-499f-8a92-1e6d8a1c20bc", "sighting--15f3a777-ec93-4cbd-be3e-256463415ad2", "sighting--095d95a3-3c69-4210-ae0f-a1200fab3e54", "sighting--100f4a50-a6f3-483c-8e70-269e06cc8153", "sighting--23bcc260-0f47-4a00-b660-8a3adc9bc8af", "sighting--367bc6a9-5743-44bf-8e67-9455eeffc4a9", "sighting--0854087a-51af-4b5f-84a4-200b95e58ffa", "sighting--e903537f-08d8-4a21-8d2e-8f5ef2a707f6", "sighting--999c2933-c656-4809-bd17-e9016e94fbe9", "sighting--557fbf54-c01f-4fcf-a171-e274448b977e", "sighting--db17a016-dfc4-42ae-92c4-e1fae2d23c44", "sighting--891b3803-83ad-48be-ab02-a09290158704", "sighting--84861c33-f4ef-4f21-a910-89820f3dcac2", "sighting--733133c8-3bbb-4d82-8614-b26b815f5ad7", "sighting--0ea5ac61-07ca-44c6-9370-1f6e8fddae78", "sighting--f3cf2701-81bc-4e19-8f39-d84046580146", "sighting--2a29f19e-5465-4e71-a256-0982b153c54e", "sighting--5f3cf200-152b-49ed-868f-7c2cb83fa5a5", "sighting--b01fd050-a968-41a4-b4ef-66f973088ddc", "sighting--d12b5dce-8d21-497c-9a52-6eb281b12d8b", "sighting--58709ed0-8ea2-4ccc-9c8a-faa6411927ee", "sighting--7d6566ba-6536-41ca-9c96-7ada8a5ed4c8", "sighting--11a337b4-f309-46a7-8e58-2b3214328219", "sighting--3f933ccf-c01c-4f60-a959-6facb6d80389", "sighting--cce68e17-6bb4-4c48-a0af-984ae674de5b", "sighting--7e1a745d-c83f-4e02-a9aa-08616e3f5845", "sighting--420a5398-cf75-40a2-b790-73befc87a5a2", "sighting--184ff6bb-5bfd-40a8-bd56-3cae73fe5a45", "sighting--76329b61-d50a-4aed-b848-7a9f50ad8ac5", "sighting--fd163937-c7be-4927-aa5e-c9894a56be85", "sighting--46606343-fc4d-4f5c-9807-927519fdcef4", "sighting--df45f92e-a419-4abd-ba24-7b4e793a4159", "sighting--e17faebf-533e-4919-adb0-4de21ceb93d8", "sighting--bf19f8a2-9592-4591-b8a4-4d34cb52cbf4", "sighting--a57cdc8f-50ac-492d-84d8-d5a4557aea9a", "sighting--7b144f77-706f-4135-9379-66c2d634272b", "sighting--cc574a80-0ffe-44a5-9b49-398d940bf0b9", "sighting--92b08426-70cc-4dae-a19b-09ff53d2c9bd", "sighting--d48e52e2-55a6-4dcb-9368-762f5ac25f50", "sighting--cb021888-aa57-46e2-8cc5-58fcb56e98c1", "sighting--a2231e05-9d80-4dcd-99a9-3c4727a79c6d", "sighting--d0340e7f-f8bc-4d4f-84a5-85eba15e8994", "sighting--6f93e955-dd3e-48d8-a61b-ee5ac5ade0df", "sighting--162c3a14-d42f-41d1-8379-71303c6b52ea", "sighting--4bd8459c-ac36-4df6-b2da-d4bf816b8154", "sighting--214831a1-49a9-4cfa-85de-81552dc7dc82", "sighting--864c53c1-9300-4411-92fd-910754219e9a", "sighting--aeee9175-e466-4112-ab40-215274a6a0ba", "sighting--05f002fc-88b7-4ad8-ba4f-f21a8d4f73b9", "sighting--f7ed7c5f-198c-4c60-a456-ef112ca6709e", "sighting--3c6551ac-d8b8-41b6-8518-8110aedd1890", "sighting--46ae62bf-64d0-4c21-8e82-8ba596f908d5", "sighting--cefedf80-c800-4ec7-a6f9-249da14b004a", "sighting--7ff51829-ea1e-46e5-bfb4-13d9fb41d8eb", "sighting--f045ef53-c0f6-46c1-94d5-d63afe31fe8f", "sighting--aadd9f15-d5ff-4d96-a691-23ad7c8f4b9f", "sighting--6e903d7f-10e3-49eb-a9f0-b7200d0a969d", "sighting--0517cede-205f-4ab9-b63a-cde3c850360d", "sighting--8e06f117-6d4b-4bc5-9e58-53b0ccebb812", "sighting--d9570c1e-90f9-44a3-a1b8-8cd3b8827ef1", "sighting--6fb0a948-3aca-4fb2-9081-c155ba0d189b", "sighting--35b35af8-0cf3-441a-a2d0-74f1d93edbaf", "sighting--a29ee59d-8b57-4d68-b793-4fbf4e46bceb", "sighting--3fa36452-4629-43cf-9626-f59af4514529", "sighting--95cb7b74-97f7-404e-8393-ac338d502700", "sighting--629b0839-fa99-4dee-858a-388a37624a91", "sighting--4f7eb167-8dfc-4d28-bd22-85690e21ac97", "sighting--137bac5c-620b-47ed-897e-f3532a863f47", "sighting--70ad5a6b-014d-4389-9d3c-e67807fee57a", "sighting--5ccfae47-0fc1-43fc-b62a-96b887cacee2", "sighting--e18b1225-3fa2-4dc2-bda1-32fd99be2b99", "sighting--059a6cec-3951-42fb-8e96-e3a437c3b768", "sighting--69d0eb59-9ca9-4290-9713-6993aaf053b6", "sighting--951c396d-0e97-4549-93e6-16cf776d372f", "sighting--afda620c-e761-4fe1-bbc0-24b0ff581558", "sighting--d8259e64-2360-46ae-8348-460bb5e85785", "sighting--11d840b3-4ade-4b12-b48f-9bd71e785eba", "sighting--cb6ad943-0b3d-4598-8025-cae6be024505", "sighting--920d11fc-d6c1-4c96-96ed-adf3bdb8acd6", "sighting--dc9b6d7c-0de7-4a04-b7fa-da4236b010b3", "sighting--a503a9b9-6fdb-4aa7-872e-236e6e5bbbd1", "sighting--59ef014c-43a9-400a-8656-b7d7127cdb5f", "sighting--39f05a64-4163-425e-a07b-4dfb1160e545", "sighting--8dfa5009-20eb-4a54-b776-f4971b50774b", "sighting--2318ebc4-8942-4b84-99ca-d3b3f08d3b8f", "sighting--7340f503-a325-4973-bf0f-6bc0adf13736", "sighting--515818b3-4dd6-4e5f-855d-03f13bd227b6", "sighting--dfaba2fa-3784-49ab-aaa9-31d3fe368379", "sighting--a7d4963c-1c09-4c91-b2d3-81fc5a823022", "sighting--b380c40a-5c60-482c-9b70-1abe6663a83e", "sighting--e042fc70-11cb-4b94-af6c-ae3023d538ea", "sighting--689f730d-3523-46a4-ab7b-9880b9e0a295", "sighting--003c35b2-404a-4d77-aa9a-5592a397107d", "sighting--84ad177f-b39f-4a8e-bea9-e31c980e42cd", "sighting--cedb89b5-40ae-4792-b717-9f39f4843d0e", "sighting--3987c37a-cf47-4548-aa75-ba88e234318f", "sighting--4483dcb9-4241-4b97-9754-1284f1a4dddd", "sighting--081a6df7-8d0e-43b4-bd10-099eaf2d3bac", "sighting--9ab8fdff-55e0-4543-8cdd-18d8065aecd9", "sighting--dd3ca399-4f17-46f9-bacf-f6bdce475f08", "sighting--2eec36eb-84dd-4856-9c85-056cb5dc719f", "sighting--a05c3250-ff5e-4db0-bfbb-49361e1a3655", "sighting--b80b57f3-09bc-4e3c-9663-4c22d655696d", "sighting--0e59134f-a35e-4c7c-be63-6e418376b557", "sighting--a9720dc3-20b5-4a70-9755-ab415df093eb", "sighting--1588f092-9894-4d4c-bdcc-93c4e0256833", "sighting--fe0ca531-f3af-4786-8eee-2882db3a9d14", "sighting--14bb1dd8-095e-4c7c-a144-61af7e5df029", "sighting--4d7befd0-2ac5-43de-88f3-ee7559022d54", "sighting--d7ab268b-c73d-4cb8-b190-35d2aa4222a3", "sighting--91111d88-b209-48ce-90ee-d191abb51b9c", "sighting--47aa931a-1505-43d8-8c65-dba49adc8e21", "sighting--e9bb889d-20c8-4ca4-8312-c24513b9a267", "sighting--b0ca855a-45a8-4098-b636-297057b9f551", "sighting--d2d9209c-fbe6-478e-91f2-d345db36d0da", "sighting--4d4bfb7e-9571-488e-bc77-30a8268310d4", "sighting--c076c787-7593-424e-824d-82da54cee5a3", "sighting--715658ab-f27d-4386-b003-413e9af6c87c", "sighting--e1e2c5c7-c56a-45dd-b659-f4d03c56cc95", "sighting--9ef06aea-2d95-46ab-b0d4-3195fe4a0a1d", "sighting--d5955345-36cf-4833-9564-d9c332c8ea60", "sighting--142cb413-3b93-4951-b2d0-b8d724250df3", "sighting--44c65086-4568-4770-bbfc-683f40433104", "sighting--9b19ae05-7f25-4445-a218-b1a8db25ca9c", "sighting--c0957334-c94e-4939-ac66-89fa72954093", "sighting--218033d9-e836-4fad-b93a-bbcd4e9a323b", "sighting--ee5fe619-e28a-4294-9103-637cb1c96736", "sighting--f3630bc9-bc4a-486e-bdda-9ef097960fcd", "sighting--5f14956d-6595-4ccb-8fbb-2d906e069c6d", "sighting--b1a5729d-a4bd-48fc-a705-1550380dbb23", "sighting--21fd1541-fcb4-4e5f-8de1-e39749f8c0eb", "sighting--a2123131-a32c-40e7-bc64-ac0261fc5c36", "sighting--9a030a9f-b4f8-40e5-b92a-ca05f223413a", "sighting--89921f40-4d72-4238-8a97-4d2a0ea24619", "sighting--91aaaf2c-c115-40a1-a8c3-c7863462412d", "sighting--1f849884-5701-4eec-97fc-0d11d5a9a647", "sighting--7525e9d7-9ceb-4686-a49c-c863183683d0", "sighting--a0bbdc0d-06ea-4ce6-a368-fad3b802bd6f", "sighting--532fc3c3-29c4-4ff5-8dd8-e82151f50785", "sighting--9fb4e76e-f6f8-441e-ad35-c46fe723ef19", "sighting--034b056b-3a15-4969-8c00-8b61701b81ef", "sighting--6e09aeda-ac8d-4e1a-aa87-4e55324e710c", "sighting--5145bf5f-9929-4312-a978-b1a3a3eb5eb2", "sighting--dc6e9d01-b6be-459e-91c3-aec69ab407d6", "sighting--0e938c2e-f488-4019-9c74-10e3cc57183d", "sighting--1297683f-d38f-4db5-b07b-54eab49d2ff2", "sighting--d554ba27-46b3-4599-888b-af4386c3bdf0", "sighting--95cbb387-d162-4767-8d96-d52038886e3b", "sighting--89fac597-81a9-4497-b1ae-6a63b58f9d92", "sighting--b1d14da6-1976-4c52-875d-5e00a71b9f10", "sighting--96a11705-bc1f-49f5-9e3a-9ca65c81cc60", "sighting--21e7a029-8fab-417a-a669-23580c339c41", "sighting--b1d20386-80a6-46bd-b41c-536cca0767a0", "sighting--ec31db63-fd53-49a9-babd-f6010e8da491", "sighting--247b6887-7b5a-455b-a6ae-ba622e8842f4", "sighting--573d6dd1-ab7c-4596-b512-adf807e6b0ee", "sighting--6d94aa9a-572b-4ac4-b177-567df55d86a5", "sighting--ae8d691f-c35f-4899-ba7a-bd85f1957a70", "sighting--2e04b50c-e722-49f6-9f9d-32a11d39ce79", "sighting--b64157b1-4fa9-4c1e-90de-e9577f83dc9f", "sighting--ba35ab31-839b-473a-ba70-68076d032e50", "sighting--11647ac0-0ef0-4c85-9399-a1423d565dc9", "sighting--3ca87caa-43b2-4db3-a5c9-e9cf10302de9", "sighting--28ba23ff-7c44-4351-84d1-ad0433c2f56c", "sighting--5990b8c7-d0dc-4446-b64f-4767328884e4", "sighting--38d4b128-b580-46fd-991a-ba96da1a2784", "sighting--8fca58c0-d923-4cd4-85e7-caa472340d42", "sighting--dd57fbda-da5f-4c8f-9d1e-3cbe82bbb696", "sighting--1fdc9242-10d0-4e8e-a326-44a88932019d", "sighting--787e9107-f1d3-49db-b8d2-2328c170f33b", "sighting--caf16c86-cc47-4764-8ebd-e4ca9bdb6856", "sighting--f95d94d0-bd75-4a1c-aadb-ea0d8c262c4c", "sighting--85c0258b-a791-437f-966a-3904d5202ea1", "sighting--f987d352-567b-424e-be16-5de1771896e2", "sighting--e4ef96e1-bc9a-45ff-b7f6-ee88b6d8fb0d", "sighting--b3ca8fb2-f68b-4b45-b969-9cdc5b096213", "sighting--8676a5a6-6306-49cc-baec-64aa0e569293", "sighting--754c8322-f568-4518-9e5d-d07a4b051995", "sighting--8684e869-aace-4206-9763-093196810d73", "sighting--ead384d9-46e9-41ba-a8b5-433cce729107", "sighting--559f87bb-050b-4c49-b581-05c8af9694ad", "sighting--900f4f60-bec8-40c9-a710-9ffa9c44d381", "sighting--869b0755-d4f9-4b53-a597-d057f6958e39", "sighting--7b150e00-bb8c-4952-b218-8d0f0417bac9", "sighting--6260e35c-4378-42d2-8d41-61404dd9b707", "sighting--05d9336a-8789-4be2-ba5e-5cfdbda73357", "sighting--c52bac1e-9c04-4cd1-84a5-26831c97fee5", "sighting--74d5c593-e92a-439e-b0f1-e5483902c210", "sighting--584e021e-f965-4aef-9a59-87e6921250d5", "sighting--8abcf455-bc06-4c4e-b1ba-9e719a45543f", "sighting--de7a3e9e-33dc-40d8-828f-5e5661432eed", "sighting--220f8c81-db19-49a8-8090-f98f4899379f", "sighting--0823c690-de21-4a4b-b5c5-a465bb9ea3ff", "sighting--76c0139d-6bdc-411d-9295-cab7413d3c5f", "sighting--9e102867-f654-46e6-aab5-cd514f61ccbb", "sighting--8afe8df6-29fa-4eeb-abe9-674a9838f322", "sighting--7c9baee0-1200-4791-8103-a27571efcb8b", "sighting--63df7c97-be9b-4622-bcc5-fc840f18f7e7", "sighting--8f9c8f2e-fea6-47b8-b263-fc5361223903", "sighting--534143be-4828-4f92-b5be-1ba5a8c87eab", "sighting--4f08811e-cbd8-434d-8f1b-f5cc80660025", "sighting--51e96516-a8db-46d5-a537-fd2d03df5ba1", "sighting--7a11c24b-b44c-408b-a923-ef5f44e75f50", "sighting--12071d23-99e2-41bc-b0d2-fb426e37fa02", "sighting--667ac42b-6008-4889-ae32-84c6fa8d41e1", "sighting--b01f2e95-9245-44ee-b1de-933f1525bc22", "sighting--803c7c47-bb88-4a07-a681-cee763f30835", "sighting--2520a00c-5631-4406-9a0f-0a3c0e53a2ee", "sighting--1379236e-e16c-4710-95b8-27337467f5c4", "sighting--68bdf245-28af-4cee-8948-d6d4c76c89a8", "sighting--7bc99da4-7db7-46f1-a205-bd8a9cfe6d5a", "sighting--ad43a75b-912e-4b9f-8692-8316748ce8b9", "sighting--4c860443-2c58-4974-ba84-cbad184910bf", "sighting--b462b0f2-12e9-4b7d-b117-9576d67c35c6", "sighting--7269f761-dc0a-4930-bc2b-7fe21d4b13ad", "sighting--43f51e57-55ef-44fd-97f0-2c6af6635890", "sighting--963bd7c9-ea10-4f2b-9c93-f54b0d17ddf3", "sighting--def8bea3-2fe0-4a74-9a2a-59b2daa796ec", "sighting--5b114c5d-b562-4b9f-afdc-77259a09d430", "sighting--7498e20e-63d9-4d0c-9619-bb7062a6e7da", "sighting--46b9e65e-44dc-4b1f-8827-7e4811112371", "sighting--129a662b-0fed-451b-87d9-d87648fc2393", "sighting--968c9c2e-22de-45df-8a4f-98be8a4455f0", "sighting--d542952a-7334-43ee-b494-ca6bffddbe39", "sighting--bee5a9e7-fdcd-4424-96a7-a88b0a3b0973", "sighting--796d7a26-978f-45ec-a561-6d958900f1a2", "sighting--f11e55bf-0130-43e9-8f9b-a548accbf070", "sighting--547421e8-53fe-4aaf-97e6-abb86c125cfd", "sighting--fc6c6918-c598-4ada-bedb-6f3052cc5cb9", "sighting--39de2876-af9f-431e-9c8f-7c8662cb3e59", "sighting--af76b385-de30-4291-9c8b-f3c98bbcf756", "sighting--c7d82ffa-7713-4069-9db9-a3e63c09b9b5", "sighting--a711bc90-9902-4dc7-bba2-0d3025cf4686", "sighting--b237773b-565a-4c28-906c-6cd2f4938d82", "sighting--0d4a56d2-c3b5-4bdd-b73e-862b68efbbfc", "sighting--90cffa69-2ef4-4c64-a0f3-a882e1742f38", "sighting--4fa60fb9-1ee3-46f0-b229-b56207bbd31b", "sighting--ace5d8dd-8962-42cc-ab4a-98fe3c4c8ed6", "sighting--b9c0c74a-d002-4d86-8346-2318c7fd2658", "sighting--54757243-d494-40e8-9b37-04b10f055732", "sighting--7240764f-c78d-4f53-8bb0-11eb7ef814d2", "sighting--51789484-1223-4fd0-9a5e-c416e72fafe2", "sighting--c5ad6c83-e853-4413-a93b-1ddf276df11f", "sighting--21759b64-0a56-4b70-be07-2e85470f6632", "sighting--4a05eb2a-2a2c-4935-9eb9-3ba1e9ed2c77", "sighting--8695be06-5575-45bc-9a6b-affaf254f9bb", "sighting--7a5228b0-2615-4a08-9810-a6e7560839ff", "sighting--85a07734-3206-4357-90ac-7ea3a516fb66", "sighting--e9f822a9-bbe5-4f4d-9bb9-33c0f8dfb1f5", "sighting--502c6c7f-0f5c-43eb-a05d-a283fd0e6ca3", "sighting--2a088734-4a7a-4663-accc-63568f6c5e7c", "sighting--664a1f31-c7ce-4f5f-a6ea-842dac8e0201", "sighting--623d1496-5a65-4035-b903-8febff833899", "sighting--99c44d1b-de0c-4bbd-839a-d83e80fa6d14", "sighting--4fae018c-0e33-41ee-b727-467982766bbf", "sighting--abb3831f-d1d9-4fa1-a13e-90a67a52f84b", "sighting--f9c49970-f46f-4814-8474-474522ea3c97", "sighting--5a343edc-a185-4774-8bf3-41eba9af5a00", "sighting--016eeaea-d998-4f35-a221-fb003b18a7fc", "sighting--6487d854-d33f-4bec-80e6-ce7d6a986032", "sighting--7ef57176-a661-44f8-bbe5-2a68b7dd9cb5", "sighting--404ca126-3a1e-4246-8a59-cb9ab0fa9dbf", "sighting--c1d517b6-b60b-475c-8bc9-26fd0414b91a", "sighting--119a536e-3335-4f5f-8e98-3f7f67e8aa08", "sighting--7ca1694a-ed2b-4033-83ec-044e35334580", "sighting--474093a9-8697-443f-a059-b6ac3a2e5a9c", "sighting--5b49d12a-e137-4e1a-a743-a12784e10f65", "sighting--106eb9cf-788b-4ee9-b14b-9cf69f897024", "sighting--fadd56ac-f925-486e-a3ec-854154fb3095", "sighting--b3adbb95-df0c-473c-ad46-f5135194d780", "sighting--290e8312-42be-4616-b151-eb01be02f8b4", "sighting--36a8fcbb-2820-453b-91dd-9683258c579c", "sighting--f7217bab-069c-4431-b4c1-34c948e996c2", "sighting--34f32574-dfb0-445a-ab50-e5ad2f62ff69", "sighting--52c4c8fb-19ed-45cf-b455-977e13a8155e", "sighting--03822de1-746d-407c-b81d-0143c4631229", "sighting--3bf0b6fc-a606-4727-8bca-8a643701c9ab", "sighting--fd1098d7-f214-4b93-a092-6ab8c9a9fa98", "sighting--73ced723-da83-43b9-b13e-5af40dd96bc2", "sighting--d322bcf1-5b16-468c-89b1-d6c5ecd8afe0", "sighting--74683429-7840-4e4f-ba83-e7de9ae0c571", "sighting--74a0c413-0e4b-457c-bd86-29e6c1806cfb", "sighting--bc6cc659-d360-41d2-b9e0-a3bd9635c948", "sighting--fbbcee4c-8509-443c-9135-ec7c8cc37aa5", "sighting--d7bbba13-b952-496d-ab12-87bd120897c5", "sighting--919e2bc3-ee54-4f43-992f-48afd518dd7b", "sighting--8ff35d25-bacd-4c36-bdc7-abeb9083e3dc", "sighting--dfca3c5e-2769-4bbe-a6a0-dfa7e41bb993", "sighting--742f95ed-deb2-463b-9181-8f8f2656d593", "sighting--ef36ff5d-a80b-413c-9e84-518c74a35fe7", "sighting--5313a0a1-08c0-4512-b511-5387ca40695a", "sighting--72821166-cfa5-428b-b822-49afd465c16d", "sighting--9f4fd474-82ac-4b5b-b972-5bebabb70d1b", "sighting--100a1b26-6067-41be-bb18-ecc444a9aaa9", "sighting--0fb0500c-7cc4-4147-8d58-5b74186a4cbf", "sighting--3fa4ecee-9157-4be9-966d-79f1640afda0", "sighting--f47982e3-921a-4726-8a3d-66cb8efc45ef", "sighting--eec0153b-46ab-4690-a08b-ef83f08e086e", "sighting--92c0a395-8908-4771-b3ae-ce827a77689c", "sighting--3080af71-5b65-40f8-8a08-ed69c51e058a", "sighting--a14f18d5-1cf3-4379-a4a3-e8ac188cecb0", "sighting--5d5c4c29-aab6-4fd6-9570-6526ab87c52d", "sighting--8b5a31ba-046d-4750-96cd-b36dd38c0dd4", "sighting--46c58ab7-cdfb-43c0-a652-9dd1cfc90a2a", "sighting--b26c8180-84ab-4c7f-9b78-303aa74ab7ae", "sighting--f2e9f1af-6523-422a-9bb9-9ff713269cb9", "sighting--580cb92d-1741-488c-9b78-babbb3c2aec7", "sighting--acc20247-a259-41b1-8b21-5e1d61088194", "sighting--23e65419-ce77-4608-ad99-237375f5b36b", "sighting--21eb6db8-b818-438d-b5cc-7f5ce1e5ea01", "sighting--0c4c5bdd-c523-498f-bf28-85b315c52f18", "sighting--4e6f9d7c-7f16-4cff-bb25-bcd4425b382f", "sighting--43756b5f-9312-4990-b19a-9f929d05b136", "sighting--19330070-cdaf-47f6-b331-bc2c6eedf8b4", "sighting--d4c31607-b7f2-4862-8080-55376f0173bd", "sighting--6e8e4d2a-3e1a-4475-8897-7360c45ceeb2", "sighting--48d29d40-36ed-410f-bbef-e1d9e5af717b", "sighting--a849e4fd-ffd5-4021-9dec-feb9dc962cc0", "sighting--4840c600-3e5b-4caa-8848-a931caec5a9c", "sighting--9987e39b-09a6-4171-a481-8c1b49e7f780", "sighting--a1de5c31-cdc6-465e-8865-d13231c6d957", "sighting--d3f27ab1-b202-491b-9e77-eb239900b5a3", "sighting--a75a210c-27a1-44b4-ba01-d68bfb1f2442", "sighting--3fef47c3-7500-4f69-bd39-57993e4acc14", "sighting--519443fc-250f-4519-9c88-2b507a6d134e", "sighting--b9f92081-74b1-472c-bdd0-467c6861b456", "sighting--dc8255a7-aea9-47cf-9cd9-46a28d076f88", "sighting--3edfc23a-234d-4e7a-b191-aa64364beb90", "sighting--af0551cd-3885-4888-b1fe-b1d74d24fd5c", "sighting--e56746fa-7c88-462b-a744-22bcf9a6f429", "sighting--e98d25bb-e738-4fe9-af18-a3ae6f2963d5", "sighting--7dc07c5b-3dac-4ce9-9359-b0fb83d882d8", "sighting--2b4dd32f-377f-4ea3-8574-ed0a55c1b24b", "sighting--cf913ae9-e222-4bc2-a0bf-60c5846deb08", "sighting--62924aa6-2ad7-4221-ac20-dd792789221b", "sighting--8a58dc4b-538b-4437-bd35-e95e0de04a70", "sighting--487b124d-1d94-4299-bf30-0b4d1a5e7327", "sighting--3c4eadf5-baac-49af-8a23-de1c94f9c4c3", "sighting--732f8b31-93f1-41e1-8a1b-39c195044d80", "sighting--b3d23c83-4feb-4aa2-a0d0-cd673896185f", "sighting--68570bf7-c728-4965-b19b-90d58f552c62", "sighting--7046e9e3-600a-413c-9c82-71ff08e4c31b", "sighting--dc042006-25c9-419b-b753-2e5a51ba1edb", "sighting--5b1a8932-b3a7-4f42-a2bf-5b3fa4a4b013", "sighting--f3898b3f-b897-4ec3-b5fb-3034fc386ad7", "sighting--1ced5c0f-981a-4942-a3df-1ed48d873378", "sighting--89b3aca8-3180-4f9d-b9c7-a230c18bdf10", "sighting--945e0497-e9db-4aed-84db-477172a5fc92", "sighting--019d844b-3e16-4948-a710-127650c1e773", "sighting--57a292cb-de00-4506-aa64-804e02c2e588", "sighting--6444ad86-72f3-410c-88e9-99b4837c2304", "sighting--3a95ecb7-6296-4fad-80ea-e4718eb75a95", "sighting--e7f467bc-bdbe-43ac-8c6c-d7d01903d44c", "sighting--154c6af1-c148-41d6-a276-3098a3d6fba7", "sighting--37cfb4a2-e3c3-4da9-b45c-9c11e5f369d6", "sighting--04486f30-d556-4d29-aa34-b2add30b4eb4", "sighting--6cc8d5f4-c879-4184-a30d-40ee4aa4531d", "sighting--5a64ed51-772d-4970-9373-68a5e485a891", "sighting--e737cf86-68ee-4555-ab12-c50c58625bb1", "sighting--d39706ec-562a-47f3-9cab-3b846a312e58", "sighting--28ecc3e9-c55d-4f9d-975e-529e167e7c0d", "sighting--c5d21a37-1619-44a7-aee1-5f86ecac2da7", "sighting--ba08efa4-faac-4679-8d03-a1fe610b7bca", "sighting--be4aa2ef-200a-415f-b085-64dea1837630", "sighting--957b1604-fbdb-4d4c-ae05-f775f68fd1d1", "sighting--dcacd14b-3d8a-4e32-a9d3-be195aadd107", "sighting--1138bfd9-b4e9-413d-9d84-119d48e1f8a1", "sighting--230b7281-2270-44b3-aac6-55516bf7edfb", "sighting--2c2363a4-ed16-41cd-88b5-282bf02e91d8", "sighting--5a6406e1-096c-4887-b8f0-cf58b9b54a04", "sighting--2933772e-f83e-41bb-af35-6ecc6019dee4", "sighting--a579dac7-22c4-4628-8b95-9d000651b65f", "sighting--e60a2835-8633-4158-93ea-c4979cab1c3f", "sighting--08422354-fdbc-4cf6-ab9c-0b7994e80cc3", "sighting--ad51d3f6-ffce-4536-adf7-a34f627f9ab6", "sighting--56a56e9e-5191-4ee7-962c-5a8ab264062e", "sighting--f1fe826e-57aa-41cd-a210-66b3e0e98126", "sighting--e693bebb-69e5-40bf-ae1b-ec2971b65f55", "sighting--41b38a82-c391-437a-9838-8661bb2aa6e6", "sighting--78ce1bf5-dae5-4eb5-a6a9-19ae9729864e", "sighting--b69b3bbc-e39a-4150-94ed-748432c8f110", "sighting--2cdc0e7d-07e3-4001-aaf2-458fc3577ab0", "sighting--27f02757-e4de-4b7a-8d4a-8987ffae4dc6", "sighting--95caa086-893a-44df-b3c1-322488c6bfd9", "sighting--372e05d2-dd38-4abd-891a-46c11f65fa80", "sighting--b54d9101-146e-4c4e-bbd1-103dbf1c0610", "sighting--85282fa9-a3ac-426a-8adc-ca67892392d5", "sighting--87b30d85-1d98-4210-88a6-e793f2e87e07", "sighting--117ae12d-1404-46e3-b6ba-c2d3bbfb8735", "sighting--c685afdb-24a2-4230-a10b-717d9f39c0f3", "sighting--791063d4-78e8-4163-97a5-aaac2c32f68f", "sighting--bc7deef1-8d4f-44f7-aea1-d90d1e801159", "sighting--d643dd08-e952-4b72-8a5e-b59c069161be", "sighting--8b1fadec-b6a9-47b7-a4a5-030e3032f9be", "sighting--952c758f-f037-4bd0-b5bf-f944b38466be", "sighting--800e0ed7-23fb-4eb2-ba18-e805cf1f27e6", "sighting--5ef752d3-75da-444d-8455-e063bb889ea8", "sighting--24d8defd-7b59-42c5-9082-aa7003ebebcd", "sighting--234ad61a-bfc0-4cf2-bd56-371465156911", "sighting--c37bdac0-5efe-4667-85e7-136ec5648c74", "sighting--a4045db7-92ef-43fa-b0b3-f8dfc663e4d6", "sighting--bbac8d80-2d36-436f-a59e-e34e1a46fd48", "sighting--38d1f785-eedc-44c1-95e4-a54df6d2ecbd", "sighting--162ad74b-8dea-4b92-87ad-12248703f672", "sighting--4e2bbd4d-44a2-40f9-a6dd-268d32d37e0a", "sighting--c0340e9e-53c6-4040-9eab-e74cbaded713", "sighting--5e06ad1d-a51c-4b03-9bbe-f20b70163837", "sighting--3f40425c-ca54-492d-8d0a-7d3149f77d1e", "sighting--3eca275f-28d4-49ac-806f-42d3cff1b9f8", "sighting--8377d2b4-eca4-4168-91ff-cf66af240424", "sighting--2e1c0764-70e0-4956-93ae-f1ffdfe0d3a7", "sighting--f58d136a-b960-47e7-bc61-b26a78f05ef4", "sighting--7f632a78-4964-4a71-af9b-549456c065d3", "sighting--192c8458-df9f-4633-97eb-e3bbe22ce14f", "sighting--b43139e0-e7ae-4ca8-a8c3-427fdf425841", "sighting--b2af7f97-51e2-4e09-9804-6c8310b2ef07", "sighting--3477c9c7-cf30-42a0-a071-c6ac9ee30316", "sighting--9e6ea698-f5e0-4b65-89bd-adde968be2a9", "sighting--f9b970c0-786b-48a1-bd0b-ca992552992c", "sighting--7be5a079-3092-4103-b05f-0dee48b6bab2", "sighting--9a683fb0-a7dc-417f-b32d-18d985657068", "sighting--4a926752-d216-46a2-b374-f031640c6c05", "sighting--236f9558-60de-4bea-ad2b-1c627de0b307", "sighting--4df5fce2-1fa2-4736-8e60-f87eeb151986", "sighting--0f1d4501-0887-4a49-94b4-054845e1acc8", "sighting--873d45b6-69b1-4986-b490-b74b9782177c", "sighting--1fbbd02f-f79a-4405-915c-79635007f8f3", "sighting--7c837a68-e40a-4eec-bc76-2f377680ec3e", "sighting--9d048f07-abc3-4044-a25c-69756a6fc67e", "sighting--c4d1e05b-6f19-4bb6-8a97-9a6d93b4e77b", "sighting--f98541da-2676-4af3-84a3-5cc6b1adbfc0", "sighting--fae42175-9838-4c67-b30c-c5cdaed0c774", "sighting--2de1dba0-3c4f-4a69-a941-4a83ac3f4714", "sighting--62cef9d7-9b8b-4dc0-99ee-6b4d3e073303", "sighting--364c6d19-7e2d-452b-9005-29c792e83a38", "sighting--5531d402-df07-47e2-9b1c-795b97fbbf2f", "sighting--c81bef16-bd33-4b82-a17e-015a665b0d2d", "sighting--8234e511-4e62-4524-be63-7d66395512bf", "sighting--f177d689-2aaf-4feb-b536-4c59aa12bff8", "sighting--28bcaa83-046e-4f2b-965a-dc3236bb30ea", "sighting--be8056b4-1567-48ae-b661-ebc24f87bf61", "sighting--18df4b06-c6ff-484e-a4c9-e1d725e80e59", "sighting--d4cb7ee7-1ed2-43db-88a7-59bd6b54eed2", "sighting--1ee02f35-606b-4d62-81da-9fc629a4bfe1", "sighting--52aed5d1-0ba3-4f2c-9f5c-fb732fdc6f12", "sighting--2a3cdd62-3f51-4bbe-a617-dee6e65cb0e3", "sighting--9b99193f-f00b-465c-b8b7-5e97c7019545", "sighting--66740e3a-8296-4fff-9f27-448851d29371", "sighting--80743d6b-d204-41ea-b3d2-810e8c6266d9", "sighting--1de611ee-787e-4391-a3f2-fdfe7400e03c", "sighting--46718506-492b-47ae-beba-5775d8429ad2", "sighting--afab2237-a4a7-4057-b76e-31fd292d23ca", "sighting--238f4a8d-cda0-4a0a-9bf3-bf01a9152240", "sighting--21529799-503f-4c06-a41e-9ad538cc9b00", "sighting--207f9657-1140-4fa1-8b8e-560812dd4873", "sighting--cb95bec2-a873-4000-b76e-1596dfaf5fff", "sighting--bd8bd904-60a3-4490-8295-6ba97783d3e8", "sighting--92518ea4-b8a7-4623-a878-53b03ca16f38", "sighting--50a814c1-5d28-4542-96d2-3571ff1d850a", "sighting--393ae956-9b83-4859-bb43-870a7bc97ae4", "sighting--c4762063-a44f-4da6-9f08-c03f9097dea3", "sighting--38c162b3-e0da-40a8-a5df-4db129ef2be4", "sighting--ebc425aa-1b8b-4d2e-abc1-4e8318d250b0", "sighting--27661ef1-5346-445c-8edf-faf00b2fb073", "sighting--c09ae4e2-c6cf-4442-87d5-3e2465ee7fad", "sighting--ca8facc3-4978-4dae-8b05-1d83894f4132", "sighting--2347a9b1-c1fa-4175-bb14-a40acbf056a9", "sighting--f319a085-e52c-4d0d-86b7-ceefcadbc783", "sighting--ead089c4-f02c-4484-a102-1e86a5e24fa0", "sighting--b48b12d1-d1e7-4546-837b-0d7ec94b16cf", "sighting--ab9669e2-1485-4723-8ab7-2b5b977523d9", "sighting--3319578a-9a91-45a9-bd7f-201913c37bee", "sighting--1897444f-3e9d-4c96-9d44-a2a1048f03b3", "sighting--00f969e8-6721-4e89-aa0c-e772918679d1", "sighting--0ed46d6a-78b2-44a9-a176-aace07bded7e", "sighting--75545ee9-c7fc-4b61-a3b4-27aa18013bd6", "sighting--8e658f24-9a8a-4761-b733-56792c9e15fd", "sighting--a057751e-7c6c-480b-a808-442177c9a21e", "sighting--bb6fd69a-d21c-4596-a377-4936e2c6d9cc", "sighting--c0e42b5a-517d-4e4e-926f-d0390e5888c9", "sighting--029f0449-a340-4ab3-8c76-8b3dbd847aa6", "sighting--7c26d7a2-8e97-48c7-93e6-8b83a352a0df", "sighting--dc48e8f6-da3e-4abc-8a6b-92e5310140dd", "sighting--3fbd8257-3eb9-4ef0-a899-b21c8dfb9d5d", "sighting--d203b260-7e10-4f77-a747-db21a980aa83", "sighting--80079985-2a31-4b55-850a-a8165eacf260", "sighting--2b460efb-4dc5-4fc8-8d6d-766ecd080fb9", "sighting--7d6d9741-d2bd-47be-ae40-4d135f253ea8", "sighting--cd112a79-b47f-4eba-a3b6-9994e24fa310", "sighting--4f140ab9-bb8c-48f2-8cb5-32aeabbf8980", "sighting--39320563-89f3-4a0b-8913-eeef046be398", "sighting--95822208-11c8-4abc-9c0e-bc547ee53ca5", "sighting--cd56100b-3ab4-48e3-b96e-929f95b69f46", "sighting--e1a43535-1206-4301-86cd-2904bad2c13d", "sighting--4f74f671-4e63-4f05-8f07-0a131a2867a8", "sighting--670ff2a2-e91a-4d7c-be8d-2768e8735e43", "sighting--931520d9-45d1-4817-aef6-acdbd7bc3ede", "sighting--0c63fded-c95e-4dc7-a783-f32d227376cb", "sighting--7ef2e536-ba66-4d3e-9c87-702b301a2d17", "sighting--bada873a-efaf-46e5-95db-bf6196e5c180", "sighting--99a0ab0a-ceb5-420e-8f41-de03f34870ff", "sighting--c3cc8e90-924a-40f4-ae79-6a2d1e65c265", "sighting--763f9968-ef91-4abe-9f56-12120af17608", "sighting--66f0e649-a520-42d7-8d74-521cae8c0411", "sighting--ef081e8a-2391-43dd-87bb-34c77b5a0d5f", "sighting--7238f3bc-f95b-46a0-b2a6-6da567216375", "sighting--91088450-c7d9-4488-84f0-86087a6e6f50", "sighting--2c9fbe34-6b97-43c8-9b63-848efb56ce31", "sighting--8d222450-5472-4c07-8bb3-59dba0230c45", "sighting--bb9884c3-d42d-48c4-84ff-f24324ee27d4", "sighting--8c21d7ac-f914-4d3f-840a-52d4cdc345ee", "sighting--d76e69dd-b5f5-49c1-9049-af3268e2644c", "sighting--c6fcb78c-948f-4cd6-a222-760a695ce168", "sighting--b01deaa4-7fd4-40f5-a9af-82a91785556b", "sighting--fb8ba1e4-ef1f-42b3-ae9d-7e60dae4f334", "sighting--3f0c0447-ab4a-4a0d-a916-fbe2c1f22bf9", "sighting--e535fbb8-3cf3-41ed-a739-faf060317a27", "sighting--385bafef-1605-435a-b6e2-12cb3fa10e21", "sighting--fa768502-8696-40c8-b3f4-6dfaedaf85a7", "sighting--a00509d7-a394-4758-9c04-891214084175", "sighting--52229383-247f-45ad-926b-39d3e422ace5", "sighting--9b1a1aa2-eb05-4eb0-883c-356af8db4e72", "sighting--ca62477b-b035-4f94-819c-b80f0afffcde", "sighting--ebdc2d8a-8d39-4342-94b2-e896201ff9f5", "sighting--e612806a-8ebe-47f4-80e7-e1bc3e556809", "sighting--9ecfc00d-54e0-43ed-a4bd-a78189fdb24a", "sighting--e45ce969-ec06-4b19-ac33-caebe83c9af3", "sighting--0207c6cf-3c9d-4636-92f2-f8ecae8e8d3d", "sighting--9fb46ecd-bd02-450a-b73d-230af898d128", "sighting--1604f46e-ebd4-4079-82dc-550947f0325d", "sighting--379dc45c-5ca2-4b7f-89c2-d82458da39b9", "sighting--01ebf26b-cace-48b3-9e5d-f13c68d1bbaf", "sighting--82cb34e9-6b4c-48e5-8eb6-24f6419f3f39", "sighting--fe8e1471-8234-465f-b56b-715194b62cb9", "sighting--fc2c48ac-ed22-49a6-aa20-05001ea51fb9", "sighting--fe6068be-8f1c-409c-a7ad-abd5512aada6", "sighting--46dc7572-17be-4489-9cf8-c67690c3c902", "sighting--f0c99e07-a475-441e-b606-512517a4907b", "sighting--18b5c0e0-72ec-4022-8db0-e75936cf066a", "sighting--97bcdfeb-88bd-41f1-9705-0ce97dd5f253", "sighting--e0dc496e-3049-4793-b9a5-34e0574aa0be", "sighting--ec4a22f3-fb8d-4991-be38-27acf61e286c", "sighting--36568f37-751a-4e84-98bb-85481d750e97", "sighting--1b8bb74c-5852-46f5-85bf-923654807cb8", "sighting--00a83303-b002-4ba8-bdf9-c4e0c5f3ee16", "sighting--f59d08da-df57-4a5d-9c40-622095c4bd84", "sighting--a97dbfbf-33c9-4a00-af2d-20fa5e68d1e5", "sighting--09c4d1b6-014d-4c3a-a834-671c8f0ba131", "sighting--6f9769af-ae2f-403b-a401-449042767a20", "sighting--679a4cbc-3054-49be-b1cd-84cba81a13d1", "sighting--a542bd45-e376-49fe-b168-c35ccc2b6280", "sighting--8d9923e1-89a6-4574-aa62-8aa7012c268e", "sighting--b3712715-446f-427d-8b42-55ee8ea60a4b", "sighting--a8009f9d-7c50-40e1-87ae-6319f41d2416", "sighting--f57f9693-09f7-4fd4-9ea1-22f1cee7dc28", "sighting--2b0a3239-7e4b-45b5-a342-7d444a78ef23", "sighting--fefce652-e327-4eaa-846a-c3db81ea221f", "sighting--135a86a1-5270-4ed8-b1a3-8bbc84ef45ad", "sighting--c66c488c-a619-42ee-a136-d1c58f5ac7a7", "sighting--38358161-a1a2-43b6-b752-593c34866809", "sighting--16f756c1-a019-4348-9848-4047b3de222c", "sighting--e7cd5647-8057-45a2-9d49-378c75c94e0f", "sighting--f0ffb696-21f6-4ef4-8b8f-6895bba71930", "sighting--08cef537-0616-48e9-b92f-aa0bdc2282c7", "sighting--e0efae94-7af2-46c3-b46c-59b1dcd617ba", "sighting--430cab0d-ee28-42c3-bf3a-9df3a6f05bdc", "sighting--90dd5c86-88e4-49ca-93ff-33d47c1ae5fe", "sighting--f9e1f372-1bce-4643-9016-f92116a45314", "sighting--837550e9-220d-4983-852e-945d9f3fd3b5", "sighting--811a74e5-5174-404c-b950-8b64e1fc568a", "sighting--720732ba-f399-4133-a311-ff1647419e66", "sighting--d04a4cbe-5ea0-4928-b7ce-21236a40cb23", "sighting--588aba46-dab3-4393-89bb-2de603e76d25", "sighting--131128ad-9611-4f30-a5b3-da5c2d21fb6e", "sighting--70665b81-7111-444b-bd41-d8aeffd04420", "sighting--75c8b463-33b0-4d58-b424-9a8f47170e53", "sighting--c06c0373-c21d-4158-8853-3453d23ca38d", "sighting--d33251b8-3fff-4923-8dd7-f4a6e2ff6fad", "sighting--3dfd9f2a-3457-4f60-b372-03a81928dd2a", "sighting--078a50d4-b6d6-49ec-a3c4-92e55e20821d", "sighting--225d07fb-fce6-4166-9517-01a017aaffbb", "sighting--8a8a9f5a-98c5-477e-88db-bb604d77e2d3", "sighting--069ee391-1625-4b7d-86fc-c7eab3cd2105", "sighting--4764199c-67a5-496e-ac69-3983d4c2413a", "sighting--13f2bc19-d542-47dd-9578-ca0c7a531425", "sighting--7790835c-51e8-4ca3-9eb4-a30841e14655", "sighting--a789a88d-049f-4a9e-99ae-5b3f933afe57", "sighting--0e82a912-a41e-4abc-a866-8b216f64772c", "sighting--03c27485-408b-4012-aa11-9c7057480bb5", "sighting--8f777520-2952-4885-8887-5ef967d11818", "sighting--f7e4d5c3-2564-4369-8ad7-3ba405b7a65c", "sighting--72a50c7d-cd1d-4127-8b8e-1ff65d68146e", "sighting--32868434-3e1c-4c5a-b50a-de0e205848f3", "sighting--768eae5a-edc5-415c-bb5e-cab5374b8d26", "sighting--c67526a7-78f7-4354-afee-53274efe03fb", "sighting--80f11692-2d13-40d5-a0ac-6f7e0adee725", "sighting--7aed96b1-5c5d-4aeb-a419-1fb3e4f94675", "sighting--3f08b37b-39a4-40af-b20c-7e7b60a9adb9", "sighting--3fe22535-587c-464a-82ac-227f2823aa99", "sighting--ad87c83a-5500-43bb-8764-d0373eddd8a2", "sighting--eee021ef-97f8-4a03-b99d-2e06b55eef6c", "sighting--454c05d7-8206-405d-b89e-f965fd07e238", "sighting--29391af1-2a51-4182-94d7-b4f0b4700536", "sighting--c935cad9-7ec2-4614-a2cb-ea8d1ac41483", "sighting--a35106c2-7a0a-4627-b7e6-2619791f944c", "sighting--a3fe35f5-8a61-46c4-84d4-db5dbb09693a", "sighting--cb7bb9af-e57e-427f-b33d-ac6ad3389a15", "sighting--48df0a07-48c4-4950-913d-4a68f403cf27", "sighting--c6c1e5de-dd8e-4d27-82d2-cb80b9676d41", "sighting--7781b870-97af-4733-9c17-bf08084aae23", "sighting--2d1bce06-4d66-47c5-9bae-4390b701d747", "sighting--ea4857e2-0c7a-4d09-b472-88256ba2e754", "sighting--36085210-4084-4901-b696-483761c68370", "sighting--6786b111-b19d-42c3-93e7-efc1bbc4adf5", "sighting--2ac3bdba-f61b-45ce-bd9a-53fd7cab6bba", "sighting--7999e48f-b5cf-4b2a-a160-f401d710d33d", "sighting--c3936b40-1e98-45ef-9efd-3dc8ff72ea30", "sighting--937622a0-7c09-4088-8479-2d62820eb2dd", "sighting--a4fc34b6-7e90-4aa8-b68a-3fa3fb2b4990", "sighting--62e21a69-d3ed-436f-8660-76a2fbccd3d9", "sighting--8b935cda-bc72-4dd5-83eb-ba118e49e519", "sighting--9f64dd7a-e8e3-4c3c-9773-d158aca5cb8e", "sighting--c8e70663-50c6-4257-843e-1247c9bd9a83", "sighting--d4364952-a96c-442f-bbb5-bfbf74d9221b", "sighting--73fa99d2-183b-41b6-a8b1-c2a4acb59d5a", "sighting--39ea347b-a9bf-48ef-bcbd-aaf8a7524a3a", "sighting--5a37bfe5-e966-42e5-979d-192c83aa4b2e", "sighting--667ff7f3-d928-40fe-b944-2a3d4b82de83", "sighting--7ace2dbf-6f12-4813-baf8-fbb29e0177bf", "sighting--7b6f6977-f146-454f-bbe1-ef860571cbff", "sighting--f4e5c6e1-0573-43a0-8141-366403c519c9", "sighting--94b06b45-de7b-499d-835c-50fe925d2a9a", "sighting--13ddaa29-d592-4ee8-8dcb-c869b11b40ca", "sighting--00768220-c21b-4dbf-870e-70079f4f72c1", "sighting--a5a8341a-7768-4876-a2fb-c813759d9ad7", "sighting--1fe2aae5-25de-44b4-93c5-5608bee325b0", "sighting--7f8d4e9b-39ee-4252-8251-fb190be6ad3e", "sighting--87e2bf61-460d-4f40-ad78-fd01e662ec02", "sighting--5b638d03-28f0-461e-a13c-7f4ae4edf342", "sighting--12cbddba-a450-4aed-ac48-7e2c6bba6e32", "sighting--d92ab10f-91bc-4729-800c-7061e479d370", "sighting--4f1e168f-1342-4f93-bf7b-79a3088a68e8", "sighting--ac846432-be99-4490-a473-bcd1f5aaca46", "sighting--8bc68bf5-3bd7-49bb-81c3-86dbb6b55f17", "sighting--f2ee2f53-4e0a-4e08-a57e-a7be4f25946f", "sighting--e041d3b5-829f-4190-a1fa-e0e46b695a5d", "sighting--895ff37b-c009-4062-9126-bf837e8e2c1a", "sighting--ecc00bb7-55e8-40b6-9871-b612e4b7cf4b", "sighting--827ce634-c59c-4bcb-a8ee-336fc55c99a3", "sighting--307d633f-bad2-49ad-8146-281f5f7ba48e", "sighting--37c6499a-4f85-4071-96f7-35f46d072e75", "sighting--f9954e5a-cde4-4d85-8d24-afdfa20af8a8", "sighting--27183510-4f00-48a7-9290-9df9493d7f45", "sighting--6faf788c-10ff-4855-827d-bfd8482a5603", "sighting--ea976c19-b240-4e81-91d3-76ac0697908c", "sighting--1a2b694e-d6be-4141-bf54-e214f0096360", "sighting--fd10e190-d1a5-4ea8-8571-c7cd68724f45", "sighting--92ed716d-e169-4da7-8164-064890a57103", "sighting--58f0d313-4fdc-432b-82e1-1736679fd100", "sighting--c473dc5a-97a7-47f8-bc5d-c109e6909e5e", "sighting--7371ebfa-13f3-4363-8813-625121e10101", "sighting--a0a6a863-ec2d-4e6d-a065-06e950f54965", "sighting--fef68498-f8e5-4fdd-922e-2bcbaaf74eb6", "sighting--91996a18-84ee-4668-aa12-c2a5836ef93c", "sighting--96fb217f-e4f9-45e6-9d8c-b1768b9de2b5", "sighting--60bbf52c-310f-402a-a61d-dc7369ff8bf3", "sighting--fb04bc36-27c1-4ad4-987e-671defd3acc8", "sighting--99807d6e-f8be-432b-8f66-77f6c7d08939", "sighting--faec14ee-c095-4e1a-a39e-85606e5bfcee", "sighting--e326152a-4ba8-4962-8476-c97c4cbd54b5", "sighting--ceac5956-bc58-418f-b1a8-dda326439f76", "sighting--8b812e4d-fd8d-4a46-99f0-75fb62e4ed58", "sighting--8758a5ca-343c-4ea9-a1bd-6c0d39329352", "sighting--fc24b566-fc1b-45be-95ae-47fa3cfc999f", "sighting--f75c45f1-6ad5-4226-8c1f-8bec4ed88d69", "sighting--2bab6bcc-3274-4c47-a503-eec6f2cf4af9", "sighting--491bcd0a-9186-40a1-9195-2a4637f8dc46", "sighting--c2173e6c-2d4c-48c7-8910-53d48596835e", "sighting--8eebb5bd-4e7c-422d-ba63-a598603e7b56", "sighting--a49029b5-83b3-4043-ab99-b95ed728eaf7", "sighting--95eb8324-8226-4297-8726-1e804fc8c583", "sighting--9226c44b-464e-425d-84a0-d100d02612c6", "sighting--c2b38ef2-4e35-4496-839c-7b79e1770b37", "sighting--4be0d10d-0820-40f2-9cd3-90185c306a82", "sighting--d9905ed4-00f5-44ac-ad92-8f6960fed72c", "sighting--bb17bfbe-20c2-4bcf-b52d-757866026dc0", "sighting--f9e4e887-88a7-45ee-84c4-eab2e2aa521e", "sighting--f6d23ec8-04df-41b7-b54a-afcf7f51849a", "sighting--cc1efdcf-f06f-474a-8835-555d9c8b5d38", "sighting--f0c4dd30-dd53-446d-8b42-b78a0a5daf54", "sighting--41336205-189f-4d1d-975d-c09c3290082f", "sighting--64dc06c1-bf0d-4c8d-becf-8ddad4612212", "sighting--116f6b5c-5418-452f-a212-539c66a5c994", "sighting--33fb728e-6d2d-4a5c-a875-3699fe464c76", "sighting--26754e1a-a7fe-4939-a641-8cae76fb059d", "sighting--a0b42885-c998-43f1-a0ce-11dc0973c84e", "sighting--14d8ffbf-d0df-48cd-9d24-cf229b609dd9", "sighting--fe82b778-d3cf-4710-a272-45d521681cf4", "sighting--4059f3c5-4794-442d-9191-8e2193623e6a", "sighting--fa6504f2-cfb9-4d44-a882-756dc6fce112", "sighting--17f84324-94c8-40fd-8dda-d7d13fd5e493", "sighting--669f5a82-654a-4c1a-bb61-ce10f0257aae", "sighting--b659b6eb-cdf5-48ca-ae32-9e3e559514d7", "sighting--0bf2b58a-9fb0-40a5-867e-9e80c1be2e0f", "sighting--ed623334-0140-404a-afb8-bb2c2dd11127", "sighting--3115518a-72c0-4a8a-854a-8f1da9c11d93", "sighting--3e8fa81c-f7a0-415e-a05a-40cdf5d724fc", "sighting--a841064f-e61d-4ca9-8ee5-50888bdb9b17", "sighting--7d6d446d-1c5e-49d6-9ff9-be34bf0f229e", "sighting--59db27cb-ffe5-4541-8a35-f12656dfba37", "sighting--058e0635-ab46-4271-a57f-d571ce184caf", "sighting--5b258cf9-0f54-44b5-9996-19965bea73be", "sighting--425435f5-b39a-41ee-bd10-a41554e09ed9", "sighting--31eaafdd-b13a-4f8c-ac1b-17610b07d656", "sighting--7ebb8eb4-8b22-4b96-b1fa-d27f158af9f2", "sighting--4d4ec85f-b05e-48f7-b81a-2ea1b71d7c54", "sighting--03f0182f-1d72-46fc-93c9-e3f473b8ae37", "sighting--22a6f167-8563-465a-82f4-c917140d3ea6", "sighting--dbe24157-8038-455e-91ad-17fc813af3fb", "sighting--b19c66c3-1397-4816-bb93-6d0c78969c23", "sighting--329a8a30-1c57-4d0a-bce4-dded55519c4d", "sighting--444d4e4f-6c59-4b34-b2bb-86249996fdbc", "sighting--15f52601-ca4d-4354-9bdd-e0107db9ef57", "sighting--9a079742-bfd2-47b8-900b-5da015190018", "sighting--9ada924c-2db6-47b5-bf92-1a7186b105b7", "sighting--cffec697-4b31-42c8-bfeb-1cae2a60d05a", "sighting--0abe0028-0011-41d2-b81c-0d0adc0fb3da", "sighting--0c69d01a-ec6c-4ad2-ae6e-f98be0d898d0", "sighting--b64e466d-48dd-4eff-ad0c-301e71178943", "sighting--096a010b-48f6-4027-9cca-e5b20d1571eb", "sighting--db635bab-3e96-4cc3-b4aa-411793e94540", "sighting--8442ba44-5bf5-416f-9bff-c8c9896bee7a", "sighting--52038be0-dc6d-4d4a-b9ed-cca6f05ea963", "sighting--c77cfa9a-ff04-4c1c-9c3c-f454acaade91", "sighting--40a17f84-984e-493b-9cf3-86aa0f723c87", "sighting--777e014f-3584-4faa-afd0-aa346d9e3311", "sighting--94b40283-2386-48ee-8688-36ceafc5c490", "sighting--7d01b17e-da56-4753-a41b-eac0b2897670", "sighting--bf22f3c3-60b8-4c70-9b98-8132bfe55650", "sighting--125c17e6-15dd-4707-a2fd-0ee706c83be8", "sighting--46aa4d0b-a9d0-4896-a4a7-2d6117cb8f46", "sighting--7a455a75-995c-4efa-8576-384752b23a8e", "sighting--1be721d7-f4a1-44aa-bf4b-e0f5af2fb353", "sighting--86bda497-c4b5-4b77-b796-8188b03a7a4e", "sighting--f5c06da8-c32b-42fa-b01a-5ec9b983ac8c", "sighting--d72eea48-7502-4585-8f92-684239c254f4", "sighting--a9cc5a9e-e65c-4730-a142-47465a490751", "sighting--2f736436-c204-42f5-a272-e2608eee8b90", "sighting--d936ef59-f5b6-4199-bca4-199a11318c44", "sighting--92239075-c1f8-4f1e-bf92-4fac8326b208", "sighting--ca946aa2-f1dd-4e80-97d5-2d1cf4d725ad", "sighting--d3b12177-1bf8-4780-ac49-2095d5a78768", "sighting--0939d66b-c90f-481b-b856-15407d373ce8", "sighting--93305fcc-6e05-42a7-a860-ac51e591de31", "sighting--33b8abf5-846f-49aa-a973-8485e03e93ea", "sighting--06f6d3b4-e424-4b9b-bac3-9f02d0f88b98", "sighting--a5dbbfe3-0da2-43e5-aeea-74ea1c62fb15", "sighting--5a27da51-2f26-4f23-98b1-57ea0c5777a9", "sighting--7f8f0d32-d4c7-4d58-a2e9-49b9865a85c7", "sighting--84d4ad00-a5c1-46e1-8327-9db17f2469be", "sighting--b1466a4a-a36f-4e70-88d8-0eda682898e2", "sighting--a3cc8b06-8731-4e43-abd7-b0b1d500ecad", "sighting--128e8270-31ea-4637-a5bd-936f7323d0bd", "sighting--534818b1-4a89-4251-9241-dcff37f257ce", "sighting--b9a9fa7f-04ea-4abf-8ec0-3f352f4079e5", "sighting--6fbdfa5b-e71f-4c5e-b27c-2cfe11243db6", "sighting--75c0386e-3cca-4860-bed8-0ae44cd029ed", "sighting--3c736951-aa30-4fdf-ad86-ef512f2a5db1", "sighting--16936648-56a5-4f4f-97c2-c6891a9851d5", "sighting--e9d58da3-d649-4b71-a2e7-32c34e1064cf", "sighting--17a0c5b2-e3ff-4219-b25b-ebbd5ff124a3", "sighting--e77cecb3-e608-43a8-914e-820d718b8bce", "sighting--2f27423f-b33a-4db7-b029-2849745852ac", "sighting--a7120af1-8fd7-4c6b-9a3a-2d66092decf8", "sighting--dee0c5f9-5bb4-45a0-8dbb-7a27c11858e9", "sighting--fff5de38-7a6c-41c0-8cba-3cf3f8fc2428", "sighting--7520a2b8-9707-4c1c-a808-d9dcc99fdb3d", "sighting--718c0ae0-6041-42ea-8528-90b79208c758", "sighting--c16d1170-cd20-4af8-b0ed-7411251b69b0", "sighting--d7175598-88f2-43b0-ba93-03516f5ed35c", "sighting--5af6494e-e6a2-4349-a501-c1064cd2b29b", "sighting--a9ddee57-531d-4fe7-bfd6-8f9e23915d33", "sighting--6a117249-b4c3-49ff-b094-55099b0bb2d6", "sighting--0fd5f7cf-7b45-4403-ad12-f1e1c0fe807c", "sighting--831b6e29-edb9-4c57-a7c3-bd3ce0e5aa88", "sighting--a9590aa4-6029-4c78-965f-7b412e091f70", "sighting--6179e5d6-20bb-4522-a36d-8d87065d1b28", "sighting--59e95eba-add7-4e73-a4e5-d8d127b35ea4", "sighting--5f03bf51-5108-4256-925e-76d87917364f", "sighting--74d6e745-7e05-404d-96cf-42848d31a405", "sighting--2dc9a84c-c924-42fd-8727-066870eed676", "sighting--5b604893-1e73-4274-9ba9-6bfd9a33a358", "sighting--eba8afe2-925b-44f2-b244-37a5ac297ef0", "sighting--9be9e95b-297e-4177-9df8-e6a6760ee1ef", "sighting--41507d72-ce59-45a0-894d-671464b8068d", "sighting--f093f63c-3390-48d4-a4b2-f88a1092ba1e", "sighting--0dd99e24-a8ce-4e61-b06d-a32ddd9a4455", "sighting--f2f7d5ec-0d29-4a48-9fd2-6426b987761d", "sighting--1f3e9d2d-ff48-46a0-9bdb-196f46677b39", "sighting--f54eadb9-f11c-41d1-8bb2-3beb54cc533d", "sighting--c134dc1d-56eb-44a4-9e5e-6aa1a70f801c", "sighting--6a971371-27c3-42f7-a472-ad04456a7bf6", "sighting--f0ea078e-11e4-4aed-80f2-c17a4a7730ea", "sighting--23c8c588-6695-4b14-a911-d16193d6d73f", "sighting--08ebaa28-8ea7-4ae2-b169-27f6d7f143a7", "sighting--6aaaf0fa-cf4d-400f-bf31-f5bbb92810ef", "sighting--2f8b7430-4ad6-4775-a4a4-0883c6c761c6", "sighting--89916919-212f-4720-9f09-6b2869fef9b4", "sighting--26807c5a-a4c0-450a-acf9-317c3cd3d432", "sighting--ee0e4643-4788-489d-a7e3-5b0624c608c5", "sighting--32f3692a-db34-4b8f-96fa-ba1971a7622f", "sighting--b6b1c791-c133-4c68-9e50-a53a10cb2b68", "sighting--0d07424f-e7f3-4327-9b46-c06927cb8bf8", "sighting--450662a0-23b3-434b-af91-a8b34ecbf471", "sighting--e754af18-d9a1-486b-997f-d12505977134", "sighting--823855ee-66e9-45e1-85c1-7043aab3a21b", "sighting--4ce1d696-aaa4-48ba-aef8-7cf960b43408", "sighting--9b8eb320-142b-4138-995c-3d37810098c0", "sighting--831c44b1-7d42-4125-a6e1-b05fe6a48777", "sighting--e3ad1083-f577-4cb0-b16d-0338417cb538", "sighting--e65e3de7-cc91-4b50-aa79-4f8c69a96ac6", "sighting--f1ca7670-fff4-4990-ac4c-bc13d24961f7", "sighting--c95c58ef-8a1a-452b-9b39-21aaa2cb9635", "sighting--6d153904-7927-459e-90c7-628a8131ac4e", "sighting--1ba6be9a-6c66-4ee7-8c08-e16770f8fb46", "sighting--68f916c6-f59e-4d5b-9b8f-d68945583165", "sighting--fa624786-109a-44b8-8902-6c314cddc1aa", "sighting--a2bb4232-caf0-48c6-9ac3-002946b22d2a", "sighting--6ea57583-5a81-4119-8cb0-cdeaddaf5815", "sighting--8e0b36ab-c57c-46f5-a12f-0669303e17b9", "sighting--101a12ab-a0b7-4f1b-afec-b8d9c5b1e34f", "sighting--e81765f7-f92f-481f-ae12-8b0e3520a645", "sighting--858dc51b-de12-4f79-8354-b23a0f96500a", "sighting--0a678bf8-2d64-4d70-a737-6a739c5215ee", "sighting--67491d5b-c023-4ec3-8500-6d5acc0e6533", "sighting--c1164d28-64bd-4d11-a64b-e978c03b6fa0", "sighting--487b5d2a-242d-4219-9e6e-ffe5333f8d44", "sighting--92e790bc-5591-409a-8d3f-2e1514921216", "sighting--9b000dbd-32c7-4faa-849a-c111858b35a8", "sighting--da517529-37ba-4983-b9a2-112b44f52479", "sighting--46338200-359f-458a-87f2-360b8b82ac17", "sighting--bb1ee31d-1af1-488a-95cf-69ed37d1e617", "sighting--771b5b9b-e4e7-458f-91ca-372ae71b2f93", "sighting--8aa43e01-854c-4c2d-a7e1-7a3c38d6f023", "sighting--72e685fc-f976-4c00-9631-ac7d2de67dbf", "sighting--e6f96b2f-6887-4fef-8c40-aabee83740a2", "sighting--3d6e6439-ecb2-415b-a120-66e2979db4b3", "sighting--57c3eaff-904b-4dab-b9a3-40d755c769a6", "sighting--54733ade-9164-445d-a2f3-6e610ea34f97", "sighting--0811cfd3-d350-4cea-bd70-b249341832d0", "sighting--640f67eb-5cee-4350-8555-7f73c6fc7783", "sighting--9ee5cbc9-3488-4329-a3a2-a02999f55247", "sighting--f174e9c7-1cef-46e8-981e-74eab2ce77a4", "sighting--f60c3aef-2e86-42a9-891e-a96d3fba22bb", "sighting--c28d3f23-00b7-4639-b3a0-6303cf1ca84b", "sighting--46f98ab5-af8f-4fb4-ac13-85d15bb213c9", "sighting--205d743e-a95e-4981-99e2-4dd2dd2b0f32", "sighting--8443cae9-1b97-40da-bb1f-e26f74fa3c7a", "sighting--c6b952b9-6c33-4592-ba64-3929ca350668", "sighting--97931fbf-a2ba-49a5-bbd2-d10d85bcc889", "sighting--821ab30f-3531-488f-a004-42535cd197dd", "sighting--e6542b6f-51df-46e5-8864-a7f0ab0d9a82", "sighting--9158cd9b-e660-47cb-9851-7e9d8fb4962d", "sighting--8d33ef7a-1d22-4c83-b9ce-0d7a1687ac15", "sighting--600bdd40-96d8-4d32-8a57-41dca07ed508", "sighting--1d613491-2c47-40a0-b356-adb11945cd85", "sighting--d0bf5643-67e9-457d-93c9-2da72ac3f448", "sighting--2d96af26-26e3-46a6-a24f-90b6d5bee983", "sighting--0646394d-d7b5-41cd-a152-a56043ba31ee", "sighting--41786d46-4430-4ddc-9119-98114b72af83", "sighting--a68b7bb4-b713-4a47-8ba1-ed0f1d3ee223", "sighting--6db65d03-0b8c-454b-befd-c2c92e318ece", "sighting--416e0e9b-995d-4daf-bb03-3396a975defb", "sighting--139ef961-bbce-4ac0-9d98-fe4d11a9ebcd", "sighting--ec51b7c3-1a70-42ae-9178-73f7704cd00f", "sighting--b721a27a-5358-4b99-b1ad-bc25e49e0f06", "sighting--71bbbbb8-7bb0-4523-a600-620e980eb160", "sighting--a12c8cb2-604c-4f82-a737-cf02ce876724", "sighting--beceff93-5707-471e-b898-175e48a6f960", "sighting--af4dded7-af39-410a-af7b-bf63538e1735", "sighting--7fcb622a-6a7c-4c8a-a43f-7fe51c96b10b", "sighting--58d01648-13bc-4dd8-b7df-cb11fc7c3542", "sighting--d2a0b8ee-e853-4c7f-91b7-3d257a5d42ff", "sighting--69dced59-1b20-4fc4-af59-a75fb2b705ef", "sighting--df70573e-a09a-487e-a886-94756b92d87d", "sighting--8ce52164-24e5-4400-a904-7b17ea4b287d", "sighting--76bd60e2-a8cd-45ad-b9ab-2b3191b6b9f0", "sighting--c90f2e4a-47e8-405b-8612-8ca44374e2aa", "sighting--b7b9c548-3740-4289-9bf5-cbc4f50d865f", "sighting--c9125182-d8a9-43d1-b874-ef5e8c8e6db7", "sighting--d8ccb0e0-fa04-4897-ad83-8a3d727451cb", "sighting--00290f51-ebce-44ea-a196-5218817fb0bb", "sighting--1c8881b2-0671-4c78-95a2-fbd4cc92178d", "sighting--73540162-80dd-46ab-9345-fcb635d85d44", "sighting--3c0f5ff3-0b80-4d3d-ad56-31ed7ec99723", "sighting--94d38d5a-83d1-472f-91a0-4e35f2ad78c6", "sighting--760a38e4-74b5-491a-b4b1-7e695c5377be", "sighting--69568a70-f2df-4951-91e1-49cbc95b5156", "sighting--6c313c5d-e3c7-4359-bfdd-81490d8fe319", "sighting--18bf5118-1173-4aec-ba75-8c9424af087a", "sighting--45ec5308-43e2-4af2-b62a-0b01549cea50", "sighting--96869331-946c-4068-ba4a-87570fa0d08b", "sighting--b0d40166-ed33-43d4-8284-27bda0c29702", "sighting--6d9b06b5-8352-4b90-a1cc-8419ac3164b5", "sighting--03150a46-a655-462b-b399-a3223e23a696", "sighting--60110e18-66e7-44d7-9176-99df41210239", "sighting--3149f0e5-4116-4965-ba3f-57ce834eaac1", "sighting--82558e20-9533-4cb9-96e6-6f3b285d7da5", "sighting--f6c5f6a4-e893-402e-8268-55e62d2ba44b", "sighting--e37e8261-c3c0-4b11-83f3-b8758d86e164", "sighting--6c764a81-a124-4736-a70f-fcff98dac428", "sighting--33990c25-5cf3-4ba9-9c5f-d9c1d39cfa6e", "sighting--32526417-9a54-48e1-b5b2-166be8c3153f", "sighting--7cd9bb9e-37a3-4842-9d7a-8925f9445b36", "sighting--d37a7255-cc78-458e-8c88-9e3a695a6117", "sighting--1b81defb-037b-4365-875f-722df2d8ba75", "sighting--475f5ad5-cd66-4e6c-9fbc-b296ef4ea826", "sighting--cdd442b9-16df-421e-92d1-4d9ea2449667", "sighting--0533adb0-a989-498a-8e7e-df02119364bb", "sighting--eca5ac2b-e50e-490b-98b9-46a592606036", "sighting--67d665b7-57fb-4a06-af4b-faaae0947680", "sighting--ebc64998-83ac-40a8-abcf-9660fe1e49eb", "sighting--328613d1-80d6-4292-8350-6e91b837e371", "sighting--066e66c4-3ab3-45c4-9f19-27beebc30035", "sighting--c9bd991e-6395-4390-9c94-7e31b04ea872", "sighting--951619e0-b994-4a20-9b0a-9190ddd425a1", "sighting--337dd188-b38e-4adc-a835-b060f6954ccf", "sighting--6c6e5d4e-82b8-48a5-8a45-f0328ddfb8f2", "sighting--dc4836a6-775e-4928-82e6-52247e8317e1", "sighting--997138c4-e7f0-4def-b01f-7fcbcaa6e017", "sighting--03361f3a-d417-4cb8-9293-585f21e5b63b", "sighting--ac985445-424e-49e9-96d6-790293c0714b", "sighting--51376468-41ae-48ee-8cec-1d314b8a8442", "sighting--85ce1e1a-f7fc-49ca-b258-ef8c89b0cff9", "sighting--5ef7bd5a-fe96-4738-a73a-d47107b8c20e", "sighting--3484b610-a6f3-4c17-9c55-135a4a9afb0b", "sighting--d25cfca8-742f-4f9c-869c-4b347f15e03f", "sighting--67a41b53-13ec-4393-89ec-f89911663381", "sighting--8f7b02fa-dab6-453e-8646-691aed13ddc9", "sighting--358f8a06-01d2-4bc7-a869-37e839f4f580", "sighting--bf63f59d-0f26-41a2-8358-4507ef5330a4", "sighting--9fba806f-4f58-48cb-9749-a43d03cfcd11", "sighting--4355cb9c-f6f1-4769-85f4-935969bc485b", "sighting--d1084eb9-497e-44de-b64e-cc2c4f01b0ac", "sighting--ca66589f-9b25-45d5-9926-58ed0b89476e", "sighting--08d91c2b-4d66-4c47-9a02-7e7432d728fd", "sighting--4636e9a1-1458-4076-8a52-6bc18459dc27", "sighting--aa3fcfc0-d100-4ef4-9d43-325d7a8a97ff", "sighting--591751c1-c5b0-42f8-bae9-560858507293", "sighting--3ffc594d-44f6-4948-8954-49c579424bac", "sighting--b37dc7ec-d2cc-4f29-958f-e8d3b1c89937", "sighting--ce89ab56-0af5-40da-a198-4ed5daa9435a", "sighting--820aba71-0e12-4569-b4e9-6eeb5e3c99b3", "sighting--39c3619c-d774-49e4-ab2c-93605d8d97b1", "sighting--7e2aee73-e70b-414e-91e8-57259206fcce", "sighting--d08529d1-1689-4497-aeb1-803b79934804", "sighting--550a4a96-629d-4477-a617-4e798da5ec3d", "sighting--f5d2b950-470c-4b66-9621-2811d4d9245d", "sighting--61b6ee38-51a9-497a-8866-de2a0b91f342", "sighting--14ed072b-9bb1-4e58-bac3-afc8abaddcc8", "sighting--db5a3e4d-a54c-489b-9218-ff2d5e714f6a", "sighting--a2b4fdc5-5bbc-4c54-8ce3-88dfbb704fda", "sighting--81183d16-d179-4903-a35d-02aab9ab7697", "sighting--fd6b1f0b-4ff0-47be-89c5-b820a0167e12", "sighting--f251c1e9-5197-44fe-bbdc-f9c06ec0f280", "sighting--32e9ba45-e750-4c99-a018-a25b79e5e4d7", "sighting--ba8dd416-612f-4bdc-a88c-74b1f2c197c1", "sighting--48973ea7-ea5a-4749-9acd-4e9fea33a73a", "sighting--92dca1fc-59bf-4a2f-a869-d065e0b4f431", "sighting--5ae419a2-8422-4ce3-962f-c6e316d5e2d4", "sighting--17687a9e-7e0a-41df-ae9f-cb0ca3c5e270", "sighting--84f87796-d735-40b1-9984-8351e3321cb5", "sighting--73b91429-3297-4453-a541-4f7dedb4f051", "sighting--782ef2e8-1d64-43f2-ad1c-0dbc6e6fbb65", "sighting--c122f154-b3cf-4afa-8c7f-1ecc36c4491d", "sighting--f7624db1-3be4-4068-850a-4358516f9b00", "sighting--f743a29b-3257-456d-85af-7d3dd3431a7f", "sighting--94450db7-f7a8-4bd4-8939-221d8bf61058", "sighting--6090ed10-6d77-497c-abf2-191608d77c8a", "sighting--255356cf-947f-474f-9e99-02c14ec08784", "sighting--05e8144c-790d-4f0c-af69-7faaea6ea872", "sighting--be721c0d-5a6a-47be-851a-4b0284a17623", "sighting--ec904b1c-bfca-4d39-979e-d1dfdf396498", "sighting--5a2733d0-2585-4e1b-925f-3686e9265c41", "sighting--a70b1eba-80c9-4a11-b715-9eb3eb6e1720", "sighting--b8e5a4f3-aa81-46cd-960c-2e3c4e1707a6", "sighting--2c6d590d-7ee6-408b-b66d-c8a7986c2bcd", "sighting--2d9d0c81-21ae-426c-a36a-732f2e603363", "sighting--5f037fcd-7b7b-4fb0-a0d2-24ac02c23ea6", "sighting--df0b9125-5572-4e86-930d-cd8d13feb66a", "sighting--dba57aef-32ca-445b-98e5-cd66b26f6673", "sighting--963884b7-3595-416a-aa5c-532c8d811f5f", "sighting--343484cf-b662-47c1-b4aa-fed68abc3ae7", "sighting--205d9776-0256-44d8-871b-1455348e8b45", "sighting--a51fce41-f85a-4576-9519-fc3b69b7b633", "sighting--003514ae-ef3f-4fbe-ae8a-333938187b52", "sighting--b0142ed3-bb26-4574-a266-49f67b1deb15", "sighting--87a7f7fd-9f9e-4bf7-9e11-8da2fbf5d9d6", "sighting--1f5f6cc8-3083-465b-bd59-258bf9b8a524", "sighting--4986f3e4-00d7-446d-9b87-f35b58273002", "sighting--da67900a-3fb3-4b64-b6ad-3f9d4d6cca3d", "sighting--d88493b6-0ebd-4004-88ee-dfdd15fbf7dc", "sighting--5c62868b-e955-4aeb-8513-05b99c105673", "sighting--96f3ec99-cf3f-461d-bf87-1dfcd7413b70", "sighting--eb4ec884-ff81-4c67-99b2-c9baee32e1f2", "sighting--54a1f503-2ea0-4e03-8fdc-86f9e5373a78", "sighting--8c6b549e-ec50-4ff0-808e-67c8d6651b7a", "sighting--ac329b11-c46b-4a18-995a-5bee887d85d4", "sighting--6d1d4d3c-b493-486a-859d-7ac13aa9f2be", "sighting--25d24e83-ac85-4b75-ba66-3870fc25929c", "sighting--ccd249eb-200a-4803-9b06-e057b13eb68b", "sighting--ce342b5a-b6b0-4db1-9059-8f8f5462d87f", "sighting--c73cd1e7-8406-4ef0-879e-e186a63d4aa2", "sighting--0a681072-b6b2-4543-a5a0-bfbc12f92b07", "sighting--09b47c8f-8818-444d-a228-0a94c03f6fc9", "sighting--2e982a56-6370-42e1-a957-5ae84dc69f77", "sighting--331383db-5560-4ee8-8f60-41f9e013bf99", "sighting--6a138681-ed85-4784-97d6-48cb78dd8e5d", "sighting--5ad00770-70b0-4d9b-8151-a9cccd757f56", "sighting--5c242423-e852-409c-a74d-362608cb2793", "sighting--73416094-8a12-4eab-8cb9-fd8a2be9e979", "sighting--bc069a8d-1ba7-4cc8-8626-bf17c72b0a8c", "sighting--429bc120-569a-4569-895a-03c7f79b7010", "sighting--b54f0cb0-6a9c-4ea3-a5e3-2c39a3c94c8d", "sighting--f9cca1ae-b2d5-4323-8590-810e0f88a65c", "sighting--a3edfdb1-ff08-46f9-a902-4fbd2784fb61", "sighting--5263e4ee-ec79-4477-95d3-adaa49be4d97", "sighting--9275f53a-5ca0-4902-89d3-1990b978347b", "sighting--537eca46-a973-454e-960a-b6c1dbd85bac", "sighting--f3358b32-80f3-41a4-a248-c2d4f8438fed", "sighting--1df81a5f-067d-42d1-919f-36f4c18165c8", "sighting--711914ab-71d2-42c7-9b37-d12f9c291073", "sighting--4fc01f9e-2101-4499-8dae-cee3255e087a", "sighting--d8479012-a6d0-4a14-9536-79fa25d801b4", "sighting--384ef5f3-f80b-49ae-aa51-0d881bbb2c96", "sighting--9cd17af6-d9d7-48f8-a401-bd9429f0caee", "sighting--0348efcd-7ef9-4678-8eb8-ccdcef80da5f", "sighting--11352e04-4487-4449-8323-b162c2ef9866", "sighting--c1af87f9-33dd-447b-8b7e-9f568777eb26", "sighting--95ca90cc-a078-4f25-bd62-5315d8cd942d", "sighting--259924bd-0dfc-4de1-9666-fe7b84557aa4", "sighting--dcaef253-3ed2-432e-a2ca-dca6756544d2", "sighting--cfdc33c3-e4c5-4dac-8b3b-26ad4feeaedd", "sighting--484ff573-d331-464f-a513-52e732b73b48", "sighting--90f33c75-050b-4252-bda1-03637bb4c61a", "sighting--e6e420d9-933f-4945-87ac-84a3010fcf3e", "sighting--869d0b7a-46ab-4881-8021-c47decb0e01e", "sighting--b4a8e310-ea5a-4f24-8b83-701c7af402f2", "sighting--8e0e2e0c-a41f-471a-9b5a-a622e4e51e3e", "sighting--90ceb35f-be29-475d-a3c3-151e7cb4ac05", "sighting--0a3bc337-4310-49fb-b7bb-5ad60771c825", "sighting--420432e9-90fb-421c-9366-2281ed8190f3", "sighting--b77d8049-eb03-4276-aa0d-9aaae802c527", "sighting--b1d906de-b729-43d6-afb7-d0231a7dc397", "sighting--69a65358-96fd-4fa2-a850-cc37a4f21154", "sighting--4ef724bc-97e1-4d3a-9250-9a3d094ca145", "sighting--7c2abbd3-e24c-43a1-a2da-20d4d487af16", "sighting--44dd0978-c6f0-4d0c-915d-6cd80cf0a5e9", "sighting--c19ba332-13e3-42e4-8a20-4016304c3224", "sighting--0a4a682a-8469-457a-a8e6-d87da5815cb1", "sighting--e7e83320-5d45-4da2-87d0-502d99f678f5", "sighting--848e447e-3e83-416b-8be2-3e8f59a42230", "sighting--7e3267ad-f5ea-42b2-9a1b-cf5488d7ea92", "sighting--c59dfdf7-a30f-430b-bab8-1d5fe27a8679", "sighting--cfa59cb1-fe3e-41e2-91b0-7ed19d49e93f", "sighting--8a6372c2-d21e-488d-a3f3-c5a98b5f1c71", "sighting--72ca1f65-64ef-430e-9936-494e80d98923", "sighting--5ceb8119-e195-44d2-b94a-0d9fd02ef5bf", "sighting--1605158b-d16b-4918-a984-d057be1e246b", "sighting--29f52704-5d54-4830-9c7f-f04263d9f462", "sighting--0fccb2ad-a20e-47e5-a6e5-4100e7261299", "sighting--35b1c97b-d94f-4174-8732-4b409e5607d7", "sighting--3236aa86-2a38-4dc8-8728-d248982a455d", "sighting--87cce5bc-878e-475f-941e-2729a1bdefee", "sighting--2aec9c65-97ec-45af-a1b0-190e48bc5455", "sighting--9d5648f6-4db1-4b39-a9b8-04088ac6c643", "sighting--141fcdf6-c805-4457-a338-8e4f84657b9e", "sighting--c22f48a6-aca1-4eac-831b-35b2c624fb81", "sighting--0eb8bbda-cd28-4cae-93ea-033137fd47d2", "sighting--bf0a8a21-df2a-4c93-b7bb-c3c8ba1f70b8", "sighting--b20d6094-8773-4075-8785-6becce43cadf", "sighting--46be5261-88a1-4df4-bf22-fedc57b368a0", "sighting--d6391fe0-03e1-4a1c-aee3-cc151e89555f", "sighting--f9f71979-0a6e-4a0c-a6c5-18523b1fd34a", "sighting--7c79f41b-b9bd-4c6b-b44e-3c2444eb1727", "sighting--c75b5f2f-c54f-4430-8995-52920a1757d8", "sighting--267f835c-be43-41e6-91b9-b872de1d8075", "sighting--38219205-7feb-4975-8a41-b0716f78db27", "sighting--489721dd-5538-45fe-b2d9-9b5b32fb6acd", "sighting--2da2599c-204a-4649-8fb3-e08776122e5b", "sighting--14091964-4b04-452b-8c1e-c8edea40492a", "sighting--7a44d011-b331-4bc3-9386-7a1df0e20f84", "sighting--d85fe973-83c0-4243-9c1e-16a79e61cdb7", "sighting--18cdfda1-4cdf-44fa-b0b1-8230e4d026f8", "sighting--0dd20b91-e2e1-4e80-b38f-fcb6e14aea21", "sighting--f6bde2f1-06e5-408a-bda3-730f8ea1aeed", "sighting--bc0d329f-a0ad-4a21-b799-1fab71769b91", "sighting--b2980927-0e65-4e2f-ab33-5d0c63082309", "sighting--9fa9ca38-01cc-463f-bcd9-290ea730f276", "sighting--f9809a7a-ddbd-44fa-af1d-59fafcef2a09", "sighting--7701710d-01e0-46de-972d-321b4b5000b8", "sighting--14cc3deb-157a-4467-a52e-9aaff2e70d30", "sighting--2ee30e3e-48a8-41a3-9f43-2a2fccf2ae54", "sighting--294aa78a-7153-4a56-a5c6-5bc4cd6072c3", "sighting--c377357d-0afe-4d67-b0ad-f92cb9823d04", "sighting--d078bd53-98a7-4da6-bd0f-b94d74c12f49", "sighting--2c8a76fe-f4b1-43ac-88e1-f7b91097f57e", "sighting--93507a3b-e124-4d63-bb79-0a0b5e959a9d", "sighting--fafb715f-37b4-416b-9afe-5350ef650dd9", "sighting--ede07937-7790-4914-a456-627f562b00b3", "sighting--9277d39c-f762-403b-b7f8-a5355052c558", "sighting--4e662651-fc1a-4134-aed4-c8a61817f732", "sighting--bdcff6d7-b117-4909-a23f-d963fd3c60ec", "sighting--4e4b3ec8-9583-4744-8f28-a7a7ee25a748", "sighting--8b1b1d61-1a84-45d2-ae96-1f626ebe4805", "sighting--f1858cff-6873-47a0-bb05-a2578f658269", "sighting--bdb3b531-6287-463e-93c2-f0d547bab849", "sighting--ba6ec208-a038-4be5-b35e-4ad6eae108fd", "sighting--326c7dc4-b5c4-4c32-874c-2f9ebe3fbf18", "sighting--238f5f8f-d5ad-4548-9066-f5284756ba99", "sighting--903712b7-e432-4573-84c2-be18882fafdf", "sighting--fcc45f65-c548-432f-85a0-ddcbec503a2d", "sighting--83020085-94ec-4138-aa5a-c5e9559764ef", "sighting--db0d89c1-b954-44e4-8e02-26d3fa11808d", "sighting--71568efe-08a9-497d-962d-4c4a5ced404b", "sighting--f53a9b25-1355-47e1-ada9-97f98936d3fc", "sighting--6f1a1a90-be7d-411b-ba33-0ad8393deb55", "sighting--1fcfc28b-9591-4225-83f8-818c0d1e4ef2", "sighting--b93ac49b-2045-410e-b533-202c3abde9e1", "sighting--1f0f205d-85b6-4360-ae2c-5952289f1d30", "sighting--0c023505-4330-4471-9215-a601fae46cf7", "sighting--39b1511b-3ae8-4448-9a87-e9230325c0b9", "sighting--5afef74c-a937-4432-ab03-cf996e2b5e85", "sighting--dc6d0caa-45ed-45e3-826f-791f4d32e208", "sighting--c03bb54a-0a1c-44b4-b0be-86f799dc0464", "sighting--3399eba2-fbd9-4f80-9b2c-2752f4128a67", "sighting--7d273d60-a76e-47cf-ac9c-dc1f25905b2a", "sighting--d9ec3d49-e246-4a7c-bfa4-685d4022987b", "sighting--3134de23-d62a-4c5b-9afe-a06e9e323e6d", "sighting--75b8340e-9ad3-49e0-bce9-792846f92f06", "sighting--31ed4ab8-ef5f-4038-9b53-ebf8248d4d75", "sighting--5ef84ab1-c9b9-4849-b16c-7414c3d7b2dd", "sighting--9d4c2bfd-d6f1-4e2c-a758-dda639bbf458", "sighting--29dc4652-7e2b-494d-a0c4-7b5037744412", "sighting--a2a9a5d5-a9b1-406d-a8af-b3906ab23edb", "sighting--814c8f35-b6e4-461a-8fa8-223b7e609cf9", "sighting--c8b7aa38-1473-41e8-abbe-ec6f4c80b1ee", "sighting--3bf6ec0b-1de7-459f-9e5c-853bd9bb64dc", "sighting--f54967b1-baae-4746-b3f3-39c0135b0587", "sighting--e1fe86db-232e-493d-b9c0-9278d8da96fe", "sighting--40bf6aea-b1f9-4f4b-abb0-81be7a04a969", "sighting--081c391e-c908-45f8-b8ed-521c334d68ff", "sighting--f32f045c-0d4b-4d02-9b29-3c15757567b0", "sighting--f279359e-2701-42a9-b9ef-37282b1f9b2b", "sighting--45132ed7-8004-469c-98f5-4dab10100a5d", "sighting--beb12754-0c4e-4b6f-ab1c-a47ca0560a1e", "sighting--9f154f69-de27-40dd-8910-a6538ffa4b2e", "sighting--b784ec83-2a35-43f7-a2a3-9946ab60cb65", "sighting--be27f6a3-da9a-427b-96a6-fa91dd6a1177", "sighting--0a589149-14b3-45a9-ba1a-68f15d6a95bd", "sighting--31ef58cd-6625-4e3d-825b-edeae44fcd66", "sighting--14910160-9496-4685-a8f3-606d9293d9e3", "sighting--7e89fba4-caf6-434c-bd42-8487bcf37cb3", "sighting--0fe1ede4-797e-43e4-b81b-213f925daf38", "sighting--3a524281-c2ad-4c7d-b8a1-b63906975f2e", "sighting--dc7d0357-8d03-401e-93f4-85441a541e33", "sighting--81f339ea-5d44-4abe-a1e8-b65aab82cd9b", "sighting--37600504-5bd6-46ed-beb2-cd2dc1b09bf3", "sighting--51e47a99-f870-4639-9c0c-3727d8f9d352", "sighting--17e77286-88cf-432f-91e7-0e7f2eb0268d", "sighting--98d73b6a-fc12-4df0-8a2c-be17fb4cf3e1", "sighting--d4736698-1414-4342-a909-c6317826ab74", "sighting--b7b1af89-005d-47cc-93ef-9f5e0db29b45", "sighting--a66efa1b-6dab-4510-99e2-2751f13b34af", "sighting--90132cd0-5695-4dab-907f-bccd16b5bcbe", "sighting--cbd7a4ec-cff7-484e-b244-731123a5af86", "sighting--c4570126-02b4-4bf2-bbf6-d7c3082e7fca", "sighting--842bc312-6129-4b79-8862-f24709ca809f", "sighting--5ed8252e-85cd-46dc-989e-a363bd534056", "sighting--3dc34f65-e60d-4fe8-8dde-218cfa6bb868", "sighting--99bee2fb-94c7-4aeb-be94-3d32b0e2d3c1", "sighting--aaf8c330-e9d8-4dfc-97c9-7ec480f5fc55", "sighting--704460f3-456e-4a3e-9a47-77aab8d7b588", "sighting--f2218bd5-0e56-4bd0-93ce-585a395c3e48", "sighting--a265d3a2-1103-427d-b2df-ce796d79e9eb", "sighting--58057654-5cd4-47f3-be75-89abe35ce491", "sighting--a82b707e-9909-4b7e-a81a-a52657541575", "sighting--ac953bbf-54f8-4b19-963f-bf5715de3401", "sighting--dcbcf497-d4ac-444a-9115-3209425f5bd4", "sighting--cb75897c-6dac-487f-8b42-bfb7dd46843e", "sighting--ea2e00ac-6e85-4df0-a1d7-4d20760d5aae", "sighting--ba480b2a-c456-4944-945a-f8955e8c9262", "sighting--958c5557-bc3f-4b35-9ad1-ab95056e29a2", "sighting--7aa7ab36-778e-4b09-b077-318de40c429a", "sighting--6f13f0ac-afbe-40cf-99c7-b63630ec0c7e", "sighting--db002d21-eb13-4378-b12b-9403e892cfdc", "sighting--cdf8a7cc-6cb4-4a0b-888e-2d0bac78e4c9", "sighting--d3e2c7ea-e1fe-4a71-b9c8-c743394fb89e", "sighting--535ec44d-6fd1-476c-b753-7af401a8e73a", "sighting--cc44f916-4871-49cc-81f7-82182366479f", "sighting--323b5bd4-0722-4653-98b8-cb95af86f321", "sighting--6bcc3334-f3c0-4bc1-a01a-57676735aecf", "sighting--854f02f4-339a-40ef-85e8-2ba991b43c3d", "sighting--efe2dad1-45d5-4f7e-8bbf-f2481a7cf8b3", "sighting--4b9a31aa-82e4-4830-8577-c48d085ad6f6", "sighting--9bbe4fa0-300e-4b8d-8e2e-8a8d188e7ac0", "sighting--60ae18f7-2a7f-48b4-9159-80b0d30525cf", "sighting--f7062d9d-4cae-40b6-9ef3-88ea86c7f089", "sighting--64fb81b0-b328-49c2-9454-e5903ef65a53", "sighting--055c992c-4b12-4262-bace-c7c0d1c8cece", "sighting--421dd4c9-973a-4dcf-a5a5-1d222270548c", "sighting--a4a23ee4-817d-4c77-9324-f9aa841bed62", "sighting--c8e6ed87-dc6a-4131-9958-70f6e5627ec1", "sighting--2dc2409f-83ad-4b38-b8a7-48366e9d8b4a", "sighting--f3b69524-68d0-407b-9f74-5beaa548210b", "sighting--5dcb2c81-c1a1-498f-a71c-44e1af15c3d4", "sighting--74f7891b-16d2-478a-a95e-9151f0195a35", "sighting--114ef8db-de8c-4f87-8ac9-1a0091e5867b", "sighting--e01cbf4d-182a-4f91-a70f-7c4735cfbcdc", "sighting--0f663148-9789-41f7-8cfd-fca48efc9df6", "sighting--01645a37-9fd6-4ca7-bde2-65e954b8d3c4", "sighting--452eb64a-06af-48c1-9041-055d799f8467", "sighting--ee580f08-4cec-4a1d-a3e4-1f8d6cac1ec4", "sighting--8bcf9d8d-44f3-40de-8084-84a992474869", "sighting--3b52f871-9eec-4341-9951-91f7db96f728", "sighting--4c62035c-e6fa-40f3-88a5-741a1f7eea12", "sighting--b2a05842-264e-421b-b77f-24b7098d83cd", "sighting--edaae70a-ff8c-4fd6-9809-4d02a22b0728", "sighting--e00141e1-0ae9-464d-a08c-6f127397ef35", "sighting--81266e00-0e85-404e-bd93-9185bfea4d8d", "sighting--878d6e17-6cdc-4f9d-9bbd-cce46ec77ec7", "sighting--9d7fa695-b2b4-4aa0-8d7a-a32d1d223495", "sighting--e5303f5e-25b6-430f-b3e6-bbe4e5373e45", "sighting--67d2c8f2-9b2f-442a-961a-5e3cc72aa973", "sighting--e5b899f4-e8df-4997-933a-c13929c2096a", "sighting--08bdc712-f294-47d8-8475-60e657aebf6d", "sighting--ba170c96-588f-4318-9ad6-b2d7f5f1ffae", "sighting--88e33927-e430-4eee-86f0-be378dd67db0", "sighting--0f94f7fe-a1af-430a-b8d0-a44d5b6bed2c", "sighting--41656cdb-eec5-43a0-a4e4-7fedcfa322ce", "sighting--746533ff-5ab0-4b4c-99ba-e425ccae236b", "sighting--6c82b502-bc85-4203-8dc0-d58dfce3a4bd", "sighting--10cfded8-3c7d-4c38-90ea-0c9aeb164aac", "sighting--c79fa707-e711-4070-8c5d-2d339e376fc7", "sighting--b574cbf1-c2de-421a-8cf2-5f699e230a90", "sighting--43f5dbf8-5803-4f7f-ad0b-c06fa7fefe58", "sighting--70f7c92d-d035-4805-9c37-28d8ae694938", "sighting--85b35ffd-5017-430a-a2f8-36ba21375f0c", "sighting--9d31a581-16a5-4d69-abb5-dec26e2b9f37", "sighting--8d183eb9-13e2-4470-a21d-b5493ba033e1", "sighting--8af55de5-7b83-4c1b-9177-292bd6ec4c85", "sighting--3af3cb87-6e6f-492e-b77e-2f4e046dea1c", "sighting--df2788e6-aefa-4d5c-ba41-7ebf50fd7c4b", "sighting--10e32207-4562-4c1e-861d-0a45310cc22b", "sighting--bc8bf87d-e87f-4f68-bf99-b50aab71f002", "sighting--f9c78339-a62e-4556-93bb-201fde52ebb7", "sighting--e426aaaa-65f5-4db0-91ab-88dc72805a40", "sighting--faefac9a-cb81-4dfd-a96b-d978ba075f74", "sighting--852e36fa-7cf0-49c7-9a5c-d6a9ad77309c", "sighting--7071a2e1-a640-433c-9d2d-18db447159b2", "sighting--90e92872-5c84-48f0-a72b-1678358fcc36", "sighting--8fcd1ae4-6ed9-40e5-8b45-1c734b400fce", "sighting--04339bcd-37ab-40bf-ad7a-0164f31aef9d", "sighting--5d5f2944-7ed9-4b73-a63d-f0f180ba90bd", "sighting--07399088-6509-41ec-81b1-169934d1baf0", "sighting--7d92163f-20a0-420f-8091-66dd0540c387", "sighting--0a8cb38d-6d71-4d1b-9799-04a577746ec0", "sighting--a94da688-3faf-4dbd-97d7-e66fe09a8948", "sighting--3e96a934-8272-4846-a58c-bc41f99993b2", "sighting--8315b35d-1ecb-4f6c-9e95-f340c6c5a83b", "sighting--d40d227a-7016-404f-99a1-fc90f12dd743", "sighting--9bf96edd-b994-4a1a-bab6-b6e7f78a5700", "sighting--deffba12-52c7-42ad-9059-2eb06c5d7907", "sighting--80a0a983-a69c-4092-a8fe-5c4946e60ebc", "sighting--b7942ac7-31cb-4b55-a4a3-ad783064bb3f", "sighting--c2319aea-6a06-42c7-aef6-c377d24ff1f0", "sighting--69b8c15f-0f60-4dc3-860e-7e410a0c3965", "sighting--53c1e4e5-d329-4eec-bbaf-612e0dafa9d9", "sighting--ddf72d35-4d27-4ff6-9dd5-ee2a00fc9724", "sighting--d18d1453-bafb-4d4f-91ed-fe43f1912dfb", "sighting--da736d2b-8b33-4500-ac91-bd430c6d0c90", "sighting--219c1bd6-11ca-4834-ad35-6a9df14964f0", "sighting--f3cf405f-bbd1-43e5-8de3-b90b07813515", "sighting--1eea7a83-7d51-4edd-a1f5-58cb006333e5", "sighting--605f37e3-aeba-4cf5-8166-4b9c5795454d", "sighting--33eded1e-6b73-4acf-b350-456f56874663", "sighting--9ab88c06-748a-4b89-962c-ca5e56f240ac", "sighting--119121f9-d79d-4731-82de-5acd03f669c9", "sighting--594c4b28-535e-4cd4-9e40-bad54f8c75c1", "sighting--82d51cd8-d561-4d30-a61e-802d02ef9449", "sighting--113f7ee7-0a36-4693-8e78-e2823f9b9d34", "sighting--c1f75d85-4719-4a1c-924f-aad61b0af1c0", "sighting--c80480db-779a-48f5-97f4-62196dbb74aa", "sighting--48e7d4fc-ad23-4123-899d-a7cb11389e70", "sighting--fc3c2465-a52e-4308-af43-a007547c2e5e", "sighting--0845c36f-5d3b-4e25-ab26-e9856a042bd9", "sighting--66b0c0dd-ee65-4292-8265-7608c63ab7ae", "sighting--069b60e0-2d2d-4ac5-8238-ba9ecf513a24", "sighting--ee610ebd-c462-4c41-8a71-11889cd0588e", "sighting--bcbfd90a-a1b9-4f61-a6fa-f03833b9050d", "sighting--000f2ac8-0145-4f01-b4bf-c44c63b84c7d", "sighting--6ec26e78-e32d-4b4b-96cd-a9df1bd72191", "sighting--5ba2ad23-9f35-42c7-a18a-417663793ab5", "sighting--2b88dcaf-1880-4b27-ae94-ec74877a8d9b", "sighting--6d51a890-71c8-41ed-a8d4-2a134b98193c", "sighting--ec684335-e3e2-4f35-8ace-2f6181e8c9e5", "sighting--f7587436-90a3-44ae-bb06-53469214d965", "sighting--e42a91c9-d7a3-4ab4-8e74-10a5384d5aae", "sighting--cd94ae06-d2b3-43f7-beaa-a5f9082aba61", "sighting--5c88cb0d-4d3b-48b6-8389-d9dc5601846a", "sighting--14abe2ce-243d-4000-9711-a91dcc9cb624", "sighting--ae963413-bee1-420d-acfa-a296068ca462", "sighting--102442dd-0c23-4e35-8912-9fb66c57afa0", "sighting--ec2e2919-6a31-4d3a-b095-01a66ce20187", "sighting--5f721c87-8e91-41d8-8919-051ca630ca12", "sighting--9d83d384-76b4-4976-bfb8-ee97cc26475e", "sighting--eaad400d-5b46-4800-b043-9e3f91561505", "sighting--4f4e2550-f6f7-4458-b32c-cfedaf322c8c", "sighting--50f65df6-de3d-4982-bb4a-bfe5a871847b", "sighting--8b104f34-f2d0-463e-b37f-f47c15964e83", "sighting--6919fd14-797e-4a53-907f-35fec039a2bb", "sighting--ab649b7b-6d69-4cf3-ad77-7152e3f9238f", "sighting--210f1798-de8c-4905-8692-fba532d34eba", "sighting--6ff977a5-94b8-4526-bdd6-4cad31c9f4f6", "sighting--bd795777-3d59-4a20-8223-bda20db66ba9", "sighting--29912ac9-ac8f-4c29-b9a7-85692571caf8", "sighting--60bb3d97-dc3d-4b94-819f-505f2da1a5e2", "sighting--1bf7fee8-c870-4ab3-b30e-df44254dc9bd", "sighting--d52a15ec-0996-4499-913e-6de0e880fc08", "sighting--1348232d-b3dd-4985-be58-19c912ebcad9", "sighting--55bb9c45-1ae2-4e9c-8f55-5753b2824379", "sighting--24832f63-71da-4c1d-beb9-825eb9e93c31", "sighting--f61167a2-8796-4cf4-9e35-8396bd844156", "sighting--2581b0f1-4e8d-4294-8f4e-8ea37667013e", "sighting--16fd103d-c0ca-496c-9149-d84e0b6c85a3", "sighting--93a1cfa5-94d3-46b1-9875-9958ff7ae9d7", "sighting--194b3ab9-cd17-43ae-92d1-cf6079749260", "sighting--235ca0ee-31d5-42f7-94dd-de61a1d032bd", "sighting--79c603f9-4aea-4cc5-a9aa-13992ed23157", "sighting--24249c11-f8a1-4d07-bd8b-4a5aa03763ae", "sighting--9b5b7509-6356-499d-bbe1-d46c0ef6b678", "sighting--553d1275-62f1-4f62-9dc8-ed8673efc8ec", "sighting--430bfb9c-8f93-4048-9db5-1341590ac5d7", "sighting--a3e79b1d-c71f-4c30-b2c6-ccb1bbf6d484", "sighting--022ba790-7a57-47b3-90f3-d722c83d257f", "sighting--a90c99b7-e647-4c45-8d5b-656f93732e28", "sighting--447f4f9c-ddd6-47b7-a23f-c14358e6b838", "sighting--78692151-7bb6-4646-b32e-318c311c82c3", "sighting--2272dccc-82b6-4838-a238-7f852553dafc", "sighting--06b60f58-4687-480d-b233-316d9f1c00fd", "sighting--899b44a1-ee40-4579-b432-1a09d49164b5", "sighting--51c68ccc-ec0a-47a7-b9f2-06b5e48b66cd", "sighting--6eeb18b3-0bdb-4de3-b232-c90d74a3da82", "sighting--cbb51c3b-b5f9-4a8b-ac52-71df87870d36", "sighting--44668872-7b80-4710-9f04-c53066ca0b3e", "sighting--e96369d3-62d4-49e2-acfa-abfc76e48b8a", "sighting--2515a939-bdaf-4cc6-90b3-5fbf2c1ef4b5", "sighting--84e1fdc4-b386-4cae-917a-9b172e8b5dfd", "sighting--178cbeb1-e9bc-4026-a5a7-4958c5d1c448", "sighting--8fafec50-056d-49d5-9683-4f99ec8859da", "sighting--c6730f62-0dd6-473b-b580-87c0be2f6ccc", "sighting--e3b0a462-af8a-438d-94c7-de3a43bf7ba7", "sighting--1b923b98-20c2-4cbb-b4d1-62e8e07059eb", "sighting--66884a10-53fe-4703-9927-bef503ef4a27", "sighting--7e10e4f6-9164-45be-9dc7-f729e94e463d", "sighting--88e90995-a1eb-4ab2-9b97-438d94834d72", "sighting--130585ff-ffb1-41f1-b761-1543eb423ca7", "sighting--d0a97620-cbe6-46a9-af2f-800d2e638abd", "sighting--3213840e-91d2-4069-a93c-da594dc2d4c5", "sighting--edfd5061-5ac5-4cb1-8313-fcbcfbcd37d3", "sighting--8d643960-fdad-49a4-8c8d-b79f1ab65662", "sighting--b88670c3-8e41-45da-b194-118dd301ec6a", "sighting--84398593-7e79-4f89-a3e4-c111e4b5d5e0", "sighting--4d4bab94-c3a9-402b-a5e7-be6257fa4e35", "sighting--6719116e-b722-4c01-8b7d-6b79147adcd9", "sighting--a5c1553d-da4e-454b-ad5c-f59f3ae40f8c", "sighting--0d31c076-eee7-40d3-9872-8840fb76316e", "sighting--63eadc7c-b98a-4262-b531-34eabdce9ad5", "sighting--0b2caf29-c716-4c4e-afe9-c1332ab7d5b5", "sighting--afd1724d-fdbe-4aaf-86de-b8caeb15dd50", "sighting--30e5266d-c100-47c9-84e6-a2c12fe3e1ca", "sighting--eb959243-d4ad-450c-ab80-93622c5f6f3d", "sighting--43bc4edb-352a-4467-ab86-4233d3b7cbe4", "sighting--422f71a2-8d5a-48eb-b4c6-4c2b1a033c04", "sighting--63b4c1c8-551c-4558-8121-3270bccb69a8", "sighting--cafd946a-6526-4d6b-9f4d-be54f4a47b84", "sighting--efad9db3-7c18-4656-8972-988d5c36ffef", "sighting--76a19d65-72df-4630-b38b-517f5be6d486", "sighting--365a96c5-3c98-43ae-bca0-f6f2633b0694", "sighting--d106627a-4fbe-4d20-895a-d703eeaedab2", "sighting--5d4fb72d-cf2e-4ff6-bb7d-96365580f973", "sighting--baef2750-643d-4bc9-9da7-667b9a66d449", "sighting--caf61bc0-a2a7-40ed-8b5d-6b2974e8bee3", "sighting--d938d164-f76b-4f9b-a716-a21627b7f576", "sighting--07d1e584-9fd5-4527-a73c-987af9084f8a", "sighting--25e68e2b-7154-4e28-982e-854298481b0c", "sighting--2183e943-3062-4ab1-8e10-763427bbf9b8", "sighting--1283f21d-5f94-4b9d-8c26-630a5d20723f", "sighting--81f2cba0-a439-4f84-9ebe-9cc8a0330aef", "sighting--a325b0af-2f42-472e-925a-e9accd778afc", "sighting--10fd09d4-d8c9-4f30-940c-6da4927a6c93", "sighting--3be15538-cdb3-44ff-9c8b-5d38b2d9144e", "sighting--013aff34-8b48-470d-a7c2-e4826f845d87", "sighting--eab11912-11cc-4202-985b-295a3c42c1cc", "sighting--61d7555f-c192-4db4-8ffb-aa00614e7c26", "sighting--237610b8-4db3-47c4-b7fb-c600f8964b37", "sighting--37f6378a-cff2-4a41-ab1f-2469535fd495", "sighting--4168a45d-d465-4157-8bbc-5482173568f0", "sighting--6835da40-2d27-4fe4-b727-390a865e6815", "sighting--9b152a9e-c277-439b-b89d-c3dd300fa140", "sighting--ed4fdc45-fbd9-4df5-b149-84f57431171a", "sighting--5c3a57f3-42fc-41de-962e-6d550138c91d", "sighting--bc90240b-b28a-469f-8261-b26983bfe531", "sighting--6df23a31-60ee-4536-97e3-73365cd943a1", "sighting--11ac77b6-4983-45c3-a448-9b9d83b4b460", "sighting--7dbbf019-a797-49b3-8c3b-6ddcdb6a548e", "sighting--d43f7696-f46e-4545-847c-358203e6a257", "sighting--de2f2730-c23c-432f-ae0a-6a91ecbc5636", "sighting--a6424f00-76f3-4968-89ac-793afad62bbb", "sighting--bdf7c86f-e26c-4628-89b2-7096b10ba23f", "sighting--15751e12-e5e0-4ce0-b9b6-8d594e498549", "sighting--84df8d36-58ec-4573-ad62-f11002f183ac", "sighting--5b8a18c0-59b0-4bdf-a2bd-4f127f5f6e9d", "sighting--c5900df1-f1f9-4028-8274-466536a3a9b4", "sighting--1b230974-5383-4e93-af29-3191f03b9aca", "sighting--12750c22-2fe0-4cd6-9002-1e2cd002b023", "sighting--cc727b8a-4eb8-4c04-a992-de8c877022b3", "sighting--416e46a2-03bb-42b3-bfc2-b37aad391821", "sighting--3726b943-bde7-4c7c-85ae-0454f9f4c624", "sighting--52ae5b2e-2521-4633-bdfc-c18884c604d7", "sighting--da7a421a-c55b-4042-b46a-1f383acd8080", "sighting--f764f805-e520-4a89-bd6e-61ead707f6e2", "sighting--3df4a4e4-e76c-46ec-8cad-65de4090fd49", "sighting--cea4436f-f395-4181-bef1-fcf016691de8", "sighting--d6c772b1-e5b1-43e3-9563-94592a74db72", "sighting--54a9ade1-bf64-49d8-ace1-a82b73fda645", "sighting--061b4314-b560-4b55-9d2d-130f1dde9cb5", "sighting--060d5c20-7bd7-4d75-92fe-c6eeabefbcaa", "sighting--d82de236-b405-4a65-a0ef-52224015edd6", "sighting--1f04d2fb-c618-41a3-bb5d-b8575ae109da", "sighting--d4bdc875-483c-469d-b11b-757686813088", "sighting--6401c921-e4a0-4c4c-a50c-7e483cb73f2b", "sighting--bdf256b6-95ec-4e94-9635-1a20e842c8f2", "sighting--eb5de363-4979-46ad-a886-5f8792cf30c8", "sighting--b732636d-3396-4bd8-bee3-ceb887f01b4c", "sighting--15bb7067-6c04-4838-be2e-8690c3974aef", "sighting--655ba420-9ba5-480f-a2b9-b0b113f3ebc7", "sighting--263ba023-57b0-4eee-8ea3-b95e003fbf13", "sighting--c6004233-454b-48d9-afab-9e752067f4ca", "sighting--0cea547f-6e47-46fb-914d-c14fb63bab7c", "sighting--cba56e6c-5b85-4cd5-ab33-2693240bcc8d", "sighting--ddc2fcc9-506c-4b8b-be22-0477aea48602", "sighting--99fe006c-1a04-494f-a589-f6836d2f465e", "sighting--93e78c9d-e5a4-47c8-86aa-f81eeec8a871", "sighting--01120ac6-5625-44bd-97c8-15aff3d0b6e0", "sighting--37e14718-1767-42a9-92ef-5961e6f96be4", "sighting--4f8862ca-48f0-4291-91f3-b67b49f6ae5c", "sighting--496d33d3-49dd-4b76-b247-6a83eee31eac", "sighting--2b059a9e-a5d5-4cf1-9345-dbbee76f52f7", "sighting--2a697da9-ffc8-4d71-bb10-9bb93045b035", "sighting--fd5674b9-cf22-4cd6-bbf6-4808f77d0af6", "sighting--c639571b-9c59-49ad-85f9-a860235de6a2", "sighting--d3dd3215-3ba6-41c7-97d1-850a3dc426a1", "sighting--be95c897-86d2-48ce-9539-2682917352a7", "sighting--962d3f41-20a0-4232-b222-e79d321e0100", "sighting--e8d0de10-ba34-407d-8d71-c2dc5e522a17", "sighting--d7a43f03-6213-4508-bf00-4d4bfee67fe3", "sighting--89c7e942-0cdb-4e0b-af49-e82c92fed87c", "sighting--907d2da6-68a5-466b-a10f-d18fe0ec9fc0", "sighting--5988ac72-638a-4ece-bd55-90a91e3f257a", "sighting--4c7f58e9-e988-4041-9aa0-05d29e62b5c1", "sighting--c00c1f3e-ea73-4c05-ab2c-f7de0b9c0792", "sighting--e8415f65-28db-4adf-ad95-9695c622807b", "sighting--cee03f86-f6a4-426e-90e8-01f5338cc119", "sighting--72a1b0e0-2558-416d-af7d-00de7b19745c", "sighting--d767e2fb-d418-4900-9382-d36650bca16c", "sighting--0dce5898-f25b-49aa-a866-d65c39942d21", "sighting--4f926477-cdc6-4e06-a352-eaf9a9c7d485", "sighting--118da51c-a50a-4bb1-bc57-c6fe777199e0", "sighting--d0f12200-4997-4a71-95fa-443c7b5af711", "sighting--571d4a8d-077a-4d82-bda5-9297da85a099", "sighting--39caa334-98e2-47f0-890e-da9f7eecca54", "sighting--4c6d0217-aa0d-4c90-9e12-00d9650f76dc", "sighting--4c4ca4f7-8eb2-473e-8d31-5da6031114a1", "sighting--4633c9d6-d743-4362-adc5-c96d10b7fc5d", "sighting--57aac562-6b89-4bc8-93e7-01c53e52776b", "sighting--03b5fc71-4155-49a8-a8b4-53a22a33eb57", "sighting--75e69614-8747-476b-9698-b50f391b6178", "sighting--f2bf2c8f-4fec-467f-83f6-a354dbb30d6f", "sighting--bbecbdfd-50ae-4fc4-84ad-84d484d63bc3", "sighting--201abe5b-f131-4d31-a14c-d2bb4c57290f", "sighting--5f75505b-e8b0-4437-bc4c-8f11f7891388", "sighting--6b9a0bf1-bc28-4f27-91ac-711ac8a96b76", "sighting--11ce8820-ed3a-4a78-8b15-6376604d3976", "sighting--29da5eef-f2cb-4846-bc37-17af43c227c1", "sighting--ff1431d7-2c42-4539-aa3b-2e1d1d9f0677", "sighting--9e1b7195-74a1-4a10-b04a-7b0867c79599", "sighting--13ba0f4b-46e9-451b-95ae-8cdfab2932f7", "sighting--0b0d493e-ffd3-41da-8c40-cce1cd1ba659", "sighting--498ce207-547a-4223-80ad-b28218edc5a7", "sighting--c5730957-73e6-4227-afc7-e83d833c8d3d", "sighting--eab7f862-b72c-4ccf-b0c7-9192b574ad7b", "sighting--e702e9f8-3273-4bd2-b798-bcf897b8678d", "sighting--782583e0-3b66-4bb7-8652-5885f905215a", "sighting--f530f854-916f-4370-8ff6-d5eb687a5efe", "sighting--4d70a4ab-df28-4242-a4c0-0eb15cb401e3", "sighting--f88eec10-07f2-43fd-ad44-95aa782f0ab7", "sighting--efbe34b8-4514-451a-a9fa-44ed4c4b60a2", "sighting--ea4aa812-beb1-456d-a583-4308f716c4e8", "sighting--e4e74564-95e1-4f7c-9f71-650ec5a08ad7", "sighting--e9ef0a8f-adcc-459a-b09a-fdc4b4ac9fd7", "sighting--3e65f329-a216-4c64-8cda-45a18b32ca1b", "sighting--bad22aee-65ad-4f7a-9f37-809ff9f7c49b", "sighting--be244bca-7ef0-4b70-989a-ced3adb3e810", "sighting--2710913b-8450-45c7-ab96-928ba1d8243c", "sighting--bc1b0075-0a7e-4bec-8af7-ce70aaf21ec8", "sighting--e1e9d076-da64-4483-9327-09e5301f38ef", "sighting--de7b711f-eb13-403f-827d-5d89dacc5f0f", "sighting--69ff9819-07f8-4ec0-bdba-021171b24d98", "sighting--73869d7b-5bb4-4185-887b-0593e1605146", "sighting--ba5f3acb-45df-462b-b61a-4c340c0428ac", "sighting--3d2d6231-336d-4e86-863a-6997e179d414", "sighting--2b88715f-4d5a-4a6c-83c3-ee937b1e16e0", "sighting--cf996017-f1bb-412e-8457-f07337af44d6", "sighting--4eac5432-31a9-4d94-a453-79f48bf3f8fe", "sighting--48a16843-e39e-42c1-821d-1d3a93558f27", "sighting--8e5bd856-11b8-4273-84e5-f08ac59114d3", "sighting--d845b9d5-47aa-4de2-981d-d6316e1204e0", "sighting--77c1eed8-c519-4ae4-b72a-af8096dc915a", "sighting--3375c0e1-b4d3-488e-8185-ad4224765c8b", "sighting--f40b2384-e68a-477b-a047-5093df9bf1c0", "sighting--c405a3cc-ee68-412e-9cfb-a0171772a75c", "sighting--5f36a7da-7394-4832-88a7-c4bfe7b66b95", "sighting--f1a45d84-b08d-4441-95a7-170554179e70", "sighting--1f18faca-51cf-42b7-aa7d-d4b09c48fe82", "sighting--60ce0b1d-89f5-4a67-a6e9-9de5bb63b6f9", "sighting--f5790729-b698-4fda-b6bc-8f4679047645", "sighting--b2ace07a-005a-46ce-b4ab-818e58dc90c6", "sighting--c9ccbf6e-09ec-4ba0-938a-4c5f4bafa9a7", "sighting--d331c26d-ea27-4c42-a205-1d51729bed8c", "sighting--22311af3-f9a7-4d63-9711-f157bf53ff6f", "sighting--7edef92a-6df2-412c-91a0-5ef42f91e58b", "sighting--752819d8-47ba-45e3-850b-dd65cc03bbc9", "sighting--83cc7cad-a7a5-4545-9054-9d47ac2cf702", "sighting--a3431c6c-20cb-4d36-a174-75772e675d5d", "sighting--f1c3bb08-4e18-408f-b19b-eed56cda6800", "sighting--f69c6c3f-6027-4f41-ab7b-49a8bf50a258", "sighting--32499e5b-a93b-42ee-b657-bed4f6b18af1", "sighting--ad5ce040-3e5f-4dd4-aadd-2ab4e7fe031c", "sighting--ca57baf8-70c8-4bfa-b65e-e92ccd302acc", "sighting--fb2858d2-74d5-4378-841c-aa4a1a3b1793", "sighting--f868911c-778f-4d02-8c9b-45bc71f60aff", "sighting--bcadbaaa-5755-482a-9051-82760d8d990d", "sighting--af81e77b-98b5-4a27-8218-0ec2cdf161f6", "sighting--5181337a-38fb-4e55-9bbe-359fa9d276ec", "sighting--83d20325-129d-48bb-92ae-705eef197ba2", "sighting--84ef8bed-432c-43c7-9293-39a64362367c", "sighting--bad7b6f8-c62c-454d-a5c3-c92ec6303a48", "sighting--8633772b-af7c-415d-aafa-0787d33ad65a", "sighting--a9c5210e-6b9e-497c-90ab-1eafa33bc2d3", "sighting--e6b4e9ef-76c9-40c5-bc0c-5b2c5ed3f84d", "sighting--52fe38f7-9a4c-4b87-bee4-90d369303632", "sighting--c326f6cb-5eb8-4908-9b35-c1c6b21e6ad8", "sighting--d6273c0b-8d6f-4dc5-8d28-4c8557d7572f", "sighting--9de6f2e9-016d-426e-a4a4-09633fff34f8", "sighting--300520e3-67d2-4879-80a5-4cfcef3492cf", "sighting--2cf72ee0-0eee-4a57-8b57-e665430db778", "sighting--9d5f51de-080c-45d5-9668-0e7ae00c54b2", "sighting--c460e619-bd68-49c9-932c-d0ff1a728012", "sighting--c64879a6-6c44-4de3-a0e8-fda4aafdde46", "sighting--6658aa6e-557e-4db3-8e1a-0f86da941e62", "sighting--4ebaddf8-1fea-4eee-9bc9-6aea6ba8f067", "sighting--24efede1-1a02-468b-9a1a-717e442c499b", "sighting--944ae25f-4086-404f-bc38-a51cf6dcec25", "sighting--1b2781a6-d813-4434-85c1-dac4f87b3f04", "sighting--3e4ee940-5096-4cc2-80d7-b1c4cc55fdca", "sighting--16b70f67-3e2f-4f56-91d1-ea1fd381f8a2", "sighting--19a515bb-ef48-4a51-a1af-f72b47424e85", "sighting--1968c550-ec12-49af-b5aa-b0395b80da88", "sighting--23cf85bb-43a0-424e-811a-874f3c582832", "sighting--f553e199-b30a-4bfe-86c2-80d4780714da", "sighting--aeb14373-6789-4545-9fb0-5810e7cf45b8", "sighting--301f614a-11d9-44e4-b776-9231c6366ea8", "sighting--2dc785c3-fba9-49f7-9f94-b63bf0bf938a", "sighting--f705371f-130e-4e10-b81d-fbf5216a880e", "sighting--84a181e4-da90-4bc5-a8ba-efada688d204", "sighting--12b3f2f8-4d2f-4bcb-a5bc-247cac35333f", "sighting--605b4bcc-fec5-4378-b3a0-c76d7e1d58fa", "sighting--136cdf89-a8db-4bb6-94c5-c3a71fe029a9", "sighting--857f1ed4-ecc1-4985-bb1d-dd375f251b0c", "sighting--5e6dec5a-e248-4e70-8f86-5d266c2f215c", "sighting--903f19d5-096e-4d83-be38-011b0971060b", "sighting--6a278cf6-56e0-41ea-ab80-d20dac876c63", "sighting--94936a97-f14d-4791-9193-57547bfaefea", "sighting--3e318d59-50ac-4d88-b29a-e06752a8f59a", "sighting--39a1b621-d979-4be5-a3a5-7398305769b9", "sighting--5f478a96-eec5-4ccb-a910-2b9b1a2defba", "sighting--22260fa5-9a78-42a9-ba0f-4738509d9516", "sighting--33a22f11-0b43-48c5-aea0-c53e69962a37", "sighting--09669719-3f48-4215-97d9-83ee2d00e9ae", "sighting--46e5ec1c-7430-4da1-8264-b49d4553e5b8", "sighting--3fa9036b-3d78-4aa9-9b69-aa3d2a655373", "sighting--7b1d001f-8cf9-4c27-bf20-f28f8e592fc9", "sighting--d510a165-3bc4-4204-ab23-70fde1309deb", "sighting--3021291b-8ae3-4cd3-a39c-559a59845dba", "sighting--7a31e34c-d31a-4346-9a30-56affdb71b78", "sighting--2b38fd0b-76bd-4ebc-bf9c-e3cb80acda23", "sighting--473635ae-fd87-4217-a651-afa0402584f8", "sighting--b33d2825-990b-4b1d-982c-a42550565971", "sighting--561726fd-a18f-4ff1-9e71-5aa54970d410", "sighting--2a81ea61-1205-436d-9e50-e7a9c4c3d444", "sighting--5de9457d-5e6b-450f-bd6e-2222e3d7c620", "sighting--54fc4341-aaf6-4421-b3bf-ed9ce161a1bd", "sighting--c96af88c-3a59-41a6-8734-77d40fb19eb4", "sighting--4ee1b10a-a976-468a-bfeb-236cf7cedd39", "sighting--35783e37-990a-4e23-8791-5d2b7356ec89", "sighting--356737a2-6ac4-4b0d-a904-46f293f1690d", "sighting--b0946656-a61b-4c23-9477-8b60b8382632", "sighting--b1201181-6da0-4bb3-b0a6-03d0a36842f0", "sighting--ea658c2b-8d24-42aa-8e45-78e59a4a22ca", "sighting--cfa9c8bb-daae-4b68-a315-514e8461907f", "sighting--1086e2f1-5c0a-44ab-81dc-39766f966c7a", "sighting--fb1f57cb-7beb-4ba5-9d31-b2a41761cd7d", "sighting--538b0480-78dd-490a-a8a2-70019a21fb12", "sighting--ec27bdb0-15d3-4af8-a7c4-d7cbec04f589", "sighting--1016c251-9fa1-4353-bc1b-ec72f8e5a946", "sighting--7b93f5b7-46c8-47ee-b504-144d017be0e1", "sighting--ea4ade29-81c2-404c-b4e0-ba76b7a28611", "sighting--f84d32d2-49d1-41f7-9cfe-908916f2cf81", "sighting--fb381b80-cac0-4795-87f2-7473b3b04940", "sighting--54e01438-8694-43f6-92c5-41dd97e8fc0d", "sighting--f4081492-175a-47fa-b4e9-cf2aed967a59", "sighting--76f23ec6-fe2a-430b-8d4f-a86f92de2cb2", "sighting--5685dc23-400f-4d4e-8cd7-8029981aace3", "sighting--f8bf15e8-fcc0-4682-9595-1e023461f28c", "sighting--00192891-5d35-476d-86d8-d09fc53eef38", "sighting--c02ec2ad-f2e3-4f99-9833-b1600cd470d2", "sighting--441195a4-ca72-4658-b0ef-bccf8be4d55b", "sighting--b7fc1375-bd21-4170-bb96-ee823852beac", "sighting--450d4d20-3f72-4448-8c9c-479268752668", "sighting--f4732e51-4dd4-424d-817a-596af442c832", "sighting--a35237f6-62d8-40e7-85a1-0b99e65db04b", "sighting--2d418436-994b-4691-b246-4a96c98c8d56", "sighting--cbfec762-7958-441f-ab77-c5d98d18ed98", "sighting--2461ed58-893f-42c5-965f-6353bc3cf566", "sighting--d328e9e3-e72f-4dcf-900d-e553085ceee8", "sighting--5bd81fc3-578f-47b8-96d4-48cc627dcb2b", "sighting--8ce497a7-c7a0-40aa-bd5b-e4d92efa4859", "sighting--a640420c-0f77-404e-be80-821b4a3abd12", "sighting--486d3c7b-7f33-434c-8aec-2c8c47ae53f1", "sighting--b7d8d37f-c427-423a-aed3-9ca369c86753", "sighting--9bc1f75a-b735-43ed-9f6d-5a217073a41d", "sighting--2e91155b-24ea-402e-82e9-0eba44dbb04d", "sighting--f9bc2f12-50f2-4a4b-9f76-c30f2f4a95bc", "sighting--9a42699c-4300-4313-9e1e-af4a0b511161", "sighting--c1b0506a-98ad-4ecb-a3f2-d876a32bd7fc", "sighting--028496d0-77c2-44d2-90a6-c2ac7b15ff8a", "sighting--419302f6-1dd0-4e83-b54f-1778ded9f321", "sighting--0c9383ac-80ce-4be8-8859-7fe082869030", "sighting--4d02d639-db2f-41ec-b14d-d3e91798f100", "sighting--e3529feb-868f-4744-b9e3-b09b74fea909", "sighting--66985209-6386-45ad-a228-dff1dbbea92f", "sighting--dde047c8-ba95-4c24-826e-8120cf996236", "sighting--79d71241-e991-468f-9015-82af40f22b51", "sighting--1f929b70-d9bf-4938-822b-3a0788d8af7c", "sighting--ea08d8c0-6049-453e-aeae-c27dd9be92f1", "sighting--4105e1c1-689b-45ee-9f33-bd3a28c725ad", "sighting--b076436c-d67e-42bc-8fff-cd54fbc0dbbd", "sighting--7613c039-5afe-48af-9d8c-9767fa77e9bb", "sighting--8eef7ebe-0010-476a-bf64-fa2365e8e41b", "sighting--2d191d00-8eb7-4695-9cdd-c592791806cd", "sighting--5bb1c33e-f083-4ee7-8cb2-3c7fe9eda0d4", "sighting--125c0cc9-418c-4043-b46f-c5add7bbb195", "sighting--53c3f368-6f58-4d23-bda8-c997805badaf", "sighting--65f0fe44-5e1f-4139-bdb2-796fac912733", "sighting--10b6984a-30f4-42e1-8fea-14104c37a2dc", "sighting--ddb87c8f-4a67-4f49-974e-c03137496ea1", "sighting--58a2e62a-1d9d-43a5-9093-df16d762b2d5", "sighting--176b1186-948f-4349-90ed-625da0a3d21f", "sighting--067a5fd6-a35a-46e6-b047-ab0a44047585", "sighting--b29a2e02-bacb-443d-9dfb-c83f44861229", "sighting--b279cef0-a7e0-41ee-97c5-56691b1584a8", "sighting--8af7ea34-3cdb-49a7-a4cc-8ecd0fde6167", "sighting--2aa253bf-bd37-4d07-9942-3987eeeedda8", "sighting--d2181cf8-f3db-4a26-9326-c8a67bfc4242", "sighting--d3a01ab9-679e-43bb-890c-2fb65ba4759e", "sighting--7a08aa15-cc43-49ca-9562-9bbf214b97f3", "sighting--b8ce33e3-9a35-4460-a997-c52ec0b42b0d", "sighting--4272790a-6963-4b1e-b128-ec6e51adb562", "sighting--51d73adb-3fd7-4e4d-9b28-20b04b6e9a4c", "sighting--32c7f932-23da-4bbe-b672-bee24bb8f23c", "sighting--f337422c-1b3a-488c-bcd9-4e6767cd3a79", "sighting--a940743b-347d-4ac7-8207-3760f6ad8e49", "sighting--f1d57c9a-e2c2-4676-8e85-81600929129c", "sighting--8946f024-7ddf-40ff-bec3-38e27164199f", "sighting--8ce366a9-5505-464e-b793-d89cbb6ffde7", "sighting--5aaa6cf5-474f-4648-9163-7577973ca6a9", "sighting--7e0ffa82-36e0-4842-b209-503c15562230", "sighting--f8f7e313-1d9a-461b-a80b-a29a28510a80", "sighting--72dcd40b-5659-45c9-a2b8-f64371a47683", "sighting--97f27dec-4d89-4c95-8031-c1e008e26b7f", "sighting--ab0f0851-617f-4d0b-9f58-72a52121e650", "sighting--bdeea728-e005-4489-9384-7980e78205e2", "sighting--339d3a76-6a70-4409-9f31-53ff2a866308", "sighting--cb2c22e8-46f6-40ad-aab0-0fbcba36c393", "sighting--6bcc52e1-9f0c-4d91-ba2d-a671ed942c53", "sighting--99d80b40-fe55-4467-8911-fec965234172", "sighting--b3f1caa5-0aed-4cc8-8076-2c98685330b0", "sighting--8ac76ccd-f758-42c9-9c5b-a4ee40354632", "sighting--2a5d9813-894f-4e47-8e60-52299ae35612", "sighting--1e99817d-ec28-4e0e-a19d-76c31db53d3a", "sighting--17ed4ad6-d604-4b8e-ae6f-f9b8fbe5ef79", "sighting--71d89cf6-d3ec-4778-8c48-84fcefd34006", "sighting--b4c6a5b7-4898-4f90-a272-1ee2e4b24ee0", "sighting--d41023b4-2665-411c-9ddd-08ff75324660", "sighting--74bf263f-f013-495c-863e-448582ed3d59", "sighting--4b650dc7-fc46-4bce-972f-9778d3ff0a72", "sighting--bef995db-d5ed-4b6b-8f08-3333d305b708", "sighting--20bee93a-1cc0-454f-87cc-6e0b1a0379cc", "sighting--3e6b07c6-8d65-4f20-87fe-895adcd70729", "sighting--9b3c73ee-458c-4b5b-83ed-3da545f8cff3", "sighting--9f3c6f00-1d1f-4f73-9444-7c0088bbb17c", "sighting--be2b45b5-0799-462c-ab70-ae92b9b2652d", "sighting--44c2c47a-c9a1-4274-a0d6-5bab806858ae", "sighting--88ee5f82-b7c6-4e66-bbfa-9d3411299948", "sighting--c7bb02a2-5b34-4596-9cd5-575b205ec4cc", "sighting--36f8ba98-9ede-41e3-ba1c-e688be029cc5", "sighting--25fea719-0687-45e7-99d3-f4c493feac29", "sighting--1518fa29-aa56-4126-bfb8-f79f2a9e4758", "sighting--34952d4e-5cb2-4af2-b233-68d20df50e57", "sighting--83a923bd-f4d6-4e85-ac50-4beab9bb4c24", "sighting--8935b834-4203-480e-a121-6f1f0a066458", "sighting--96ad64c8-2e3c-4a2a-949e-5fc31fea0f5d", "sighting--979cf927-8c6b-4f20-aee2-63834c183b75", "sighting--709b81fa-33e1-4d48-be6b-fd174d142f38", "sighting--e9522c12-16ab-45c7-9c66-d9fba3f402c5", "sighting--b2a69744-6b72-4d72-a193-bd1f9045f667", "sighting--2dd38a3d-1e93-4f64-8c99-d23c8e1ef6ba", "sighting--336bf36b-409c-40ca-b318-1dc10a01e09c", "sighting--8ee4c4b3-0572-4b9f-b1be-d34d8438db76", "sighting--c0f1076a-a9a1-4455-9308-436689cfec6f", "sighting--5daffca5-24e4-456b-8d07-127982715df0", "sighting--b08e1366-6773-49fd-b4d2-d9c39540e0c1", "sighting--b8a2eb5a-318f-447d-9b4f-28bc279af4da", "sighting--d5c7f79f-2910-4e4b-9d0d-156bffbd046c", "sighting--edb374a1-5fb0-4a52-99c2-b51859118b9f", "sighting--57f46e87-6088-4f70-ab28-1bc3bd516273", "sighting--be12e4e0-94ab-4c19-a7a8-f000d5d9f024", "sighting--69b4a294-4602-4798-bd8d-06d32d83cc47", "sighting--0f30b263-ed16-40bb-968e-ee61ef355595", "sighting--67cfbc58-242f-4ceb-b5e9-4fb5a24fafb3", "sighting--7ce41161-d94f-4795-bbc4-67eb1d1fe625", "sighting--2d306d8e-3ff9-4db7-a246-fb972b117aed", "sighting--094c16a1-4615-4ebb-a4a4-7b53fbb6e506", "sighting--102649d2-fa8e-4e1e-ae02-5b285c66a758", "sighting--43185fcd-e02b-4d52-8d85-dbe5dc9c015e", "sighting--23d13330-734b-4359-875b-0a4eeaebaec4", "sighting--5efa5245-ce2c-41f4-9d30-a8cd644c01fd", "sighting--fbbbdfb6-132d-4875-9654-20f3d81c9d52", "sighting--9ade212b-ec0e-47e2-bb44-62ad49226c3b", "sighting--ba6b070d-3e71-4e58-a9ac-690cead36b71", "sighting--b2830f04-95ed-4bf0-b342-6dac868f23e8", "sighting--ed9c1330-573b-49cc-9aa5-4aa33c9f81be", "sighting--8a4b1c2e-ce38-47f4-9e32-937fcf46175c", "sighting--5d6e8e85-7de8-406c-a7da-507ac871d5f9", "sighting--7df78b07-84ec-4002-b218-ec44bfe07fc3", "sighting--6e775b5b-4351-4940-9d5f-bca678149b9f", "sighting--e41a37d9-e6cd-4d40-89a6-fce13c156bac", "sighting--a0c6cc0d-f910-4ad7-a204-e13b4bf2b59c", "sighting--6375209c-a13b-40fd-8dcd-b3ecea8b1abf", "sighting--b266a193-0b19-4237-8894-0ca88e478d37", "sighting--17c14f84-9d19-4d0f-8f5e-2c9a4a97d148", "sighting--5d20055e-8694-4590-9d81-91a30e603436", "sighting--b1208a60-af18-4f53-8947-fe9f47461866", "sighting--e6f0d898-cee9-455b-9fb6-1f94d9001a73", "sighting--7f7bd1c3-0b13-42c2-9a3c-a6a83ca462f6", "sighting--4cd2e0d7-d47f-4da9-a0a4-507335db75b1", "sighting--5f49324c-5578-441d-9884-eb92969d594d", "sighting--42d571a8-daf2-4272-a66b-5617cf7f2347", "sighting--5c95685d-f666-4066-a0ea-ed9237a32d84", "sighting--bfb042bb-bae7-4639-9fb7-4baf531a40ce", "sighting--9b0319a8-b883-4601-acff-535c16f821e8", "sighting--70e5e7a1-b676-46e1-ac70-e3cf6fd9ceb3", "sighting--76036766-1a77-4905-ae1c-cd5c11f75001", "sighting--feb00428-f851-4943-a2a2-2fc8d29befe0", "sighting--aa19658b-15c2-4e06-95bc-e01f3187a8b7", "sighting--d6e1c29b-69fa-4a5c-9748-6e6c0c198e79", "sighting--b590b5af-9965-4724-992f-e4992a389742", "sighting--7a439935-25f1-479e-a814-0146d52c9b4f", "sighting--61e00484-e23e-42ac-bdbb-68249be237e1", "sighting--f3569c69-04c7-45fa-8237-f89b34fed219", "sighting--1fc6bd1f-1e81-495a-b282-8bfb1e0db07b", "sighting--29f3e009-7e77-4e90-b344-f0dcfb768563", "sighting--37fc98d8-58f6-4bea-a23f-6e71e63fdf17", "sighting--8db8a607-880d-4a80-9e70-9bb6a8586095", "sighting--aab37a01-e191-42f5-a1f7-9f6391de8658", "sighting--b4d88b89-5c43-4725-bec7-0458a5158112", "sighting--09975e06-1464-43bd-973e-8b29537d63de", "sighting--f22c13bf-9fb7-4a4e-ac5c-d6d0e490b22f", "sighting--ca06ae88-499c-403e-9fc6-fb791c686a31", "sighting--e0b38436-b243-42b5-a70d-6aa2a52043b3", "sighting--c2ae5e4f-dbf9-4327-a655-0b7b5fff3e8e", "sighting--577d6194-0b94-4467-81ea-94e8499311da", "sighting--714d4a3e-16f9-4f41-ab77-bb6699adf09d", "sighting--af15271d-fba0-4711-8c46-ba0615468e64", "sighting--ef5283ad-7aca-4e5c-87e8-845fbe12816e", "sighting--74ffc26d-6cd5-477f-9ca3-9d64a6923d49", "sighting--ec922145-878b-4b1c-866f-01f5f5989ea6", "sighting--5e0c76da-e599-456a-a040-201acc2d8569", "sighting--172e758a-5ab0-41df-bfbb-0a3707c8e358", "sighting--18637b46-60cf-4c85-8723-07cb523f9fd0", "sighting--3b4af4c7-7061-4c31-a412-886908f52638", "sighting--d22d09ce-dd27-4d79-997e-934a31cf42ac", "sighting--081bbbde-0652-42bd-af79-94564b8b4d1a", "sighting--7ac3b448-da2d-4318-ad5a-36b6167d42bb", "sighting--1461f69c-063f-40a1-af27-4925c82ff081", "sighting--1ede2cf6-5db3-45b1-afec-e8759c7d509e", "sighting--2e85bd1e-deaf-4dc1-957f-d16dc3be6500", "sighting--5ff3b651-b987-4ac3-9994-d2915db2bf25", "sighting--0de4034a-a999-409b-ad91-b546eafccc23", "sighting--7dff4a3c-7ffb-40d5-b6c5-dc68d41514f6", "sighting--633bf53f-91c3-46b4-91fd-7d7ffcf629f9", "sighting--c7272a64-b8ce-4101-aa68-b0a1e0b92dcf", "sighting--8fd9930e-379c-448b-baf1-738191f7edf6", "sighting--a4e0994f-0863-40e8-a0ad-88da4c5cc2d2", "sighting--5e0824d8-c3f1-44ea-b4c0-1f99685c3d3c", "sighting--9b120af3-2210-4ed9-96b2-85486598b0bf", "sighting--e59ef514-3971-428f-ae3a-928918b1888d", "sighting--9494e781-71bf-4acd-ba4c-559143bd2400", "sighting--900af009-8b37-40f0-9f5b-c5d8582a39cd", "sighting--f06ac08a-0cd4-4b97-ba4b-9c9ee584c357", "sighting--bf0f9756-7b13-44fe-9b59-dc038d90b890", "sighting--47fc8dcd-25c5-4ecd-8d8d-59c9a3d6c395", "sighting--2101b2fc-ac04-4ae4-b5ae-0ff07d8575bf", "sighting--48dfcc3e-a48d-439f-a2a5-d92243a23278", "sighting--1a531d9e-e4ba-494a-bc69-9682a4473825", "sighting--f05f1fd4-9bb5-42af-8007-a7f6849a6556", "sighting--7435ddad-bd78-475d-9df2-805893abc31e", "sighting--27f1d598-4b45-4feb-85da-203c803f92e2", "sighting--a6be5107-af88-44b8-a859-0b276be0573e", "sighting--592c399d-741a-4f36-9eb8-1fcafb219f99", "sighting--077badf5-5bc0-4679-81f3-3c4a215a93d5", "sighting--54cb1a2d-bcbd-4d4b-bb9f-53d462c60bed", "sighting--61833a49-88a3-475d-829f-142780db823c", "sighting--1bcbfbaf-9961-4ebe-9873-c036c3614108", "sighting--4b0ed5a2-976d-4de4-81e4-b93ca21a0ba4", "sighting--07de6396-27e5-4977-95f5-cd6b808f96f8", "sighting--b848c5dd-ca6c-4625-808a-c75e2e437bd2", "sighting--0ac3a5d3-4d7f-45bd-aae1-d65964d24923", "sighting--a9f8a77f-6eb0-4d47-aa0a-bf774713f1c0", "sighting--1dbff8bb-b96a-4afb-8cfa-c6c340c61292", "sighting--c66f7415-971e-4fb5-9cfc-ea7b7cb32859", "sighting--32a4aefa-89b8-4580-bab4-0aa4f9b2a668", "sighting--fb81de85-852f-4b87-ad3d-152291868711", "sighting--5d9da498-6ecb-4f79-80fe-6c3e1e1ffa09", "sighting--a77613e7-8803-494a-9616-4edaf8109e4f", "sighting--48db4bb8-ba25-4974-a364-b85196e5ccf4", "sighting--bcab50f6-f3fa-4b63-8868-ee40d224e99d", "sighting--83b6534f-47e1-4ba3-9da7-40915ea3e6c4", "sighting--6604e4d8-d4ed-4909-91ab-5bde31e36d0e", "sighting--2e1bd7e1-3e75-4d61-a0cf-4f3bb6600b69", "sighting--221c1c3b-01f8-4d50-a4d5-585ce218fc0b", "sighting--e04c74f4-0697-490d-83e6-5b27c9c02e70", "sighting--86fae0ea-f903-4da4-96e5-14e20b4b9875", "sighting--bd9382b4-d4d6-47b1-800f-df6201397dd7", "sighting--a52ba390-b91d-4b58-8c84-cc9d87299946", "sighting--8c1c826f-93a8-4c10-92fa-5c23e6042354", "sighting--e95b98c7-dab6-4051-beba-29867e7df267", "sighting--062e88cd-8091-4a24-9dd4-3b33d431d2c4", "sighting--a21c216e-bde7-42eb-bf25-cd4a025b25f9", "sighting--df2bd6ce-452a-450f-83cb-4e3f13ce2633", "sighting--e57ed287-4070-44a8-913b-a175c98693cf", "sighting--13932e2f-63ca-4c71-9af7-6a7b3460403c", "sighting--3d205e6e-509a-4635-88a5-7f5f5ca76a42", "sighting--de903611-f87f-4247-bec7-a8a87637c160", "sighting--a8190896-ed8b-490e-91f5-ca59012fa5d0", "sighting--816378e2-3567-4b7d-9023-bc131650ecc7", "sighting--01c7f10e-a754-4a52-a5d5-23e848f4eeb5", "sighting--ca2fb685-22cf-472a-a913-c6ec76670138", "sighting--3ec60d3c-fefb-4c17-9c1a-334f02b33b3c", "sighting--cd6063ff-69b5-42d5-9dec-9d237f225335", "sighting--b86d06fb-2535-41d0-b41e-a1fa6a46c088", "sighting--33f1d7d0-3cbe-4968-95a2-9e953a3e1cfb", "sighting--e51f5515-95ec-444d-a229-12cd564cc3af", "sighting--1c675943-e6c1-4887-b70e-0896e78d3497", "sighting--0139ca3f-5758-4550-8577-65a48a2b3b24", "sighting--c2015a75-80ae-4fb2-92c8-556a42d59302", "sighting--8c083b6f-a2d1-4999-b6a8-7ff1f0a1208a", "sighting--c1fd60bb-6aaa-4272-97da-67906cca5d36", "sighting--690aa2c5-07cb-4db1-abde-06f459511f60", "sighting--54bc34e3-72a5-4975-ba19-b21f7219e51f", "sighting--45b8eedf-2e24-4118-92c9-097695a627b5", "sighting--91fe8f22-eb4f-4a25-9be3-c6767244ba74", "sighting--be59ec08-02a2-40e2-9575-5d6c30f41a78", "sighting--15026ceb-16a4-4fb7-8d02-0f8608a8a58a", "sighting--dd296c69-e5ef-4772-9d4a-d9e6b88776a3", "sighting--e16e8db3-78df-4e29-ac33-62eb19d3a178", "sighting--09be172b-381e-47fa-b0c2-1808bb56b0d9", "sighting--b8b6582d-db08-4099-b970-0fd640163e64", "sighting--6ae946f5-838d-4f01-9706-b08cfd2d5faf", "sighting--ae9a3d4a-7b78-4081-acbc-6d349c618ff9", "sighting--446f0c12-c481-4a5b-b338-fe193ccc0e59", "sighting--f9aa14f1-a0c7-4002-b94d-507bf0af35d0", "sighting--fa1c1b19-e621-442e-8fe4-7006bcf8c0be", "sighting--17e3e299-7a6b-47c5-a01b-0b9371e3e4cd", "sighting--b70ad09e-0575-4ceb-8b71-d5d04e1748e1", "sighting--d1e3219d-9022-412c-9c12-6a46190e3110", "sighting--a8f2b1d3-f07b-4949-898e-a75b7250d957", "sighting--9a74659c-02ee-49ee-9aac-d5fe2d2b002e", "sighting--0b0856f2-01ec-450b-b02e-38f55b29b3c9", "sighting--7a69e622-1233-4af6-b6ee-6f25b2e26a0e", "sighting--78365f29-0c4f-4976-b334-d957f6da8f80", "sighting--38995efe-df77-4b5e-b0e1-a4b69b855a1d", "sighting--415be80a-dcc1-4da8-8c90-92828ea16b45", "sighting--ced3ae62-751c-45fc-90e9-aef435e69afc", "sighting--d63f1b75-2c53-4055-873c-9dc13f9e7004", "sighting--4acc6479-6d98-4d91-b04a-5ef0cd8d831b", "sighting--f24c192f-770f-49e9-a909-cdc011ef3d3f", "sighting--b1896f37-8891-4058-b851-18a2d5f1e63a", "sighting--e94c613e-a532-4489-92a6-a1f3c43d6d82", "sighting--926c0c5e-7bfb-43cf-b66e-bb3f73fd9122", "sighting--8671344e-5a35-4c83-bdc0-f2fae8946a1c", "sighting--c35c3cd6-2691-44f8-bb62-34901a5dcbd2", "sighting--a6a8223b-fd73-4363-ab47-a4e1169dd550", "sighting--688e05b8-1500-4557-9b52-a779da7414ca", "sighting--c98e25b4-f703-4af3-90c2-1f4184660518", "sighting--bc979b47-4f16-443c-aaf6-79b70b56174d", "sighting--28fd2b8b-9112-479c-a608-d4b85dc5fa5f", "sighting--95935cb1-9e39-4e3b-8a96-ab45377ddb2f", "sighting--283d738d-6e4f-4d4b-bdb4-6f900491b7e4", "sighting--f9a4b42a-6bd6-4fc0-b290-b55796124578", "sighting--cee2caf3-6bb3-4ef2-b78e-e2c79c10d666", "sighting--b07fade1-2532-4643-a925-3dc0dfe20928", "sighting--fe704608-7000-4d05-b3bc-096d3e555570", "sighting--0b8a346d-829c-4483-91bb-d1bd77d9da61", "sighting--383c5b68-c14c-45a3-808e-f82b1a288544", "sighting--01f11b54-1cef-4f4f-bb03-9be992bd080e", "sighting--43583a05-b9ea-4d24-9503-37e6dfb874d2", "sighting--19ebc0c9-86cc-40db-8dd5-32e8551c88d2", "sighting--969ecb0d-2c46-4f44-872d-98ab0d2af6ad", "sighting--13c61dee-7a9c-451e-acf5-a6001954ce14", "sighting--a6619635-ce60-4607-aaa5-602f996ad660", "sighting--fdf25d6c-bb2d-42fe-99c3-012167b76f8b", "sighting--e4cfcfe6-0be8-4afc-85f2-382f15bdbf6b", "sighting--52509ef4-2d67-4d4d-bd47-85a4cc8db9f1", "sighting--1ab5e660-41b0-40b0-a459-1a37dc47d558", "sighting--22756123-342d-4577-b560-fdf0b78fb846", "sighting--dbe1d73a-4d39-490b-8677-a96e10370a64", "sighting--d16a14ab-fb12-47a5-ae2c-ff380ff2e621", "sighting--3938964d-223c-4688-8eea-a4a84ce8a7ae", "sighting--c3d7e217-d06f-4c11-ae1b-6e4ef97e3f3c", "sighting--d5caa4e2-3cd1-4f7e-9b78-7e4a48626f28", "sighting--48841ac3-de5f-4e00-8b6a-62424b334512", "sighting--76370717-24f3-401f-a3e4-12bd59ff9389", "sighting--aeecfc7d-d6a8-4a75-8842-03da2d34c94a", "sighting--fef8bfe2-3aed-44e3-81f5-09c1acdf1af4", "sighting--41d981ac-d7ba-4696-a813-9ef37e8f547c", "sighting--f16a9088-3a97-46c9-a536-a83affb15736", "sighting--575a17b0-14cc-47d0-9cbb-217bd920dba9", "sighting--04901b05-c0e3-44df-941d-091c5312d496", "sighting--4db3b0d7-0c29-4e10-8ca2-991caa73434a", "sighting--cf8caf7e-a046-4b5e-9721-47c2e500c608", "sighting--1a9a9106-f1e9-45aa-8d8f-872e9422f506", "sighting--06b621b4-a14c-458f-a9f3-33f86d80f857", "sighting--6cba6680-690b-4d99-85b3-078ea00c26a4", "sighting--c75071de-1c7f-4f91-8491-0ffc1787d125", "sighting--ddd80f80-fcb3-4be6-9a23-818c66649e6a", "sighting--1bf10061-24b0-438e-b0dc-ca8dc1c14bef", "sighting--c66b268b-fe3d-4272-a09d-d343262811e5", "sighting--8d2fe9cd-cb70-42ca-8d16-89f3d9db377e", "sighting--ae646b4c-bb85-42b6-9a8e-ad0bd94756cf", "sighting--5baea321-7750-48e0-85ee-828801a6bb0c", "sighting--2ecd9444-2dc3-48f5-a43a-db48d583f1b7", "sighting--60a0547e-8b67-4bbd-a2ad-21b55fbe743f", "sighting--0635c920-39a7-4eff-baf9-85ccd2ebcf5b", "sighting--7c377897-80ef-4a11-8659-4e179d11a127", "sighting--160573d1-aa5c-4829-825d-7e084d7604a0", "sighting--27bd556e-2de3-4909-a947-e127e218c30d", "sighting--33e7257a-3f1d-412d-bc88-f928c4c81a55", "sighting--b4848679-0a96-4618-a5a8-6698d6d4a046", "sighting--7cd8dfc0-8de8-4b1f-80d9-2f9ebc98c863", "sighting--7b04da6e-72d4-4da9-9720-283b103c5b04", "sighting--f479b14d-8856-47f5-b4a9-c8851fc5f233", "sighting--e5e24dc1-9604-44c2-9ca9-5f952c921e20", "sighting--12deb52c-281a-4e96-a11c-3ec9b0222d2e", "sighting--ae4726b0-691a-429e-91f5-20a01c83a9e8", "sighting--b65ed96f-a96e-40d4-a1ae-794652901df1", "sighting--95b93dab-46ac-40cc-87e3-b2800097eff3", "sighting--24275ca3-9c7a-441d-b8d8-7b6130e096aa", "sighting--36232f00-db9b-4c5d-ba9b-486615a5c66b", "sighting--072777f5-657c-4e52-93fc-76afea1ca617", "sighting--da467e24-9448-47b8-951c-fb270d021642", "sighting--c8ff45f9-007e-4e4a-8f2e-b80b5d3d084f", "sighting--4efe7cb1-a6f9-400c-98d6-c0d82cc72b3d", "sighting--e2a542dc-1031-4ee9-9d41-e8462403bb7d", "sighting--cc1846e8-51c0-4b46-b570-558a862ff701", "sighting--fff95e71-d92f-47a9-b68e-cea59a8d62b0", "sighting--3678b7ab-9cc1-4e0f-baa4-d313425fdd9a", "sighting--a7ba8f12-a224-4ca6-8c15-d284db75abe9", "sighting--64185e27-a5c4-437b-b0a0-d8aaa996a941", "sighting--cb73b1cb-5032-4ad7-8ec5-8b5a01831a49", "sighting--58ac6fb7-a1f7-4583-bf77-730548de5cb0", "sighting--6f28a176-eb6e-4b5c-906d-3266a5e4a89f", "sighting--18dd71a8-c4f4-4290-8880-9760b53e2d8a", "sighting--57531e13-c820-4f33-adef-629abdc16c0f", "sighting--5e626a28-46a3-4608-9c1e-bb278a7a571a", "sighting--04672966-264e-40f0-a50b-7050e2d458ce", "sighting--35c8d74e-d454-41b9-820a-b70fd24ec9da", "sighting--de46de04-10eb-442d-a762-d1a4b33c42b4", "sighting--921f16b6-defe-4b76-a9a6-df696c32281e", "sighting--eece2627-e60a-49b0-acfe-135cdc73c660", "sighting--b547b96d-e110-4d7e-a985-c60da426d5d4", "sighting--e7fed770-3b73-417f-a558-b88041aef7c7", "sighting--79a0a88f-bc8d-49e8-b982-4d06e62af0ed", "sighting--ee8bfecc-c85c-4a1a-b184-a4779b660841", "sighting--6f0cea04-4b3e-4376-b41e-6d29962aa9e6", "sighting--ad8c7e94-cf90-45a5-b4af-f44fa028cac0", "sighting--267a3e9a-c963-4841-a591-872b33a2546e", "sighting--292936e8-2b5a-4bd4-b6ad-6591517d589f", "sighting--c397990d-1648-46cb-83ad-1e8bc4a8dc86", "sighting--725884d4-3e51-4bdd-a6c6-2dc04f5fb72c", "sighting--9078bac5-6c96-4ebc-beb5-a5d5acea2cf2", "sighting--6217b730-bd42-4758-8233-507820cdf9e9", "sighting--d82bd3c2-9604-44fe-910e-0d5cd0bf1f0d", "sighting--b8edfd3b-8c10-471d-aabb-0767fa3c763b", "sighting--7bf7ace3-8ad5-4cbc-8530-e3f176d7665e", "sighting--5eea27dd-6ab9-4756-8f30-4b97aab74fb1", "sighting--1fe9a95b-5ec5-4a83-8222-4874dfee7395", "sighting--faab92b3-dfbe-44af-8ec0-28c653935579", "sighting--912ebd6f-9e67-4047-8e1a-4339fd969e3c", "sighting--7175aa36-4b55-44d2-b893-c6dc93e0641c", "sighting--7f04355a-25ba-4307-8efd-066d45b40100", "sighting--21f25b03-9772-423b-8928-81b721f1c143", "sighting--3babbbd0-390c-4877-ae7e-cee0751cff7f", "sighting--8ac48e76-a930-414a-85dd-492e5ca74668", "sighting--68f20780-a83b-4279-b0a5-06c6075eaedb", "sighting--5e412ceb-7416-4bee-80cc-6a9f7d91e842", "sighting--091dba00-83a6-41f8-86b9-f7275e918293", "sighting--5469898d-8425-4579-930c-da835b907f04", "sighting--f9858232-f9c5-4445-a22f-e4e44ef9bada", "sighting--0712c0d5-1d9c-4822-a83e-cf61f7c02938", "sighting--375ca23f-bdd4-41d5-a7bf-48e6793554e5", "sighting--1810fb98-ef7d-4fcf-bbea-8f9ed8482627", "sighting--fcab75f5-ff57-423d-84c7-868f338a8b39", "sighting--b32be304-71ce-4e4b-90b6-d2c4e92ff9e5", "sighting--8641aa24-d583-449e-98b6-5044334bb53f", "sighting--790ba37a-41dc-417a-8088-e4fbfea83706", "sighting--6eca8b38-6b0a-4e24-9b1f-3c5937b7ed1e", "sighting--a4840033-7bb7-4445-b294-85cc26a0690d", "sighting--69f8e12c-7705-4007-92bb-326da27c5b86", "sighting--372c8035-a6b6-4737-b9f4-c4bb5e15ac05", "sighting--b3030ab7-8632-4796-868c-4104ba36178b", "sighting--2677d11e-b503-455e-88ba-644a4c5640b9", "sighting--7d0be91f-e373-4314-b752-0ae747c3fee0", "sighting--3df99b85-f59c-45a7-815a-4150e26806ac", "sighting--65b75d67-54e0-44fd-a857-84fb6a20c519", "sighting--c86e2c91-cc92-4b02-a749-0c6103f09bc5", "sighting--fce8c3ee-4b44-4542-9acb-0e476b38a03f", "sighting--47a53ab1-f77c-4603-a924-1c5739ccf153", "sighting--0868350a-ed1f-4e2e-8838-13bd0deeb793", "sighting--e8e30ca5-cce6-4cb1-bc63-f4ced15e116e", "sighting--6ec66bd4-880f-4bfe-b143-139a41ca85e7", "sighting--ef645d8c-78bf-4ed4-beae-074b00dab1f2", "sighting--a19dc08b-8cc7-45ec-ac8b-d0dd235bc7c8", "sighting--1680a80e-374e-4530-bd2e-15c071c99515", "sighting--4fad8668-d601-4468-bf6b-85cb0e8b1c8b", "sighting--9cc6043d-cdfa-4050-9dfe-8af2762a1c39", "sighting--a6615042-3997-4982-8c61-9a06bd3e0bc5", "sighting--fc290abe-0e33-4d96-ba34-dbfb95024fa8", "sighting--64073eb4-05d0-4826-8d42-82f8e0a323a2", "sighting--d72be805-f857-4c9c-ada0-9635c534c057", "sighting--906ebd59-2c04-4d20-9335-92af3a4de762", "sighting--5a8fd3a4-5cf0-46bc-83bb-c4b84cd0c553", "sighting--a3dca3db-eda5-40ed-a631-456c8751f60b", "sighting--54aaa64a-c2de-44e5-b175-911bbf8b1146", "sighting--207a08b7-551e-40d3-8cdb-f42b1d2af482", "sighting--4bd151d2-d057-455b-8999-abc231e122f7", "sighting--981642d0-cd22-4d04-a7c8-74956b05c7da", "sighting--9886b673-2ff8-499d-ada0-34d7a61ff74d", "sighting--2db1fce4-c77e-40c9-b0d8-44f2f3955cda", "sighting--c27fc9e9-f48e-4755-ae5f-4d13ef7fd861", "sighting--7406132e-3765-46bf-98ae-9b5a91fbf2dc", "sighting--d6516651-de6b-4ffd-bc50-5cd3deb35dc3", "sighting--cdd1a3fa-0bae-4e1a-a192-6aa2886b7332", "sighting--c4e67e63-a1ef-4775-8c4d-cf3d7e8ce581", "sighting--2b94436a-a1d1-44fb-8cd0-8cfd60c9a696", "sighting--4e6b732a-601d-4d4e-abc7-965f635ac670", "sighting--6eab272f-3d0b-4cf0-9c74-5ff5d14c369b", "sighting--32c6ed11-bc08-428e-96cd-559b0da9a1b5", "sighting--c25f5984-980f-496f-8e6c-3bfb796b6d2d", "sighting--75ff6b2e-02f9-437e-a62d-957f5c7028b9", "sighting--8396e684-1140-4fba-a303-bd2fb6dd04be", "sighting--7039e664-8877-40c5-83e8-491217a8824b", "sighting--f3fe06a4-0b24-49c4-97cc-d3a71e43f57a", "sighting--055316bb-cec0-4d58-ba4b-6488f846a4af", "sighting--ed269381-0761-44d6-bdd0-34ad34d0a8c5", "sighting--365067cd-c835-4e0e-a446-dd46a91ac5ae", "sighting--4c3ad82b-cafd-4996-b332-1cebff4db956", "sighting--9447509b-7e71-43c4-9308-80a257699ba1", "sighting--85f30fd9-de58-4efa-a512-b03c0d804b89", "sighting--86d18b7d-b84f-4489-a030-4ee901f2a6a1", "sighting--65287b18-a547-4ba2-9926-a8dd803fe140", "sighting--8857c9ad-207a-45d1-9bc9-8f14c57b5cf4", "sighting--6c9ebce9-a451-4fc5-abd0-8d7ab7472e08", "sighting--000284e1-ea7c-497f-8a8e-4abbf164b1e2", "sighting--365793b4-1b89-4aac-ad2d-50fb11ec0984", "sighting--99261048-32fb-4008-aa54-77c1587608e3", "sighting--1ba466fa-144d-4e58-90bc-64d39a3ad995", "sighting--b2bac578-a415-4565-a69a-77cf37dd6638", "sighting--04988823-5a29-4845-877c-8c5efc3f7926", "sighting--b038c15a-3d52-4999-a6f3-09cd8797dd95", "sighting--046b540f-5b99-4350-b77a-5ab28ca2fd4b", "sighting--5530f76f-147c-434c-9cff-020de7e13bea", "sighting--40686bc1-4523-498c-8895-ab1e6296d877", "sighting--8dfd0fc8-b8cd-4a5a-ab93-f3771c582fad", "sighting--c230b2ed-f657-4c4c-9112-71be0e9b86c2", "sighting--e5821c82-c017-472a-a844-ab37be06e08d", "sighting--8b589b42-1718-4efe-ac9e-265482b871d6", "sighting--82cf3050-2cfd-491f-b38e-fe357e22b728", "sighting--fa5c0544-380c-4665-997c-54c9dad5f03f", "sighting--d5b94396-835a-48f2-932b-32651f530042", "sighting--6ca0e760-3392-426e-814d-a2e6b79c6e4f", "sighting--b6b69179-9e63-4d4e-96e9-9112fefea868", "sighting--8aab2592-60d0-4f0b-bb8a-97cd80dac41a", "sighting--1b28ca40-d1d2-42d6-b51f-d03737e75ae4", "sighting--b9b4f9d5-b367-44aa-a813-5c1551d01a43", "sighting--c846be75-f0bb-4081-a507-54b9a61a0f39", "sighting--a1f86008-7c77-453d-8bd2-432f00d593ce", "sighting--902ae2db-9014-4b0a-bb2a-7e8c4304bf28", "sighting--cfb7d878-b451-44b2-b26a-844bec1d287a", "sighting--9a9a2b9a-be45-43cd-b066-69c6383ec5f3", "sighting--a9f7621a-67f2-479f-98ed-6975089b9df3", "sighting--6c9303fe-c4c3-44d5-b224-9cb4f547cfd0", "sighting--4b500945-00a3-4507-b980-0c0bdf512c24", "sighting--adbd84f2-3adc-4469-9281-9b5531ce1b73", "sighting--0dad3405-123b-4757-9f99-7bcaf2a385a4", "sighting--76ffd53d-e82d-4928-8d70-98b88463dd2e", "sighting--c55e86b8-b2b9-4f19-bf64-9d37a4e5f1c8", "sighting--42f7157a-eebf-4430-927c-611895b2cefb", "sighting--ace5a053-6e7a-4bf9-b7ac-6726b67d99e1", "sighting--7ee7eb0e-a4b9-4196-8ac2-02173ff490a4", "sighting--907614a6-4b31-4925-bf31-07edeb7d74b6", "sighting--128453e6-bdc2-417e-a6c6-2b96ca5fadf0", "sighting--8ae8d5b0-77e2-4d24-8ad1-01e8c2c5817f", "sighting--a6db4e8c-bb3f-4ad4-a31e-6abbafd55675", "sighting--a5f2d8b7-76c6-424f-a558-3fd3a0e4d3a4", "sighting--a28285bc-5b74-4417-adae-0d2a1f26902d", "sighting--8c2e5ad0-135f-40e5-948e-857dfa24627f", "sighting--54059185-a793-45a4-bd36-fd7e6242d4e5", "sighting--a82c42ac-49ed-4cca-90d6-c7b1f83d8b04", "sighting--5d3bc867-7138-4431-8188-5e70325de764", "sighting--fedd5fd3-e3c7-4009-b8f8-111ce202ad56", "sighting--843d6eb3-a552-48fc-96c4-732cf88ad293", "sighting--f6f62cbd-fa7b-4955-9f4c-e5c26221a11d", "sighting--9958785a-a9dd-461e-97e3-ff98222c7294", "sighting--f2ff947c-a39a-4d40-bf01-f0a71bef4b35", "sighting--415e382c-bf8d-4d08-b6aa-5a2d95199042", "sighting--321c0f89-ead3-4493-8599-60d5f0564ebb", "sighting--c3172bee-2f08-477d-9b9f-e696a56b9395", "sighting--d0b399d2-90ed-4ccd-a1dd-57f060529698", "sighting--7462b475-3ee0-4f65-b622-2e9a45d71387", "sighting--b1509a4c-fa8c-466d-989c-41d70810387b", "sighting--85cd3d72-d035-4d51-89d2-75fa8897e31d", "sighting--ba8b07e1-cdab-4525-8b4c-9a97f982b36f", "sighting--0c7c780d-57fa-4e1b-b093-c25696b2436f", "sighting--0f9abe27-72c8-46f1-9a38-2555ad46cdb2", "sighting--2fa4b1a1-578d-46a8-b3de-e7f09932400f", "sighting--68ed6baa-0132-429f-930a-00dd9d1b4918", "sighting--9f34100f-2e79-4caa-b554-2ff84f863038", "sighting--a23a2991-fa0d-4535-8799-592c465625d9", "sighting--22eddfa5-301b-463a-83b3-9d15e7ff25ae", "sighting--b56116c3-f288-4079-935f-961d2a1d10d2", "sighting--3187d71c-eb47-4abf-91b8-b40fc9c2c7bf", "sighting--010a9368-b740-4a70-b405-a70732afb027", "sighting--2ec5c3e2-7509-4fc4-b58f-bd26746524ce", "sighting--72e2acf4-3908-463e-b5bd-60a504fef57e", "sighting--844ddda0-f5cb-45b7-b4e2-b76996f86fe0", "sighting--0476e76b-9098-443d-b047-69df18b2aae5", "sighting--8fe52041-028b-4766-a72c-6ea260ced5ae", "sighting--a6fdade7-bd98-4bd9-b1a1-b30d5e98e9cf", "sighting--11545164-6a7e-40ad-96e4-b9a51afbc696", "sighting--a289de7b-459a-4e68-9366-25b83929b805", "sighting--64daa776-f857-456d-b3f9-9dd001662851", "sighting--b6f11eb2-4ba6-448d-b54c-29a3acdab7d3", "sighting--0c0670c9-6e3c-495f-80e7-141a3e5d7941", "sighting--5d6700d4-eb57-41ac-a0c1-4ecc97bf14de", "sighting--b4f89792-96c2-46f1-80d0-628aeb613c7b", "sighting--cb3a5e27-4d12-4aa7-8b99-3a1acc6fb843", "sighting--e825418a-2cba-4a98-820d-16629945db57", "sighting--2b74f44f-ac8a-4d9d-bfac-da582607830f", "sighting--3d516e0b-d4c2-491d-86ef-89739dec7bc3", "sighting--2181ff9d-8847-4547-8b18-edc5d8c618d0", "sighting--4bdcf43e-335c-46a4-a674-0c657fedb7e7", "sighting--32c7eb8e-2cb8-40e5-b97d-2ada8ee830ad", "sighting--ab7aa2fd-e087-46f2-a972-07502059794b", "sighting--1c16ce76-0273-4f0f-8b98-11cdd42bbe83", "sighting--87deb5d6-64cd-4b18-82d6-4c919f92053e", "sighting--e4e49dd7-f7a0-4e48-af6a-d1648a6f33e8", "sighting--aef587bc-652e-47eb-a405-5cf967fe9bfe", "sighting--94ed85b1-993a-46aa-92c4-d07ebdcf300d", "sighting--504a5bae-4893-459d-97c0-f0fcae34df3c", "sighting--5b9e8f26-965f-4576-ad4d-aea4bbfcfca6", "sighting--1ed02541-364b-4055-b494-ce95bed6f073", "sighting--e4bf8db6-4c2d-4afb-9be4-fc350e634666", "sighting--33bac73f-dc81-44fd-ac7a-798a9871ca86", "sighting--041c2a94-0f5a-409c-a182-7c2f4824fc55", "sighting--4ad5bc21-7aa2-412c-8222-c2120a834549", "sighting--753edbf1-5d1e-4dd0-b985-aea113266809", "sighting--29ce8ee5-05bf-4ebd-b09d-36edabed4e23", "sighting--089b448d-9bdc-4552-8f84-8c226770fd8b", "sighting--058d7bd2-0538-44ca-b88f-878216214b30", "sighting--112fc0d1-88de-4129-9c40-14b5e39c3cef", "sighting--ca6d4872-d077-4866-98da-a37665dcae16", "sighting--636020a2-6d43-45eb-b57d-051097fcb484", "sighting--145c2dc2-78a6-4027-a74a-475a78a10868", "sighting--30e7da29-3915-46e6-95a5-9ead820bdfd0", "sighting--0e22a2eb-4daa-41f3-a1a7-e76e0d920451", "sighting--ff60f69d-a4fb-443b-97b1-44804960d95e", "sighting--47bae5a2-2a72-44e7-8911-f8c52f03abd9", "sighting--82307be7-a59e-4935-af03-e9a8f3f56b1d", "sighting--36e8e623-6c51-43c8-a251-54d24b3da68b", "sighting--9d7221e4-7945-4a7c-8e6a-b2f1223bc755", "sighting--2943e061-c994-45c5-ad68-6445f7921337", "sighting--edf0fad0-a799-4ed0-b24c-424e6056fb8f", "sighting--e1a7afbb-21a3-42c0-8f82-e3dd9997e3e7", "sighting--1299996d-0021-4990-a73e-b98ae8245946", "sighting--e6c88324-7511-4358-b4a1-4d1727564e07", "sighting--c15c45d0-adc6-4a0a-9fa5-08637fb97a0d", "sighting--0d209d5c-a94d-45f4-a81b-95c66146dc61", "sighting--f2dd8a4d-d3b8-44d8-a8ea-ba326d9c2cca", "sighting--aae0463b-9e27-405e-88b2-e9e148a74f9f", "sighting--000eebd8-6b38-48c5-a112-21311bd140ca", "sighting--0389c1ac-a49f-4657-850b-669ef8fb28f5", "sighting--4bda096f-71b4-4c2a-a39f-c56223e034ae", "sighting--7e53eccd-884f-4271-b9fd-b5109fa66331", "sighting--83324f41-9876-487f-8e71-5a10d10017ad", "sighting--29bca54f-97c2-4e7d-a46e-fcf1e1657634", "sighting--22dfdf1c-889e-4583-99b0-d701480ad95c", "sighting--d65b5438-55c0-4573-88a2-ed7dee5e7db6", "sighting--bcf471aa-c523-4ab0-96b3-aa86ae773dea", "sighting--887e933e-d0fb-4158-8d1b-856e77a5b81f", "sighting--1974a508-fa84-4f5b-b8ad-0742b73ec7db", "sighting--656fe2e5-28c1-489a-9eaf-a721b408df33", "sighting--855ae99d-b325-4b42-9bec-b6a7825d027d", "sighting--9b941d14-130f-416e-aa21-d48c79ba58f5", "sighting--a939c128-d1b5-45ac-ad0b-d8b17eb26e7e", "sighting--5074e2bc-2744-401d-b163-5deaee757cc1", "sighting--c1d31a9d-5155-41f8-b8ee-6104cc68295b", "sighting--0539c8a3-6a80-4109-abf1-3e74da14175e", "sighting--59d80102-26f1-45b4-ac68-1ec7591c76a0", "sighting--35cba6e7-de0f-4e93-b4d8-d0c5cb2a3f83", "sighting--0df35c0e-dfc0-428f-b9a3-b8b0f3825bfb", "sighting--3606ad2f-f61c-42ab-ab31-e56029346de4", "sighting--d150c76e-5525-4105-85b4-dcf5697e138b", "sighting--10c01164-ff7a-4526-b27f-4d640132c29a", "sighting--0bd71a25-8ea0-44d7-baaf-86f1b38d8286", "sighting--44f9e351-7e10-4425-9ecf-d034387106d5", "sighting--25192c6a-e1ec-49d1-958f-b1dd450e7873", "sighting--0c845dbf-1272-4135-b0bf-9d459eb402c3", "sighting--3e9700c2-5e4f-4f15-9a23-1149898447a2", "sighting--1e265ae3-5925-40a1-ae39-086dbb18ba26", "sighting--70c2cd58-57cb-488c-b6b1-47071d0fc262", "sighting--f145506e-c27d-40a1-8e60-2985c0f2847c", "sighting--df85264f-247c-42e9-a48a-87ff0f24d891", "sighting--273c5310-0f86-4bb2-99d2-7a79a64cc3d4", "sighting--87fcb41b-e766-4ca5-aab9-71cc79fe0e51", "sighting--02569fc3-71da-47a1-afec-c6e5c578bf53", "sighting--16ec508b-a2e1-47f8-91e4-ac22b8ee1edf", "sighting--40a52d12-919b-42b2-b774-63ca6d665679", "sighting--59f8bc96-69e8-4887-9fac-234371fc8160", "sighting--fa36c159-36be-42a9-8aa1-38243ad68eb2", "sighting--d946c5a7-6214-47c1-bc36-0b6271aaac31", "sighting--9eaefa2e-c4e9-46d9-9e1c-822a9963d632", "sighting--252a5eb9-8c34-4677-8607-01f42dee9fa5", "sighting--dd9bb159-b4ce-433e-894c-6a585286d889", "sighting--7fc673d0-4638-4cba-948e-03e5e488406b", "sighting--cdfa85b2-a749-4382-b2c4-b2408dc77dc8", "sighting--5f996ef1-6824-4c55-813d-12caa1ced9b6", "sighting--ae72c09c-a55b-43b5-b2c1-a34ecb7c14f7", "sighting--4e2735cf-3bff-4486-afbe-52ad4f7f31db", "sighting--1e10b5a7-9dac-4925-953e-96e7d7c29a0b", "sighting--35a4e7f3-8dd1-46e3-af4f-4d8e700889d5", "sighting--eb0735aa-fc37-4f94-b838-48144c7b0121", "sighting--da221e76-f402-4af5-835a-d8a87c17ee46", "sighting--dc2b5143-5657-461f-b7f2-94a7cf392f8a", "sighting--9807dcd6-3419-40a5-8649-aa24e69e2fe5", "sighting--d0cba7f7-63dd-4245-b3bf-090fa87dc87a", "sighting--4b7b1b99-96ce-404f-b9b1-6ec689464c96", "sighting--bd562802-b159-4c33-a89f-10f85fdc6773", "sighting--91c975db-18c3-4c1f-aa85-43e328c077ad", "sighting--a0c624c2-d38f-4c2d-b951-9ee4a1c006c4", "sighting--550135f4-cf7a-4fb2-b3e2-b76d995b840d", "sighting--93152d19-b989-4455-bbf0-5c1705722373", "sighting--bdda8b0d-b084-4713-8721-285e029771ec", "sighting--31aedd29-2782-4021-8d8d-e022bdf2cd7d", "sighting--03892387-fcbe-4932-9ee3-a7ccb1b71e26", "sighting--d7baeb3f-06ef-497e-b2a5-596409c4e917", "sighting--74c710ea-184c-467b-bf3f-1437a8316eb5", "sighting--4776a31c-2392-4aca-a5eb-00cf222a45d8", "sighting--d257dab9-5aa7-453e-8375-ee375b0bc548", "sighting--000f30d0-b1b0-47e8-bb08-7937d3a07c4a", "sighting--c555218e-5391-4d1d-ab05-85612accb0f2", "sighting--a055da1e-5dbc-4038-884c-9723c43f56a0", "sighting--a59e8cb8-a8cf-4391-b696-b4bbb2e6f975", "sighting--da578195-67b4-4097-ac3c-686a20560d40", "sighting--eb4a8d19-5f4c-4bcb-8146-7ca0d2f6540a", "sighting--bd6972dc-df6a-45d6-9fad-77d2c59ef9c4", "sighting--8211a742-db0d-4ec3-93ac-5dfdb4b26d96", "sighting--bab84470-c867-4315-bfcc-c7a99c3b3311", "sighting--f5c914dc-bc5d-4e4c-a1a5-102296a6b02d", "sighting--e5affc16-a85b-4669-a976-26f9c89349b2", "sighting--eddfb397-de52-4a18-9011-4f80e39929c5", "sighting--a84ef49b-da40-4f8c-b6a2-23b0d71072e4", "sighting--cd349286-f853-49e7-9ce8-647dacd48bd1", "sighting--ecb8f309-4db0-40a8-bd7d-d1b47fcd5077", "sighting--e2e0e007-d926-49a7-8569-e360a129e2e8", "sighting--54fd6106-b694-4b0e-bddf-d72a690afb07", "sighting--2e940e09-11a6-4575-bc3e-f1b9cb82991a", "sighting--d0dabcbb-2429-4fab-97a9-1039b907250b", "sighting--5e143282-d1c7-4193-9f15-4895ecdc425a", "sighting--a7341fa9-a913-4d5e-807e-2be5c0b6bf54", "sighting--73df6820-c4ec-4d70-bc59-892476137f0a", "sighting--24dbc115-0107-4f11-a348-8bf32b1b8f0f", "sighting--87f7c82a-7b07-4988-a416-6c6c193540e8", "sighting--f158e0b3-3ac9-46e3-94a1-267afcf4a3e4", "sighting--d4a42b77-d4fd-45d2-86f3-d03c56270fba", "sighting--0258d4ae-b5a9-4762-b99c-d1bd6246bbbe", "sighting--06609363-8aae-47d4-923a-2881701e68b8", "sighting--5ed1544b-e169-4cef-9a7e-1ec9f3dc509b", "sighting--0ffc69b8-48a4-4e6e-b3dc-c1e243818c3a", "sighting--cfce5a35-b874-4b16-b511-201e89b7e58b", "sighting--a94f7292-db85-401b-b80c-a45d6857af98", "sighting--d8c002f0-e5bd-42bb-a80f-b39c1932b330", "sighting--9501f690-fedc-48be-b4c9-c41dac8361b4", "sighting--a42a3c78-c80c-4967-a812-2f45c32e8f92", "sighting--2ca51f04-048a-4d2a-a6a4-a316255886a9", "sighting--8340a1c5-213b-440a-bedf-4b1057cd013d", "sighting--9417cffb-f760-4e4d-ad2c-f18a55e9e437", "sighting--37e5b6f8-f774-4362-8318-bf6bdb9db969", "sighting--0da1f8b8-2fe0-4069-8d98-cd5e2a615543", "sighting--12329687-6906-4e6d-96b3-ae016dcbe194", "sighting--a3fd6455-52d3-4caa-83e9-cdb36f16add6", "sighting--2355a4df-d9e2-4a67-a7d7-57789e39ae18", "sighting--cfc8b8d6-80f1-4f0c-b741-f4bf5a61023d", "sighting--f6074fcd-8341-47d0-914e-c6ae50539c9f", "sighting--f72ddedd-7b7c-4d5e-907d-b43f3faa4db5", "sighting--69c0ec26-3536-413f-aa3c-f683d7d5e1b5", "sighting--7d22c8d6-7db2-478d-938c-a71d117a1271", "sighting--c6b85c8e-54d7-4b84-846e-6a881d34afb0", "sighting--c3fb4887-71ef-42f2-8add-d6b638ef9d68", "sighting--5e5cfa50-932c-4e1f-8833-7d0acdd4c0b2", "sighting--d465cfa8-bf74-45b8-b4e7-bcc3eee60f9a", "sighting--7a0dfdeb-0d9f-4970-a123-bc54dbb52f6e", "sighting--a1c3b519-e1ac-4310-a5c1-bcd0a13c9df3", "sighting--3c5a24c3-734a-4c47-b78c-505e8e655cbf", "sighting--9977c7ae-8855-486e-8b96-7c5565837032", "sighting--9c77cb06-386f-4ee6-b074-2be396b4d790", "sighting--a50fdf22-5ddd-42b9-b319-5a6cf0c4c2f9", "sighting--e134fe50-b9d7-45db-9968-9ea553498eee", "sighting--e2f42f8e-c1de-4dfa-ae25-0674a14d152f", "sighting--4c49358b-bbbf-45db-84a7-cd5b7dac8653", "sighting--dd195a89-0020-4100-972f-e7cc5bc53c6d", "sighting--41b8e027-b461-4567-8b0c-46f53878cd27", "sighting--44504ba0-c51a-4eb3-8bfd-d2413b22c7b7", "sighting--85d65c8c-396d-499e-97f5-59abbc1ef2b6", "sighting--72e7e6a4-37d1-455e-8071-f0064c445435", "sighting--2dbc17c9-e8a6-4507-bc3a-abd079762f74", "sighting--83603676-7bdb-4a7c-9036-f1df5e22a156", "sighting--9477c95a-fa58-4f5a-a5ec-1f4e984689a8", "sighting--53ff84ce-267e-4891-ba51-43ce8597bcb0", "sighting--5638a773-2107-4be8-9660-c3dcca456292", "sighting--ca48e868-d71b-4359-a927-a4be83692d07", "sighting--927289d1-36a0-48d2-8b74-8c3e366b3a94", "sighting--0716c05c-7325-46ae-b814-744d9c3e310f", "sighting--bb79cbe4-7062-4cb5-8271-b841f8c26ab8", "sighting--b3f8bef1-cfd9-47a3-95f0-e3adef664422", "sighting--a016dffc-50da-4b69-9c10-4d668a2205e6", "sighting--6a7b92cd-8241-4ac8-997d-22ccbaa9201c", "sighting--6a1d1416-9416-4c4d-9914-5d9483a25b6e", "sighting--b812f1c1-4f77-4500-b0ea-2fd74cecb8e8", "sighting--b1079288-9e2f-4812-abad-b199819d48d1", "sighting--cf0d9e79-6172-46db-a67c-24d15c5a720f", "sighting--fa8fc596-3518-4294-bac8-302522f2469d", "sighting--5c72c2bf-2500-40c2-bd91-949885af6dd8", "sighting--5a43b706-b1f8-48f5-b9d5-4cdcfba222b4", "sighting--cb3dd9c2-19d5-439f-9fd9-957e972560db", "sighting--c7db4cf2-e074-4d4d-b440-d2f68026929e", "sighting--bf5f0af0-7631-4f75-805a-07cb5c5fcd79", "sighting--963f69be-5ab0-4739-ae73-78b61c360c9c", "sighting--067f7992-d6bc-4e11-8bd5-2a321fcf112b", "sighting--95979a8a-cf95-45c3-9421-b8a94193974a", "sighting--9f051238-e5bc-4f92-b665-c5f6dca48e1a", "sighting--c349ebff-2cdd-45c2-b2a6-ca2cc86a3084", "sighting--66c7ea55-631e-4d88-99fd-c5de8f30b5f6", "sighting--1d672cbf-e1a1-4c78-a868-01d9f017d4b3", "sighting--7940c477-5ea0-4fba-bdaa-7483fb5411d3", "sighting--3973fbbd-301d-4806-b6ff-62ac747f36c2", "sighting--5390c6f2-b2a8-49a1-b751-b69cb76d8e0e", "sighting--e76af368-40e6-4fa3-94f9-949d55cc03ae", "sighting--6e7c62c4-d89c-42a3-a1c5-c95fb03f5e42", "sighting--81635bc6-9db8-40e9-9c77-82e0cb52dd10", "sighting--3c5107bd-51eb-47da-8c6c-1baeb2d76d2b", "sighting--135b19c8-00b5-44e9-a901-44922de50958", "sighting--88b0d946-a49e-40a3-adaa-0082e341d85c", "sighting--8beef163-46ae-4875-af70-9558c9ba73cd", "sighting--f0990734-9e53-491b-9b00-38face93d4f9", "sighting--1a3cc11a-faf2-4ffb-a102-a1d085ef5264", "sighting--1aee3dab-886c-479d-9eda-7645aa317cdb", "sighting--9556d9c1-7b8f-445a-b82c-13806c0c2e5d", "sighting--4b30bc45-4447-4b76-87ce-b1ba133c074f", "sighting--941251ba-f4a3-427a-b463-28b5c87f4304", "sighting--8bbaf523-731a-4c4f-b5a0-84a645f3e7f3", "sighting--79d3e021-e719-4f99-bfc5-8d893ad74d4d", "sighting--8a81ad35-04cc-45aa-b09c-9f1fd1f5b31e", "sighting--77846640-7ad1-413b-9eb1-45dc1faf7c0d", "sighting--596086ed-6a27-4ff2-808f-c6c73e5dacac", "sighting--af47de5d-f2b3-420e-8dbf-7da5053dcfbf", "sighting--3f97d44f-e489-455a-916f-4c9e61dc7c45", "sighting--17655dc8-8c8e-436e-a80f-26be708090cd", "sighting--834c5ce7-5396-4e3a-8361-726658f7e53f", "sighting--13c9cf8b-af98-4a82-9fcc-db91c73e0599", "sighting--a36b5d0d-fa46-4a18-9cf9-932ef3690253", "sighting--79be41ba-ae19-4dcc-a6ee-95b92aa2adb4", "sighting--640d8e87-ca01-42dc-8723-f69b5c9d0f02", "sighting--d6e51a30-486d-4b38-b99b-54b926bb1d59", "sighting--a382861d-c680-49c8-b91b-a3187e0f0c4c", "sighting--c48d7b57-b1d6-4a5d-b864-444020b65e4d", "sighting--fd5a9fd9-8796-4a3d-a60f-ba968092db4c", "sighting--f0701105-1976-4f2f-81f5-d0dd26c04da1", "sighting--bf00783d-0da6-46eb-8802-a863cac6517e", "sighting--88b81c4a-7540-4e85-9e4b-5344bf5a4872", "sighting--e38717aa-f6ce-4147-b566-458e4bcefd43", "sighting--cc9be995-92b8-47d0-9331-f5df15905c47", "sighting--a75378f6-e9b3-4f5b-b056-26ff11aed3b3", "sighting--9e5f1777-7fde-42d2-991a-483dc261c86e", "sighting--9813b736-9bd5-4a5d-bbf5-c94ba09753c4", "sighting--cb03254d-9329-4a38-8872-2da0853a1774", "sighting--1de08c4c-008a-4656-9e37-805d100f72af", "sighting--68e9e728-4fd4-4c47-9c55-53bd809c692e", "sighting--869e7cde-fc35-41b6-9d55-c7110683b957", "sighting--b62fb866-9b84-4bf9-b1f8-03a3485f7e5f", "sighting--b29ca1d1-ac99-47d9-8a2b-337c7fa0c547", "sighting--22d4a86f-79a3-4bc4-b01f-7ac73cf61dda", "sighting--43742413-bdd6-4b19-9538-e10b7661926b", "sighting--62be1924-68b7-43fd-92f6-c8d93e363cc9", "sighting--e14161d8-f077-4a47-9f41-21417cb20b74", "sighting--268de660-b97f-4dda-a1bd-c08be10b05b0", "sighting--e06a5b7b-cce4-4814-b193-5a67552de8c5", "sighting--0eedcd9a-6786-4229-ac72-13ef06b5a60e", "sighting--b38f6907-52d4-4a0e-8c97-6cb7877feaf8", "sighting--f76c8ec6-b76f-4ed6-993c-b7466c58848f", "sighting--4120a3a1-f754-4bc7-a844-d8cb2d266622", "sighting--af6c2078-d931-4ad0-978c-07d796a1bab1", "sighting--6e0fc26d-3f86-4d2e-beac-eae192c005f4", "sighting--7e1b4456-54b7-45ab-ad93-a3960ed59a76", "sighting--b3dc2a2d-d28c-4e56-9b5d-af3c47e474f7", "sighting--48544375-7641-484c-bb8a-c530d236436c", "sighting--058eaea5-5950-4d2c-9730-8bb3b52fb97e", "sighting--8d299eaf-6aae-4cd9-9b96-5d08c4ea8cff", "sighting--81c0e195-df26-4db2-8de4-479a428c3ab0", "sighting--3dcaee11-369e-4717-921d-82915107c33e", "sighting--e4892fe2-4dbf-47a0-9b8c-2cc9443a8593", "sighting--06b14d3e-e4c6-4fde-a61b-94fcc2fefdee", "sighting--9f75fcc2-9e24-46b4-8f78-c02de263e247", "sighting--9bedff4b-3e54-4ec6-9a75-adac03b1235d", "sighting--9faebb05-d0b7-41bf-ab58-c5f956cefff1", "sighting--75911734-6620-46ed-9dc9-bc42ac91b7e1", "sighting--44c2a3bc-e746-451f-8b81-121f895f98d9", "sighting--717ea3d7-14d7-49de-a42a-7b54eb742aa1", "sighting--60e12f14-d93f-4456-ab14-ea09e941566c", "sighting--e4262926-850a-488b-a8ce-93073de02864", "sighting--f1408fb8-b75d-4706-9aff-a9e22da31dc0", "sighting--89611cab-c035-4491-93b0-8540cc83cba9", "sighting--eaad0d5d-32a9-4e5e-b184-d5ddebb1e680", "sighting--b3921aca-5e70-4d63-b3e1-69c580249fc4", "sighting--9b073021-9e80-4f4b-abe1-81c64ec3eda6", "sighting--e81dc9db-2438-40d0-ab5a-a4ecb90109cf", "sighting--1c6f9f0a-3a4e-424b-9d32-38b03be946bf", "sighting--ab2b8814-5c77-4fc3-b312-565a86d6e2e8", "sighting--d71f2f9c-732f-4aa9-b185-26a976968d4b", "sighting--41ec1cc2-1e6d-46cd-b8b5-cfd5f14a40a2", "sighting--1c8ca1c3-e9de-490b-8f4e-e86ed8334ce3", "sighting--fb399239-dc51-4157-9798-90fe27fadb3a", "sighting--7a90a95c-a372-468a-b2e9-f0c463d31e73", "sighting--ff2e83ef-be94-4bfb-aa3b-7c2546385509", "sighting--3113a2d3-34da-4fac-8aab-b528704351c9", "sighting--c3d56e87-7c33-4d7f-b2bb-b4c774f73853", "sighting--f796128b-b456-4eb9-97d1-5a11c60569e2", "sighting--7297c7e7-0440-4567-bfc9-830b2ce26ea3", "sighting--ebd35693-77e2-490e-8b75-992612b69f2b", "sighting--14213070-f1dc-4896-a5d5-cff5096eef50", "sighting--6514fed6-f150-40c9-9f93-de9ba13afbfc", "sighting--3aebd383-df48-4f4a-a9c5-6c1c413b5627", "sighting--b206ac5f-2666-48d3-b369-6cb39f954b72", "sighting--583e5897-87c2-4ba0-b676-5d692f25b686", "sighting--941c0ab8-6d2d-41ed-86b1-197983627e76", "sighting--d91d37e2-b696-42b5-a741-95b6b8a1747c", "sighting--25612b09-b910-4718-ba61-6f90c275945e", "sighting--4732bd16-c506-4cc3-8946-2094d7ffc274", "sighting--4ff9e81f-4ef0-4697-b194-5133fa215582", "sighting--38baa73a-66cb-4d13-8169-067e9e43b871", "sighting--75f02ae5-6150-48f4-a85c-dcd3ea4e1c3a", "sighting--8df41a7c-d4fc-40d4-8f27-35c507830286", "sighting--c02b8095-4c01-4214-91a1-b89744d252c4", "sighting--1ec7dd57-6413-40c6-b9b9-e0fad10d5f78", "sighting--f923f085-2597-46f3-915f-4f5818c021dd", "sighting--b006532e-5a17-4f70-81cf-e610c84787f4", "sighting--74459ffc-13de-4d8b-89e0-3e26baa4dbc9", "sighting--5930b0e3-99ff-4247-922e-e4e966e40429", "sighting--353f67f1-5bc6-42f1-84d0-74c6c43e6f4f", "sighting--a825c72d-f8c8-497e-b68e-f4e2ed665cf8", "sighting--f2c73438-6def-401c-bb37-d6525e7b35cb", "sighting--9f3af874-3853-4d22-8601-4ccd66b8156c", "sighting--6fe5165c-b5ce-48cc-b5d7-960e7b2656c7", "sighting--e2bea641-05a8-417c-9ff9-8700b7455d02", "sighting--b3a77302-c8a5-4aa9-9361-2a090145bc33", "sighting--67bc2945-45fd-416c-98ef-b116444b92e3", "sighting--cf19031b-9414-49cb-889e-f4431e9da7f9", "sighting--277b2859-cafd-4285-b4be-bb80ca98b230", "sighting--64d77387-d29b-44f0-9b32-4182d5a046ae", "sighting--c9d1fb11-19dd-4db2-a39d-ef614024f243", "sighting--a4cb56a1-5c68-4d27-8b43-997eab2eb833", "sighting--041a1750-407f-47ee-8ba8-ad612d372df0", "sighting--5387e2b4-aee0-43f0-b812-76e5ee665c61", "sighting--5f0ee067-794d-4f2b-b99a-ebd8a257e42f", "sighting--ad893936-a622-48ca-a533-4ba46629b133", "sighting--daecac5b-6965-4b4e-a76c-855d98b261c9", "sighting--fb750417-f891-4966-9a0f-191658e9bc38", "sighting--8a1215b5-3110-4a77-9a4a-97dd6702e685", "sighting--a8718f4a-25ec-4bce-9950-987a5f5188e3", "sighting--a8227847-3e40-4606-aba3-a1ce49daf428", "sighting--0cc8e33c-a8b7-4e3d-92ff-739c3c1f2d11", "sighting--549473c4-1174-4cae-8c79-713616b9fc40", "sighting--fde40183-9e09-4ba2-aa8a-d703d454fee8", "sighting--44328dac-c0b0-460b-8ed6-7da7e83c5038", "sighting--5d382c96-6bd0-4345-ba83-993ec84929d6", "sighting--522ef38b-76ed-4dc0-a203-cdb875db2c1a", "sighting--4115df4e-298a-4434-a46d-97b09501b722", "sighting--3e996891-6ff8-42c0-aa92-d308c4b40102", "sighting--bcb5d49f-7dff-444f-9bc3-757afeb3effb", "sighting--a8980878-a548-4032-813a-3a704c935559", "sighting--2de6ed62-751c-4871-89ae-2c1de1e70038", "sighting--a17dbcd7-d855-4294-b2db-c242eb0431bf", "sighting--9b513794-a172-4bb6-8278-bf1ff1e5e200", "sighting--9429ace9-c639-48fd-b839-6743caa71a50", "sighting--c4fc2033-abe4-4b1f-949b-a5079bf9bacd", "sighting--8bfc89c1-5a7f-483e-bf02-d04ae973d8e8", "sighting--f506f65a-9f7e-4283-9bfa-7a1fe2339808", "sighting--6c17ef95-1544-43dd-acc3-4012817afddb", "sighting--64b42541-474f-4d67-a469-547eb558ccbd", "sighting--6ec0f276-7a8b-46df-abf6-473a119a0af9", "sighting--a9e47cea-637d-4b63-bed5-69ede82e8ef2", "sighting--1afda2ee-c9b7-4b83-9633-bb9afe8f9467", "sighting--589c9b94-0c2d-4054-a1e3-e5ca6809bb1f", "sighting--1ab3c86b-56b3-49b7-be8d-ba8c6702fbb0", "sighting--16913aa6-68d8-43df-8de6-8269c8eacbb3", "sighting--5aea647e-171e-4124-866b-57fbf968a1d9", "sighting--dd0214e2-0eab-4e9c-962a-15fa5ff30fb9", "sighting--bad64543-66e9-4224-b14a-f4f628299671", "sighting--1c4a3090-e796-4e38-88c5-d70d6d79b8a5", "sighting--0f16d87d-cdd0-48c1-955d-6d5748464c32", "sighting--86f5d9d8-f8fe-4126-98fe-e128757ded70", "sighting--952b8541-a659-492b-b847-f2e1ae37fded", "sighting--dd147c87-5a43-4584-9c08-a8d3fa901094", "sighting--da3a660d-0293-4281-9391-4bb1649f5cbc", "sighting--f2e3e828-678f-4387-b98b-cd70e0c1604d", "sighting--2761b4b1-09ea-4532-9d88-8b83e96f9026", "sighting--dc4b0f81-e4a7-489e-acee-de77819aa4a7", "sighting--18b0660d-254d-4060-9a90-a613e84e4e95", "sighting--58e9c55a-9f04-4842-94a6-6248d2a1bc3d", "sighting--38d799b0-5f66-4742-9186-55779373ba27", "sighting--1336dd8e-06d0-40bc-a744-7d5b962d21ba", "sighting--172a06cf-f8a2-412c-8ef9-da4ee20b86a0", "sighting--500168e3-4fdd-4f93-9204-51689cf37ff8", "sighting--f5e83a20-1915-4db4-a66c-40692b2698c8", "sighting--83f52d5d-fa5e-4c45-9abc-40362e3c8874", "sighting--13faa90b-4b98-4d32-8a3f-d0f42af48904", "sighting--9c323219-3867-41af-ac32-7505d1535f74", "sighting--b252d257-513d-485b-bda9-bb9009980b32", "sighting--03904d18-a7cd-4c1d-8883-e9daf404ea0e", "sighting--4b2edaf9-a5cd-4497-b8a7-0595a177e166", "sighting--23a3688a-e6b1-4cd7-be50-d7936e9ec3cb", "sighting--4c2e0a58-3cab-4f60-bfb1-946b48f0bcac", "sighting--5dd42fcd-fa2f-4922-96b7-94d5b83c5e9e", "sighting--7946ad1c-b924-4257-b746-0d1154c472b5", "sighting--5d1f4456-cef9-407b-a64c-6ac13f4e7188", "sighting--8d242b30-0a53-4dbb-8773-c78c5e6b30de", "sighting--fb42d9e3-0b90-42a1-9d6b-a688adcd0c8a", "sighting--07d6eadf-dd95-4ddc-a1a6-9f2a7c41974d", "sighting--6f9993c6-d5f2-484d-a958-f7616ed300ef", "sighting--82965963-f7a2-46ff-b281-a3a850edb151", "sighting--9845272d-abbc-433e-a833-a4ff6c5549a5", "sighting--73ba0a5b-13b3-45d3-8629-a1fbab91a678", "sighting--f34d255f-15c5-4833-8535-b14c3ba9303f", "sighting--e707e305-0dab-4195-9d01-e1bc5e2626f2", "sighting--f2242f4a-d4e3-4395-b439-87d4246a6c22", "sighting--d8a79f54-72bf-4fcf-a5bc-ef2bb3db6525", "sighting--c419358c-206f-49ce-99c4-7e9ad17819ad", "sighting--a785a027-249a-4504-b9b4-6b6d09be3e01", "sighting--c40345a7-f42d-4d90-84bf-f96c91b02589", "sighting--cf28d46b-ed4d-4d6b-a29f-207308c4c829", "sighting--61070ecd-aee1-4ace-b52b-1742aa346c42", "sighting--7203cac1-b04c-4374-883a-0924f3b2dfa7", "sighting--cc40bec9-ee3e-45ef-947a-0d601fdbeade", "sighting--003def71-cc14-4ae2-814a-c36143b3af50", "sighting--0c4ae173-270f-42b4-9c9f-34785bf6e81b", "sighting--51897ac5-f9af-4c90-9682-ea9463fa8d24", "sighting--7f9fea64-7bdf-4d13-8be7-192e443843d2", "sighting--19f906e5-0fa3-4c47-aca7-1a3e6ade53e0", "sighting--9df3a1c4-1298-4980-ab91-4c3828115c6e", "sighting--8d92518e-7836-4292-986b-e8e2cc729398", "sighting--349c69cf-9014-4fd4-858b-d087ee8b1b70", "sighting--554a7fe8-f03f-4459-bb31-e578a27b0e0d", "sighting--a96b4851-31c5-4b54-8afd-693b2a80f6f9", "sighting--ce8ed6b9-599f-4fa6-b930-cd14765f4342", "sighting--4a059dd7-75a3-4493-8fdd-a5a0aead46cc", "sighting--20d896b3-691f-4339-a3e8-adbce745af92", "sighting--ae6e3ad6-67ab-4701-849a-28ef35757412", "sighting--27f3383e-85be-4ffb-b958-59136529e863", "sighting--7ab6a674-c5e0-4b4e-b0b7-bcbfa92fc91c", "sighting--a81b3da5-4671-4235-beae-a6fe37c2a63e", "sighting--6c9a88b2-81d9-47d5-b078-149536e981b8", "sighting--d691f111-e3d1-4328-bbb8-8672f0f921f3", "sighting--a9158f9b-c0e0-47d8-8ca8-215343bbac48", "sighting--f73758f5-59b4-42ed-a222-461501c05774", "sighting--efcead2d-ab81-44ab-958a-4adc75f99351", "sighting--8d9870c4-b57e-41be-a7d9-75e4a4c377db", "sighting--373ca965-5e8a-47fa-accc-d00d33ea7a82", "sighting--35573e77-d28a-4dee-803f-873ee5b22d2b", "sighting--b7495829-019d-4aa8-a8b0-fe1f9a53a4ab", "sighting--f175a57d-7b5e-43ee-9a85-4a30c2634b68", "sighting--5fc21eb2-45dc-4203-a7fa-13af44dce2d7", "sighting--2f8d0bd3-d62a-480a-94bb-3e1b8111589c", "sighting--62ac0e37-6e44-41e0-ae3d-9638230c5216", "sighting--120301f5-603d-4184-810b-33cb4ff36953", "sighting--d49e8bc7-71d6-442c-bc80-4fb5c3a2b027", "sighting--27ff1229-40cd-452c-83d3-a4820ba50a4f", "sighting--0dce7587-8458-4ddc-a46b-baf8ceac6b29", "sighting--669ee252-2be7-43e6-ad39-b2e8be694a2c", "sighting--c5445c9d-3976-495d-ab2e-e5206f86bb12", "sighting--99def550-cf2a-4dfb-b911-4b79020912ba", "sighting--d670a802-339e-49b7-bf0b-e5a86fbe01d3", "sighting--aa17f57d-73b4-4a9c-96ca-3c7d6e22741b", "sighting--b6158f30-9c7d-4bf8-8065-1d9a51e9cfce", "sighting--17a82c5a-e01d-490b-89c0-54418781010c", "sighting--730ccf7f-b7ff-4e15-b619-67c604088229", "sighting--ebcd0b41-f376-4e39-944a-0c99b12fb737", "sighting--429e874f-4388-4e84-896d-df27c295cfd2", "sighting--cdb4078d-c260-4763-a336-b67be86306bb", "sighting--42ea2258-df7a-4f9e-a56e-e15037285387", "sighting--7f46ed5b-9e31-4aee-8af6-f7651fb177d9", "sighting--d2d4f7c9-ce00-4bf5-95df-84698938d2d6", "sighting--4f3fda97-3854-417b-afa2-9d5ff6530501", "sighting--c55dab69-94fb-4193-93b8-a1402e6c0997", "sighting--299dbf30-3181-4710-a75f-636fca828204", "sighting--f17d7296-3f2b-40d9-a563-c50a98b93cfd", "sighting--c38995a5-452c-474c-a2c9-de84a9f0b69d", "sighting--3e9ddd61-5ca4-491a-9e30-03bbcdbb0efd", "sighting--7603f4ba-2531-4421-8c4d-6d0c368e074a", "sighting--b4685111-55ef-4586-8676-a67a5d1954a3", "sighting--674922a1-b9f2-455c-8dba-26c10959d58b", "sighting--e649a45e-5de6-45df-88a4-f84e8b9d052c", "sighting--89d9db2f-70a0-4d06-9ed3-7907c57ead97", "sighting--b4bc9da1-af92-4405-9a4f-bd40b0852aff", "sighting--c8202ea2-7fa6-40f0-870a-45c241f62b9d", "sighting--c60e0b7d-1516-4d50-94ed-6865230b0764", "sighting--c2736b03-4aca-44cf-ba9b-c70579902ab9", "sighting--1f89a13a-19c7-43a3-8850-4f43d259088e", "sighting--a9a98250-d9ee-46d8-95c7-b8530e63bad2", "sighting--51f88ba8-190c-4ec4-afdc-362129b97ffb", "sighting--c48df4b4-3306-4845-b220-0d9196b10503", "sighting--9186ffd4-1e86-45e7-ac6f-e9741abaa574", "sighting--48c057d5-5949-4b86-b87e-a7193ddd867a", "sighting--167cc475-b6f6-4ea4-9197-2b7598907036", "sighting--275608cb-1103-4146-80fb-930bb034747c", "sighting--67226e1c-435c-4250-be64-399e0b195572", "sighting--e5cc4d8a-b734-47b2-a56c-2155eb9ce80c", "sighting--5450b96a-1eab-44fb-b511-57c444ed071f", "sighting--99332105-af65-4bee-9733-8610b97ebe60", "sighting--a27547b2-52b3-4c4c-a09c-fa9e4bb01bcc", "sighting--4dd24700-df30-4fd1-92fc-e17b9440d22b", "sighting--bc456600-bc71-4082-9f26-95abeee88893", "sighting--383aac38-4b94-4b54-8be8-7d2345038e99", "sighting--9fd169c7-008e-420c-a394-4b1ccbf37bb9", "sighting--6a369afc-e124-4300-b6dc-fc0a78cb12e0", "sighting--6898934a-9456-4074-b093-20b7374faa9b", "sighting--1aa54156-299f-49a4-8857-eb34eef4a9d2", "sighting--1025344a-778a-47cd-8b5d-3bd54be1b8bf", "sighting--55031222-d243-4f2b-a9fd-d6cd691e9c83", "sighting--3ad91e70-49ae-433a-8f8e-51f0fba4bd8b", "sighting--c8f98c9c-a4ac-4e86-a089-7487acb6bb55", "sighting--6c486a2b-2458-4867-9b07-9f91af0f6ca0", "sighting--b56efb15-6dc1-44a8-ad21-83ec3c893eec", "sighting--4a71c8e4-35b2-4bbf-b1bf-31f0a7405022", "sighting--46367b44-6592-4fca-9839-8d651fe11e6b", "sighting--f67618ce-def4-4117-97e1-9f3872e80020", "sighting--2def4488-5714-46a5-a401-3b475818f268", "sighting--c49c36fa-3554-44fc-9e9f-81c1a24f91f7", "sighting--2a673fcb-46d3-4a7e-9343-e72ae019095f", "sighting--2c50951e-196f-442b-9008-cbe98fbc980d", "sighting--f8147548-2c8a-47ab-a5dd-fb1ce814742d", "sighting--f45d7a8d-fd4f-4059-aa8c-6865d6cf2ed0", "sighting--9bf5273b-e1ad-437b-813a-1205d19562ee", "sighting--d9344fc6-12bd-4e08-b890-f59ea401046f", "sighting--36cd72eb-1854-460a-ba27-04102c1da462", "sighting--07d5a926-28de-4f67-9138-f21b21e1fbfc", "sighting--2fd5f988-a011-498f-b9a3-981b2c73bd28", "sighting--2d646230-c921-4a50-8680-ff8869df0e0e", "sighting--dd82c77e-02f1-4a0a-b345-d36a686f9d82", "sighting--8b2290e4-3517-496c-b8fb-19aaab309983", "sighting--ff972da7-c4f6-467c-99cb-8cc897fa6646", "sighting--194ec760-1684-4c43-a65e-f6781f89ef90", "sighting--616ab81b-b648-4b76-a647-6f03e2bd21c4", "sighting--8466331c-e0f9-4c79-ad9c-2b7215ce653c", "sighting--d2f309e3-e832-4498-9d96-cc38c032dbf2", "sighting--93bec25f-8944-4e63-9736-21d0f1870716", "sighting--58d1a009-b137-4d86-95b5-2790ce606e26", "sighting--946a7a9a-bae2-4965-9c5b-cd1a3ce50bd4", "sighting--94df0efb-f449-4b52-9d3b-cc38afaaa64d", "sighting--9e3eee3b-0b99-4463-8a9e-446e5c8c794b", "sighting--74afae5b-7f00-4d0c-ade9-24dbde857761", "sighting--38416a40-ac6d-42bb-b52c-d8123ea1171d", "sighting--1165db1e-2564-432a-8728-8a903ba68ca2", "sighting--05514c32-9804-4f57-bb98-169bafb08328", "sighting--dae63639-de6c-4e61-8442-aa69858cca40", "sighting--12cdad4e-b3c5-4b70-844d-90670d2c3065", "sighting--821e7477-e53b-4ddb-992b-67b1378c1852", "sighting--da568761-22cc-450d-9ad6-cf84a8855490", "sighting--5e6de947-d250-4225-ae5e-398d7ba3cc92", "sighting--4e91b1f6-964f-44c1-acd5-63107abab9bd", "sighting--1a76eee8-4170-428c-9d33-c4076b287994", "sighting--305c3497-a0f4-446c-aa18-367ecf4c6049", "sighting--62cd3cac-e250-4ca2-afc6-74d63672cc31", "sighting--f63366b0-74be-4243-b4e8-5332497eacb9", "sighting--d3a9575b-0722-4a66-a90c-fcefaa3e49c6", "sighting--575e6953-654e-4ef5-99a6-3f627a203648", "sighting--58b8cca8-b366-4068-ad2e-ba1f27ecf812", "sighting--c6fb109a-4fbd-4bc6-843c-5e5485fc4898", "sighting--b47d5e09-1999-4ba1-9a4f-1dc441804e01", "sighting--2167a395-4282-487c-807e-a23ffc02e9c5", "sighting--c2678f16-b913-4663-b076-31d2f3b7b4d8", "sighting--27a3bbc5-7279-4257-9a4f-d449ea42f469", "sighting--58d10e8c-9cae-4744-95fb-8ead9c659b92", "sighting--a15af886-844d-49ec-b06f-ea80fb75221e", "sighting--8b23d4cc-41a2-4ff4-a4c2-ad6bad2927c0", "sighting--60d8cc3f-0d31-41a5-8f52-acfc9ada2bee", "sighting--6f31b149-bbca-4eea-ac00-e78808186b87", "sighting--b4e3272e-2603-41ba-9914-c28cecf5ff46", "sighting--4b3ae24b-a332-4fbc-9645-a47446dad9d8", "sighting--ba6e1941-9f77-484a-baac-6d93e68c5a52", "sighting--0ce463c0-5023-49a6-a5ba-e94184ac6633", "sighting--ea753436-764f-434b-be9d-4ab43c241edf", "sighting--0a352f1b-b8b5-45ad-8bf8-091754d0dfc3", "sighting--b901b9b1-b75c-4ea5-828a-bbbde29cb5d1", "sighting--32b8ea37-0c2a-4d7a-935c-b514fd0e6d72", "sighting--79a522d8-a840-40ef-8ac7-2447ddc43898", "sighting--51547fe8-8d05-418e-899f-ccd789ec4346", "sighting--70f2d804-ac7b-4738-8fd8-2663fa651617", "sighting--06876a77-a466-4b61-83a5-3769dbcbf88e", "sighting--16fbd283-71c5-4a8d-bc60-28954359b070", "sighting--a2dfef47-a77d-4bc6-9451-49df0d54dada", "sighting--5cfa0668-7ec0-4058-8b9c-20069b351a62", "sighting--52a596d9-395a-420a-8a0f-f014c75a47df", "sighting--c6e82ada-fecd-4b4b-b35b-bed9d2fe1509", "sighting--6ef4513a-e3ad-43e2-b59f-104b891934d0", "sighting--cfedae3c-2f12-4715-9d20-e911201420c0", "sighting--2d3db87b-0fbb-484a-8fc8-85d97c44a0e1", "sighting--180c0cb0-c05f-4e77-830f-59db1ee1c1fa", "sighting--ac64e45e-8d3e-41e4-8cbd-1c81a9c763bc", "sighting--106d832f-10e4-4ddf-998c-705beae7c7b6", "sighting--d02113ae-db62-48bb-b63a-b576938c1d22", "sighting--9fd3eb65-ec5c-4b59-8762-b158677b4df4", "sighting--8a6fa75e-7f42-4a61-a0aa-dfe95bada25f", "sighting--2d2fb0f2-2bad-4979-bee0-ff132b339342", "sighting--c80d5523-4fd3-4283-b643-09d091b6b872", "sighting--7b06acc3-9baa-4174-a169-5f2b79012df2", "sighting--b95e52de-6c4e-4c72-ba48-9ccca1f2e642", "sighting--89942b9c-63ae-4293-acff-82520641c227", "sighting--2fc1f5dc-f5ee-4af3-b728-9818cb1b7633", "sighting--26b10967-97e2-4c16-9086-63d926f55a5e", "sighting--c316d9f4-abbd-42a9-8b8b-ae65e38ff496", "sighting--3c9f79ee-79a0-4f94-a9e0-6506f6e4986a", "sighting--bc4e2969-5bc8-48c8-af89-99c7c55caf0b", "sighting--894704f0-0ca8-4f09-aa86-5285f55c73ad", "sighting--b0757aaa-6986-4fc3-bca7-63675751e806", "sighting--98e61235-813b-430a-8855-8952b40baed8", "sighting--3d0d9ab7-7f35-4fc9-b8f2-0d8382a5d45b", "sighting--e0e6a9db-75c6-4172-8f31-05d8e0aeba71", "sighting--a7931ce2-3d00-42b0-829d-ec29cc2cd735", "sighting--f95d35bb-9b04-4db1-94a7-8f5ef1e0cfe2", "sighting--db576234-2d65-416e-b307-9952b3eacb54", "sighting--412529f4-cc4b-4829-8d22-c83c2fc9b6ce", "sighting--72bb71a0-cb3a-496f-a99e-f69d87222de1", "sighting--aeac95f9-0176-4d39-b0af-33f9bb24dbc6", "sighting--789fe33a-5ad3-41bc-8773-397c3d43a364", "sighting--38a3ba16-188f-4ab7-b53e-54f37d53f4ef", "sighting--06150a74-24ae-493c-8d04-4f3bb5f4c93a", "sighting--7fb019b9-32ef-493e-b8bb-bf93b8ba591e", "sighting--9e7cae15-d8e4-4a66-be53-f303221311a2", "sighting--0ef5bb60-69e0-4258-bbdf-e56a36af06b6", "sighting--5884a8ff-40cc-4288-93bf-0a9ba7d3251d", "sighting--2f550cb1-aa82-4952-b520-f454c1dab9e9", "sighting--8bfa8b1d-f669-4be9-b42c-a6060e869a20", "sighting--a47e4a3b-5b22-4d5a-a4f2-ab6b97f25f25", "sighting--45826b30-9a50-4c60-80e0-2e6183e3a8b3", "sighting--5c950674-8025-427d-bc55-9e5034da9a4a", "sighting--d8ee6617-78af-4427-93e0-59a36de91c95", "sighting--ef0a97f3-a80f-47d9-a63b-d63129c2ab7b", "sighting--dafa20a5-4090-4790-92ff-da22740ee5ee", "sighting--289a7287-b0b0-43df-8cb5-a47fcd1e59c5", "sighting--65247711-d2fb-4b15-82cf-799ee9f6d933", "sighting--3f97929b-afd8-42ca-a8fc-8507ebe7f15e", "sighting--8dd4b7b1-c772-4392-96b1-e7ad8594026d", "sighting--334f3cbd-919e-47e0-869e-35c365acbd0e", "sighting--56824f49-f67f-4bf2-8bf5-2c00e5a2b6cf", "sighting--3863c38b-9ef0-42ca-9b36-5619bc9e0c7f", "sighting--8369c050-76b2-4084-b8e6-25aee344720d", "sighting--9eb2e7ab-00df-4d6c-a427-508cd2ccd482", "sighting--03a17ce9-fc74-4a7a-a56b-88c401b1d67d", "sighting--2784b120-b684-46a4-b414-216e5deb7164", "sighting--ea4728e0-d41f-4ee9-bcac-73bd90edb7ec", "sighting--f0c03916-9043-457c-9795-6b50115a1d71", "sighting--cacd162e-e2e3-4af8-a536-6dd7e2ad0f6d", "sighting--8df9472a-65d1-4610-bb32-6a4c07848866", "sighting--a29268d6-8046-400d-888b-f4a66fbb4574", "sighting--79222c45-254c-4bd2-9667-893051e328e1", "sighting--fefb5849-abfd-472e-b953-126c101b64bd", "sighting--7f31268f-3964-42dc-b67c-46174fecf12d", "sighting--ded33607-6d23-458c-a77f-49b9cd72528c", "sighting--0b63fa98-efc4-42e5-9848-a49d2d29e810", "sighting--6f212367-8c35-4017-a8b7-4c9565cc04ee", "sighting--f139a308-386b-4ea3-9b86-89b0b7bb2481", "sighting--a1d93d86-a24d-42a5-a705-4b9e33612cc0", "sighting--68431807-a814-4a9c-949d-e27e51290d7c", "sighting--b35ae7d8-500c-41a0-bea4-2ae9cd204a58", "sighting--f002d4af-5b10-4736-a500-027f9a254245", "sighting--a9e93e13-86aa-40f5-aa28-12e84dd33262", "sighting--6cd9645d-b813-48df-89e7-6adc5fdd730e", "sighting--c1dc0202-9c09-4b66-9989-107bdafc62bd", "sighting--41772296-e555-4a8c-95bc-ef413c748d78", "sighting--2242e303-ba0d-4be4-bcc8-6f67166c3315", "sighting--8f5228e3-69c9-4132-9db7-32921737e1ec", "sighting--1eacbb05-390b-4e03-883d-c44b898cae90", "sighting--894ab3cd-ba34-437a-b3f7-88993ef18d47", "sighting--36ba3f7e-5035-4c4f-a009-40e4bc609cc0", "sighting--e37a8189-29bc-4fe6-a54a-6e150e8688ef", "sighting--79fa4084-1a7a-413f-9c32-b68ca0604269", "sighting--0c3b9cd6-28e2-4d2d-b124-1ff79bcc385a", "sighting--d59cb9a6-b1a0-4235-b913-dffad4c835e6", "sighting--7e5e9b2f-9316-4b08-92a0-36965ced91c6", "sighting--006bd375-772d-4206-ab6f-12cb88b5d483", "sighting--ae710cdc-5bbb-4738-97f6-f68d281f4f9d", "sighting--01b8cb3e-b325-465f-85b5-a82145ff3e79", "sighting--4c8431f1-f8fe-4f98-a7a5-740d9e637ac7", "sighting--18abd702-cb62-49b8-9a6b-379ed66d231f", "sighting--92f9e334-ea5d-4b0b-aa4b-3876f31d210a", "sighting--a7e56e09-dca6-44cb-b21c-837e20d0e1fe", "sighting--2568ab46-fdac-41c0-bac4-b4cd65a97360", "sighting--1d6467da-e444-498f-be33-2546aa09c0fe", "sighting--9536b9d3-14cb-411a-89fe-da4de7264ebb", "sighting--7753159e-0a0d-4903-b22f-13b09cb1d8a0", "sighting--aae3bcfa-4df6-4e2c-9ccf-03733212b55f", "sighting--29549b09-0cf8-4bef-a146-f35e64679016", "sighting--d0a133a9-2166-435c-bb69-2b73376fed70", "sighting--e3c877ac-90c9-4a40-bdfd-68b15df20ccc", "sighting--1fce864f-9c75-454e-9659-9e0af4a886a1", "sighting--9eda49fa-a2c0-45df-9030-14704fd43c55", "sighting--e992bc50-3cde-4117-936a-cb5951b7a38d", "sighting--508246be-4641-4fd0-b381-b6e705460668", "sighting--066796af-a191-49cf-b66b-af5e1b6a04e7", "sighting--02da9192-be4c-4fdc-a821-7cefaf61d30e", "sighting--1666f4f3-ea48-4515-a2c3-aa3fc3e39374", "sighting--30df9fee-a723-4c74-aae4-f22e35f1d404", "sighting--2ddbc6d8-40b3-4e28-b83f-eaa0a0a1d84f", "sighting--dd419191-894f-4f5d-9e9d-3559743df5df", "sighting--e578d597-4070-43bf-ba88-1a8c494e1d3c", "sighting--1b7aff28-c409-4ef7-a0ea-2a7c10925111", "sighting--44ac1e06-642b-46c7-8783-9fd8c5734598", "sighting--065c5ee2-23e6-423c-8d56-022cb21672e4", "sighting--14294f07-0582-4e22-8593-766c9b032c9b", "sighting--51581f41-d95d-4dcc-ba4a-f1ffc3048e82", "sighting--6f7da9e8-09de-45a3-b41d-fced59b84de6", "sighting--e5e5d130-70e0-46c4-9518-8044ebbcea25", "sighting--9d7a6548-7747-4af5-b2af-f5c981531f30", "sighting--0d0ef8bd-3a64-4514-82a4-b10fe6197b5a", "sighting--021c2b03-e407-4e8f-aadc-c41432009a13", "sighting--a5dd0502-2b8d-4015-9d46-fe72b22d5bab", "sighting--bea2436e-3096-40ce-b319-fa4777386fa9", "sighting--fb2e810f-7203-4d22-811b-9387e3747c98", "sighting--e8856905-fd2b-4648-bc15-318b32af4923", "sighting--433ead1a-572e-47fa-8485-71c9f1900661", "sighting--82b48771-5a5d-4bd4-8469-432cd385486c", "sighting--0be1683a-cd5a-4fa5-8b31-57c9888adf94", "sighting--816a5495-95d3-4d7c-b33c-4dc2d9bd7f16", "sighting--fb0ffd7d-0515-4b9b-81f3-3856ad7ad23c", "sighting--81deb39d-d97a-4761-8fe8-f694c404db7f", "sighting--8a309f75-e0f7-4aa5-8fad-2abba61930b2", "sighting--56da2c1c-6185-4f79-9eb0-9fb04fe1563f", "sighting--241efbeb-deb9-4989-9e27-3b41e51741ad", "sighting--843b90e2-7e57-444b-b84e-162c729db287", "sighting--3b1b39e3-b651-4e71-910a-27216c12977a", "sighting--ebb0a230-df5f-42b4-8961-ecf7c80d5425", "sighting--0151da0c-f23a-4aff-81a1-303a0d9a475a", "sighting--a60d6143-093a-428e-8fc1-edae52f29dda", "sighting--51e21bc4-ea4a-4e43-9e6a-8e8e654e2ee1", "sighting--85507635-3d44-4853-832c-598f8c9a910b", "sighting--3c59bc50-f90d-4f55-9305-f33b45b7e289", "sighting--08049f2f-dc53-4780-8a25-dd406eb466c1", "sighting--5881558e-3648-40ab-9a45-39f0203fa929", "sighting--7ba097b8-2448-4c1b-bcae-8cdb1919de4d", "sighting--846ca03a-1f58-48c2-a75e-0a61711560fa", "sighting--e53350d4-7eec-4d16-8dd6-fbef0484d070", "sighting--e549dc6e-0a21-40fb-801f-4f9bc0f6926c", "sighting--cea8ed07-dfc1-40e7-8d19-57aa2fe02aec", "sighting--efe74d6c-7d5e-4bcd-bce2-988b0276f0bc", "sighting--37ba0a7c-355f-44bb-8519-4a56c2e1d5e6", "sighting--c21b1e92-2340-4025-9537-980f38615689", "sighting--a6f86a86-0030-4e87-851e-224c52588d0d", "sighting--a08aee39-fa8a-479b-8b71-ac292cfd2b1f", "sighting--54a2681a-6d72-4efb-8c36-9427781122cb", "sighting--d96afa2d-0139-4882-a157-ac4af1c438ac", "sighting--2a2129fe-06b4-4628-a658-9988594d59c8", "sighting--5db964b8-8062-4957-bde5-27b34d80cc6a", "sighting--5f9ce9d9-014b-43af-9b07-94c68a44b471", "sighting--af93b0cb-e227-4c45-ac72-3a804b72cf67", "sighting--f6874ec6-e7cd-4901-9fac-fb5aad76a3ba", "sighting--fe40b31b-62f6-47b0-b432-f6695b3ff3a3", "sighting--81ac3dd9-fa30-4245-b5e4-01beff192612", "sighting--36a2d738-6369-4e6b-ae2e-fc2a5da32c51", "sighting--35217ba1-f0b4-4cc0-919d-d6572cde6d8e", "sighting--44975825-e56e-4fa8-b868-a8e38fd5e285", "sighting--984319d9-29fa-434f-976c-710fe9ae25fc", "sighting--948bddc9-aca4-41f3-9d9f-164a67293338", "sighting--0c424210-5318-4ab9-8bb6-817aa62d3005", "sighting--1d2a8ee8-e408-4b9c-92e0-0c22e307d068", "sighting--7c03c2fd-2882-4a4c-a087-560d336f6235", "sighting--c0aa4fdb-baf1-46b8-ab86-b8402a3e7547", "sighting--a9bc1846-a448-4edf-b4d1-adbdc0103b13", "sighting--d038f834-e46b-47f1-8666-9c46559f4e9e", "sighting--aa53c890-9d8b-4455-8b69-33934853eee7", "sighting--2d2482ad-9889-42c3-8508-30900160c89f", "sighting--f0bc1831-fd1c-4eed-9694-f48bd5bb07a2", "sighting--cf97609e-9f7e-4a20-9f01-e5cd46616730", "sighting--73d5fb17-6665-4d60-aec0-fa8dfd3d0db3", "sighting--4c279e66-a50b-451c-9c89-97a15f37dd43", "sighting--eea7ac45-c0a8-4562-bd8a-e1d116e7f8b2", "sighting--0c0594cf-a437-42ca-aa56-dc3b107263ae", "sighting--ea3f0827-50ff-4840-9f4b-1c7160062710", "sighting--a3c59f00-1d99-470a-9cab-12fb2dcde10a", "sighting--ccb89d00-a635-4f1e-83dc-8750982aa34d", "sighting--3ad5ab88-9914-4fe0-900b-1aba660b52f1", "sighting--b9849e79-616e-4b56-a753-545afec60b8a", "sighting--1751c903-f88d-47ea-8e8c-3108ef1c561f", "sighting--66692c96-230c-451a-a2ea-e6810632f524", "sighting--ff818408-ff75-413b-b907-2f62bb10337c", "sighting--018c4fbe-7f8b-4858-a4d9-23068df4d250", "sighting--3eb33be3-30b9-49d4-b3ff-5b5fcb4fdccd", "sighting--461b762f-a13a-46d4-931e-b051f78ada43", "sighting--5f2a10b2-84af-487e-879d-8e615b169334", "sighting--dc55493a-717b-4910-a8ef-b94b3f571230", "sighting--124c0569-4383-43d8-9218-3ba30fd50133", "sighting--0af4122e-d19a-4891-b869-c6ce5e6a31fe", "sighting--d9350864-241f-466f-ad69-6de7590c693c", "sighting--f81d981d-7be3-4c87-a890-ab1e31b830fb", "sighting--252cd4b4-0a53-43a5-bd52-7a5d9b29a378", "sighting--01eff865-ead7-4dad-8f43-9fd0919ae134", "sighting--f07ac8a3-8ca9-400c-9b5a-3d656d1ab4dd", "sighting--817e78d6-670e-426c-84be-4263854269fc", "sighting--0e5a3905-42f0-4826-8dd3-2b0efb295111", "sighting--39765ea7-c135-4e67-9abc-f7fb6b2d96b0", "sighting--7cc12d5f-dce9-41af-833d-c1ed01413de4", "sighting--17090fa1-d89d-49a0-b2cd-2fe085d008af", "sighting--1aeb47ca-9b24-40fc-b438-099108bedfef", "sighting--0244c28d-807a-429e-a2c8-58b0d31ee101", "sighting--fbf005d8-2166-4d49-92fe-dd455f7df486", "sighting--49161bda-8dfa-456c-8bfb-6758e60bee69", "sighting--1b8d08da-5804-42cf-a723-c483ed7ffb49", "sighting--38a6f697-3bc6-4e6d-8390-ff71238084c2", "sighting--bb435e5d-5486-42af-b3a8-16655e632661", "sighting--ae4882bf-975e-443f-a938-ccf3deb9b072", "sighting--8d258970-61d3-4f3b-a5df-d7ea8e8b5bc3", "sighting--1fb583ad-5557-481c-b662-f688f051df1a", "sighting--5298d309-0e9d-4106-981f-2e4b8d898994", "sighting--2bcdbb1d-63c9-4e8c-b545-b6138c6956c8", "sighting--c49e3957-6a9c-4ef0-b0e7-73888bbaa220", "sighting--d671bd66-61c1-4b3d-95c9-f848deea2a8a", "sighting--723aca36-d0d7-4185-9e79-838a1484f2aa", "sighting--9c1f74df-5cfc-48a9-b432-f3a7279023c1", "sighting--eecbcf31-50b8-41a7-917e-e9cb2129a065", "sighting--92457a63-4488-4f01-ad4a-9e4bf7e01926", "sighting--cadc20fc-280b-428a-8d5a-3601380fe84f", "sighting--baaca8e9-3271-4574-83c7-84bc127b8aec", "sighting--6d9b8b93-33dc-400b-8ef0-f9c2358e84eb", "sighting--e1ef8fef-e283-453d-b88f-8a71bcc35a6d", "sighting--6ab02587-0a7e-4936-8e03-c1ba3e5521f4", "sighting--2056e92a-ea7c-40c9-9bcb-19af2a5753d5", "sighting--9e9203a9-a78c-41de-b4a0-0f007d89745e", "sighting--55c96b96-b2a1-4edb-bfb9-8d6307c8a61e", "sighting--55464d30-9b14-4e12-97c6-92e75ad96915", "sighting--8c8b94de-90cd-40c7-9fed-ad2987ff7d93", "sighting--d6f00f78-4617-4e23-843f-d4f916655f3e", "sighting--ea109808-0de7-46ab-b01a-ecc3d3c66b23", "sighting--6ce9e74e-824f-49a9-b7e1-a003aa7e0b2e", "sighting--92912a11-70dc-4ba2-bdc1-26b33627701f", "sighting--6047481c-ff71-445f-ae61-05ad69656b8e", "sighting--6216de1c-5b2e-4ccb-8fb2-660283088546", "sighting--97453c46-26fb-44c1-a5d8-454f13f79897", "sighting--949ae4a9-d194-4a91-9962-971186c8f147", "sighting--042942c3-8eda-4899-84f6-99648ddd587c", "sighting--586319f5-4ddd-4079-86c2-d51d01cdb036", "sighting--11066a84-dafe-4501-aa46-262e3fb08c18", "sighting--ee808ef9-8c07-4a44-9a1a-773797e294c1", "sighting--45bd3e5a-b820-4276-9301-5b812cb5c746", "sighting--ab5485aa-d445-4dd3-b427-5d42beed591e", "sighting--1724efd7-67aa-4e49-92d3-5e245997ede5", "sighting--ccdff32b-603f-42fb-a0f3-e9ce58025a12", "sighting--4b5f8173-5707-47f3-b594-0282c7a0eee1", "sighting--6783e1b0-95d3-4118-8c8c-b44608c7d798", "sighting--e5519b40-8909-4262-926d-0bd6cfbf6b53", "sighting--df47995f-fca1-4471-866c-d01b49280f66", "sighting--1ef29811-bcd1-459e-a730-40e4b921e0aa", "sighting--a010de92-cbde-46a0-825c-e227a6cca1f9", "sighting--1147f16b-9996-494c-831e-f4e0e9da31b1", "sighting--345c125b-19fd-4930-8cc9-39ab27976cbb", "sighting--4b96f20d-db84-41c6-b909-2b06c5eda51a", "sighting--2a7cef8e-0020-4211-a7b8-d8bfb7758fe5", "sighting--830e6d17-65f8-4f00-8303-63ba6812ca11", "sighting--cb37b8eb-4f47-4d33-af24-2bd6c1b66c97", "sighting--5cb3d193-36fb-4991-b7e0-5e472e228831", "sighting--1518d62e-086c-4880-9588-bf40e9178594", "sighting--b7279447-2c29-4e1f-ba12-e38ca909b030", "sighting--fe221937-9f79-408e-8922-2caa26e1fe05", "sighting--283a7cf7-177f-4c65-bc15-a6d472268c9f", "sighting--d70b0dd3-930c-43fe-9b91-4fad0cce6ae2", "sighting--beb7972f-e23a-4413-9550-cc5a0441fb31", "sighting--d8f9b44f-0124-4243-8362-86ff4ef4f5f7", "sighting--68ffc32d-ccc7-4937-a985-a7668fbe6060", "sighting--4d830b4c-1f55-40ef-bcae-752527993098", "sighting--de163ab5-2fe1-4ba7-bec3-a157ff5b2e15", "sighting--e12bfc38-5450-4632-8f0b-af804cfc707f", "sighting--3b6a4df7-ed8f-451d-8b94-343e47950825", "sighting--1c5f2d82-9893-442c-9440-53000086ac6c", "sighting--d1e07d6e-8f5e-4bc8-a8db-4fb475eb075e", "sighting--54566336-c54a-4442-b2c3-f7e9f6db661a", "sighting--539307b5-9153-405a-9655-820929deb16c", "sighting--a2219c78-de11-47c4-a186-87a08e1843e4", "sighting--a82028d5-919d-47c6-b778-6d853b6f684f", "sighting--3a182a86-3429-4fd9-9b40-60ebfd1877cb", "sighting--0765ac24-52c6-454c-adbb-a87a15baefa5", "sighting--663a2456-37fb-4b05-baf4-bf752e8e9a3a", "sighting--a3457320-68d6-4682-986d-bc30ca294c4b", "sighting--12efd9ae-ce73-4ae4-a2c9-164551f659f3", "sighting--fb1ab31e-9984-4726-a085-116bf39f8838", "sighting--f7828107-1830-4209-87c5-004bdb2f8bbb", "sighting--361b3b4b-58e2-4bb3-aa5a-ab9983440b92", "sighting--66a5c680-f37a-43c1-947f-77cbc62f6801", "sighting--45a85f10-c6dc-45f6-88f0-85b6c9d9daa1", "sighting--0cec6967-5e5e-42df-854e-817ef94828a0", "sighting--e706ab98-6045-4358-a7ed-ef2057f63178", "sighting--9c7b86dd-4d17-42ea-b648-91630b7854b5", "sighting--9571bb01-8f14-41e1-8a02-0bfb89fd3247", "sighting--6cc6b59c-c4b5-48b6-90c7-408223f6d966", "sighting--f17e20c6-880d-47b5-8da0-ee2d005328a2", "sighting--4cc9236e-9fd1-4676-b6d6-944d1e938709", "sighting--c29e512b-52e8-47b6-9fa2-62414163a5cc", "sighting--b5f6a740-abb1-4e2e-96ab-cbfada4781ad", "sighting--8ad134be-480e-4b24-b632-9e8a599581bd", "sighting--509ba8b0-fe4e-4848-a08b-cc57a99eb440", "sighting--b3939bf3-a7af-4991-acf4-ce1ceacc8dff", "sighting--f139938d-db08-4016-8339-296a58b799be", "sighting--abb5cd31-ed81-436c-8454-09bb0c34e3a2", "sighting--51a74f4c-f433-460c-af82-fca1c824ad67", "sighting--7764a840-1bf8-47c1-9aff-381c18bd9c86", "sighting--1d7829e9-5229-4804-ab14-b39fe56bfb62", "sighting--69ef567a-a066-4a0e-868d-4b3f5a8b28f2", "sighting--a6712bea-c0aa-4f02-88ae-592d05915bb0", "sighting--f15ee878-186c-487d-ae7b-1d8db7b5a275", "sighting--3d7405d2-22f3-44a2-8ca8-5e147cfb86b0", "sighting--84af83b5-865a-4e9d-86ac-2b2a5d288caa", "sighting--be79d379-27fc-481b-9655-9851c2fe654e", "sighting--19ce5d90-68cc-479f-9665-76ccca6c40ff", "sighting--f737bc7e-d199-49be-923c-c917ec455537", "sighting--0345bbc2-59dc-44ac-b2ac-9494c1f3588b", "sighting--82b0426c-29de-4ea9-9aa1-928934d1924b", "sighting--03791dc9-3f3b-43b2-a7ad-d3b889082a69", "sighting--56d11cfa-79ec-4389-8e52-c54c73fd4984", "sighting--ab58a26c-43a2-4d14-b42e-d175d8f196e9", "sighting--de84d3a1-df47-418f-8c05-a5ac4284103c", "sighting--97e882b5-f4ef-4599-a5b3-69504bc6a14f", "sighting--02ca5d4b-a254-45db-9714-3360d1920fb4", "sighting--a0401a04-c199-4683-bfdf-283c96a55863", "sighting--f4ca23f0-c329-47d9-8571-27c9a1ef0022", "sighting--8ff04ddf-b73a-4ff3-8607-67abc66e6337", "sighting--213fac24-83f4-4c5a-a93a-e7723481d043", "sighting--e8ef1e0b-1d49-40a7-ba3f-8fe7a343f245", "sighting--9c9d1fbb-1b46-4ff0-aacb-7e63715ace3e", "sighting--05eddab6-8109-46aa-afdd-96f9047276c2", "sighting--43ec5bdd-4224-4687-beec-e29bc6f76305", "sighting--9db3cf0b-4a36-481a-b662-89d37c35fcdf", "sighting--55c759d8-6a57-40d8-9982-2fb4894d66ad", "sighting--6c6624d6-9c7d-44f5-a544-8aa8737cecc3", "sighting--717c25ba-9326-4162-9426-df3656c14eed", "sighting--8fb78e57-a058-40e7-b422-b56017802ef1", "sighting--14c49c26-fe4f-4cb0-8f14-931275d28d05", "sighting--88449ae1-3ccd-4c6b-a87b-9596a979511b", "sighting--eb6054cc-a08f-436c-93c6-97f0e76ff051", "sighting--d9c1a7f8-11f3-45fd-9794-a78d8c523a4e", "sighting--d5e591d9-26b5-415b-b18c-4a3930dac143", "sighting--3c4158ab-3c51-40f2-9517-d3d3892d6b22", "sighting--a16c6bce-776f-449c-a25c-e186a850f1a0", "sighting--9273500f-1f47-47c5-bc28-d24b033ecebd", "sighting--79381d92-f245-41df-9020-6596c5112d0c", "sighting--683a163d-1e4a-4e96-81b8-2500550f9552", "sighting--ee168295-ebba-4792-8fb5-4a4c42b568f4", "sighting--f9bdbdd4-2513-4284-8796-b2fe1eaf938a", "sighting--94f804ec-464a-4624-8c6c-d9f9cbe17d35", "sighting--e18ed40e-c42c-45ed-98e7-d97f37834548", "sighting--f2e37fe0-2ddf-4328-a90b-b0edfb0826ec", "sighting--be47636f-e0b2-4f11-871b-6f174d21c229", "sighting--59bfd6c4-dcb1-4d6c-aeb1-7df46abdad9f", "sighting--95ff364c-37be-4ffa-baf7-620db8d98a76", "sighting--28858397-893f-4441-a4fa-4041390e18e0", "sighting--50b3b737-8bb2-42d2-b9c2-2ebe13c6bb6d", "sighting--c8376461-67ba-4f48-8445-93c042b606f5", "sighting--9fde3fea-4f96-46f2-a631-afae589a3c33", "sighting--61b399ab-f325-4912-9d64-8c156960408f", "sighting--3b8e62a3-b886-4422-99da-ef04dc9a6e16", "sighting--76ee0add-89da-4790-a918-6fa3907ab47a", "sighting--a5c7971a-26cc-4fb5-9700-39bca7dae694", "sighting--46b3ef48-242f-43d7-a799-f415b49feb03", "sighting--b1d04c68-8fd2-4dad-bb00-a20abf3d611c", "sighting--d5ff8bad-dc02-467a-a476-69e99e62240b", "sighting--db481fc3-9e7d-4949-965d-03b3e5cc17f2", "sighting--54379420-5538-4cf9-b54d-e3b20f031c82", "sighting--c61ea0e8-1374-46ea-9ba0-58b387bec01e", "sighting--b7d3bd46-83c8-40ba-991b-2089c7d5c69c", "sighting--b4e5f345-30ce-47d1-a4b9-7cb678d58944", "sighting--1fab743b-f35a-4de2-8d4d-2e7025476bd5", "sighting--377556d3-dfa7-42b1-bb0c-07977d8bcfce", "sighting--7b3a793d-fefd-4c7b-8cf1-138a387bce65", "sighting--c8c37340-63ea-4fd2-a30d-acc60e85eeb5", "sighting--072d0395-3e63-4c46-914e-ab0c33869301", "sighting--22ed2d6f-5a8a-4f06-9d93-170f7ae6ce82", "sighting--e1447e7d-297c-4623-a85e-2f56cfad8dda", "sighting--fec56096-807f-4a82-84a0-2cf548e33a41", "sighting--5beb9557-f676-4028-a0f8-f98857a90afd", "sighting--0b615393-1830-4298-b307-726052eca5f6", "sighting--8448da9d-817f-4ebb-b6b0-14622baf0adb", "sighting--a5eb19f8-cd8c-4cc1-afd9-4823beb1e6c3", "sighting--20006b73-e126-4d9a-9202-618cd38a64da", "sighting--af18d3ab-4831-480b-b697-23ea94cc8355", "sighting--34989498-e840-456f-8138-2968b8937b17", "sighting--330020ce-2645-4f8d-ba6c-e22304b6f8e4", "sighting--43e2d75b-c492-457b-8435-2e4eaddd4ed3", "sighting--d3f10e20-162e-4082-9674-911af1cae2cf", "sighting--4d23be91-3694-49ad-be67-442a9bd9ef53", "sighting--83a928ba-7270-470f-99c9-7657625867b1", "sighting--49a863bb-a55d-4489-8c70-588c582eaa30", "sighting--fba7c707-2c8b-4356-afae-41aa5774b889", "sighting--0f00265d-71b4-4bc1-a7ab-9532a887687d", "sighting--1e2b2091-341c-419d-98bc-66fe0786d90d", "sighting--7057db52-ac73-4bca-9643-3a5bd52f8322", "sighting--0600e759-8a20-476b-ad9c-f485b1b51c78", "sighting--60175705-7f87-4468-8013-eafc9e1a6051", "sighting--4981cc68-e2e4-481b-9262-61750fd6090a", "sighting--0eaf2660-8028-46db-9085-dcf4d9ccd04a", "sighting--58a46ff0-5007-4f9f-b767-dcc7ea315654", "sighting--60ce5be3-36a3-4aaa-a5a8-5b6c56bfc8b2", "sighting--8130ccd7-6573-4f61-9fee-5dc4aed557dc", "sighting--7a3025fd-44d5-46b1-b03d-045adb96bccf", "sighting--d3d9d98b-8fed-4b5a-8fb8-2466dab71cfb", "sighting--0c6012b2-2ae6-43c8-90f0-a2d571774f32", "sighting--c9a7d91a-5966-4774-beeb-e3d73092ca6b", "sighting--bd1429b1-d40a-4221-8a36-cad9fc079335", "sighting--536d573b-6b1d-4e68-92c2-160a56eb6f1e", "sighting--8160506d-a1e9-4af4-bd8d-17e688900742", "sighting--4cf9736a-96bb-428d-8c45-052e110b52a9", "sighting--68cc23b3-7e6d-42da-8147-f41648004c41", "sighting--b4a2f0c6-87ac-4e30-a364-f90b984880f1", "sighting--e13410d9-2e08-4112-bea8-af9415d158ff", "sighting--0254128f-490f-40e4-bceb-60567a82274d", "sighting--edd819c5-766b-453e-965b-0ae9de2cb914", "sighting--aab0a10a-365a-4fbe-9eae-fbf3baaa2d57", "sighting--511cf8ae-21d4-4c52-a681-6193204a5c62", "sighting--d306b9bd-e66f-4bf3-b9c9-5d1bcbc56dea", "sighting--5cc2a33f-a03f-4ffc-a85d-275ba6c171d8", "sighting--4d828a02-b4dd-4b5e-8fb5-0fccee276c38", "sighting--517e2ecb-fee1-4d10-87e5-38c9297b155e", "sighting--444830b9-ce23-468b-a2f9-ac9656e18342", "sighting--c0c80069-acb6-441b-b1f8-31919bae10bd", "sighting--99520893-3742-4da7-a51d-cbd41626c459", "sighting--38cb5a44-740a-4f8f-9ab7-0862ba64d3a8", "sighting--e88d8124-8c19-4eb9-8494-7d6c33ad2fc4", "sighting--ea7a2606-3b38-4931-979c-592eb730d6aa", "sighting--21bc322c-daa7-4aa9-874a-88b59cf73666", "sighting--1d77efeb-0919-44b7-a9f9-66aae43d3fcf", "sighting--76d96bdd-6d6f-431f-b149-ca7f08619438", "sighting--5c93a3b3-607c-47d6-b4d7-2e83fc428e3b", "sighting--24f64553-46a4-4469-b566-5cd42b0ea756", "sighting--e31f4469-e2c0-4374-9a9f-58812130a0fb", "sighting--78c33f0e-ec2e-44fa-bcb6-43de667c2d4c", "sighting--4e5df7f5-ff87-4bbc-bae3-3c0c4f05687e", "sighting--68ea5bf4-5458-4d89-ab93-bf8761cb39a0", "sighting--091bb821-b31e-431b-9935-7b23c0b1f45f", "sighting--88ed46ab-aa19-4fe8-adc2-0da835f04939", "sighting--13c40a46-eb93-4d92-9f00-d251c58baa62", "sighting--b5a06da2-43db-4dca-91b3-7dc6320357ae", "sighting--834ca442-f34a-4542-9f71-a6552d121366", "sighting--582a09ef-ad41-43bc-803d-9e6fc49d9836", "sighting--8497e24a-0e86-44ca-819a-95beebcb2b20", "sighting--b8dc634f-7f46-41f6-9f3f-257ec7d40c27", "sighting--fd5364db-fcf9-4412-87c6-a2657488afdd", "sighting--17446abc-47aa-4f04-8b94-7c2ec359c631", "sighting--28ebe29e-b639-41d8-874e-6ea317f84385", "sighting--9881c4e0-aeea-4f61-bdce-d9d836488188", "sighting--115cc925-8058-467d-87ed-6da029a7d299", "sighting--cdf78dbd-425f-4f02-be2c-f2ddeae7088b", "sighting--5a607c53-2322-401f-8de0-3f16dc456495", "sighting--cfd0c44f-8d60-47c3-997c-3d2e8ce942da", "sighting--3bf0e8b9-9e58-482c-b59d-829d8bf1a5b7", "sighting--f2464a65-1e7e-4811-813b-f8c9b62116a7", "sighting--a30a7af5-327f-4497-9566-a4d5797f5c47", "sighting--0066f9ca-a163-441d-97b6-2d59d67552f3", "sighting--17801544-0c1f-4dda-abab-1365797b4690", "sighting--07c3f56d-f6f5-482e-ab59-a0d36a2c3307", "sighting--792932b3-aae8-47c9-b41f-86dd20dc03a9", "sighting--c75759d7-9886-4b7c-9917-0f568709e03e", "sighting--654dc837-4770-4667-8d24-703cf1777ec1", "sighting--82f3d070-d268-4c85-b4df-09215b8feed2", "sighting--957748da-5252-413f-adc8-7df06ce4928c", "sighting--fc82540d-b9af-4d54-84c9-60795627cdc7", "sighting--62e7d987-1d0c-4f7b-be55-456740178e72", "sighting--a792eb62-456c-4269-a962-37be51ee59b7", "sighting--0e14f7b4-f222-4874-9b60-46c8c9f75015", "sighting--5ecdbe1d-ea43-418a-a15e-4738420379c5", "sighting--b9f27354-4ac5-4f41-a8f6-82487718168d", "sighting--d3de4a06-5e4c-4eb3-9359-7dfae8703bcd", "sighting--779b90a9-6ca5-4684-a61e-6a9e5ad3f7f6", "sighting--b452849f-5b7e-419e-a77e-88cce802d4e5", "sighting--1d31dc02-df40-4960-b5e0-9510cb8e6e4c", "sighting--2f78dcd1-4564-47d5-a946-68768af47b64", "sighting--a9a5217f-b6f1-45d2-91f5-f1ad108a6fa7", "sighting--f05d192f-e6b7-45b6-ade4-10f0f666ba89", "sighting--cbb43dc4-f618-488f-b3ef-83d4d785cf15", "sighting--36fe8c97-8ea9-47df-9438-d9028cc14c9e", "sighting--2ddb8088-3141-4630-a389-86cbd2a248c4", "sighting--b02baade-f2f9-4fdd-b3ff-612b82d79adb", "sighting--ed58def8-7240-453e-a8b3-1dccbb1ee986", "sighting--873874bd-0e8c-4a84-b806-9ab473164b07", "sighting--01c1b7fe-89be-4a72-bcad-90b8a7830602", "sighting--3ac3649e-685f-4092-83d9-a3019e49803b", "sighting--083b6f38-016a-4163-a2e1-b9960e5843a9", "sighting--71d89bd1-304d-462b-9d17-6b46c0f40016", "sighting--5f47d1f3-4afc-4da5-9e56-580ae78ec24b", "sighting--428218c7-d25c-4082-a916-3f680a0dc56f", "sighting--eecef7e2-c33c-4a08-94d2-9a6bfcff8e9d", "sighting--0dc70d26-4e99-47cd-9914-901b0b73e90e", "sighting--2744c9bd-058c-4975-9f29-d52e95537388", "sighting--939d502d-8f43-4fac-abc6-58f4b1c3c75b", "sighting--1dc67d6d-42e3-4f94-a430-1e06243a45c3", "sighting--05acae3f-0feb-425a-9ae3-4cca8b9dbe6d", "sighting--d9a23dfa-36f0-4f90-a8b0-bbba7e36a8a3", "sighting--cf294423-0b2a-4942-97d0-cea3bc22e40c", "sighting--a611dfb8-3433-4a42-9321-9b231ddbf7e9", "sighting--64f75151-8c42-4629-9247-9483a1474747", "sighting--34c49d30-0cad-4cda-8829-e35e83356afb", "sighting--4345a891-4345-4321-a1c7-7383de7b70d6", "sighting--2c04c10e-9ab3-46ac-9bb8-83ee9d97453b", "sighting--65764318-df48-4ac8-adaa-8f6b2bd71504", "sighting--9ca7b1aa-88b6-460f-9ecf-0288cd4c3343", "sighting--aa05dfe8-e2cf-463d-8e2b-e6f292963585", "sighting--67ba18b7-b44c-4a61-84f4-3ab1c7d27cb6", "sighting--7b48dc10-35fc-4f0a-8a12-5cb8949285af", "sighting--ce20016a-b12f-4fa7-94a7-7b707b648f38", "sighting--2ee501cc-eefb-4ceb-8f33-c79c0211d717", "sighting--3ea44737-1ccb-41bc-99ca-1ce5562b90e6", "sighting--f5f0863e-e6db-49f0-bfea-ecc27427a390"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-26T11:00:01.998Z", "modified": "2026-07-26T11:00:01.998Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}